Malicious code in bnpl-blocks-shops-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 209f1c0883ce38bd482d809b83edd85e8d3db75a379909e1b47ee24562c49526 index.js is the declared main entry and unconditionally requires./setup.js on load. setup.js reconstructs attacker-controlled endpoints via...

MAL-2026-13064 Malicious code in boxy-maker-skeleton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06892152f894a88b72854f0773f64e68336cf6726fd0acc4b3d83c87f06301d3 On require of boxy-maker-skeleton, index.js loads compat.js which reconstructs destination hostnames by string-splitting/join to hide them from stati...

Malicious code in specials-obid-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef5ac97b682821ce99ff6152a28467cd5ec91903d061ba1fc70ef7a3e6b9be03 On require of the package, vendor.js selects a URL path by host platform, downloads a binary over HTTPS from destination hostnames assembled at runti...

Malicious Package

Overview pippytests is a malicious package. This is one of 12 malicious packages created by the same actor and discovered by Snyk. It downloads and executes malicious exe files containing malicious code that attempts to steal information from Google Chrome, tokens from Discord, and Injects a...

alto-saxophone code execution vulnerability

alto-saxophone is a module for installing and running Chromedriver on multiple platforms. A security vulnerability exists in alto-saxophone. The vulnerability stems from the program downloading binary resources over the HTTP protocol. A remote attacker could exploit the vulnerability by replacing...

Remote code execution

openframe-glsviewer is a Openframe extension which adds support for shaders via glslViewer. openframe-glsviewer downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an...