MAL-2026-5278 Malicious code in spateo-release (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 21400e8510d0663de6c3a4454fe99d9200cb83ae8d1ecdc137c99f3668da4293 Versions 1.1.2 were compromised. Compromised packages start an obfuscated infostealer. The infostealer is a heavily obfuscated JavaScript code executed using B...

Malicious code in orchestr8-platform (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d9526ae43236ac15964b307175384455975ace26d8157ef3c41ed8db8192562 The package was found to contain malicious code or consuming dependency that contains malicious code Source: kam193...

EUVD-2025-91074

Malicious code in injuredlarkz3n npm...

MAL-2025-102925 Malicious code in fresh_viper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c6dfd7a0e721dba0b4778e856a2a8ea442197478a012cd9bec802c57f505074 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interferometry-bootes-gridsome-dotenv-parse-variables (npm)

The package interferometry-bootes-gridsome-dotenv-parse-variables was found to contain malicious code...

Malicious code in a-vailable-al-bum-file-192011-from-this-place-nx95v-minwrk (npm)

The package a-vailable-al-bum-file-192011-from-this-place-nx95v-minwrk was found to contain malicious code...

MAL-2025-34743 Malicious code in terra_yekb0_17brh_equinox (npm)

The package terrayekb017brhequinox was found to contain malicious code...