Malicious code in quartz-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f59477bf2399742c785aa97d80d04b4800f66446ae3635167ba173d96080a91 On npm install, the package's preinstall hook package.json scripts.preinstall = node index.js executes index.js, which reads the installer's OS...

Malicious code in kendo-angular-window (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 012a21168890d2cc7482e8f4191dd4d1ee848314bdf7bc0970be32fb87a7ef25 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15647 Malicious code in @testrelic/appium-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b67d6f23451a756c154b86142f91615f5c08c415166c1f66216c8c83d74cbeb The package registers scripts/postinstall.cjs as an npm postinstall hook. Alongside a benign-looking config-writer, the script contains an obfuscatio...

Malicious code in kisama-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0179b9fe97920f04431eb6d6e94b46c6ef2889af5e55d6a0b79793097187fed3 [email protected] ships an obfuscated index.js that runs an HTTP+WebSocket agent binding 0.0.0.0:8000 by default and exposing /api/exec POST for shell...

MAL-2026-15623 Malicious code in selfsigned-certificate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26324f10054a4b02e6d50af8f5373115e113a01c37d636ed70df2be1dd1b6b92 index.js contains a hidden code path where calling the library's generateCertificates API with the value 10 triggers loadSampleCertificates, which...

MAL-2026-15602 Malicious code in redis-cookie-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01c94026a508b2ada8c891551c8ccd622f86c2ba2e7b6a7c181fc3eb538e2f1f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15581 Malicious code in cloudfcrxz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1caf6a2a9c9e406a086a5eef2c95f0248003441ebb663fb0fd215aefd9565198 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15584 Malicious code in h3-codex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6efe15c8b6a625f5ec662fc1d19f3191d0c9cd4a118565283dbe7ac9be1f54a7 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in real-browser-plus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 276e32a0246539a0495937fdf1967c9f2c778d4e902f14bc921148e4edbb0648 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15587 Malicious code in real-browser-plus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 276e32a0246539a0495937fdf1967c9f2c778d4e902f14bc921148e4edbb0648 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in brat-codex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c333154957d5d184f708ad5a73487dedde9f9e3600564467a69d6620a6cc3f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15582 Malicious code in cloufcrxz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fb997ba2e8af58bd0d35d6e2cfb2264b4ae0132e071fc5b0e3e58f3326e37a9 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15574 Malicious code in gclassroom (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 354356e7fb630f0274c0194e95a717249115562962b161aea98b51a79dfae70f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15570 Malicious code in node-net-pool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9c6bb87249429b2a3f3791589075bf872a433bd47a33b152f6809ccf94b1328 package.json declares a postinstall hook node index.js that runs automatically on npm install. The shipped index.js contains no networking or...

MAL-2026-15567 Malicious code in htps-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ed7eca74d8fb188a8618c67facb5015d747e423ccdf4e51caae2e4e63f82ea2 Package is published as htps-provider with a README copy-pasted verbatim from the legitimate Cosmos chain-registry project advertising assets, chains...

MAL-2026-15568 Malicious code in manager-thedate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceffc24ee0bb4a8d23a2d545605b2ed2b686e9934b4f50c9fa24df3c980f04ed The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in manager-thedate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceffc24ee0bb4a8d23a2d545605b2ed2b686e9934b4f50c9fa24df3c980f04ed The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in nuvyra-marketplace-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5db08e65aec25f1dc4fd0c33173154dbd0e6ef6e79aa2f1b7f8b4f8df0b9a3a8 dist/client.js executes initializeProvider at module top level, so the code runs whenever a consumer requires or imports this SDK. The function...

MAL-2026-15489 Malicious code in borsh-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eed0e447cd98b9470a197c1dd9b341e6a93ea6f39088f4f93335979827f707b8 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14743 Malicious code in 3layerdipstackesp1lb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bd59b0798d5b504ce5bc151f4b845c732a5cbf45d046f54b3becbffd944cd38 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...