MAL-2026-16336 Malicious code in keroeltopkkk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2758c1a2619db534fdc8e2981e051769b20641492d12ff984e333446e0c734e3 The package ships a single server.js that is wired into every npm lifecycle hook preinstall, install, postinstall, prepare, prepublish, preprepare,...

Malicious code in @siriusbeyond/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 330b388e1f9ee72c0c2a94cca9e4cc7ff3b525a3f673b324b093286329f60689 Package @siriusbeyond/[email protected] declares both preinstall and postinstall scripts that execute callback.js on npm install. callback.js collects hos...

MAL-2026-16322 Malicious code in @siriusbeyond/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 330b388e1f9ee72c0c2a94cca9e4cc7ff3b525a3f673b324b093286329f60689 Package @siriusbeyond/[email protected] declares both preinstall and postinstall scripts that execute callback.js on npm install. callback.js collects hos...

MAL-2026-16319 Malicious code in @dbbhk/ui-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478839dda68d2c5eefa1a55557602d4b12396c988211b28d785af531d0b19d07 @dbbhk/[email protected] declares both preinstall and postinstall hooks in package.json that execute node callback.js, so the payload runs...

Malicious code in test1sdsd2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c7bd7c5932337e17adaf4900cb7e29766fe6b5307bd170b38660dd05497ebdc Package [email protected] declares preinstall and postinstall hooks in package.json that execute index.js on npm install. index.js performs an HTTP...

MAL-2026-16316 Malicious code in test1sdsd2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c7bd7c5932337e17adaf4900cb7e29766fe6b5307bd170b38660dd05497ebdc Package [email protected] declares preinstall and postinstall hooks in package.json that execute index.js on npm install. index.js performs an HTTP...

Malicious code in test1ro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8166d7eaf8dab64a6c21d0e0a871c64e213147082a414b93816fb080c8044b1e package.json declares preinstall and postinstall hooks that run node index.js, which reads os.hostname and issues an HTTP GET to the hardcoded...

MAL-2026-16315 Malicious code in test1ro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8166d7eaf8dab64a6c21d0e0a871c64e213147082a414b93816fb080c8044b1e package.json declares preinstall and postinstall hooks that run node index.js, which reads os.hostname and issues an HTTP GET to the hardcoded...

Malicious code in test1hh235 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9c95dc5aea7805ca50e114bae45747a46edb7331311044b0d3730e303d4351a Package declares both preinstall and postinstall lifecycle hooks that execute index.js on npm install. index.js issues an HTTP GET to the hardcoded...

MAL-2026-16314 Malicious code in test1hh235 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9c95dc5aea7805ca50e114bae45747a46edb7331311044b0d3730e303d4351a Package declares both preinstall and postinstall lifecycle hooks that execute index.js on npm install. index.js issues an HTTP GET to the hardcoded...

Malicious code in test1gg234 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd57f799e0797ede7d18d6a36dd05c31c34d21b4e45d554730a8d08dd310cf73 The package declares both preinstall and postinstall lifecycle hooks that execute index.js, which issues a plaintext HTTP GET to the hardcoded bare I...

MAL-2026-16313 Malicious code in test1gg234 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd57f799e0797ede7d18d6a36dd05c31c34d21b4e45d554730a8d08dd310cf73 The package declares both preinstall and postinstall lifecycle hooks that execute index.js, which issues a plaintext HTTP GET to the hardcoded bare I...

Malicious code in chat-adapter-matrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5710eb2e1a2f6b7a4aca8d943953989e80e056cc77c2071027c2a78744b5ea3a [email protected] executes server.js from every npm lifecycle hook preinstall, install, postinstall, prepare, prepublish, preprepare,...

MAL-2026-16308 Malicious code in chat-adapter-matrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5710eb2e1a2f6b7a4aca8d943953989e80e056cc77c2071027c2a78744b5ea3a [email protected] executes server.js from every npm lifecycle hook preinstall, install, postinstall, prepare, prepublish, preprepare,...

MAL-2026-16299 Malicious code in @pwaplatform/module-sso-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f674867f67f5a8495dbc953913b6cc7c0d8b9d094161c660ca4dfd5449506ba @pwaplatform/[email protected] declares both preinstall and postinstall lifecycle scripts that execute payload.js on npm install...

Malicious code in @siriusbeyond/auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ed929a2d8cbd15860eaafb9eb773ad02f9b31f361514b47987eca8dfa1ae695 Package @siriusbeyond/[email protected] registers both preinstall and postinstall lifecycle scripts that execute callback.js on every npm install...

MAL-2026-16320 Malicious code in @siriusbeyond/auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ed929a2d8cbd15860eaafb9eb773ad02f9b31f361514b47987eca8dfa1ae695 Package @siriusbeyond/[email protected] registers both preinstall and postinstall lifecycle scripts that execute callback.js on every npm install...

MAL-2026-16345 Malicious code in starbucks-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f42de3e225b6f8d6be04fbf613ae4d17458626c92f2cfe1bf1b4476fe132e761 The package's package.json declares a preinstall script that runs callback.js on npm install. callback.js collects os.hostname, os.userInfo,...

Malicious code in starbucks-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f42de3e225b6f8d6be04fbf613ae4d17458626c92f2cfe1bf1b4476fe132e761 The package's package.json declares a preinstall script that runs callback.js on npm install. callback.js collects os.hostname, os.userInfo,...

@agent-harness-experimental/workflow (>=0.0.1, <=0.0.5), @ai_kit/workflow-world (>=0.1.0, <=0.2.0) +134 more potentially affected by CVE-2026-92708 via devalue (>=5.1.1, <=5.9.2)

devalue NPM version =5.1.1, =0.0.1, =0.1.0, =6.1.0, =6.1.0, =7.0.0, =6.1.0, =0.3.0, =0.0.0-dev.20251108074143, =4.2.3, =3.8.8, =3.8.8, =3.8.7, =3.8.7, =0.1.1, =4.3.15, =4.3.33 and more Source cves: CVE-2026-92708 Source advisory: SNYK:JS-DEVALUE-20044498...