630068 matches found
Malicious Package
Overview toru-ultimate is a malicious package. This package contains malicious code. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship. Remediation Avoid using all malicious instances of the...
Malicious Package
Overview react-hook-doms is a malicious package. This package contains malicious code. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship. Remediation Avoid using all malicious instances of the...
Malicious Package
Overview py-devoli-common is a malicious package. This package contains malicious code. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship. Remediation Avoid using all malicious instances of the...
Malicious Package
Overview databricks-webapp-navigation-homepage is a malicious package. This package contains malicious code. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship. Remediation Avoid using all...
Malicious Package
Overview vinzz-wcli is a malicious package. This package contains malicious code. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship. Remediation Avoid using all malicious instances of the...
Malicious Package
Overview open-item-validator is a malicious package. This package contains malicious code. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship. Remediation Avoid using all malicious instances of t...
Malicious Package
Overview @usemosaik/template-react-js is a malicious package. This package contains malicious code. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship. Remediation Avoid using all malicious...
Malicious Package
Overview alloy-graphql is a malicious package. This package contains malicious code. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship. Remediation Avoid using all malicious instances of the...
Malicious Package
Overview selfcerts is a malicious package. This package contains malicious code. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship. Remediation Avoid using all malicious instances of the selfcer...
Malicious Package
Overview gloggo is a malicious package. This package contains malicious code. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship. Remediation Avoid using all malicious instances of the gloggo...
Malicious Package
Overview server-authorized-cleanup is a malicious package. This package contains malicious code. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship. Remediation Avoid using all malicious instance...
Malicious Package
Overview @aspect-adv-ui/consent-manager is a malicious package. This package contains malicious code. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship. Remediation Avoid using all malicious...
Malicious code in easypanel-agent (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7eb103b6863369372ba8c07701264f8b0f6b57e3217e07912c8efbd9371c648f The package's preinstall lifecycle script preinstall.js executes automatically on npm install and collects the installer's hostname, OS username,...
MAL-2026-16071 Malicious code in cat-sis2go-utils (npm)
cat-sis2go-utils is a dependency-confusion package published against the SIS2GO namespace, with versions inflated to 99.0.0 and 99.1.0. It ships no library code index.js is an 87-byte stub, and package.json declares both preinstall and postinstall running node scripts/run.js, so the payload...
Malicious code in easypanel-deploy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ac486399ab6c99cf83bfcf80e487c414fd29430e27f0d929ff7034ed333c7e8 The package's preinstall lifecycle script runs automatically on npm install and collects installer-side identifiers — os.hostname,...
MAL-2026-16074 Malicious code in easypanel-deploy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ac486399ab6c99cf83bfcf80e487c414fd29430e27f0d929ff7034ed333c7e8 The package's preinstall lifecycle script runs automatically on npm install and collects installer-side identifiers — os.hostname,...
MAL-2026-16073 Malicious code in easypanel-api-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cef6da51fcc215c514680417cfd3bacb5725b91a5b4a058fd6d2b161106209b0 The package ships an empty library body index.js exports and a preinstall lifecycle script that runs automatically on npm install. The preinstall...
Malicious code in easypanel-api-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cef6da51fcc215c514680417cfd3bacb5725b91a5b4a058fd6d2b161106209b0 The package ships an empty library body index.js exports and a preinstall lifecycle script that runs automatically on npm install. The preinstall...
