Malicious code in @nazi-team/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe057f6743744866cb43bc64a47f0b4e814f4de1d503ea59e8b3db6b3880ad00 The package @nazi-team/baileys was found to contain malicious code. Source: ghsa-malware...

MAL-2026-1075 Malicious code in dgxeon-soket2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 833766a284022eb1ea516ee081a4cec3c5153b1bbec222238d7e676876acf10c The package dgxeon-soket2 was found to contain malicious code. Source: ghsa-malware d7bc58675189e4ecaf6f63610f5f5a05aebb80d0f3cb8bd1247fc9876a7bd13b...

Password managers keep your passwords safe, unless…

I’m a big advocate of password managers. Granted, there are better alternatives for passwords like passkeys, but if a provider offers nothing but password options, which many do, you can’t do much about that. So, for the time being we seem to be stuck with passwords. Every reputable password...

Malicious code in opencraw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaed661cc51e76234fc6cba7587b973903e00bbacd33da7114aeb726d957b577 The package opencraw was found to contain malicious code. Source: ghsa-malware 5bc39adf3939792f918a50cbc9a9952a11d950e361d83d5631449f20ad634945 Any...

Malicious code in bigmathix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b200be57a4cdb466d56397968f69dd3845955ced56c5229608dbf03762106ff9 The package bigmathix was found to contain malicious code. Source: ghsa-malware 5fce43c0e03186c2441c8a54be7cb130625459fe9179665e242f223f0c7d2944 Any...

Malicious code in @hashicorp-internal/vault-reporting (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85e2c508de22734977cac24ec430b5cfece85e6367f577df76caa740b5594eb7 The package @hashicorp-internal/vault-reporting was found to contain malicious code. Source: ghsa-malware...

Malicious code in knex.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04fcb32607ead73fe3f1c4443e807ae1deec8bda92999d19da73075af9d61805 The package knex.js was found to contain malicious code. Source: ghsa-malware a1c9b559496940535edc51721d08a3fccda2739e33e34028d59d97b305452aba Any...

Malicious code in tailwind-components-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3916984542c5471332406155adc38fde3d254e8748b6e65caa1b9680663602c The package tailwind-components-cli was found to contain malicious code. Source: ghsa-malware...

Malicious code in n8n-nodes-gg-udhasudsh-hgjkhg-official (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f177f9d8bad0a259983bc9f3e0880c59ee120b1e686e3f10b490ab0527beec3 The package n8n-nodes-gg-udhasudsh-hgjkhg-official was found to contain malicious code. Source: ghsa-malware...

MAL-2026-431 Malicious code in testpkg-yilider690 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b24877bbf4fcd353c066c4597f200a64f940b5f419e09fd932be5add60e2ed95 The package testpkg-yilider690 was found to contain malicious code. Source: ghsa-malware...

Malicious code in @mikudev/ridwan-baileys-mod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf9b83afb1c7c6f2c72c03b913d2be0a9c6bee19bf6b07ad48deb0f09cb9e84b The package @mikudev/ridwan-baileys-mod was found to contain malicious code. Source: ghsa-malware...

Tudou Guarantee Marketplace Halts Telegram Transactions After Processing Over $12 Billion

A Telegram-based guarantee marketplace known for advertising a broad range of illicit services appears to be winding down its operations, according to new findings from Elliptic. The blockchain intelligence company said Tudou Guarantee has effectively ceased transactions through its public Telegr...

Malicious code in @brokenzzz/garfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d357b148f23b1917c8d9b30afb0a067acdcdf988ca7b7f8a382726ba3e31b439 The package @brokenzzz/garfish was found to contain malicious code. Source: ghsa-malware...

Malicious code in cyrpto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88df3de403df4549d6cae9b1d508f683da4ed91d472a6020a40a3dbd6d5930fc The package cyrpto was found to contain malicious code. Source: ghsa-malware 1e003c50bdddfa1368c5ed0e356acfab8b21a0d410f1d181471b88221a590cd9 Any...

Telegram Hosting World’s Largest Darknet Market

Wired is reporting on Chinese darknet markets on Telegram. The ecosystem of marketplaces for Chinese-speaking crypto scammers hosted on the messaging service Telegram have now grown to be bigger than ever before, according to a new analysis from the crypto tracing firm Elliptic. Despite a brief...

MAL-2025-192979 Malicious code in @ptest2535/artifactory-demo-ptest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 179d121743e4ae61b32780c6a0ea72f57b23796b21513e57f998da725dd49318 The package @ptest2535/artifactory-demo-ptest was found to contain malicious code. Source: ghsa-malware...

Malicious code in react-devtools-shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd222e067bee8f9d675a2d56e5e8eb63a00a76038df2d777aae7f5659bf3b0c6 The package react-devtools-shared was found to contain malicious code. Source: ghsa-malware...

CVE-2023-54107

CVE-2023-54107 affects the Linux kernel blk-cgroup path, where a use-after-free could occur if the parent’s refcount is dropped before the child’s pd_free_fn(). The provided documents state the issue arises when the parent blkg refcount is dropped in __blkg_release() before pd_free_fn() is called...

Malicious code in wifi-killer-xnet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc233a0f06c7d7ecc69b5b2166295c9e8b63c8c05198355f8f80295907125e17 The package wifi-killer-xnet was found to contain malicious code. Source: ghsa-malware 98f1d50e89f69d69cfae05f464ddc4db1ea8e83fb48168cad1f75c87d4705a...

MAL-2025-192627 Malicious code in elf-stats-sugarplum-fir-770 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba9b8e626ecf42f5770535353dad46da3dbae1b468a54040b1024c069ead0f72 The package elf-stats-sugarplum-fir-770 was found to contain malicious code. Source: ghsa-malware...