Malicious code in helpersutils-dev-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b7208dea3cf1742ac01332c17db9df968fd4a105fbccaf0b5388162b0f3673 The package presents itself as 'Development utility helpers' but its main module executes an IIFE at require-time that issues an Image request to...

MAL-2026-16461 Malicious code in godxxx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a22893c200272af03998e9f6c5df91c6e4971b3d2622a80df8eab58b98e0a9a1 cdpinject.js is declared as the package main and unconditionally calls main at module top level when the process is not invoked with --stop/--detach,...

Malicious code in godxxx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a22893c200272af03998e9f6c5df91c6e4971b3d2622a80df8eab58b98e0a9a1 cdpinject.js is declared as the package main and unconditionally calls main at module top level when the process is not invoked with --stop/--detach,...

MAL-2026-16462 Malicious code in godzz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b5d71d42ffa8a11d58cf5bf2cf8eab5f95e14d047f0907b6e0581a3c33ea299 On module load, godzz sets process.env.NODETLSREJECTUNAUTHORIZED='0', disabling TLS certificate validation for the entire Node process. Its main entr...

Malicious code in godzz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b5d71d42ffa8a11d58cf5bf2cf8eab5f95e14d047f0907b6e0581a3c33ea299 On module load, godzz sets process.env.NODETLSREJECTUNAUTHORIZED='0', disabling TLS certificate validation for the entire Node process. Its main entr...

Malicious code in godzzz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39f05673527822a16dc88d65a9ff9471548f8046fc28c7930fd8958dbcc38f3a The npm package [email protected] ships cdpinject.js which imports http, https, childprocess and fs at the top of the file, reads process.env including...

MAL-2026-16446 Malicious code in better-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d2f690a34e0e9b3a8df4caf676f30b542d8dc710033dc70ddf6e3c18ee3a1fa The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16455 Malicious code in some-tool-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e053568381d2b1cf3b7e62e3152651c843cfc3e32f056574d7a64dae4531b2e The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in some-tool-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e053568381d2b1cf3b7e62e3152651c843cfc3e32f056574d7a64dae4531b2e The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16448 Malicious code in debounce-throttle-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2799630960bce0578627557c1a8c41369d2a1556f9632d6491903f17f21d7a39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-16454 Malicious code in solo-async-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 419538617e0e07800ec7fb28e19be25e6b99687548af5ba4ae82ae486daca882 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-16449 Malicious code in iso-datetime-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9db51cfb135f41debd79f82f4bd905994ecdb54d08811d3755ac66aed13cb05 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-16459 Malicious code in webp-https-errors (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 447aba02eddd7913b1520b8d21892e996cecbdf100ba2a772cbff3cb14fa74f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in solo-async-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 419538617e0e07800ec7fb28e19be25e6b99687548af5ba4ae82ae486daca882 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in webp-https-errors (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 447aba02eddd7913b1520b8d21892e996cecbdf100ba2a772cbff3cb14fa74f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-16442 Malicious code in moudeva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dec843001e36153e09f56c056031d90bf3bcf909a5fe0469f8b27cbed7361c3a The package's main.js references childprocess at multiple locations lines 19, 883, 961 alongside HTTP POST calls lines 365, 369 to a hardcoded endpoi...

MAL-2026-16441 Malicious code in moidevl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b05c7a5581562edc719cbaaf2f6b317d322a6a2ef96c9fc905b53394e42101 Despite a README describing a 'Windows diagnostic utility,' the package implements an anti-proctoring overlay for cheating on remote exams Safe Exam...

Malicious code in moidevl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b05c7a5581562edc719cbaaf2f6b317d322a6a2ef96c9fc905b53394e42101 Despite a README describing a 'Windows diagnostic utility,' the package implements an anti-proctoring overlay for cheating on remote exams Safe Exam...

MAL-2026-16457 Malicious code in tibcwmpoeafh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8972beee1619a236a6811896c8f7c2bded94a428c0de8f6861e7ef956b63fb9a The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16458 Malicious code in tuxcmdfhjkw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed907ab556a271a706db9227bfa0cd751f7a3dae9005bca41167ffdfc8be75b8 The package's only shipped file is an HTML page that mimics a Cloudflare 'Just a moment...' verification screen and embeds obfuscator.io-style...