Malicious code in octopus-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6968c2a12f60b671ee163f42c9da14ed51d9b0b29486b4a7d1bf5014b4c637f2 The package declares a preinstall lifecycle script node index.js that runs automatically on npm install. index.js collects the installer's hostname, ...

MAL-2026-14540 Malicious code in @lordmega/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 373164cdb5f1cd37cf187a23142c1bc64c0a350c38ce6ca0fe7f5884269a0317 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @lordmega/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 373164cdb5f1cd37cf187a23142c1bc64c0a350c38ce6ca0fe7f5884269a0317 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview commonjs-code-token is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-14530 Malicious code in infomedia (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82d10083f4b616106c25e244b1097b772491905dfb69e6ef5a50d0164826b8a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in baileys-mbuilder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 508ded2b926100712d9abf255683432d44a917c067f9d69b14b4c678918ce8bb package.json declares "postinstall": "node lib/index.js --install", and lib/index.js is a single 6.3 MB JSFuck-style eval expression that reconstruct...

Malicious Package

Overview shaihulululud is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview tsetracie is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview grandfatherofthedesert is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

Malicious code in infomedia (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82d10083f4b616106c25e244b1097b772491905dfb69e6ef5a50d0164826b8a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14528 Malicious code in baileys-inmemory-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 610d72c934ff0795b4aceddfc341b582c27f71034a47cf3e874e21387c842d34 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in baileys-inmemory-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 610d72c934ff0795b4aceddfc341b582c27f71034a47cf3e874e21387c842d34 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14529 Malicious code in baileys-mbuilder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 508ded2b926100712d9abf255683432d44a917c067f9d69b14b4c678918ce8bb package.json declares "postinstall": "node lib/index.js --install", and lib/index.js is a single 6.3 MB JSFuck-style eval expression that reconstruct...

MAL-2026-14527 Malicious code in @fongsidev/scraper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c7391aa8a431e807fe8cf8b22ad7a1073422de03f6c1ce923054ea9f3c3faf4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview self-certificates is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-14526 Malicious code in omniauth-recharge-rails-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27ec72eac9d0bae686eddce65991c912a23c97621648e3316cd05188038d17d7 The package's package.json declares a preinstall lifecycle script that runs wget against a hardcoded webhook.site URL...

Malicious code in 0xfighter3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5a97978609c71d681a69a2da613c5e52b257a2062d7805b8db25243db50ff36f Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in bigquery-agent-analytics-tracing (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 08fbff35384a45aedc39545dd2a174889a1c35f3e6c9d044c2c201905402ad99 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in rce-test (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c27b8e593dc0298e09bb4a5fd6acc68dc03bf324bdc7267e87482fdd10b0fa2d Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2026-14523 Malicious code in rce-test (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c27b8e593dc0298e09bb4a5fd6acc68dc03bf324bdc7267e87482fdd10b0fa2d Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...