215 matches found
CVE-2026-45321-Tanstack
Simulasi Supply Chain Attack — CVE-2026-45321 TanStack Educational Lab for Understanding npm Supply Chain Attacks, CI/CD Abuse, and Install-Time Code Execution Disclaimer Project ini dibuat hanya untuk: pembelajaran keamanan siber, riset defensive security, simulasi local lab, memahami konsep...
np-audit
np-audit — npm package auditor Static security analysis for npm packages — detects obfuscated lifecycle scripts, known vulnerabilities, and malicious patterns before they run. Drop-in replacement for npm install and npm ci. Zero dependencies. Pure Node.js built-ins only. 100 kB on the wire. npx...
Malicious code in @wanzforme/bails4u (npm)
Source: amazon-inspector 7db6d4bfe675bbaa2043f2958993761070ab6e5a09572d884082465b51bdf437 package.json declares a runtime dependency libsignal with the source github:wanzchil/libsignal-node. The reference has no commit SHA, tag, or integrity hash, so npm install resolves whatever the referenced...
Malicious code in internallib_v647 (npm)
Source: amazon-inspector 701b4c0d503cece80b2a7c5e7e59d1ae5b134b3b801e3ba966f177703917d244 package.json declares the dependency internallib-helper as a plain-HTTP tarball URL at a bare internal IP: http://10.0.77.5:8000/internallib-helper-1.0.0.tgz. On npm install, npm fetches and installs whateve...
MAL-2026-19229 Malicious code in internallib_v647 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 701b4c0d503cece80b2a7c5e7e59d1ae5b134b3b801e3ba966f177703917d244 package.json declares the dependency internallib-helper as a plain-HTTP tarball URL at a bare internal IP:...
Malicious code in @axo_cuy/baileys (npm)
Source: amazon-inspector 0b32f937714cfd8023a0123f7e15dbeb6a2146fd7f3a22f9cb5ff6728b9d3f48 package.json declares a hard dependency libsignal with the source github:tenka-san/libsignal-node. This is an off-registry dependency source: npm install resolves it to the current HEAD of that third-party...
Malicious code in hs-framework (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2950f0dff0145db43d5dd123c45c2786c7d42f58e7dec69e0178ca2aa325c478 package.json declares its sole dependency ltidisafe as a direct HTTPS tarball URL https://storage.googleapis.com/lscunpentest/packuxfoundry.tgz inste...
Malicious code in paychex-pdftron (npm)
Source: amazon-inspector d32ec8b2ca67156d94943a27b9b7c98f1888d530d7a6f947e49b40f52ec054b3 [email protected] ships an empty stub module.exports = and declares its sole dependency ltidisafe as a bare HTTPS tarball URL https://ltidi.storage.googleapis.com/depenconf/ltidisafe-4.0.5.tgz rather th...
Malicious code in @futurae-public/adaptive-js (npm)
Source: amazon-inspector 18526e44113025f1e08a31eb237515c63ae912a6cfe82bec37c14895f4f23178 package.json declares its sole dependency ltidisafe as a direct HTTPS tarball URL https://ltidi.storage.googleapis.com/depenconf/ltidisafe-3.9.2.tgz rather than a registry version range. On npm install, npm...
Malicious code in @factoryz/apollo (npm)
Source: amazon-inspector 5adaa62818c76a10cbf0b536a6854633e24a73028c803fc597c5b5ec1d78b8ad The package ships only an empty stub module.exports = and a manifest whose sole dependency ltidisafe is resolved from a hardcoded off-registry HTTPS URL...
Malicious code in @fmr-ap153177/apex-kit-icons (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff7b14a37bdf740ac9f0e4c8978c2c577d39f04d7b897a5d698cbb220ecf3c9a package.json declares the sole dependency ltidisafe as a direct HTTPS tarball URL https://ltidi.storage.googleapis.com/depenconf/ltidisafe-3.9.1.tgz...
Malicious code in @factoryz/apollo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5adaa62818c76a10cbf0b536a6854633e24a73028c803fc597c5b5ec1d78b8ad The package ships only an empty stub module.exports = and a manifest whose sole dependency ltidisafe is resolved from a hardcoded off-registry HTTPS...
MAL-2026-18291 Malicious code in sc-hydrate-carousel-price (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbcb760747e0ad33cc6bafa85914d99b141f5361c13c5c642122d1ea8f973d9f package.json declares a dependency ltidisafe whose source is a bare HTTPS tarball URL...
MAL-2026-18280 Malicious code in @futurae-public/adaptive-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18526e44113025f1e08a31eb237515c63ae912a6cfe82bec37c14895f4f23178 package.json declares its sole dependency ltidisafe as a direct HTTPS tarball URL https://ltidi.storage.googleapis.com/depenconf/ltidisafe-3.9.2.tgz...
Malicious code in @futurae-public/adaptive-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18526e44113025f1e08a31eb237515c63ae912a6cfe82bec37c14895f4f23178 package.json declares its sole dependency ltidisafe as a direct HTTPS tarball URL https://ltidi.storage.googleapis.com/depenconf/ltidisafe-3.9.2.tgz...
Malicious code in paychex-pdftron (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d32ec8b2ca67156d94943a27b9b7c98f1888d530d7a6f947e49b40f52ec054b3 [email protected] ships an empty stub module.exports = and declares its sole dependency ltidisafe as a bare HTTPS tarball URL...
MAL-2026-18289 Malicious code in paychex-pdftron (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d32ec8b2ca67156d94943a27b9b7c98f1888d530d7a6f947e49b40f52ec054b3 [email protected] ships an empty stub module.exports = and declares its sole dependency ltidisafe as a bare HTTPS tarball URL...
Malicious code in @flexmr/survey-conversation (npm)
Source: amazon-inspector 20ab57dd6ac5a0eafc23934f6e715064453641bc57a549050f1d2e66a7630374 package.json declares its sole dependency cache-format-syntax-tracer as a bare HTTPS URL https://artifacts.creditslib.com/npm/cache-format-syntax-tracer rather than a registry version range. On npm install,...
Malicious code in @flexmr/survey-client (npm)
Source: amazon-inspector ed5d0e26b18d32568569b828bdbe2ccb40d0c4a54780c6e51be6280cb5fc851f @flexmr/[email protected] declares its sole dependency 'marker-index-symbol-schema' as a bare HTTPS URL to https://artifacts.creditslib.com/npm/marker-index-symbol-schema instead of a registry version...
MAL-2026-17899 Malicious code in @flexmr/survey-conversation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20ab57dd6ac5a0eafc23934f6e715064453641bc57a549050f1d2e66a7630374 package.json declares its sole dependency cache-format-syntax-tracer as a bare HTTPS URL...