Malicious code in eth-crypto-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4766af8f78c9d0a3836222bd3986232b5e49086285f88d93e5c3044e3b75600 On require of index.js, the package initiates an HTTPS POST to the hardcoded endpoint https://enjbyg3xk8l.x.pipedream.net/beacon carrying a JSON...

MAL-2026-12372 Malicious code in eth-crypto-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4766af8f78c9d0a3836222bd3986232b5e49086285f88d93e5c3044e3b75600 On require of index.js, the package initiates an HTTPS POST to the hardcoded endpoint https://enjbyg3xk8l.x.pipedream.net/beacon carrying a JSON...

MAL-2026-12126 Malicious code in a.poltoradnev-package-b (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebe5bbc564bb1c441ce12acaf4d177fabcd3fe5963f3c870119ee1519abab675 On require of the package, index.js loads bridge.js which selects a platform-specific output path, fetches an opaque binary over HTTPS from Cloudflar...

Malicious code in @types-beta/sdk (npm)

The npm package @types-beta/sdk is a supply-chain dropper that impersonates the trusted @types DefinitelyTyped namespace to look like a routine type-definition dependency. It bundles a Windows executable vendor/nanocache.exe and launches it as an import-time side effect: dist/index.js calls init ...