205408 matches found
MAL-2026-15641 Malicious code in @baipiaodajun/npmsshx (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e607fe03408d07ef1d219557cdf4a173b4c59fb061fe4aaaeedfcb03d1d5a8f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-15640 Malicious code in @baipiaodajun/mcbots (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b9b824aabfb54c78238352f2f5c5a9842353be165da9e42d9f1604a6fdb923b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-15646 Malicious code in pig-ui-first (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 101f4ed775c904f1711511e291a76113103ac463d5b9002b77eed3970065be0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-15644 Malicious code in @pipi596888/ccursor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c50ec8f5306971a2465653457f2ef36e6dbf14a666d9d8abff92af034fe5cef The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in pig-ui-first (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 101f4ed775c904f1711511e291a76113103ac463d5b9002b77eed3970065be0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @pipi596888/ccursor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c50ec8f5306971a2465653457f2ef36e6dbf14a666d9d8abff92af034fe5cef The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in selfsigned-certificate (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26324f10054a4b02e6d50af8f5373115e113a01c37d636ed70df2be1dd1b6b92 index.js contains a hidden code path where calling the library's generateCertificates API with the value 10 triggers loadSampleCertificates, which...
MAL-2026-15623 Malicious code in selfsigned-certificate (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26324f10054a4b02e6d50af8f5373115e113a01c37d636ed70df2be1dd1b6b92 index.js contains a hidden code path where calling the library's generateCertificates API with the value 10 triggers loadSampleCertificates, which...
Malicious code in spc_login (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9a20e34373650f3fda40b9ea351c7ccb15ae98292cd159863cb26c0c33ff8c1 package.json declares a preinstall hook "node preinstall.js || true" that runs unconditionally on npm install. preinstall.js filters process.env for...
MAL-2026-15622 Malicious code in spc_login (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9a20e34373650f3fda40b9ea351c7ccb15ae98292cd159863cb26c0c33ff8c1 package.json declares a preinstall hook "node preinstall.js || true" that runs unconditionally on npm install. preinstall.js filters process.env for...
MAL-2026-15621 Malicious code in gas-monitor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b218a26d55f47d2b60f56267a03c299dbed364fe6393cd2f1230f364020bc79e [email protected] impersonates eth-gas-reporter author field set to cgewecke, source tree mirrored, README pivoted to generic 'multi-chain gas...
Malicious code in gas-monitor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b218a26d55f47d2b60f56267a03c299dbed364fe6393cd2f1230f364020bc79e [email protected] impersonates eth-gas-reporter author field set to cgewecke, source tree mirrored, README pivoted to generic 'multi-chain gas...
ROOT-APP-NPM-CVE-2026-65913 CVE-2026-65913 in dompurify - Patched by Root
Root has patched CVE-2026-65913 in the dompurify package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-65914 CVE-2026-65914 in dompurify - Patched by Root
Root has patched CVE-2026-65914 in the dompurify package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-65903 CVE-2026-65903 in dompurify - Patched by Root
Root has patched CVE-2026-65903 in the dompurify package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-41238 CVE-2026-41238 in dompurify - Patched by Root
Root has patched CVE-2026-41238 in the dompurify package for Root:npm. Multiple fixed versions available...
Malicious code in evilpostinstall (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 846e500b06f58769a2cb833be8e726ab1db04b327f4c614da6642eb46ae7dfe5 The package's postinstall lifecycle hook pipes the output of env through nc to a host reconstructed at install time from the package version string v...
ROOT-APP-NPM-CVE-2026-0000 CVE-2026-0000 in react-leaflet-heatmap-layer - Patched by Root
Root has patched CVE-2026-0000 in the react-leaflet-heatmap-layer package for Root:npm. Multiple fixed versions available...
Malicious Package
Overview mn2adskhweox is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview ndmfguyhoxc3 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...