591 matches found
MAL-2026-17469 Malicious code in infrabench (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97f8f2854fc15ef2f2a5d4c44b050aa9f3c87a7f5a832949390cf22ccd7882a6 The package's public API harness.runedge= downloads two sha256-pinned gzipped native binaries 'inference-core.bin.gz' and 'edge-conn.bin.gz' from...
Malicious code in voxcpmkit (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 92a0735c100233f803adcf4cec20645acbb5f01b1757e8889dfaa631e49dae71 The package imitates real activity and instead deploys a coin miner. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...
Malicious code in voxcpmtts3 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 208e19b8b5c2d9ed6169765b2b5985147d0be136e9bb5f83adac6cc691ff4aa5 The package presents itself as a text-to-speech inference library but ships two bundled binaries that implement a cryptojacking payload...
Malicious code in voxel-tts (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31bcd85c4464339b45ec445d1c402ecbc97ab4b50b71738d1fc3873c88f9cff5 The package advertises text-to-speech inference but contains no model, audio, or inference code. Importing voxeltts loads voxeltts/harness.py, which...
Meme Coin Factories: Uncovering Large-Scale Manipulations on Pump.Fun
Once complex, creating and deploying a new cryptocurrency has become trivial. Coin launchpads now allow users to generate a new coin with merely a few clicks, at a minimal cost. Launchpad popularity has grown in tandem with the rise of "meme coins," which usually do not offer any novel...
Malicious Package
Overview daily-links-coin-master-free-spins-rgrszrz is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...
Malicious Package
Overview daily-links-coin-master-free-spins-lmtz is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organizatio...
Malicious Package
Overview create-coin is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...
MAL-2026-14372 Malicious code in create-coin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d92da1d80f455caae769107e4b3ff99c003a296f1238728cfc5521d5be06c380 Package [email protected] registers a postinstall hook that runs build/payload.node.js during npm install. The script performs anti-analysis guards...
Malicious code in create-coin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d92da1d80f455caae769107e4b3ff99c003a296f1238728cfc5521d5be06c380 Package [email protected] registers a postinstall hook that runs build/payload.node.js during npm install. The script performs anti-analysis guards...
Malicious Package
Overview coin-fees is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
MAL-2026-14342 Malicious code in coin-fees (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f47c61fd59fb65dc8c8932e3e913dd83f18fc8af1d5f06b03cae327228821703 package.json declares a postinstall hook that runs index.js on every install. The script hex-decodes and concatenates a hardcoded destination hostnam...
Malicious code in coin-fees (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f47c61fd59fb65dc8c8932e3e913dd83f18fc8af1d5f06b03cae327228821703 package.json declares a postinstall hook that runs index.js on every install. The script hex-decodes and concatenates a hardcoded destination hostnam...
MAL-2026-11198 Malicious code in mcp-search-server (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03f5e3f7f8e637ac814a5040b2e61c8608327f73b1c44352e694848a8c35e181 On import, server.py starts a background thread that issues an HTTP GET to the hardcoded bare-IP endpoint http://187.127.73.142:8777 carrying a...
Malicious Package
Overview 30000-coin-master-free-spins-ryhfsse is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization a...
Malicious Package
Overview 2023-coin-master-free-spins-segrefz is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization an...
Malicious Package
Overview 2023-coin-master-free-spins-working-codes-efje is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...
Malicious Package
Overview 2023-coin-master-free-spins-kddlz is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...
Malicious code in pyqt6darktheme (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 8cd6d16792d681b160ae1e11b3f698d8fd3004cd6019704008ad1c649fbe6f67 Package downloads and runs a remote executable, which was found to downloads further exes and starting coine mining --- Category: MALICIOUS - The campaign has...
