Malicious code in selfsigned-certificate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26324f10054a4b02e6d50af8f5373115e113a01c37d636ed70df2be1dd1b6b92 index.js contains a hidden code path where calling the library's generateCertificates API with the value 10 triggers loadSampleCertificates, which...

MAL-2026-15623 Malicious code in selfsigned-certificate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26324f10054a4b02e6d50af8f5373115e113a01c37d636ed70df2be1dd1b6b92 index.js contains a hidden code path where calling the library's generateCertificates API with the value 10 triggers loadSampleCertificates, which...

Malicious code in spc_login (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9a20e34373650f3fda40b9ea351c7ccb15ae98292cd159863cb26c0c33ff8c1 package.json declares a preinstall hook "node preinstall.js || true" that runs unconditionally on npm install. preinstall.js filters process.env for...

MAL-2026-15622 Malicious code in spc_login (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9a20e34373650f3fda40b9ea351c7ccb15ae98292cd159863cb26c0c33ff8c1 package.json declares a preinstall hook "node preinstall.js || true" that runs unconditionally on npm install. preinstall.js filters process.env for...

Malicious code in gas-monitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b218a26d55f47d2b60f56267a03c299dbed364fe6393cd2f1230f364020bc79e [email protected] impersonates eth-gas-reporter author field set to cgewecke, source tree mirrored, README pivoted to generic 'multi-chain gas...

MAL-2026-15621 Malicious code in gas-monitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b218a26d55f47d2b60f56267a03c299dbed364fe6393cd2f1230f364020bc79e [email protected] impersonates eth-gas-reporter author field set to cgewecke, source tree mirrored, README pivoted to generic 'multi-chain gas...

ROOT-APP-NPM-CVE-2026-65903 CVE-2026-65903 in dompurify - Patched by Root

Root has patched CVE-2026-65903 in the dompurify package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-65913 CVE-2026-65913 in dompurify - Patched by Root

Root has patched CVE-2026-65913 in the dompurify package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-41238 CVE-2026-41238 in dompurify - Patched by Root

Root has patched CVE-2026-41238 in the dompurify package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-65914 CVE-2026-65914 in dompurify - Patched by Root

Root has patched CVE-2026-65914 in the dompurify package for Root:npm. Multiple fixed versions available...

Malicious code in evilpostinstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 846e500b06f58769a2cb833be8e726ab1db04b327f4c614da6642eb46ae7dfe5 The package's postinstall lifecycle hook pipes the output of env through nc to a host reconstructed at install time from the package version string v...

ROOT-APP-NPM-CVE-2026-0000 CVE-2026-0000 in react-leaflet-heatmap-layer - Patched by Root

Root has patched CVE-2026-0000 in the react-leaflet-heatmap-layer package for Root:npm. Multiple fixed versions available...

Malicious Package

Overview mn2adskhweox is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview ndmfguyhoxc3 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview mn4xcouzvhus is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview tesgfvbncsdbcv is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview mn3sadkoiewu is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview mobiwaefhxc3 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview skxcmwuncbg2 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview vxhjkseuiaqkb is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...