MSC-2026-12688

The npm package browser-metrics-plugin.contrib version 0.0.1 is a dependency-confusion package with a malicious install hook. package.json declares a postinstall script that runs beacon.cjs, which silently collects the hostname, install path and current working directory and POSTs them to an...

MSC-2026-12687

The npm package troubleshooting version 0.1.0 is a dependency-confusion package with a malicious install hook. package.json declares a postinstall script that runs beacon.cjs, which silently collects the hostname, install path and current working directory and POSTs them to an attacker-controlled...

CVE-2026-77259 MCP Atlassian: Arbitrary file read via confluence_upload_attachment allows exfiltration of server credentials

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, confluenceuploadattachment opens a caller-selected server-local file without checking that the resolved path remains in the workspace. A caller can upload environment files,...

Malicious code in b2b-frontend-external-library (npm)

This package is malicious. It is not a real library. An attacker put it on the public npm registry. The package name is a copy of a private, internal package name. This is a dependency confusion attack. A build that gets the name from public npm installs this package in place of the real one. The...

Malicious code in @evial/runtime-health (npm)

Source: amazon-inspector 59022bd399abaafea3b730e96ba9cc0252dbf18266f6f14200e0b1b6f1feba6f The package's package.json declares postinstall: node -e "require'./scripts/lodash.js'" and sets the same file as main, so the payload runs both on npm install and on require'@evial/runtime-health'...

PT-2026-82820

NodeVM builtin: '' exposes os and dns — process-wide observability reads AND writes that hijack the host sibling class of GHSA-9g8x-92q2-p28f CWE: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor chained with CWE-732 Incorrect Permission Assignment for Critical Resource and...

MAL-2026-13945 Malicious code in core-js-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec43d0c13a26ec0a6e6dacf51f52a66f48c7dbce7f4a00dbcb72a0749fa6b4e3 The package's postinstall script package.json declares "postinstall": "node init.js" performs two hostile actions at install time. First, init.js POS...

Malicious code in @years20/n8n-nodes-utils-helper-d (npm)

Source: amazon-inspector 84dc74cbe8090f7fd99c65cda379129055830b63fafb28c8364f3e28de5bbbb8 The package runs a hostile payload both from its declared postinstall hook node callback.js and at library load via index.js, which is byte-identical to callback.js and set as main. The payload runs id,...

MAL-2026-13665 Malicious code in riakcs (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3dada3cec22fb43bb528b8f4f7173bb346b25e373eaeb719af2df48698119240 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in riakcs (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3dada3cec22fb43bb528b8f4f7173bb346b25e373eaeb719af2df48698119240 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in @leejungkiin/awkit (npm)

Source: amazon-inspector 0aa6db17591fc0a27924ca615763ffd2a3eb92d0f517de9719ce74ef47ac4add The package ships scripts/dependency-manager.js which, when run as part of the install lifecycle, invokes execSync'curl -fsSL https://raw.githubusercontent.com/rtk-ai/rtk/refs/heads/master/install.sh...' to...

Malicious code in decapod-common (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0de84c80d520754e010d02b90fd4dc728d90fa9efe8c1e8cc6ddd7eb05e0da4 setup.py overrides the install command to collect the installer's hostname and resolved IP address via socket.gethostname/gethostbyname and POST them...

MAL-2026-13386 Malicious code in decapod-common (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0de84c80d520754e010d02b90fd4dc728d90fa9efe8c1e8cc6ddd7eb05e0da4 setup.py overrides the install command to collect the installer's hostname and resolved IP address via socket.gethostname/gethostbyname and POST them...

Malicious code in relativity-foundation-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c61f9e4ea2d66ea8dd4b9018fa109fe65d00cb0de98b3f8551a95ca3859af5d package.json declares a preinstall script that runs a Node one-liner collecting os.hostname, process.env.USER/USERNAME, cwd, npmconfigregistry, CI,...

Malicious code in test22221 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4a3401759b5c6d7effdafcbae6027657e3cf8f9aabf1f04dfc2fa9039b64e53 package.json declares preinstall and postinstall lifecycle hooks that run on npm install. Both hooks curl a hardcoded bare-IP endpoint over plain HTT...

MAL-2026-12195 Malicious code in simple-date-formatter-new-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaef04a98dce874de04a92b580f4f919067a0e492d38dff69a57fc09db1cfe14 The package's postinstall script in package.json runs a shell pipeline that collects host and container-runtime information kernel version via uname...

MAL-2026-12105 Malicious code in @wethenorth12/tronweb3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f34dbfde05ea1b80131dc35978c18b429f4ef11da06334e93c109db08c31f19 The package presents itself as a drop-in replacement for the legitimate tronweb SDK author field 'tronprotocol', README advertising tronweb...

Malicious code in launchdarkly-ai-server-sdk (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 460d36c416400537f8c90171c7821b191e0af69df3ec9f0c906300f50b0ea93f launchdarkly-ai-server-sdk 1.0.1 pypi was scanned across 7 files with no a static rule matches and no traced behavior of concern. No install-time or...

Malicious code in walmart-genai-trace (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7e84b4bbb5660ea5c7f803c4e5d0b12dfe41c9bb147fd2228c72bdda2224291a Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2026-11420 Malicious code in walmart-genai-trace (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7e84b4bbb5660ea5c7f803c4e5d0b12dfe41c9bb147fd2228c72bdda2224291a Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...