Malicious Package

Overview biklimaster is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

Malicious code in unitel4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5370545a3cd79dd914fd2af5c469caf0f8942c74c14f760f34c3f6856e6648d Package contains only package.json and index.html, with main pointing at index.html. The HTML impersonates a Cloudflare 'Just a moment...'...

Malicious Package

Overview @bikli/cli is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

MAL-2026-13822 Malicious code in mnhdjoweuq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 095b631b3ea82334aa5d3ffb4c015340670beebb533d0e016023d997a3ce7e56 Package contains only package.json and index.html, with main pointing at the HTML file. index.html mimics a Cloudflare Turnstile 'Just a moment'...

MAL-2026-13794 Malicious code in clxofwfjskaz7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b4dde997a29794d4dfbb4725da833fa7cb4a221dc91d6b820901745eb77f198 The tarball contains only package.json and index.html. package.json declares main: index.html and no lifecycle scripts...

Malicious Package

Overview @years18/n8n-nodes-utils-helper-e is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

Malicious Package

Overview permit2 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview msaidccomtw is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

Malicious Package

Overview jhkxcixudnvm1 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview bgzxcuite2 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious code in clxofwfjskaz7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b4dde997a29794d4dfbb4725da833fa7cb4a221dc91d6b820901745eb77f198 The tarball contains only package.json and index.html. package.json declares main: index.html and no lifecycle scripts...

Malicious code in cvbniydplwe3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9edbef37139b40a366aacea90abbd4b80ca581921f213b98ffb17db3b857bfcd The tarball contains only index.html declared as package.json main and no JavaScript, no lifecycle scripts, and no Node-executable entry point...

Malicious code in fghvbmniwu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8623e3b9a84e8cbe5910bc3d683f19629c49b9d3f0a2e00ab771901efef8146a Package contains a single index.html declared as main, which is a Cloudflare-branded 'Just a moment...' clone embedding a Turnstile widget and heavil...

Malicious code in khanbmnxls (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2170fddb23040b2e55eeeb17188244072efdef033879036b45865f5b84ef7346 The package contains a single index.html that impersonates a Cloudflare Turnstile 'Just a moment...' challenge page. The inline JavaScript is heavily...

Malicious code in vkldhcmieru6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25890a37fa8da48d2dc2868e010cef8cb3427faa42218cec4b858ac82db679d7 The package contains only index.html declared as main in package.json and a minimal package.json with no lifecycle scripts. The HTML impersonates a...

Malicious code in xhjckswqivb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a9d37b433e22c980e67c0a2991612592959f6998df3928a6a09792ecf4860bb Package contains only index.html and package.json. The HTML mimics a Cloudflare Turnstile challenge and, when loaded in a browser, assembles an...

MAL-2026-13830 Malicious code in nihzvdeowx5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 303f930ccf841284aaa263af6244d308d3bfd0d83b5af6ae037ff634f2518d94 The package contains only index.html declared as main in package.json and no JavaScript entry point, lifecycle scripts, or other module code. The HTM...

MAL-2026-13837 Malicious code in unitel3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 191a863f69cdac20d9594e012bfb03929448786892a1c13d185ac4f64d2b5a8f Package [email protected] contains 2 files. No install-time lifecycle hooks, credential access, network exfiltration, dropper, or backdoor behavior was...

MAL-2026-13843 Malicious code in xcnvjfsiewlk9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 062503dc8980c1ade02ac4fc0566a94d40b85c0a634da8b00a941f9acfcf9747 The package's sole content is an index.html disguised as a Cloudflare Turnstile 'Just a moment...' verification page. The HTML contains...

MAL-2026-13820 Malicious code in khanbmnxls (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2170fddb23040b2e55eeeb17188244072efdef033879036b45865f5b84ef7346 The package contains a single index.html that impersonates a Cloudflare Turnstile 'Just a moment...' challenge page. The inline JavaScript is heavily...