Malicious code in easypanel-hosting (npm)

Source: amazon-inspector db6a378b33bb2f33088ed90db4ac48e81368e30d5ef38578dca3b4345e9cb06b [email protected] ships a stub index.js module.exports = and an npm preinstall lifecycle script that collects the installer's hostname, username, current working directory, and CI-related environment...

Malicious Package

Overview easypanel-agent is a malicious package. This package contains malicious code. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship. Remediation Avoid using all malicious instances of the...

Malicious Package

Overview easypanel-hosting is a malicious package. This package contains malicious code. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship. Remediation Avoid using all malicious instances of the...

Malicious Package

Overview easypanel-deploy is a malicious package. This package contains malicious code. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship. Remediation Avoid using all malicious instances of the...

Malicious Package

Overview easypanel-api-client is a malicious package. This package contains malicious code. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship. Remediation Avoid using all malicious instances of...

Malicious code in easypanel-agent (npm)

Source: amazon-inspector 7eb103b6863369372ba8c07701264f8b0f6b57e3217e07912c8efbd9371c648f The package's preinstall lifecycle script preinstall.js executes automatically on npm install and collects the installer's hostname, OS username, current working directory, and CI-related environment variabl...

Malicious code in easypanel-deploy (npm)

Source: amazon-inspector 0ac486399ab6c99cf83bfcf80e487c414fd29430e27f0d929ff7034ed333c7e8 The package's preinstall lifecycle script runs automatically on npm install and collects installer-side identifiers — os.hostname, os.userInfo.username, the current working directory, and CI-related...

Malicious code in easypanel-api-client (npm)

Source: amazon-inspector cef6da51fcc215c514680417cfd3bacb5725b91a5b4a058fd6d2b161106209b0 The package ships an empty library body index.js exports and a preinstall lifecycle script that runs automatically on npm install. The preinstall script collects installer-side identifiers — hostname,...

Malicious code in easypanel-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7eb103b6863369372ba8c07701264f8b0f6b57e3217e07912c8efbd9371c648f The package's preinstall lifecycle script preinstall.js executes automatically on npm install and collects the installer's hostname, OS username,...

MAL-2026-16072 Malicious code in easypanel-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7eb103b6863369372ba8c07701264f8b0f6b57e3217e07912c8efbd9371c648f The package's preinstall lifecycle script preinstall.js executes automatically on npm install and collects the installer's hostname, OS username,...

Malicious code in easypanel-deploy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ac486399ab6c99cf83bfcf80e487c414fd29430e27f0d929ff7034ed333c7e8 The package's preinstall lifecycle script runs automatically on npm install and collects installer-side identifiers — os.hostname,...

MAL-2026-16074 Malicious code in easypanel-deploy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ac486399ab6c99cf83bfcf80e487c414fd29430e27f0d929ff7034ed333c7e8 The package's preinstall lifecycle script runs automatically on npm install and collects installer-side identifiers — os.hostname,...

Malicious code in easypanel-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cef6da51fcc215c514680417cfd3bacb5725b91a5b4a058fd6d2b161106209b0 The package ships an empty library body index.js exports and a preinstall lifecycle script that runs automatically on npm install. The preinstall...

MAL-2026-16073 Malicious code in easypanel-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cef6da51fcc215c514680417cfd3bacb5725b91a5b4a058fd6d2b161106209b0 The package ships an empty library body index.js exports and a preinstall lifecycle script that runs automatically on npm install. The preinstall...

Malicious code in easypanel-hosting (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db6a378b33bb2f33088ed90db4ac48e81368e30d5ef38578dca3b4345e9cb06b [email protected] ships a stub index.js module.exports = and an npm preinstall lifecycle script that collects the installer's hostname, usernam...

MAL-2026-16075 Malicious code in easypanel-hosting (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db6a378b33bb2f33088ed90db4ac48e81368e30d5ef38578dca3b4345e9cb06b [email protected] ships a stub index.js module.exports = and an npm preinstall lifecycle script that collects the installer's hostname, usernam...

Malicious code in easypanel-docker (npm)

Source: amazon-inspector d43ed7789fb269c2613ce7b2442fdceab1b5e8b5360048d7bda2a63f0e9fac63 The preinstall lifecycle script collects host fingerprint data os.hostname, os.userInfo.username, process.cwd, and CI-related environment variable names, base64url-encodes the JSON payload, sanitizes it into...

Malicious code in easypanel-core (npm)

Source: amazon-inspector 4cb013a465c19126feba2006a81f33d65cc64b269e3da8ffe4e8284c7defa3cc easypanel-core ships an inert module.exports = main and places all functionality in a preinstall lifecycle script. On npm install, preinstall.js collects os.hostname, os.userInfo.username, process.cwd, and t...

Malicious code in easypanel-ctl (npm)

Source: amazon-inspector e9eb01006041231d7388c6aeb0c74288b35a8c72cf5b1e61c90e1e4f9d6d37c7 On npm install, the preinstall lifecycle script collects installer host identity hostname, username, cwd and enumerates CI-related environment variable names, base64url-encodes the collected data, chunks it...

Malicious Package

Overview dyinglampreyz3n is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...