MAL-2026-13835 Malicious code in truecxikdsal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f817d78ce8fd51571e9d9b3d0d10c09a75dc8353e43e55f5440afa8e303c4ce2 Package [email protected] contains 2 files and no static or traced findings indicate exfiltration, install-time code execution, credential access,...

MAL-2026-13842 Malicious code in vlbhvgovbbhfab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5b717c270d7c4f965a421923d78bff7a86b044999f557386a258c7050768620 Package [email protected] contains 2 files. No install-time lifecycle scripts, exfiltration primitives, hardcoded network destinations,...

MAL-2026-13839 Malicious code in vczxijghsvizu4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bae2fa8ce447bf7b8dbe7b16f14e37b56f713aff508b26f937188a1570d8309 Package [email protected] contains 2 files with no a static rule matches and no traced behavior indicating exfiltration, install-time code...

MAL-2026-13799 Malicious code in cvmbxcjiasdg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 925628ce795fdbf222c292ae4ccfbe710eda2fa1b6fd521db3379f9569e16f9b The package contains a single index.html file declared as main and no JavaScript entry point, lifecycle scripts preinstall/install/postinstall/prepar...

Malicious code in fghvbmniwu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8623e3b9a84e8cbe5910bc3d683f19629c49b9d3f0a2e00ab771901efef8146a Package contains a single index.html declared as main, which is a Cloudflare-branded 'Just a moment...' clone embedding a Turnstile widget and heavil...

Malicious code in cvbniydplwe3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9edbef37139b40a366aacea90abbd4b80ca581921f213b98ffb17db3b857bfcd The tarball contains only index.html declared as package.json main and no JavaScript, no lifecycle scripts, and no Node-executable entry point...

Malicious code in yangming8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c011964f9503dad45858ba2fdd5de1303275d7a0a680e2c482c3e14d90c4e33c The tarball's only shipped file is index.html, declared as the package's main. There are no lifecycle scripts, no JavaScript entry point, no...

Malicious code in fhj8cv9dkwm4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f91ea4120fcb82c9a36d533346c28a2ce7ed225ed31a89526d9cee45f0be2581 Package ships a single index.html that mimics a Cloudflare Turnstile 'Just a moment...' verification page. An obfuscated obfuscator.io-style script...

MAL-2026-13807 Malicious code in fdhcvriwecv3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c72894ed6ed82e4ebcbd83619b2a3f591c7dab355050fc1d43a62f90d384ee08 The tarball contains only package.json and index.html. package.json declares main as index.html, and there are no...

MAL-2026-13790 Malicious code in bvdfhdfvnk3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fadba2f2b2bb1c3507b2559209c50677db3b20feb0c083333567dfe7fcbddc4 The tarball contains a single index.html declared as the package main, with no JavaScript entrypoint and no preinstall/install/postinstall/prepare...

MAL-2026-13809 Malicious code in fhj8cv9dkwm4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f91ea4120fcb82c9a36d533346c28a2ce7ed225ed31a89526d9cee45f0be2581 Package ships a single index.html that mimics a Cloudflare Turnstile 'Just a moment...' verification page. An obfuscated obfuscator.io-style script...

Malicious code in cxcbdjxcmncvfg2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0caba01ec3b437a50e1808290e06ae0d084836e6660a0fe90ad56e8cd80b0338 The package contains a single index.html that visually impersonates a Cloudflare 'Just a moment...' challenge page including a spoofed Ray ID and...

Malicious code in bcnfjndwbkf2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a1fc1ec45930a69372eadc47b662c5d82b247b5b4227feacda3d1c4302b4bf3 The package contains only index.html and declares main: 'index.html' with no scripts, no bin, and no JavaScript library surface. The HTML mimics a...

Malicious code in dhjksficgwu2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5dc64d0022ee36cd898963db50e3c835990bf94837821fb34408820855c69c0 Package contains a single index.html file declared as main. The HTML impersonates a Cloudflare Turnstile 'Just a moment...' verification page sitekey...

MAL-2026-13783 Malicious code in bcnfjndwbkf2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a1fc1ec45930a69372eadc47b662c5d82b247b5b4227feacda3d1c4302b4bf3 The package contains only index.html and declares main: 'index.html' with no scripts, no bin, and no JavaScript library surface. The HTML mimics a...

Malicious code in nhdxzthponv5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6436b46b4e05feabab19a551bd470495e4d8fc9dfef7e42a01bd527054b1b07d Package [email protected] has a random name, no description/author/repo/dependencies/lifecycle scripts, and its 'main' points at index.html with...

MAL-2026-13795 Malicious code in csbcldfvivwfgd4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6d7db017a0499c0fca67cc331c44fa736fe52568177990823cb17bd03ceee21 The package contains a single index.html declared as main. The HTML mimics a Cloudflare 'Just a moment...' challenge and contains obfuscator.io-style...

MAL-2026-13818 Malicious code in jkbnwsdf8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e67b8d2fe8ba4fcec395d1fa7497515b41f2e4edc7f25e12c2b4b4abcebe358 The package contains a single file, index.html, declared as the package main. The HTML is styled as a Cloudflare Turnstile 'Just a moment...' challen...

MAL-2026-13813 Malicious code in hgdvfuflnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfc8e3c1c86c0f0589e1ab4d2a6e3f3a757b758c1f126e0d197f3924d9637922 Package [email protected] contains a single file, index.html, declared as the package main. The HTML impersonates a Cloudflare 'Just a moment...'...

EUVD-2026-57163

The Google Cloud Secret Manager secrets backend in Apache Airflow's Google provider never applied the team scope when resolving Connections and Variables: the caller's teamname was accepted by the backend but dropped at the internal call boundary, so every lookup resolved against the team-agnosti...