6 matches found
Malicious code in @generic-means/ing-feat-scanner-libs (npm)
Source: amazon-inspector 7053eaf141232704108519a3b3e7a0f1197d9eaabfa9fd3f4ff56ae9f753d763 package.json declares its sole dependency ltidisafe as a bare HTTPS tarball URL https://ltidi.storage.googleapis.com/depenconf/ltidisafe-3.9.3.tgz rather than a registry version range or a git ref pinned to ...
MAL-2026-17631 Malicious code in @pinecone-experience/messages (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 078ce187b38122a7eff5def33454871232cdd38bde7d35e7ee1968d0e98cd45c package.json declares its sole dependency ltidisafe as a bare HTTPS tarball URL https://ltidi.storage.googleapis.com/depenconf/ltidisafe-3.8.3.tgz...
Malicious code in mfaatest (npm)
Source: amazon-inspector 73e4ce261829117e316f9152160cdcb35c6ba66064f631baba1f8d528673b584 package.json declares dependency node-net-pool with its value set to an arbitrary HTTPS tarball URL https://limbomail.com/api/attachment/fpwvxc9DvM.Bjuueu1K2SkBCKkgATls-oq05UsrNNY/pkg.tgz rather than a...
Malicious code in in-install (npm)
Source: amazon-inspector 58b0bedeac5b8460ad12e0ef3e013f8146eb2b7adacd483c3b8833f1dcbb457b [email protected] declares its ltidisafe dependency as an HTTPS tarball URL hosted on a Google Cloud Storage bucket https://ltidi.storage.googleapis.com/depenconf/ltidisafe-3.6.9.tgz rather than a...
Malicious code in portway (npm)
Source: amazon-inspector e04dc52cd77658d168578535fb67d77ea76de79beadb77e14c96f023f4e51772 package.json declares the dependency 'ltidisafe' as a direct https tarball URL https://ltidi.storage.googleapis.com/depenconf/ltidisafe-3.3.2.tgz rather than a package on the npm registry. On npm install...
Malicious code in oem-agentic-shared (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f612eb2fa947323c936a0bb1becc602f0f837f9023edac22a945470566386a8c [email protected] is a hollow stub: index.js exports an empty object and package.json has empty author, empty description, and no real...