MAL-2026-17458 Malicious code in translate-base-font (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b0c647653ce1698d15162d24ea22d9b060d770daf28277f3ce27a0040dda6dc The package presents itself as a CSS custom-property polyfill for font translation, but its actual behavior is a browser-side code-smuggling vector...

MAL-2026-17460 Malicious code in ui.dist.min.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf50ae695b73c6662269893d9ac1f677ce5be474e9648bfa23cdfb35b1b04a3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17459 Malicious code in ui-base-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f7251d8342fbc78bb25925a713153e0bd22f820c678fde7e2ffa0db10fbd151 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17456 Malicious code in @smwebserver/static (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3de0cc583ad7f0166991a10b69426eabbd42d6eaef796e7ea078cf76e9a741e7 The package ships an effectively empty index.js and its only real content is a manifest-level dependency sourced from an arbitrary HTTPS URL rather...

MAL-2026-17455 Malicious code in dedh-devops-automation (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35e844ac2e44aa325f62eaf6a81e4775c3694320b567f834689e26ac5c961b76 The package was found to contain malicious code or consuming dependency that contains malicious code Source: kam193...

Malicious code in dedh-devops-automation (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35e844ac2e44aa325f62eaf6a81e4775c3694320b567f834689e26ac5c961b76 The package was found to contain malicious code or consuming dependency that contains malicious code Source: kam193...

Malicious Package

Overview gocommunity.io/orderedbtree is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview gogets.dev/btreex is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview shortneer is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview friendly-tools is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview ichigo-baileys is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview mikuhostt-baileys is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @erlanzz/baileys is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview ai-workshop-maa15-radio is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

Malicious Package

Overview prastzyy is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview figma-to-apl is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview ai-workshop-radio-lambda is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview prastzy is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview luoxy-baileys is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview brioche-apl-dev-env is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...