Malicious Package

Overview @noobaihome/amis-simple-area-widget is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization an...

Malicious code in @noobaihome/amis-uni-area-widget (npm)

Source: amazon-inspector 1741a7c8b780801766382499022f9aa860eb8313e4a416a5157afeb9a92f6561 scripts/install.js runs during npm preinstall and performs three attacker-beneficial actions against the installer host. First, it unconditionally beacons installer identifiers pid, base64-encoded process.cw...

Malicious code in @noobaihome/amis-simple-area-widget (npm)

Source: amazon-inspector 642f206459c4677892954c26736b990c72bb01ae9383f917ab664b38d977819f @noobaihome/[email protected] advertises an AI Suda amis area-chart widget, but dist/renderer.umd.js and dist/plugin.umd.js are empty stubs module.exports = . The only functional code is...

MAL-2026-13689 Malicious code in @noobaihome/amis-simple-area-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642f206459c4677892954c26736b990c72bb01ae9383f917ab664b38d977819f @noobaihome/[email protected] advertises an AI Suda amis area-chart widget, but dist/renderer.umd.js and dist/plugin.umd.js are empty stu...

Malicious code in @noobaihome/amis-simple-area-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642f206459c4677892954c26736b990c72bb01ae9383f917ab664b38d977819f @noobaihome/[email protected] advertises an AI Suda amis area-chart widget, but dist/renderer.umd.js and dist/plugin.umd.js are empty stu...

Malware in vue2-amis-custom-widget-pro

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in vue2-amis-custom-widget-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c676b8d3fdeb2773313404ba039b4e2162b5e516e6938db609188c352f319cc8 The package vue2-amis-custom-widget-pro was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192423 Malicious code in vue2-amis-custom-widget-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c676b8d3fdeb2773313404ba039b4e2162b5e516e6938db609188c352f319cc8 The package vue2-amis-custom-widget-pro was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-202379

Malicious code in vue2-amis-custom-widget-pro npm...

Malicious code in vue2-amis-custom-widget123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 027b467c811b36f60dc7589ccd8251ffc56de7f40345d6a471a3a550a2a8df7e The package vue2-amis-custom-widget123 was found to contain malicious code. Source: ossf-package-analysis...

EUVD-2025-202378

Malicious code in vue2-amis-custom-widget123 npm...

AWS VDP: Private AWS AMIs are temporarily being exposed publicly

Temporary public exposure of private AWS AMIs was discovered. Multiple AMIs with internal AWS-related content were found in the public AMI community catalog, but were quickly removed. An EC2 instance was successfully created using one of the exposed AMIs, revealing the presence of undocumented...

MAL-2025-2088 Malicious code in amis-widget333 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f509676bdf1121ae9f9053091311b63ada66c411a1e791754de5bdda100eeb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2089 Malicious code in amis-widget77777 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d942d0ef0acfd81130cbd80a7296143bb7e3fd2bd08430bdaeefddea85c72c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in amis-widget77777

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in amis-widget333

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in amis-widget333 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f509676bdf1121ae9f9053091311b63ada66c411a1e791754de5bdda100eeb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in amis-widget77777 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d942d0ef0acfd81130cbd80a7296143bb7e3fd2bd08430bdaeefddea85c72c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in amis-test1

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in amis-test1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 907fed13cac56efe0df742c4ebb89e8e62fd4df5e4d284ebc7dd48a848a0647d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...