hacker-profile

Install dependencies: bundle install npm i Test with local web server: $ bundle exec middleman server Build: $ gulp build $ bundle exec middleman build...

Malicious Package

Overview link-astrometry-gulp-transhumanism is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

gulp-jsify (0.1.0) potentially affected by unknown CVE via jsify (0.0.4)

jsify NPM version 0.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on jsify and may be impacted: - gulp-jsify 0.1.0 Source cves: unknown CVE Source advisory: GHSA-QG3X-R82Q-9V6C...

gulp-dissect (>=1.0.1, <=1.0.3), hagworm (>=5.11.0, <=5.11.4) +2 more potentially affected by CVE-2026-90467 via aiosmtplib (>=5.0.0, <=5.1.2)

aiosmtplib PYPI version =5.0.0, =1.0.1, =5.11.0, =2.0.0, =1.7.14, =1.7.605 Source cves: CVE-2026-90467 Source advisory: SNYK:PYTHON-AIOSMTPLIB-19784401...

gulp-dissect (>=1.0.1, <=1.0.3), lazy-crawler (>=2.0.0, <=2.0.1) +1 more potentially affected by CVE-2026-55558 via aiosmtplib (>=5.0.0, <=5.1.0)

aiosmtplib PYPI version =5.0.0, =1.0.1, =2.0.0, =1.7.14, =1.7.605 Source cves: CVE-2026-55558 Source advisory: OSV:PYSEC-2026-3805...

Malicious Package

Overview dagda-gulp-quito-grunt is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

Malicious Package

Overview bellatrix-panspermia-websockets-gulp is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization a...

Malicious Package

Overview bellatrix-gulp-barnard-dagda is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

gulp-dissect (>=1.0.1, <=1.0.3), lazy-crawler (>=2.0.0, <=2.0.1) +1 more potentially affected by CVE-2026-55558 via aiosmtplib (>=5.0.0, <=5.1.0)

aiosmtplib PYPI version =5.0.0, =1.0.1, =2.0.0, =1.7.14, =1.7.605 Source cves: CVE-2026-55558 Source advisory: GHSA-VXJ7-4XRP-5VR4...

gulp-dissect (>=1.0.1, <=1.0.3), lazy-crawler (>=2.0.0, <=2.0.1) +1 more potentially affected by CVE-2026-55558 via aiosmtplib (>=5.0.0, <=5.1.0)

aiosmtplib PYPI version =5.0.0, =1.0.1, =2.0.0, =1.7.14, =1.7.605 Source cves: CVE-2026-55558 Source advisory: OSV:GHSA-VXJ7-4XRP-5VR4...

gulp-dissect (>=1.0.1, <=1.0.3), lazy-crawler (>=2.0.0, <=2.0.1) +1 more potentially affected by CVE-2026-55558 via aiosmtplib (>=5.0.0, <=5.1.0)

aiosmtplib PYPI version =5.0.0, =1.0.1, =2.0.0, =1.7.14, =1.7.605 Source cves: CVE-2026-55558 Source advisory: SNYK:PYTHON-AIOSMTPLIB-19233346...

MAL-2026-10673 Malicious code in gulp-jscrambler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7353f50ebadb90b9c561e3e70b53c89712bafd182fdc3eb16e536651b972092 gulp-jscrambler is a Gulp plugin wrapping the Jscrambler code-protection API. No install-time lifecycle scripts, credential harvesting, exfiltration...

Malicious Package

Overview gulp-jscrambler is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in gulp-jscrambler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7353f50ebadb90b9c561e3e70b53c89712bafd182fdc3eb16e536651b972092 gulp-jscrambler is a Gulp plugin wrapping the Jscrambler code-protection API. No install-time lifecycle scripts, credential harvesting, exfiltration...

gulp-dissect (>=1.0.1, <=1.0.3), lazy-crawler (>=2.0.0, <=2.0.1) +1 more potentially affected by CVE-2026-53533 via aiosmtplib (>=5.0.0, <=5.1.0)

aiosmtplib PYPI version =5.0.0, =1.0.1, =2.0.0, =1.7.14, =1.7.605 Source cves: CVE-2026-53533 Source advisory: OSV:PYSEC-2026-2338...

Malicious Package

Overview nodemon-gulp is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-10065 Malicious code in nodemon-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18cfb051ae84a8ed00bba3ae1eaf7720ec6479a402ae0540c6d66a7fa304f52a Package is published as nodemon-gulp but its contents are a verbatim copy of the upstream nodemon project: package.json declares author: Remy Sharp,...

gulp-dissect (>=1.0.1, <=1.0.3), lazy-crawler (>=2.0.0, <=2.0.1) +1 more potentially affected by CVE-2026-53533 via aiosmtplib (>=5.0.0, <=5.1.0)

aiosmtplib PYPI version =5.0.0, =1.0.1, =2.0.0, =1.7.14, =1.7.605 Source cves: CVE-2026-53533 Source advisory: GHSA-V3Q9-HJ7J-63HQ...

gulp-dissect (>=1.0.1, <=1.0.3), lazy-crawler (>=2.0.0, <=2.0.1) +1 more potentially affected by CVE-2026-53533 via aiosmtplib (>=5.0.0, <=5.1.0)

aiosmtplib PYPI version =5.0.0, =1.0.1, =2.0.0, =1.7.14, =1.7.605 Source cves: CVE-2026-53533 Source advisory: OSV:GHSA-V3Q9-HJ7J-63HQ...

gulp-dissect (>=1.0.1, <=1.0.3), lazy-crawler (>=2.0.0, <=2.0.1) +1 more potentially affected by CVE-2026-53533 via aiosmtplib (>=5.0.0, <=5.1.0)

aiosmtplib PYPI version =5.0.0, =1.0.1, =2.0.0, =1.7.14, =1.7.605 Source cves: CVE-2026-53533 Source advisory: SNYK:PYTHON-AIOSMTPLIB-17889817...