Malicious code in acuitymobileapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4731a57ff93dc5dd51ce1cb0579af31f609e3dade55ff76c80e8226c6da8baa7 The package acuitymobileapp was found to contain malicious code. Source: ghsa-malware b11c104a75331254732b5987d89729fb9ac60a888d6843144f2863d391a8ff6...

MAL-2026-556 Malicious code in digital-music-dynmsg-ribbon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 539cc4d9f61bd9add970da883b5bd746b0b08614fbf948e143e6a35c606e593f The package digital-music-dynmsg-ribbon was found to contain malicious code. Source: ghsa-malware...

MAL-2026-561 Malicious code in transform-regenerator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f27369af46b5944368333c959121eb4c1203bb7451f05eab71a7e8d030300331 The package transform-regenerator was found to contain malicious code. Source: ghsa-malware...

MAL-2026-560 Malicious code in transform-async-to-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3375385fb6c066445341256f9ce616582a713468ea0649853056c24b4aaf1776 The package transform-async-to-generator was found to contain malicious code. Source: ghsa-malware...

Malicious code in express-lists-routes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c51e8807ad317a804d1d70eac194db27d648b87308eaebf5e7752864c1c03e5 The package express-lists-routes was found to contain malicious code. Source: ghsa-malware...

MAL-2026-551 Malicious code in express-lists-routes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c51e8807ad317a804d1d70eac194db27d648b87308eaebf5e7752864c1c03e5 The package express-lists-routes was found to contain malicious code. Source: ghsa-malware...

Malicious code in blockchain-helper-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c11700a2d24dc725d693b0942598bae18970721cbb482671f43c005800569e42 The package blockchain-helper-lib was found to contain malicious code. Source: ghsa-malware...

MAL-2026-549 Malicious code in blockchain-helper-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c11700a2d24dc725d693b0942598bae18970721cbb482671f43c005800569e42 The package blockchain-helper-lib was found to contain malicious code. Source: ghsa-malware...

Threat Actors Using AWS WorkMail in Phishing Campaigns

Introduction At Rapid7, we track a wide range of threats targeting cloud environments, where a frequent objective is hijacking victim infrastructure to host phishing or spam campaigns. Beyond the obvious security risks, this approach allows threat actors to offload their operational costs onto th...

Malicious code in internallib_v828 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff1fe83e3d9c31b100d3117b436d62cb5bbed907b6393fd0ae603bd365e73889 The package internallibv828 was found to contain malicious code. Source: ghsa-malware d15fc740eb3e49fec4406761a411f74ba5e572f8ead9811783ba32b4417d0db...

MAL-2026-534 Malicious code in internallib_v828 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff1fe83e3d9c31b100d3117b436d62cb5bbed907b6393fd0ae603bd365e73889 The package internallibv828 was found to contain malicious code. Source: ghsa-malware d15fc740eb3e49fec4406761a411f74ba5e572f8ead9811783ba32b4417d0db...

Malicious code in pump.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b989d2f8fd56b43d56fd7cba25a48eaa37478729351505f297fc92fb125f697 The package pump.js was found to contain malicious code. Source: ghsa-malware 90ba9c17ff971763631161abd0a0b8dff35b945e9b81791ab4630ecf76af2185 Any...

Malicious code in mysql2.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf03a68f80a8549d53b74c88dcddc103e1ba4941db706b05958b5a8afd7912b9 The package mysql2.js was found to contain malicious code. Source: ghsa-malware a62950456c9e80360128c446e77395618e0567734ef79c8d93f73aa0c1c45115 Any...

MAL-2026-536 Malicious code in morgan.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34775085e6638773de4ccac41092ae9954c9889f2c2a7bcd7cb7909375b53c4c The package morgan.js was found to contain malicious code. Source: ghsa-malware 6d6ee3da39907b410bc3a7d0baf6736a9c9c2f1c770a6e749c5ad2119c848d9f Any...

MAL-2026-537 Malicious code in mysql2.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf03a68f80a8549d53b74c88dcddc103e1ba4941db706b05958b5a8afd7912b9 The package mysql2.js was found to contain malicious code. Source: ghsa-malware a62950456c9e80360128c446e77395618e0567734ef79c8d93f73aa0c1c45115 Any...

Malicious code in grepleaks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbb12eb31b13d48c3bceaf932a48991331324e560fdf0dba37561862844fa2e8 The package grepleaks was found to contain malicious code. Source: ghsa-malware 3017ce71ea8163be051e049bafc4e07b09bcc4cf3b05675c0e5c300c105705ce Any...

Malicious code in testxhjhka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffa2b3af066bd5f02846fff50e2189f8c3a55cb62f71dd6835f4a999cd7dab42 The package testxhjhka was found to contain malicious code. Source: ghsa-malware 0552fa210ad2b24b0f9caf718edc7aed87d7cd7c610f380cf5348bd31b2fad70 Any...

MAL-2026-531 Malicious code in hackerxhj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d71044a886ff501da7e6d3e47cad40b8472b1f02b72f7dc807879b2d780f037 The package hackerxhj was found to contain malicious code. Source: ghsa-malware fd149c69b837b189dff0b260bd9ca7f30c03cb192bea4f83daf0465322a1ec13 Any...

Malicious code in testxhjhk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69bfad0315831fa5a60d77a9ea4bf705da5a42766326b6c7663fe3c56246eaf5 The package testxhjhk was found to contain malicious code. Source: ghsa-malware 6fec9c997770e337f9bb2f7aed6675ddc3c68769e5a3e134d5fb84e0e43944bf Any...

Malicious code in xhjxhjhiagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d43efa0b096b4c67e10ce3407f63028f07e80976db4f41bf71150da2cb9c1f5b The package xhjxhjhiagent was found to contain malicious code. Source: ghsa-malware 8b9bcd2d25d4b2a55daa6130b69af99dda27ac877c6aed00641d8a821cd1f1e5...