Malicious code in python-walletlibr-v (PyPI)

Source: amazon-inspector 6783cffec9c8f9377babacd1cb4490a278bace564b34861bf49b35258be7220c python-walletlibr-v is a wallet-lookalike PyPI package that ships no wallet functionality — only a stub hello that prints 'Hello from my custom library!' and placeholder author metadata author = 'Your Name'...

Malicious code in @atom8n/inspector (npm)

Source: amazon-inspector 5b72c3643bb990395103d396d62440db908b84769c904d4c14aa9b259f97807c This @atom8n/-scoped package impersonates Anthropic's official MCP inspector package.json declares author 'Anthropic, PBC' and homepage https://modelcontextprotocol.io, with bug tracker at...