Malicious code in hridoy-ultimate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 221c8e51e1341e954c4f2ea3ea4a139606138c8ecc1ab99e17f403e304f05157 hridoy-ultimate 8.0.0 is an unofficial Facebook chat client that contains two installer-harming behaviors. First, the password-based login path in...

Malicious Package

Overview fca-raihan is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious code in fca-raihan (npm)

Source: amazon-inspector 241006adda5ea773d76d48d874c80a4054215ed18f05de3e392cdd86c0379785 package.json for fca-raihan declares a dependency whose key equals the package's own name fca-raihan with source github:raihan9099/fca-raihan. This is an off-registry dependency source with no ref pin and no...

MAL-2026-17328 Malicious code in fca-raihan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 241006adda5ea773d76d48d874c80a4054215ed18f05de3e392cdd86c0379785 package.json for fca-raihan declares a dependency whose key equals the package's own name fca-raihan with source github:raihan9099/fca-raihan. This i...

Malicious code in fca-raihan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 241006adda5ea773d76d48d874c80a4054215ed18f05de3e392cdd86c0379785 package.json for fca-raihan declares a dependency whose key equals the package's own name fca-raihan with source github:raihan9099/fca-raihan. This i...

Malicious code in shadowx-fca (npm)

Source: amazon-inspector 5e05ec19966fd3fff65969ab898a3b25da7e1fa0baf271ee9b75dadad8513c27 The package advertises a Facebook Chat API FCA client. Its default-exported login function accepts email, password, and an optional 2FA secret and, via loginViaAPI/tokensViaAPI, POSTs those credentials to...

Malicious code in shadowx-fca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e05ec19966fd3fff65969ab898a3b25da7e1fa0baf271ee9b75dadad8513c27 The package advertises a Facebook Chat API FCA client. Its default-exported login function accepts email, password, and an optional 2FA secret and, v...

MAL-2026-13457 Malicious code in shadowx-fca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e05ec19966fd3fff65969ab898a3b25da7e1fa0baf271ee9b75dadad8513c27 The package advertises a Facebook Chat API FCA client. Its default-exported login function accepts email, password, and an optional 2FA secret and, v...

fca-uzair-rajput-developer (>=1.9.0, <=1.10.0) potentially affected by unknown CVE via uzair-rajput-new (1.3.0)

uzair-rajput-new NPM version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on uzair-rajput-new and may be impacted: - fca-uzair-rajput-developer =1.9.0, =1.10.0 Source cves: unknown CVE Source advisory: GHSA-WXXW-V4GP-P47W...

fca-uzair-rajput-developer (>=1.9.0, <=1.10.0) potentially affected by unknown CVE via uzair-rajput-new (1.3.0)

uzair-rajput-new NPM version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on uzair-rajput-new and may be impacted: - fca-uzair-rajput-developer =1.9.0, =1.10.0 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13360...

Malicious code in kurumi-fca (npm)

Source: amazon-inspector f90450e6ca1502bf6287d945c37c4c64f59e624a4269ab8e07600a9db5e755d0 kurumi-fca is a Facebook Chat API library whose advertised purpose is to listen to Messenger events for the caller. Two undisclosed behaviors make it unsafe for installers: 1. Silent relay of user data. Afte...

Malicious code in fca-eryxenx (npm)

Source: amazon-inspector 7569b032ce4e06251ebfe06b4fc124689f20ca0a7e14b5b2395dc7295bfa18c6 The package's documented login API — loginemail, password, twofactor — POSTs the caller's Facebook email, password, and 2FA secret to https://minhdong.site/api/v1/facebook/loginios as the hardcoded default...

Malicious code in fca-official-uzair-rajput (npm)

Source: amazon-inspector 83c96ed99bb1a48e80228ec0ca012c1dbb7817fe1dbbd492fcb3d2927805f29e fca-official-uzair-rajput is a Facebook chat API library whose only documented entry point, login, invokes an auto-update routine on every call when the default config autoUpdate=true is in effect...

Malicious Package

Overview fca-eryxenx is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

Malicious Package

Overview kurumi-fca is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview @asura21232/fca-unofficial-nextgen is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

Malicious code in @asura21232/fca-unofficial-nextgen (npm)

Source: amazon-inspector 30540a72a722c901403164aeb090ca99999d3be2cc4d9e9f3ad99ef319fc2db2 This package presents itself as an unofficial Facebook Messenger client library, but its exported authentication helpers loginViaAPI, tokensViaAPI, tokens send the caller-supplied Facebook email, password, a...

Malicious code in fca-official-uzair-rajput (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83c96ed99bb1a48e80228ec0ca012c1dbb7817fe1dbbd492fcb3d2927805f29e fca-official-uzair-rajput is a Facebook chat API library whose only documented entry point, login, invokes an auto-update routine on every call when...

Malicious code in fca-eryxenx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7569b032ce4e06251ebfe06b4fc124689f20ca0a7e14b5b2395dc7295bfa18c6 The package's documented login API — loginemail, password, twofactor — POSTs the caller's Facebook email, password, and 2FA secret to...

Malware in kashif-mallah-fca

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...