Malicious code in dune-forest-ewr577-project (npm)

The package dune-forest-ewr577-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in drawingps (npm)

The package drawingps was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in down_load_epub_right_girl_wrong_side_ssut90 (npm)

--- Credit: OpenSSF source...

Malicious code in down_load_epub_painted_scars_ascgt8 (npm)

--- Credit: OpenSSF source...

Malicious code in dono-martabak85-kuki (npm)

The package dono-martabak85-kuki was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in despina-nashira-iota-biohacking (npm)

The package despina-nashira-iota-biohacking was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in decrypt-simulate-socket-omicron-tree (npm)

The package decrypt-simulate-socket-omicron-tree was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in omni-channel-oid-frontend (npm)

Source: ossf-package-analysis 06097afe7563cc6796cab5df983af5bf185bb72846d998851a38cfebfc811968 The OpenSSF Package Analysis project identified 'omni-channel-oid-frontend' @ 0.0.1 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicio...

Embedded Malicious Code

Overview bmc-i18n-extract-cli is a 这是一款能够自动将代码里的中文转成i18n国际化标记的命令行工具。当然，你也可以用它实现将中文语言包自动翻译成其他语言。适用于vue2、vue3和react Affected versions of this package are vulnerable to Embedded Malicious Code. This package was involved in a supply chain compromise that affected multiple packages maintained by...

Embedded Malicious Code

Overview feishu-docx-mcp is a Model Context Protocol server for Feishu integration Affected versions of this package are vulnerable to Embedded Malicious Code. This package was involved in a supply chain compromise that affected multiple packages maintained by ham1912. A malicious actor published...

Embedded Malicious Code

Overview bmc-translate-utils is a 翻译工具函数，支持有道，谷歌，百度，阿里机器、openAI翻译 Affected versions of this package are vulnerable to Embedded Malicious Code. This package was involved in a supply chain compromise that affected multiple packages maintained by ham1912. A malicious actor published tampered version...

Embedded Malicious Code

Overview blueai-cli is a BlueAI atomic capabilities CLI Affected versions of this package are vulnerable to Embedded Malicious Code. This package was involved in a supply chain compromise that affected multiple packages maintained by ham1912. A malicious actor published tampered versions to the n...

MAL-2026-15940 Malicious code in oce-configurator-wireless-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 191e4a78bf46781b56b290aac7b804fd9470b1ac189896b950afbaba548183e6 Package name resembles an internal Swisscom OCE package and is published at version 9999.0.0 to win resolution against a private registry. The...

MAL-2026-15942 Malicious code in omni-channel-order-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5286224ab4427b1e85bbdfd5e57b9d96fc9736504d17f2f31839562f19b88ee The package name and 9999.0.0 version are consistent with a dependency-confusion lure targeting an internal omni-channel-order-frontend package...

MAL-2026-15941 Malicious code in ocfe-tv-subscription-center-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87b1dcb639402e9d94a5f6f171e32ed97eb7064f7a557b1f7382bf832a4415ba Package name resembles an internal-scoped name and uses an implausibly high version 9999.0.0 consistent with dependency-confusion targeting. The...

MAL-2026-15939 Malicious code in omni-channel-oid-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd8c0fe84f28408bb01adee4ff47b26ed354143c53975559c5d5f2b0a06a61ce omni-channel-oid-frontend ships a preinstall.js lifecycle script that fires automatically on npm install. The script collects os.hostname,...

MAL-2026-16005 Malicious code in agentrc-security-poc-policy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e0bbc2bd28895453e58312011f52db595086e60412006e8732bf2ffb60284c9c The OpenSSF Package Analysis project identified 'agentrc-security-poc-policy' @ 1.0.0 npm as malicious. It is considered malicious because: - Th...

Malicious code in agentrc-security-poc-policy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e0bbc2bd28895453e58312011f52db595086e60412006e8732bf2ffb60284c9c The OpenSSF Package Analysis project identified 'agentrc-security-poc-policy' @ 1.0.0 npm as malicious. It is considered malicious because: - Th...

MAL-2026-16006 Malicious code in vishal_312pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74d38dada8ec3921b4a3f69e7d44b5f5b54d345ff8f9581d34007a3e68679da4 package.json declares a preinstall lifecycle script that runs on npm install and issues a wget request to...

Malicious code in minecraftmodes (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2057275d7d6bc39e22d9147702d20b43fcabcab4e438821e823010937448eb6c The package exfiltrates Roblox cookies from the victim machine. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaig...