Malicious Package

Overview dbconnectify is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-13704 Malicious code in chai-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d61869c26ad8015b88350d312fa37f5e18d536794ce5d8c46bf4239b2154b1a9 chai-tracker mimics chai-spies matching name, README, and keywords but declares peerDependencies on dbconnectify pinned to 'latest' and axios. The...

Malicious code in chai-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d61869c26ad8015b88350d312fa37f5e18d536794ce5d8c46bf4239b2154b1a9 chai-tracker mimics chai-spies matching name, README, and keywords but declares peerDependencies on dbconnectify pinned to 'latest' and axios. The...

MAL-2026-10668 Malicious code in chain-as-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86f8946bf37a9861239e59a78f2d003612494061d5aa60c5f7e54379e72f0ac7 chain-as-log advertises itself as a chai plugin providing deep-equal-excluding assertion helpers. At plugin load time when a consumer calls...

Malicious code in spytrack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72113145e88d53764f1e157c91cda05cb143a31802d9565ba8e1765e9886491b spytrack is a typosquat of chai-spies. When the plugin is registered via chai.use, the top-level plugin function invokes assertConnection, which...

Malicious code in dbconnectify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6a41259fb0099de58bc669907fa6fb20331d794b13008df0afb42893808e4ab The package exposes a method queryDBConnect that base64-decodes a hardcoded URL HASHKEY → https://api.jsonbin.io/v3/b/6a609e63f5f4af5e29b05907,...

MAL-2026-10669 Malicious code in dbconnectify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6a41259fb0099de58bc669907fa6fb20331d794b13008df0afb42893808e4ab The package exposes a method queryDBConnect that base64-decodes a hardcoded URL HASHKEY → https://api.jsonbin.io/v3/b/6a609e63f5f4af5e29b05907,...