MAL-2026-17205 Malicious code in @wbnr/lottiefiles-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f4124e4c91354a00657c25874fb6b9f762438eee2ecd1d8b686af3d4d4ea8c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17206 Malicious code in kalasnik-npm-simple-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1463688412306d5d6f791bb036bea59aeb7251a3044a52c57119768f27cd463 The package's postinstall script senddata.js runs automatically on npm install. It reads C:\temp\test.txt from the installer's filesystem and POSTs t...

Malicious code in kalasnik-npm-simple-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1463688412306d5d6f791bb036bea59aeb7251a3044a52c57119768f27cd463 The package's postinstall script senddata.js runs automatically on npm install. It reads C:\temp\test.txt from the installer's filesystem and POSTs t...

Malicious Package

Overview kalasnik-npm-simple-test is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview wbnr-probe-visible-check is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview @wbnr/lottiefiles-loader is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview @wbnr/design-kit is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview kjj81 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview capacitor-plugin-service-worker is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and th...

Malicious Package

Overview uuid-date is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview swiperangular is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview seek-pass is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview riot-private is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-17207 Malicious code in kjj81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be4c29ba9ea960c7f8e350f68be2c3a6dc320bc3e230be0fb6c8f30d186b1417 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-17210 Malicious code in uuid-date (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1794c1dba5ffb902f0c8011a60990baff7cf5ebc1f90ab634937734944696995 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17208 Malicious code in riot-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b944a9e85b91a70a2c0f84390f4537b2b1babed308cb23c165bf61bc20a91769 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in riot-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b944a9e85b91a70a2c0f84390f4537b2b1babed308cb23c165bf61bc20a91769 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview vinzzsync-wacli is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-17211 Malicious code in vinzzsync-wacli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6515588ac57ec4218f28d221b4c94d785d9455f03c0c6ae27b97fc66fdd6db5 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-17209 Malicious code in tanksync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45dcd24fc5596e9273938687d6878a8927fcdf9ffd63982034556e84c3339065 The package's advertised API downloads a JavaScript file over HTTPS and executes it via spawn'node', payloadPath, detached: true.unref, leaving the...