Malicious code in trinity-scheme (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d576c0487668f599137a479e17ddc1335935fdec631f7d5adfa9e73049d7652 On npm install, the package's preinstall lifecycle reads a hex-encoded command string from preinstall.json, decodes it via Buffer.from..., 'hex', and...

Malicious code in bytesap (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4eec30f2d541d35548fef109eb76c972e92203c749f615aa08f976fb9b0c2a03 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...