330242 matches found
Malicious Package
Overview tibcwmpoeafh is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview solo-async-pipe is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview ndmcmsujey is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
Malicious Package
Overview moudeva is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
MAL-2026-16542 Malicious code in zeal-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7a4b9b4fcb0a48aa3602fc7bc865eff738f8ab42a4c9e56ea31e70b0b6b826f canary.js in [email protected] collects host reconnaissance data os.hostname, os.userInfo, process.platform, cwd, node version and POSTs it to the...
Malicious code in zeal-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7a4b9b4fcb0a48aa3602fc7bc865eff738f8ab42a4c9e56ea31e70b0b6b826f canary.js in [email protected] collects host reconnaissance data os.hostname, os.userInfo, process.platform, cwd, node version and POSTs it to the...
MAL-2026-16541 Malicious code in zeal-util-hooks (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c9ed95500d2f1c637bcf47151a9220c0a81ee6cbd7a7aa4a8f66c74fed6e341 postinstall.js and index.js load canary.js, which POSTs a JSON payload to https://npm-canary.aveliscare.com/beacon at install time and on require. Th...
Malicious code in zeal-util-hooks (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c9ed95500d2f1c637bcf47151a9220c0a81ee6cbd7a7aa4a8f66c74fed6e341 postinstall.js and index.js load canary.js, which POSTs a JSON payload to https://npm-canary.aveliscare.com/beacon at install time and on require. Th...
MAL-2026-16540 Malicious code in style-class-utils (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16539 Malicious code in speaker_tagging_media_player (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in spark-rpc (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16538 Malicious code in spark-rpc (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in speaker_tagging_media_player (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in spark-common (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16537 Malicious code in spark-common (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16536 Malicious code in mx-www-locales-common (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in mx-www-locales-common (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16535 Malicious code in mercuriusdream-oidc-replay-probe (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in mercuriusdream-oidc-replay-probe (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16417 Malicious code in eslint-config-compact-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 414c7f8397efb591ffe6f87f9c44e8eb803606eb4789d357abe337d3225cc46f On require, index.js collects host reconnaissance data os.hostname, os.userInfo.username, os.platform, architecture, Node version, current working...