MAL-2026-14522 Malicious code in syntaxerror-package-12345 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ede434cf61641064a49939821778e511c3fcf8afab7e443582b8b103e13171d9 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in syntaxerror-package-12345 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ede434cf61641064a49939821778e511c3fcf8afab7e443582b8b103e13171d9 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2026-14519 Malicious code in array-shuffler-utils-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 233594ba444a80cbd5c49ac1da879d813b4ca97677dbe05930931496cd29582c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in array-shuffler-utils-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 233594ba444a80cbd5c49ac1da879d813b4ca97677dbe05930931496cd29582c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14521 Malicious code in fivem-tool-helper-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b33a1f643603b3bbf0f4e15b104240715e0de6a10025eeeafb9b015d684ca5f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fivem-tool-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11831d8204f695d6cfc23750c0899851f375e519e715e845730f90b7fc8d51a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14520 Malicious code in fivem-tool-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11831d8204f695d6cfc23750c0899851f375e519e715e845730f90b7fc8d51a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14517 Malicious code in hydration-ui-cls (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dab60d6a779e65d7fa94af8c036d86b722a9cfddbe12d637990251a35004356 On import, dist/index.mjs runs a top-level async IIFE that chmods dist/internal/calc-eng.dat to 0755 and spawns it detached via childprocess.spawn. T...

MAL-2026-14518 Malicious code in svelte-ui-cls (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41593a52d2887b1bbbf1e1982cd8a12d011dfd8802605e083fdbfc86bf7ab5a8 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in svelte-ui-cls (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41593a52d2887b1bbbf1e1982cd8a12d011dfd8802605e083fdbfc86bf7ab5a8 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in hydration-ui-cls (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dab60d6a779e65d7fa94af8c036d86b722a9cfddbe12d637990251a35004356 On import, dist/index.mjs runs a top-level async IIFE that chmods dist/internal/calc-eng.dat to 0755 and spawns it detached via childprocess.spawn. T...

Malicious code in wm-eslint-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 080d6cf0cee122cb6b5676ea670ced2ca3e022a521f84b559e6643dca4fde253 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14514 Malicious code in wm-eslint-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 080d6cf0cee122cb6b5676ea670ced2ca3e022a521f84b559e6643dca4fde253 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wm-lib-env-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 975f9cbb95ca5ce6d913c57698058355d247364e65d3a1d0a37d6e75f8325725 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14515 Malicious code in wm-lib-env-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 975f9cbb95ca5ce6d913c57698058355d247364e65d3a1d0a37d6e75f8325725 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14507 Malicious code in foldmap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 569b7cd07b2dc5be0a93c14cf8798990210cdc1210dc7dc842dab5017f69f551 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in hexdrift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91f6b00b26052d34947326afc5e17df34500b077e8ed58daa9e9f67c3a93737e The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in foldmap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 569b7cd07b2dc5be0a93c14cf8798990210cdc1210dc7dc842dab5017f69f551 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14508 Malicious code in hexdrift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91f6b00b26052d34947326afc5e17df34500b077e8ed58daa9e9f67c3a93737e The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in snapbuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e168e9030eb691c5aebf895664898b4090aeca8d6626fa9f58cf8fd960db7579 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...