MAL-2025-141828 Malicious code in dynamo-kronos-loop-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1facc111643156c60818083a3221391ae68c90805f74a1411946c0be5cc3821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114282

Malicious code in dynamo-jwt-figures-convict npm...

EUVD-2025-114263

Malicious code in eclipse-dotenv-sagitta-dynamo npm...

MAL-2025-49140 Malicious code in epic-dynamo-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8dfc024cfa20f34e12e97a7d6ec0f046f02a0d692889a85cd69ef4aca80673c The package epic-dynamo-utils was found to contain malicious code...

Malicious code in epic-dynamo-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8dfc024cfa20f34e12e97a7d6ec0f046f02a0d692889a85cd69ef4aca80673c The package epic-dynamo-utils was found to contain malicious code...

EUVD-2025-37153

Malicious code in epic-dynamo-utils npm...

EUVD-2020-28213

Malware in sbrugna...

EUVD-2025-11081

Malicious code in bioql PyPI...

MAL-2025-43834 Malicious code in cluster-dynamo-cressida-zooarchaeology (npm)

The package cluster-dynamo-cressida-zooarchaeology was found to contain malicious code...

Malicious code in cli-bulma-elara-dynamo (npm)

The package cli-bulma-elara-dynamo was found to contain malicious code...

Malicious code in electron-postcss-io-dynamo (npm)

The package electron-postcss-io-dynamo was found to contain malicious code...

MAL-2025-43826 Malicious code in cli-bulma-elara-dynamo (npm)

The package cli-bulma-elara-dynamo was found to contain malicious code...

Malicious code in cluster-dynamo-cressida-zooarchaeology (npm)

The package cluster-dynamo-cressida-zooarchaeology was found to contain malicious code...

MAL-2025-44122 Malicious code in electron-postcss-io-dynamo (npm)

The package electron-postcss-io-dynamo was found to contain malicious code...

Remote Code Execution (RCE)

Overview picklescan is a Security scanner detecting Python Pickle files performing suspicious actions Affected versions of this package are vulnerable to Remote Code Execution RCE due to using the torch.dynamo.guards.GuardBuilder.get function. An attacker can execute arbitrary code by crafting a...

Malicious code in mosaic-8h4pm-gevtf-dynamo-project (npm)

The package mosaic-8h4pm-gevtf-dynamo-project was found to contain malicious code...

Malicious code in dynamo-brane-mechatronics-aether (npm)

The package dynamo-brane-mechatronics-aether was found to contain malicious code...

Malicious code in tardigrade-native-testcafe-dynamo (npm)

The package tardigrade-native-testcafe-dynamo was found to contain malicious code...

Malicious code in dynamo-x9oeo-poe19-horizon-project (npm)

The package dynamo-x9oeo-poe19-horizon-project was found to contain malicious code...

Malicious code in atlas-capella-dynamo-cosmos (npm)

The package atlas-capella-dynamo-cosmos was found to contain malicious code...