Malicious code in @ks-radar/radar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fe5f14a06be3c24f9b771e8bbe33139614129069d276962f0c7e019fd89cbce On npm install, the package's preinstall lifecycle script preinstall.js reads a hex-encoded command string from preinstall.json, decodes it via...

MAL-2026-11066 Malicious code in @ks-radar/radar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fe5f14a06be3c24f9b771e8bbe33139614129069d276962f0c7e019fd89cbce On npm install, the package's preinstall lifecycle script preinstall.js reads a hex-encoded command string from preinstall.json, decodes it via...

Malicious code in @ks-radar/search (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @ks-radar/radar-send-web-log-collect (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @ks-radar/radar-api-collect (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @ks-radar/olap-auth (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @ks-radar/mini-program (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @ks-radar/radar-error-collect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a7e2199870f46f65ae301b77a8853c7c0203492bd65638277944190b9b406d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...