MAL-2026-6750 Malicious code in procwire (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42f7077b3fb95ad31689f096805811e51afe78e7f21c2123d5dcc25343a11ff2 setup.py auto-executes on pip install only guarded by an internal PWDIST env var check and, on Windows, reconstructs an attacker C2 URL and XOR key a...

MAL-2026-6695 Malicious code in ts-bn-proto (npm)

Malicious npm package published as part of a coordinated DeFi-themed infostealer campaign. ts-bn-proto embeds an infostealer payload directly in index.js with a base64-encoded C2 address data-stream.space, executed at install time via a postinstall hook. The payload harvests cryptocurrency wallet...

MAL-2024-10292 Malicious code in opdistube (npm)

The package contains code to download and execute an infostealer payload...

Malicious code in opdistube (npm)

The package contains code to download and execute an infostealer payload...

Malicious code in nodelement (npm)

The package contains code to download and execute an infostealer payload...

Malicious code in ro.dll (npm)

The package contains code to download and execute an infostealer payload. --- -= Per source details. Do not edit below this line.=-...

Malicious code in node-dlls (npm)

The package contains code to download and execute an infostealer payload. --- -= Per source details. Do not edit below this line.=-...

Malicious code in easy-upgrade (npm)

The package contains code to download and execute an infostealer payload...

Malicious code in bloxupgrade (npm)

The package contains code to download and execute an infostealer payload. --- -= Per source details. Do not edit below this line.=-...

MAL-2024-10285 Malicious code in byfron (npm)

The package contains code to download and execute an infostealer payload...

Malicious code in nodelogic (npm)

The package contains code to download and execute an infostealer payload. --- -= Per source details. Do not edit below this line.=-...

Malicious code in byfron (npm)

The package contains code to download and execute an infostealer payload...

Malicious code in testinbro (npm)

The package contains code to download and execute an infostealer payload. --- -= Per source details. Do not edit below this line.=-...

Malicious code in autoadv (npm)

The package contains code to download and execute an infostealer payload...

MAL-2024-10294 Malicious code in robloxbootstrapper (npm)

The package contains code to download and execute an infostealer payload. --- -= Per source details. Do not edit below this line.=-...

MAL-2024-10296 Malicious code in testinbro (npm)

The package contains code to download and execute an infostealer payload. --- -= Per source details. Do not edit below this line.=-...

MAL-2024-10291 Malicious code in nodelogic (npm)

The package contains code to download and execute an infostealer payload. --- -= Per source details. Do not edit below this line.=-...

Malicious code in solaraupdater (npm)

The package contains code to download and execute an infostealer payload. --- -= Per source details. Do not edit below this line.=-...

Malicious code in celexkeygen (npm)

The package contains code to download and execute an infostealer payload. --- -= Per source details. Do not edit below this line.=-...

Malicious code in upgrade-roblox (npm)

The package contains code to download and execute an infostealer payload. --- -= Per source details. Do not edit below this line.=-...