692 matches found
MAL-2026-10979 Malicious code in @apexfdn/apex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc2117528ff8a612341edb673a46c0ced3745bccf0c4c60f3b7cdf86d501af3 On npm install, install.js runs as a postinstall step and downloads a platform-specific executable from...
Malicious code in syft-acp-atoms (npm)
The syft-acp-atoms package was published to the npm registry by user 'ada8877' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the 'syft-acp' internal/private package naming convention an ACP component library of a target...
MAL-2026-10218 Malicious code in pure-folder-three (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e83bf74d7c84c48a1a478d7bb40bbd899c4fda613f1512b66184d3de478b480 [email protected] executes attacker-controlled shell commands on install and on import. The postinstall entry src/build.js decodes an obfuscate...
MAL-2026-10022 Malicious code in @wagni_bot/binance-sdk (npm)
The npm package @wagnibot/binance-sdk is a supply-chain credential stealer disguised as a Binance SDK. It is one member of a coordinated campaign of 25 crypto/web3 typosquat packages published under the single npm scope @wagnibot on 2026-07-09. Each package declares a postinstall lifecycle hook...
Malicious code in zwxbccali (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zwtcookie (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zwagback2 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zw_nobdr_events (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zlam_hjanf (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zjfadgip (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in wprwn6xyz (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9264 Malicious code in wandsdock7wre22injjan (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in wandqhack1 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in wandczvof6git (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in vanity2zzgbqvirfx (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in v5zzgbqvirfx (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9078 Malicious code in v15zzgbqvirfx (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in swd8249a (RubyGems)
--- -= Per source details. Do not edit below this line.=-...