Malicious code in @array-util/subsearch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 793344e3c658f3649a113e29dd1124d979af9a7978f3159c55f8da6f6b3bc918 The package's index.js is heavily obfuscated string-array shift/rotate pattern with hex-encoded indices and a while!! decoder loop. Obfuscation in a...

MAL-2026-11095 Malicious code in @array-util/subsearch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 793344e3c658f3649a113e29dd1124d979af9a7978f3159c55f8da6f6b3bc918 The package's index.js is heavily obfuscated string-array shift/rotate pattern with hex-encoded indices and a while!! decoder loop. Obfuscation in a...

Malicious Package

Overview route-processor is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in tailwind-motionkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f84dfdf101e36c7ca60ca1a1e72d59a7893a5abee9bf359852cdeabdb0af2cd2 Review of [email protected] surfaced no evidence of exfiltration, install-time remote code execution, silent relay, credential distribution,...

MAL-2026-11087 Malicious code in kalipto-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a918c615e1b451efabe6e88b3ecb90108abea31ac6b963be88c0a667e7a31f3a The package's main entry src/server.js is a self-executing Express server that binds to 0.0.0.0 on port 3000 and exposes POST /execute, which passes...

D-Link - Remote Command Execution

A Remote Command Execution RCE vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via the DDNS function in ncc2 binary file id: CVE-2021-45382 info: name: D-Link - Remote Command Execution author: king-alexander severity: critic...

Malicious code in @thone33/react-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 656fe3d401e0d4fed0ad443f49971c4e173132d173cc7eb443a1ccca731bc5cf Package @thone33/[email protected] was scanned and no a static rule matches or behavioral findings were produced. No evidence of credential access,...

MAL-2026-11078 Malicious code in @thone33/react-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 656fe3d401e0d4fed0ad443f49971c4e173132d173cc7eb443a1ccca731bc5cf Package @thone33/[email protected] was scanned and no a static rule matches or behavioral findings were produced. No evidence of credential access,...

Malicious code in edu-npm-helper-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd7f857929420503555e28dd3c702b2f60cbd705fd7be4a15009fc0536646978 No suspicious behaviors were identified in this package version. There is no evidence of install-time network activity, lifecycle scripts performing...

MAL-2026-11082 Malicious code in edu-npm-helper-alpha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48359fa2dbbcd9c21e22de20140343078cd697b1bdfa5f3c59ce5ee77b4865b0 No suspicious code patterns, lifecycle hooks, network destinations, or credential-access behaviors were identified in this package version. Nothing i...

MAL-2026-11089 Malicious code in txs-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c934ab0c25791138fe4673ea55529933cc40e3aab0f03a660820712181cd20d No concrete installer-harm signals were identified in this version. Package name suggests transaction-building functionality, but without verified...

Malicious code in txs-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c934ab0c25791138fe4673ea55529933cc40e3aab0f03a660820712181cd20d No concrete installer-harm signals were identified in this version. Package name suggests transaction-building functionality, but without verified...

MAL-2026-11091 Malicious code in txs-runner-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaf4e668ad1a65cf7be8d260ba2c6ee46a31be7553bad3219775b61a5d226dfc Package [email protected] could not be fully characterized: automated tracing engaged with the package's files but its output was withheld by the...

Malicious code in txs-runner-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaf4e668ad1a65cf7be8d260ba2c6ee46a31be7553bad3219775b61a5d226dfc Package [email protected] could not be fully characterized: automated tracing engaged with the package's files but its output was withheld by the...

Malicious code in txs-random-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9f40781ae94116a5e9e1fb190897b78899c9e66abd10f1eb63216b78e986953 Package [email protected] was inspected but no concrete a static rule matches or traced-code findings are available for this verdict. The behavior...

MAL-2026-11090 Malicious code in txs-random-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9f40781ae94116a5e9e1fb190897b78899c9e66abd10f1eb63216b78e986953 Package [email protected] was inspected but no concrete a static rule matches or traced-code findings are available for this verdict. The behavior...

Malicious code in txs-sdk-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 591592a5e386a92265d0197e095f692b23b00aabfd23f20bd4d29f156cd7c21a Package [email protected] could not be fully characterized: automated code tracing engaged with the package contents but the resulting output was...

Malicious code in sixbails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e91338e6d735e538b7defb669e5b213cad127a9fd64290fa32d83bb855dcf9bd sixbails is a WhatsApp Web library Baileys-family fork. On every socket creation — the package's primary documented API — a 5-second timer fires...

MAL-2026-11088 Malicious code in sixbails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e91338e6d735e538b7defb669e5b213cad127a9fd64290fa32d83bb855dcf9bd sixbails is a WhatsApp Web library Baileys-family fork. On every socket creation — the package's primary documented API — a 5-second timer fires...

Malicious code in @vinnxcode/xbailsync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa85bc699ec69bbebf0799696e784cee3fcd9f78f5ccc9e2cb032e9a9cb3de68 @vinnxcode/xbailsync 1.0.1 is a fork/republish of the Baileys WhatsApp Web library. A a static rule fired on lib/Utils/generics.js due to co-occurren...