Malicious code in nolimit-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e9510731400dde41fd6705895d15e78bf4fe6f4560162a10bd6016e855f4221 The package tarball contains a hidden top-level directory .ad/ populated with 40+ heavily obfuscated JavaScript files advanced-evasion.js,...

MAL-2026-4777 Malicious code in xct-x-ayoub (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d33575d7ebb1fa670ce8a2f633471492b04319daffe0f1e10dd35841cf2709af On import XcTxAyOuB, the package's top-level init.py unconditionally starts a Flask HTTP server bound to 0.0.0.0:5000 configurable via PORT exposing...