MAL-2026-12818 Malicious code in beaver-ui-multi-select-with-all (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbb4bab7b1c75e94cd3411aa312a1313e3d5a84bed77943b10f8c969b751cb23 On require of the package's main entry, index.js loads loader.js which selects a per-platform URL, downloads an opaque native binary from one of thre...

MAL-2026-12670 Malicious code in dc-dc-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e706ce5be3f3c1cf779ad16844cea8737714c708fe739316bec4ff400b415139 On require'dc-dc-core', index.js loads support.js which fetches a platform-specific native binary from obfuscated Cloudflare worker hosts...

MAL-2026-10643 Malicious code in ethereum-input-decorder (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94137fcf0aee7d8edb4e15a8bc9be4455fbdf79cb5bf99987b79f0393fdff62c The package name typosquats the legitimate 'ethereum-input-decoder'. Its top-level init.py unconditionally invokes a payload routine on import: it...

MAL-2026-10197 Malicious code in metemask-sdk (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a99855c93b46f7b996a005065c319bbb24c9d1f497d05dfd38fc83d1b21facdd metemask-sdk is a typosquat of the legitimate metamask-sdk package. On import, the top-level init.py performs an outbound HTTP fetch to...