MAL-2026-14244 Malicious code in gemini-cli-a2a-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eb13d8d28e4c8363ceabe294b988cd42a82f1875af3f2a30310232154664afd On npm install, the package's postinstall script collects host identifiers os.hostname, platform, arch, Node version, and package/lifecycle metadata...

MAL-2026-14239 Malicious code in gaarf-node-bq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f61e7b586146a833e50d74ccdff68942b4514f66c38beca981d2ead87761633 gaarf-node-bq is a dependency-confusion / typosquat canary targeting the internal google/ads-api-report-fetcher gaarf package. The bin entry is an...

Malicious code in gaarf-node-bq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f61e7b586146a833e50d74ccdff68942b4514f66c38beca981d2ead87761633 gaarf-node-bq is a dependency-confusion / typosquat canary targeting the internal google/ads-api-report-fetcher gaarf package. The bin entry is an...

MAL-2026-14238 Malicious code in gaarf-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc539c4e835f015b5f7b9e65ca33a720e44ee0191e3bbf422085949e5d3029b9 The package's postinstall script runs automatically on npm install and collects host identifiers os.hostname, platform, arch, node version, package...

Malicious code in gaarf-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc539c4e835f015b5f7b9e65ca33a720e44ee0191e3bbf422085949e5d3029b9 The package's postinstall script runs automatically on npm install and collects host identifiers os.hostname, platform, arch, node version, package...

Malicious code in gaarf-bq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 841d3bc6f2f6b55bfe6c3d3ffd5daf2eb586507bbe35ff5ab8e706db076357d0 On npm install, the package's postinstall lifecycle script collects installer host identifiers os.hostname, process.platform, process.arch, Node...

MAL-2026-14237 Malicious code in gaarf-bq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 841d3bc6f2f6b55bfe6c3d3ffd5daf2eb586507bbe35ff5ab8e706db076357d0 On npm install, the package's postinstall lifecycle script collects installer host identifiers os.hostname, process.platform, process.arch, Node...

MAL-2026-14236 Malicious code in gaarf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c3312540cdedc807029a549ffd3b49b917704323a3b664c6d71ae6849c192b9 The package's postinstall lifecycle script runs automatically on npm install and collects installer host identifiers os.hostname, platform, arch, Nod...

Malicious code in gaarf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c3312540cdedc807029a549ffd3b49b917704323a3b664c6d71ae6849c192b9 The package's postinstall lifecycle script runs automatically on npm install and collects installer host identifiers os.hostname, platform, arch, Nod...

Malicious code in commandor-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e184348abf5c5ce61ee6c4e63189411a08755e57e95dac33c666adae7c6dc2d The package's scripts/postinstall.js runs automatically on npm install and imports childprocess alongside http.request with multiple POST call sites...

MAL-2026-14234 Malicious code in commandor-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e184348abf5c5ce61ee6c4e63189411a08755e57e95dac33c666adae7c6dc2d The package's scripts/postinstall.js runs automatically on npm install and imports childprocess alongside http.request with multiple POST call sites...

MAL-2026-14233 Malicious code in code-assist-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 093f28fd5542ee841027c5b3dc6917a42ac13dd3e0e1d3bf334e87b823886d3c [email protected] runs a postinstall lifecycle script that collects host identifiers hostname, platform, arch, Node version, package name and POS...

Malicious code in code-assist-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 093f28fd5542ee841027c5b3dc6917a42ac13dd3e0e1d3bf334e87b823886d3c [email protected] runs a postinstall lifecycle script that collects host identifiers hostname, platform, arch, Node version, package name and POS...

MAL-2026-14232 Malicious code in chromeos-webdriver-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bbf3413f6465a1f8bb628dcdb79f59ac7c197bbfba2024202c9915f95ad8161 The package's postinstall script runs on npm install and issues an HTTPS POST to https://kvpq6u62.instances.poc.jchunt.top/chromeos-webdriver-cli...

Malicious code in chromeos-webdriver-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bbf3413f6465a1f8bb628dcdb79f59ac7c197bbfba2024202c9915f95ad8161 The package's postinstall script runs on npm install and issues an HTTPS POST to https://kvpq6u62.instances.poc.jchunt.top/chromeos-webdriver-cli...

MAL-2026-14231 Malicious code in chromecast-webdriver-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c858cd5357d77c39366f7bd1cc1985a5d7012d33da45d6dc9667544b54198d6 [email protected] runs a postinstall lifecycle script that collects host metadata os.hostname, platform, arch, node version, package nam...

Malicious code in chromecast-webdriver-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c858cd5357d77c39366f7bd1cc1985a5d7012d33da45d6dc9667544b54198d6 [email protected] runs a postinstall lifecycle script that collects host metadata os.hostname, platform, arch, node version, package nam...

Malicious code in broadcast-graphics-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48987a1a0ccff7dce1134e1a98122cd902961ac34ba623ae0e2fef62f75fe213 The package's postinstall script runs automatically on npm install and collects host identifiers from the installer machine os.hostname, platform,...

MAL-2026-14228 Malicious code in broadcast-graphics-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48987a1a0ccff7dce1134e1a98122cd902961ac34ba623ae0e2fef62f75fe213 The package's postinstall script runs automatically on npm install and collects host identifiers from the installer machine os.hostname, platform,...

Malicious code in bazelisk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4bcbd35130e716d1a2940c91b6691d41b9655fdc8587404af37bc6e5a7f1370 This npm package uses the name bazelisk, colliding with Google's bazelbuild/bazelisk project referenced in the tarball's source.txt, and self-labels ...