Malicious code in gaarf-node-bq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f61e7b586146a833e50d74ccdff68942b4514f66c38beca981d2ead87761633 gaarf-node-bq is a dependency-confusion / typosquat canary targeting the internal google/ads-api-report-fetcher gaarf package. The bin entry is an...

Malicious code in gaarf-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc539c4e835f015b5f7b9e65ca33a720e44ee0191e3bbf422085949e5d3029b9 The package's postinstall script runs automatically on npm install and collects host identifiers os.hostname, platform, arch, node version, package...

MAL-2026-14238 Malicious code in gaarf-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc539c4e835f015b5f7b9e65ca33a720e44ee0191e3bbf422085949e5d3029b9 The package's postinstall script runs automatically on npm install and collects host identifiers os.hostname, platform, arch, node version, package...

Malicious code in gaarf-bq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 841d3bc6f2f6b55bfe6c3d3ffd5daf2eb586507bbe35ff5ab8e706db076357d0 On npm install, the package's postinstall lifecycle script collects installer host identifiers os.hostname, process.platform, process.arch, Node...

MAL-2026-14237 Malicious code in gaarf-bq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 841d3bc6f2f6b55bfe6c3d3ffd5daf2eb586507bbe35ff5ab8e706db076357d0 On npm install, the package's postinstall lifecycle script collects installer host identifiers os.hostname, process.platform, process.arch, Node...

Malicious code in gaarf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c3312540cdedc807029a549ffd3b49b917704323a3b664c6d71ae6849c192b9 The package's postinstall lifecycle script runs automatically on npm install and collects installer host identifiers os.hostname, platform, arch, Nod...

MAL-2026-14236 Malicious code in gaarf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c3312540cdedc807029a549ffd3b49b917704323a3b664c6d71ae6849c192b9 The package's postinstall lifecycle script runs automatically on npm install and collects installer host identifiers os.hostname, platform, arch, Nod...

Malicious code in commandor-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e184348abf5c5ce61ee6c4e63189411a08755e57e95dac33c666adae7c6dc2d The package's scripts/postinstall.js runs automatically on npm install and imports childprocess alongside http.request with multiple POST call sites...

MAL-2026-14234 Malicious code in commandor-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e184348abf5c5ce61ee6c4e63189411a08755e57e95dac33c666adae7c6dc2d The package's scripts/postinstall.js runs automatically on npm install and imports childprocess alongside http.request with multiple POST call sites...

Malicious code in chromeos-webdriver-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bbf3413f6465a1f8bb628dcdb79f59ac7c197bbfba2024202c9915f95ad8161 The package's postinstall script runs on npm install and issues an HTTPS POST to https://kvpq6u62.instances.poc.jchunt.top/chromeos-webdriver-cli...

Malicious code in chromecast-webdriver-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c858cd5357d77c39366f7bd1cc1985a5d7012d33da45d6dc9667544b54198d6 [email protected] runs a postinstall lifecycle script that collects host metadata os.hostname, platform, arch, node version, package nam...

MAL-2026-14231 Malicious code in chromecast-webdriver-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c858cd5357d77c39366f7bd1cc1985a5d7012d33da45d6dc9667544b54198d6 [email protected] runs a postinstall lifecycle script that collects host metadata os.hostname, platform, arch, node version, package nam...

Malicious code in chrome-enterprise-premium-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 850bd071a15b1c20097032c5861cdfdeb970d05b4e28f65d5bcdb411fba5d10d chrome-enterprise-premium-mcp ships a postinstall lifecycle script that fires automatically on npm install and POSTs installer host metadata...

MAL-2026-14230 Malicious code in chrome-enterprise-premium-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 850bd071a15b1c20097032c5861cdfdeb970d05b4e28f65d5bcdb411fba5d10d chrome-enterprise-premium-mcp ships a postinstall lifecycle script that fires automatically on npm install and POSTs installer host metadata...

Malicious code in broadcast-graphics-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48987a1a0ccff7dce1134e1a98122cd902961ac34ba623ae0e2fef62f75fe213 The package's postinstall script runs automatically on npm install and collects host identifiers from the installer machine os.hostname, platform,...

MAL-2026-14228 Malicious code in broadcast-graphics-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48987a1a0ccff7dce1134e1a98122cd902961ac34ba623ae0e2fef62f75fe213 The package's postinstall script runs automatically on npm install and collects host identifiers from the installer machine os.hostname, platform,...

Malicious code in bazelisk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4bcbd35130e716d1a2940c91b6691d41b9655fdc8587404af37bc6e5a7f1370 This npm package uses the name bazelisk, colliding with Google's bazelbuild/bazelisk project referenced in the tarball's source.txt, and self-labels ...

MAL-2026-14227 Malicious code in bazelisk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4bcbd35130e716d1a2940c91b6691d41b9655fdc8587404af37bc6e5a7f1370 This npm package uses the name bazelisk, colliding with Google's bazelbuild/bazelisk project referenced in the tarball's source.txt, and self-labels ...

Malicious code in @sarex-team/translator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bccb8e95706f8ed3fe0408d43f6e043f6db71126f1951dda76bda7dfcc134e6 The package's install lifecycle script scripts.install="node index.js" automatically executes on npm install and loads lib/core.js. That module reads...

MAL-2026-14205 Malicious code in @sarex-team/translator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bccb8e95706f8ed3fe0408d43f6e043f6db71126f1951dda76bda7dfcc134e6 The package's install lifecycle script scripts.install="node index.js" automatically executes on npm install and loads lib/core.js. That module reads...