MAL-2026-13759 Malicious code in bs58-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d59b2d561269e6779eed82e12abe726403e9a2419936c01a4deaea9c3e70b2c Package bs58-12 presents itself as the popular bs58 base58 library README copied from bs58, advertising npm i --save bs58 but its own code is a thin...

MAL-2026-13747 Malicious code in base65-13x (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59226f2c38efcc1dd5de6423edfc866125564cd726915307d7a05ca5b5f13529 [email protected] impersonates cryptocoinjs/base-x, reusing its README, homepage, and API surface, but the exported decodestring function in both...

Malicious code in bs58-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d59b2d561269e6779eed82e12abe726403e9a2419936c01a4deaea9c3e70b2c Package bs58-12 presents itself as the popular bs58 base58 library README copied from bs58, advertising npm i --save bs58 but its own code is a thin...

MAL-2026-13746 Malicious code in base65-12x (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79b553d84d7f4dc5347840ddb97f16738eed2e52ac9757b48d2cb31ba1af7122 The package name base65-12x typosquats the popular base-x base-encoding library and reuses base-x's repository as its homepage. Both the CJS entry...

MAL-2026-13758 Malicious code in bs58-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af29bcf6fea2d386f8beb757fa38bac5f1cc6dbae984795f5fd1f4356afd83f7 Package bs58-11 is published under a name that resembles the popular bs58 module. Its README self-identifies as bs58 and instructs npm i --save bs58,...

Malicious code in base65-13x (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59226f2c38efcc1dd5de6423edfc866125564cd726915307d7a05ca5b5f13529 [email protected] impersonates cryptocoinjs/base-x, reusing its README, homepage, and API surface, but the exported decodestring function in both...

Malicious code in base65-12x (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79b553d84d7f4dc5347840ddb97f16738eed2e52ac9757b48d2cb31ba1af7122 The package name base65-12x typosquats the popular base-x base-encoding library and reuses base-x's repository as its homepage. Both the CJS entry...

Malicious code in base65-11x (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14cc9506a804a2663d0cde1c610fa8cba5733e6797652b6365569ada5ef3901d base65-11x is a name-lookalike of the widely used base-x encoder. Both entrypoints src/cjs/index.cjs and src/esm/index.js, 127KB each vs. 4KB for rea...

MAL-2026-13745 Malicious code in base65-11x (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14cc9506a804a2663d0cde1c610fa8cba5733e6797652b6365569ada5ef3901d base65-11x is a name-lookalike of the widely used base-x encoder. Both entrypoints src/cjs/index.cjs and src/esm/index.js, 127KB each vs. 4KB for rea...

Malicious code in dakumangalsingh_virus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5c32842af81f239247b0cb4980f29b20051e92fed5751d4c297ede4f5a9116d The tarball contains a 455 KB Windows PE64 executable named DakuMangalSingh.exe sha256 368320791e5c022ffabedb44eae6ca902fe3f524754a085b726617c2006dc7...

MAL-2026-13761 Malicious code in dakumangalsingh_virus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5c32842af81f239247b0cb4980f29b20051e92fed5751d4c297ede4f5a9116d The tarball contains a 455 KB Windows PE64 executable named DakuMangalSingh.exe sha256 368320791e5c022ffabedb44eae6ca902fe3f524754a085b726617c2006dc7...

MAL-2026-13736 Malicious code in @nzeros/codebreak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf2d80dd4a014bd04f0f01ef666cc4a6a09bb010a37e572a0eb9a3e0298ed5fe The package declares native/solver.c as the source of a small C minimax solver and advertises vendor/solver-- as its compiled output. The darwin-arm6...

Malicious code in @openzeppelin-4/contracts (npm)

@openzeppelin-4/contracts is a malicious npm package published by npm account mssjeep843 that impersonates OpenZeppelin's @openzeppelin/contracts the v4 line via the look-alike scope @openzeppelin-4, falsely describing itself as a "compatibility distribution". It ships no Solidity contracts — onl...

MAL-2026-13737 Malicious code in @openzeppelin-4/contracts (npm)

@openzeppelin-4/contracts is a malicious npm package published by npm account mssjeep843 that impersonates OpenZeppelin's @openzeppelin/contracts the v4 line via the look-alike scope @openzeppelin-4, falsely describing itself as a "compatibility distribution". It ships no Solidity contracts — onl...

MAL-2026-13738 Malicious code in @openzeppelin-5/contracts (npm)

@openzeppelin-5/contracts is a malicious npm package published by npm account mssjeep843 that impersonates OpenZeppelin's @openzeppelin/contracts the v5 line via the look-alike scope @openzeppelin-5, falsely describing itself as a "compatibility distribution". It ships no Solidity contracts — onl...

Malicious code in @openzeppelin-5/contracts (npm)

@openzeppelin-5/contracts is a malicious npm package published by npm account mssjeep843 that impersonates OpenZeppelin's @openzeppelin/contracts the v5 line via the look-alike scope @openzeppelin-5, falsely describing itself as a "compatibility distribution". It ships no Solidity contracts — onl...

MAL-2026-13740 Malicious code in kit-vim-map (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc1b76be1956e2772f73d7712934ee4a296d4407df590f6ca4225db7310de916 The package advertises itself as a dependency-free calendar/streak math library but ships a Linux x8664 ELF at dist/internal/calc-math.dat. The main...

Malicious code in kit-vim-map (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc1b76be1956e2772f73d7712934ee4a296d4407df590f6ca4225db7310de916 The package advertises itself as a dependency-free calendar/streak math library but ships a Linux x8664 ELF at dist/internal/calc-math.dat. The main...

Malicious code in node-internal-svg-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea179fb3670844db867458418a68b3eb69dfd983ebe1fe96b2a4b41601266fc4 Package advertises itself as an SVG loader using well-known CDN providers, but exported functions getPlugin, setPlugin, and getPluginExten build a...

MAL-2026-13766 Malicious code in node-internal-svg-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea179fb3670844db867458418a68b3eb69dfd983ebe1fe96b2a4b41601266fc4 Package advertises itself as an SVG loader using well-known CDN providers, but exported functions getPlugin, setPlugin, and getPluginExten build a...