MAL-2026-14967 Malicious code in 3layerdipstackvtd7og (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37994d3d03c7446f5f3251b1c84421b04e4cc0287ee51e7051a89fea429c79ad The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackfdgka0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6b1e8e507446d2e1921511d47721fa25899b90432339713bbaac218908d68b8 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-3995 Malicious code in @antv/g6-react-node (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

Malicious code in async-http-tools (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 85e8a68bad6595a817f1dabed757662e2a04cfec7b45a86d9bfd61a7a78d14d1 During installation, package exfiltrates some basic info to a GitHub issue comment, and then attempt to set up a persistent infostealer focused on exfiltrating...

Malicious code in i-wls (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4403e46e10206e7c0b1c77bf4a27f6c3be2d94aedb52ba77ab8801902df948a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...