Malicious Package

Overview @galicia-toolkit-nestjs/commons is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and th...

Malicious Package

Overview @galicia-toolkit-nestjs/swagger is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and th...

Malicious Package

Overview @brick-v2/tour is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @galicia-toolkit-nestjs/paas is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview asepxyzz is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview asepxyz12 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview webreader is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview pafer is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview media-manager5 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview agent-vx is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview @tvg-mar/storyblok-bridge is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in @myorder-frontend-commons/analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e5f7ea46a15cf0b816818dfef340f91e8e4b3b8ac149af84cf133282a90202e Package is published to the public npm scope @myorder-frontend-commons and declares preinstall, install, and postinstall lifecycle scripts all set to...

MAL-2026-17749 Malicious code in @myorder-frontend-commons/analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e5f7ea46a15cf0b816818dfef340f91e8e4b3b8ac149af84cf133282a90202e Package is published to the public npm scope @myorder-frontend-commons and declares preinstall, install, and postinstall lifecycle scripts all set to...

Malicious code in test-account-portal-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f7b6c3f1f6f212d75283827455926079593132bbd819dec884caed3e3b745ca npm package [email protected] ships only a Linux x64 native addon at prebuilds/linux-x64/addon.node and loads it unconditionally fro...

MAL-2026-17748 Malicious code in test-account-portal-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f7b6c3f1f6f212d75283827455926079593132bbd819dec884caed3e3b745ca npm package [email protected] ships only a Linux x64 native addon at prebuilds/linux-x64/addon.node and loads it unconditionally fro...

Malicious code in kmf-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b95cb55a24f11248b1635861f0a10a3cb41bc4ee6ac7e2100439ca7c947bba74 On npm install, the package's postinstall script performs two exfiltration actions. First, it reads the installer's hostname and npmpackagename and...

MAL-2026-17746 Malicious code in kmf-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b95cb55a24f11248b1635861f0a10a3cb41bc4ee6ac7e2100439ca7c947bba74 On npm install, the package's postinstall script performs two exfiltration actions. First, it reads the installer's hostname and npmpackagename and...

MAL-2026-17389 Malicious code in bungoma (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

MAL-2026-17348 Malicious code in @bellaxchuu/teambails (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

Malicious code in kmf-vendor-pack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6e1c289f2890e0e06ab31a8d6cf5dbc8deabc26054cb44a0c60295c29a74506 [email protected] is a dependency-confusion lure. package.json declares postinstall: node postinstall.js, which requires a shipped prebuilt...