MAL-2025-141838 Malicious code in dynamo-sirius-envconfig-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2df72fdf1db31d3ba69f10d1afc738c0f61de9b9b53083f7d7d2e1388e1bf4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144004 Malicious code in jsonp-pegasus-metalsmith-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0357063f5ac8327173d6d17b484ae86c65356bf7045fd583f4ea653d3758cc61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141828 Malicious code in dynamo-kronos-loop-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1facc111643156c60818083a3221391ae68c90805f74a1411946c0be5cc3821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-49140 Malicious code in epic-dynamo-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8dfc024cfa20f34e12e97a7d6ec0f046f02a0d692889a85cd69ef4aca80673c The package epic-dynamo-utils was found to contain malicious code...

Malicious code in epic-dynamo-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8dfc024cfa20f34e12e97a7d6ec0f046f02a0d692889a85cd69ef4aca80673c The package epic-dynamo-utils was found to contain malicious code...

EUVD-2025-37153

Malicious code in epic-dynamo-utils npm...

EUVD-2020-28213

Malware in sbrugna...

EUVD-2025-11081

Malicious code in bioql PyPI...

MAL-2025-43834 Malicious code in cluster-dynamo-cressida-zooarchaeology (npm)

The package cluster-dynamo-cressida-zooarchaeology was found to contain malicious code...

Malicious code in cli-bulma-elara-dynamo (npm)

The package cli-bulma-elara-dynamo was found to contain malicious code...

Malicious code in cluster-dynamo-cressida-zooarchaeology (npm)

The package cluster-dynamo-cressida-zooarchaeology was found to contain malicious code...

Malicious code in electron-postcss-io-dynamo (npm)

The package electron-postcss-io-dynamo was found to contain malicious code...

MAL-2025-44122 Malicious code in electron-postcss-io-dynamo (npm)

The package electron-postcss-io-dynamo was found to contain malicious code...

MAL-2025-43826 Malicious code in cli-bulma-elara-dynamo (npm)

The package cli-bulma-elara-dynamo was found to contain malicious code...

Remote Code Execution (RCE)

Overview picklescan is a Security scanner detecting Python Pickle files performing suspicious actions Affected versions of this package are vulnerable to Remote Code Execution RCE due to using the torch.dynamo.guards.GuardBuilder.get function. An attacker can execute arbitrary code by crafting a...

Malicious code in mosaic-8h4pm-gevtf-dynamo-project (npm)

The package mosaic-8h4pm-gevtf-dynamo-project was found to contain malicious code...

Malicious code in dynamo-brane-mechatronics-aether (npm)

The package dynamo-brane-mechatronics-aether was found to contain malicious code...

Malicious code in bootes-chromedriver-dynamo-protractor (npm)

The package bootes-chromedriver-dynamo-protractor was found to contain malicious code...

Malicious code in tardigrade-native-testcafe-dynamo (npm)

The package tardigrade-native-testcafe-dynamo was found to contain malicious code...

Malicious code in dynamo-x9oeo-poe19-horizon-project (npm)

The package dynamo-x9oeo-poe19-horizon-project was found to contain malicious code...