Malicious Package

Overview insomnia-plugin-api-lint-helper is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and th...

Malicious code in insomnia-plugin-api-lint-helper (npm)

Source: amazon-inspector f3572e41f2e2e83a3156c1b24bf8684c0149a508e45626e80c592657cfb475ba index.js, the package's main entry, runs at require time with no user interaction. On load it spawns OS-native calculator processes via childprocess.exec 'calc.exe' on Windows, 'open -a Calculator' on macOS,...

Malicious code in insomnia-plugin-api-lint-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3572e41f2e2e83a3156c1b24bf8684c0149a508e45626e80c592657cfb475ba index.js, the package's main entry, runs at require time with no user interaction. On load it spawns OS-native calculator processes via...

MAL-2026-17561 Malicious code in insomnia-plugin-api-lint-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3572e41f2e2e83a3156c1b24bf8684c0149a508e45626e80c592657cfb475ba index.js, the package's main entry, runs at require time with no user interaction. On load it spawns OS-native calculator processes via...

Malicious code in insomnia-plugin-poc-m4gester2 (npm)

Source: amazon-inspector 1b2b63f22e7d0d8f23c608a3c109163e06e2bd6a1dd716305e0d8adaf6be6b86 Package ships only a package.json with no plugin code, declaring a postinstall lifecycle script that runs echo PWNEDBYDEEPLINK /tmp/pwned.txt on every npm install. This writes a marker file to the installer'...

Malicious code in insomnia-plugin-poc-m4gester (npm)

Source: amazon-inspector 0eb7024d158c345559d9f130ba3a6b52563328467ec6bb560e196e5c7bc9b955 package.json declares a postinstall lifecycle hook that runs a shell command writing a marker file to /tmp on npm install "postinstall": "echo PWNEDBYDEEPLINK /tmp/...". The package ships no library code, no...

Malicious code in insomnia-plugin-poctest-null0001 (npm)

--- Credit: OpenSSF source...

Malicious code in insomnia-plugin-poc-m4gester-run (npm)

Source: amazon-inspector 38a525aea57681df6c21035b723701fa6067f091fd81ac26bb3fcc8e2126c43e package.json declares a postinstall lifecycle hook that runs calc.exe on the installer's machine during npm install. The main entry point exports only an empty requestHooks array, providing no actual Insomni...

Malicious code in insomnia-plugin-poc-m4gester-run (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a525aea57681df6c21035b723701fa6067f091fd81ac26bb3fcc8e2126c43e package.json declares a postinstall lifecycle hook that runs calc.exe on the installer's machine during npm install. The main entry point exports onl...

Malicious code in insomnia-plugin-poctest-null0001 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7302 Malicious code in insomnia-plugin-poctest-null0001 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-6552 Malicious code in insomnia-plugin-poc-m4gester (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eb7024d158c345559d9f130ba3a6b52563328467ec6bb560e196e5c7bc9b955 package.json declares a postinstall lifecycle hook that runs a shell command writing a marker file to /tmp on npm install "postinstall": "echo...

Malicious code in insomnia-plugin-poc-m4gester (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eb7024d158c345559d9f130ba3a6b52563328467ec6bb560e196e5c7bc9b955 package.json declares a postinstall lifecycle hook that runs a shell command writing a marker file to /tmp on npm install "postinstall": "echo...

Malicious code in insomnia-plugin-poc-m4gester2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b2b63f22e7d0d8f23c608a3c109163e06e2bd6a1dd716305e0d8adaf6be6b86 Package ships only a package.json with no plugin code, declaring a postinstall lifecycle script that runs echo PWNEDBYDEEPLINK /tmp/pwned.txt on ever...

Malware in insomnia-plugin-random-pick

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-191111 Malicious code in insomnia-plugin-random-pick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8717488a1afc3be853313a0f8f243fa748188c0b321d8c9096182cf59bfbb1ed The package insomnia-plugin-random-pick was found to contain malicious code. Source: ghsa-malware...

Malicious code in insomnia-plugin-random-pick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8717488a1afc3be853313a0f8f243fa748188c0b321d8c9096182cf59bfbb1ed The package insomnia-plugin-random-pick was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199136

Malicious code in insomnia-plugin-random-pick npm...

MAL-2022-3850 Malicious code in insomnia-plugin-simple-hmac-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82257b4c71933f16336920865f08941bf1fd250ffd06dd3e34a99e3319b78012 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in insomnia-plugin-simple-hmac-auth

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...