MAL-2026-12484 Malicious code in trailserver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93c4162f378d4eac522f50de4af9ac836cd0ec727ea90a33633a3cd36e29211e The package's declared main entry launcher.js invokes launch at top level, so require'trailserver' triggers system-level installation of Python via...

Malicious code in sysb1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 530efe2fec0ffeabda93aa5e9718161f131bb28d35f28432d5d2c2da6e4763a4 The npm package sysb1 advertises itself as a 'System binary configuration tool' but ships a Windows surveillance agent. index.js declared as both mai...

MAL-2026-6406 Malicious code in syspo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e90cf048bcfbc5fcc4108def74bee85be749c8f388aa2b93b4281af3808a2a1 Package is published under the cover story 'System binary configuration tool' but its actual behavior is a Windows surveillance dropper. On invocatio...