592 matches found
MAL-2026-13596 Malicious code in dolyame-ui-progressline (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e109a79a8ebbb2a7d21a37668b162bc92a5602ad24e7db6b6ce711f5cee152f6 On require, index.js loads shim.js which fetches a platform-specific binary from hardcoded Cloudflare Workers endpoints...
Malicious Package
Overview 1co is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
Malicious code in torch-musa (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 dc7f99306afb7d31dab4c2ca32f2feb984bcdc505cf1dc6c3ee736cd21f9bcc9 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2026-10979 Malicious code in @apexfdn/apex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc2117528ff8a612341edb673a46c0ced3745bccf0c4c60f3b7cdf86d501af3 On npm install, install.js runs as a postinstall step and downloads a platform-specific executable from...
Malicious code in syft-acp-atoms (npm)
The syft-acp-atoms package was published to the npm registry by user 'ada8877' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the 'syft-acp' internal/private package naming convention an ACP component library of a target...
MAL-2026-10218 Malicious code in pure-folder-three (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e83bf74d7c84c48a1a478d7bb40bbd899c4fda613f1512b66184d3de478b480 [email protected] executes attacker-controlled shell commands on install and on import. The postinstall entry src/build.js decodes an obfuscate...
MAL-2026-10022 Malicious code in @wagni_bot/binance-sdk (npm)
The npm package @wagnibot/binance-sdk is a supply-chain credential stealer disguised as a Binance SDK. It is one member of a coordinated campaign of 25 crypto/web3 typosquat packages published under the single npm scope @wagnibot on 2026-07-09. Each package declares a postinstall lifecycle hook...
Malicious code in zwxbccali (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zwtcookie (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zwagback2 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zw_nobdr_events (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zlam_hjanf (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zjfadgip (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in wprwn6xyz (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9264 Malicious code in wandsdock7wre22injjan (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in wandqhack1 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in wandczvof6git (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in vanity2zzgbqvirfx (RubyGems)
--- -= Per source details. Do not edit below this line.=-...