wraith

WRAITH — browser hook framework A modern, standalone browser-hooking framework for red teams, security researchers, and educators — a clean-room successor to BeEF and the blind-XSS callback tools we live in. FOR AUTHORIZED SECURITY TESTING, RESEARCH & EDUCATION ONLY. WRAITH is an offensive-securi...

Malicious code in spectral-wraith (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57eb03a60917ac9bb4debf56cafa90c96dfec3aab8efc04d2c946a1ac6ffceac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview spectral-wraith is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-11385 Malicious code in spectral-wraith (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57eb03a60917ac9bb4debf56cafa90c96dfec3aab8efc04d2c946a1ac6ffceac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview coral-wraith is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-5682 Malicious code in coral-wraith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf0e5e4aa66ffeb1481fd587c96f596a227c9388b86b3a3443749b5ec9eb09f1 The package's postinstall.js runs at install time and performs a credential-harvest + host-tampering chain against the installer. It enumerates npm...

Malicious code in coral-wraith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf0e5e4aa66ffeb1481fd587c96f596a227c9388b86b3a3443749b5ec9eb09f1 The package's postinstall.js runs at install time and performs a credential-harvest + host-tampering chain against the installer. It enumerates npm...

Malicious code in wraith-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e01edc3106b7a83dd7050b7ade8ef141a38fac23b8829ed8d2f4e1f1402829b The package wraith-module was found to contain malicious code...

MAL-2026-2397 Malicious code in wraith-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e01edc3106b7a83dd7050b7ade8ef141a38fac23b8829ed8d2f4e1f1402829b The package wraith-module was found to contain malicious code...