346 matches found
MAL-2026-4792 Malicious code in react-json-chalk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a2b0f9e236c71a3da2c36dd19a90a0a3e096503e79754d25ce2a13eb5d72d77 The package is published as react-json-chalk but its main entry pino.js impersonates the pino logger homepage https://getpino.io, bundled pino source...
MAL-2026-4517 Malicious code in chalk-tempalte (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3e82f6fa2867575be5e57fd3b03dada6a93761c97b240f77f98f4b221bde7a7 Package name chalk-tempalte is a single-character transposition of the popular chalk-template package a top-tier npm utility, consistent with...
Malicious Package
Overview chalk-tempalte is a malicious package. This package contains malicious code that includes infostealer malware, one of which is a Shai-Hulud clone following the TeamPCP open source release, and one DDoS botnet package. While this package might be attempting to impersonate a valid...
MAL-2026-3755 Malicious code in chalk-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0fe2974289b691a9f5541068f2e399aecb14a719779202ff5999652ffe351db On npm install, postinstall.js runs a credential and cryptocurrency stealer against the installer's machine. It reads /.npmrc extracting authToken an...
Malicious code in chalk-pack (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e6eab5e9e696250cc719b36e144f4534cac2b38a25521cda80222b6c66cd64c Package is named chalk-pack impersonating chalk with keywords and index.js impersonating lodash; index.js is a stub that self-describes as 'Just a...
MAL-2026-3212 Malicious code in chalk-fancy (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 b86a641eb2b6239d8a88849df88a1a148fa5380e3c8767dc59915edb295ef5b3 When used, package exfiltrates sensitive environmental variable. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...
Malicious code in chalk-fancy (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 b86a641eb2b6239d8a88849df88a1a148fa5380e3c8767dc59915edb295ef5b3 When used, package exfiltrates sensitive environmental variable. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...
MAL-2025-192903 Malicious code in chalk-thrift (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in chalk-thrift (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in chalk-service (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-192902 Malicious code in chalk-service (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in chalk-interface (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-192899 Malicious code in chalk-hostname (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-192901 Malicious code in chalk-sentry (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-192900 Malicious code in chalk-interface (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in chalk-sentry (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in chalk-hostname (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in chalk-consul (RubyGems)
--- -= Per source details. Do not edit below this line.=-...