Malicious code in exam-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29cd95c1b59238861675a30a947648a2280420c11e53dcb4f8501db5cb736313 On any require/import of exam-kit, the main entry runs a top-level await that reads an out-of-package file at../../../../public/logo.ico, DES-decrypt...

MAL-2026-14331 Malicious code in exam-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29cd95c1b59238861675a30a947648a2280420c11e53dcb4f8501db5cb736313 On any require/import of exam-kit, the main entry runs a top-level await that reads an out-of-package file at../../../../public/logo.ico, DES-decrypt...

Malicious code in @pablo_clueless/printr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13ba2a3695f8d0fa63fb6558e66660f1e3b4a6f4eb080b86c486daae6f55102b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14330 Malicious code in @pablo_clueless/sniffr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e53d0f446873ba82f5cec59baa471da44bedb5386ddae175b8b501b9b038240 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in @pablo_clueless/sniffr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e53d0f446873ba82f5cec59baa471da44bedb5386ddae175b8b501b9b038240 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14329 Malicious code in @pablo_clueless/printr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13ba2a3695f8d0fa63fb6558e66660f1e3b4a6f4eb080b86c486daae6f55102b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14328 Malicious code in goldstar-api-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79d095fdd61f79c64b4b5d12ba75957b7c5de47df2bcfa549b05b23c7e450eba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in create-react-app-text (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b7f200b99d8d2fadc13b72ccdd272107db79b8bc517ef5346a354479a177dff The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in create-react-app-ux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce3734765ee6802d3ccdbbecb091f613417a1ff055ee8fb75ced9f7cf36ef31 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14326 Malicious code in create-react-app-ux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce3734765ee6802d3ccdbbecb091f613417a1ff055ee8fb75ced9f7cf36ef31 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14324 Malicious code in create-react-app-text (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b7f200b99d8d2fadc13b72ccdd272107db79b8bc517ef5346a354479a177dff The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in create-react-app-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ad9d14917da2cd3e79a2885cdb25d2009133fb55f9ed4bead87e677f64f7816 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14325 Malicious code in create-react-app-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ad9d14917da2cd3e79a2885cdb25d2009133fb55f9ed4bead87e677f64f7816 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Rust Supply Chain Attack on arrayref: Significant Overlap with DPRK Campaigns

Malicious versions of the arrayref Rust crate and others executed a backdoor at compile time. The campaign's infrastructure overlaps with recent DPRK supply chain attacks, including Mastra and axios...

MAL-2026-14319 Malicious code in test-flow-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5e7f0fbad80f9bdcba1c9d37322137d8f3a7bd86353650c5f946c73b1bb4637 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14321 Malicious code in test-flow-entire7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aac2aa8c9e03f819fc35f4abe8554abf07333c68617df6a2f844d11bb3374594 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in test-flow-entire6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f48cc690ceb502d2127045e27bfbdd18d18fe3cddb67eaaed906e75c7b735cc The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in frenchworldcupwin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f28b41919d402aff87ec13d36b2419e4c19dcc209dcb6ffa3e736de5be2803e6 package.json declares its sole runtime dependency client-marker-packet-cluster as an arbitrary HTTPS tarball URL on a non-registry host...

MAL-2026-14320 Malicious code in test-flow-entire6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f48cc690ceb502d2127045e27bfbdd18d18fe3cddb67eaaed906e75c7b735cc The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14318 Malicious code in frenchworldcupwin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f28b41919d402aff87ec13d36b2419e4c19dcc209dcb6ffa3e736de5be2803e6 package.json declares its sole runtime dependency client-marker-packet-cluster as an arbitrary HTTPS tarball URL on a non-registry host...