Malicious Package

Overview simple-date-formatter-util is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview nvtorch-oot-nightly is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in test-dev-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b79a278016b87011ec1e810ce455d87ab6346a1045cc007e0155b204c8cc2532 test-dev-sync is a browser data stealer coupled to a remote-command backdoor. grabberuser.js enumerates Chrome/Chromium/Opera/Vivaldi profiles under...

MAL-2026-11492 Malicious code in test-dev-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be4f4885b543da795140d0ac9c44423c6ecadf74c744c1f322f9d1a5263fe4f2 No static or traced behavioral signals of supply-chain attack were observed in this package. There is no evidence of install-time or import-time code...

remove-ai-watermarks v0.22.0

Remove AI Watermarks Remove AI provenance marks from images and video you generated yourself: known visible labels such as the Gemini sparkle and vendor text marks; invisible pixel watermarks through diffusion regeneration; C2PA, EXIF, XMP, IPTC, and related AI metadata. Video support covers...

Malicious Package

Overview asdk-plugin-alphagen is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-11441 Malicious code in @moxfive-llc/common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4880022b8afb155703691d80f8558c09be4262e4fa12064a2faca2607a3679b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview @spending-behavior-ui/widget-insights is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization...

MAL-2026-11451 Malicious code in @spending-behavior-ui/widget-insights (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36bbaed8e8bd830b00f14eaeb532fbeeb0d581a806dbdbca220ab006b1adc958 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview @fuji-web-components/maps is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in @global-theme/context (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b48962d911b70fd09f4c001b44b879452dda607f877256d2f85d64538912ab7f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11450 Malicious code in @spending-behavior-ui/cashflow-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4297e338304a9686d295320c60149b746f9044b0cc158fc6743c670965f595fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @one-chat/react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c7db3f85373ec3f62997e6019402e390ab07d37ef0f129fdfa168b9503da7e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview metrics-ui is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview sso-users-detection is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-11473 Malicious code in metrics-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40a5f1c46b3dedff62a0fbbb97026f6ad0b4c59cbbfb5f3078de824328c09b8c metrics-ui is a functionally empty npm package hollow index.js, no scripts whose only effect on installers is pulling in a runtime dependency resolve...

Malicious Package

Overview process-status-widget is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in hit-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a87a289453b876b0dae6773dc57ed8fff3f935d293bf9256287af064d6f2bfa3 lib/report.js imports childprocess, fs, https, and os, reads local files via fs.readFileSync, gathers host identity via os.hostname and os.userInfo,...

Malicious Package

Overview allurectl is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious code in mcp-server-boilerplate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50ee88b53e786db18609f7956c556a7f814b476c895bb90d5663aedc82ca14f0 Package name 'mcp-server-boilerplate' is unrelated to the Model Context Protocol ecosystem it evokes; the shipped code is a data-collection payload...