Malicious Package

Overview figlet-chalk-render is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview fabric-asset-pipeline is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview nebulaai-sdk is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview chalk-figlet is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview img-to-native is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview my-skibidi is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview simple-date-formatter-new-12 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview fabric-render-bridge is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview nebula-llm is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview git-en-boite-logging is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview llm-nebula is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview nebula-sdk is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

MAL-2026-17220 Malicious code in nebulajs-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07debd960454b52639fee783e21c0c303702d8dce6de5e3320393f1b0abc7077 package.json declares scripts.preinstall = 'node preinstall.cjs'. preinstall.cjs is a single 232KB opaque Function... invocation containing a custom...

Malicious code in nebula-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0ca45fda7abd51edfeef37be6d19b4070788180b7625f16354223d81dae4d45 The preinstall.cjs lifecycle script embeds a base64-encoded, zlib-compressed Windows PE 257KB as a string literal. On npm install, the script decodes...

Malicious Package

Overview eslint-plugin-skywagon-web is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview azure-langchain-example is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

Malicious code in vite-plugin-crypto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ee82c069dcdf259199f5844c6ff46be3020d79609ff7b7b8ebc82017c59b2c [email protected] exposes a Vite plugin factory whose body concatenates three option fields — secret, salt, and iv — into a single string and...

MAL-2026-17222 Malicious code in vite-plugin-crypto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ee82c069dcdf259199f5844c6ff46be3020d79609ff7b7b8ebc82017c59b2c [email protected] exposes a Vite plugin factory whose body concatenates three option fields — secret, salt, and iv — into a single string and...

Malicious code in tailwindcss-form-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ee530ea41c8bfbb1574bee19e02b9bf7f319e9dd93300513f4be599eebbc3db The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-17221 Malicious code in tailwindcss-form-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ee530ea41c8bfbb1574bee19e02b9bf7f319e9dd93300513f4be599eebbc3db The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...