MAL-2026-15589 Malicious code in autobahn-electron-probe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9a749e23bbf7c5ca871c797923855dc2c7fe1006c5843ed8a13292d7fbd4256 package.json declares preinstall and postinstall lifecycle scripts that run curl against...

Malicious Package

Overview gclassroom is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

MAL-2026-15573 Malicious code in grafeno-webhook (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79e333edbcad465f3e5bdfafa8dc4ba91589d66e12c201bb9e1ed4037cb16c36 The preinstall.js lifecycle script executed automatically by npm install performs three hostile actions against the installer's machine. It enumerate...

Malicious code in grafeno-webhook (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79e333edbcad465f3e5bdfafa8dc4ba91589d66e12c201bb9e1ed4037cb16c36 The preinstall.js lifecycle script executed automatically by npm install performs three hostile actions against the installer's machine. It enumerate...

Malicious code in grafeno-billing (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72306b800994fea3aa6c6d12e137657ffe70ec9ac6c44abfe3ceaa547ef8e5c6 [email protected] is a stub package whose only substantive code is a preinstall lifecycle hook. On npm install, preinstall.js enumerates...

MAL-2026-15571 Malicious code in grafeno-billing (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72306b800994fea3aa6c6d12e137657ffe70ec9ac6c44abfe3ceaa547ef8e5c6 [email protected] is a stub package whose only substantive code is a preinstall lifecycle hook. On npm install, preinstall.js enumerates...

Malicious code in grafeno-payments (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7af58da84956e51749cbb96923f12264cfdee76456b5010b526599b7da2c0caa On npm install, package.json's preinstall hook node preinstall.js || true auto-runs a script that 1 enumerates process.env for keys matching...

MAL-2026-15572 Malicious code in grafeno-payments (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7af58da84956e51749cbb96923f12264cfdee76456b5010b526599b7da2c0caa On npm install, package.json's preinstall hook node preinstall.js || true auto-runs a script that 1 enumerates process.env for keys matching...

Malicious code in node-net-pool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9c6bb87249429b2a3f3791589075bf872a433bd47a33b152f6809ccf94b1328 package.json declares a postinstall hook node index.js that runs automatically on npm install. The shipped index.js contains no networking or...

MAL-2026-15570 Malicious code in node-net-pool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9c6bb87249429b2a3f3791589075bf872a433bd47a33b152f6809ccf94b1328 package.json declares a postinstall hook node index.js that runs automatically on npm install. The shipped index.js contains no networking or...

MAL-2026-15597 Malicious code in npx-oob-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6302c47700c024cb727f6139b5cd8703da7c295555525ce9624c12b536f76dde npx-oob-package ships bin/cli.js which is also declared as the package main. On both CLI invocation and any require/import of the package, the module...

MAL-2026-15567 Malicious code in htps-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ed7eca74d8fb188a8618c67facb5015d747e423ccdf4e51caae2e4e63f82ea2 Package is published as htps-provider with a README copy-pasted verbatim from the legitimate Cosmos chain-registry project advertising assets, chains...

Malicious code in htps-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ed7eca74d8fb188a8618c67facb5015d747e423ccdf4e51caae2e4e63f82ea2 Package is published as htps-provider with a README copy-pasted verbatim from the legitimate Cosmos chain-registry project advertising assets, chains...

MAL-2026-15568 Malicious code in manager-thedate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceffc24ee0bb4a8d23a2d545605b2ed2b686e9934b4f50c9fa24df3c980f04ed The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in manager-thedate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceffc24ee0bb4a8d23a2d545605b2ed2b686e9934b4f50c9fa24df3c980f04ed The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15569 Malicious code in nuvyra-marketplace-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5db08e65aec25f1dc4fd0c33173154dbd0e6ef6e79aa2f1b7f8b4f8df0b9a3a8 dist/client.js executes initializeProvider at module top level, so the code runs whenever a consumer requires or imports this SDK. The function...

Malicious Package

Overview flask-header-guard is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview eth-pino is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview mfacord is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious code in supersignaturenature (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab1df02839294b29ff278b7a80505be50de75eb0f317f4bf29635236a75e4b15 The published dist/ bundles main/module/browser entrypoints contain code absent from the src/ tree: at library load they read an encrypted rsaToken...