MAL-2026-15937 Malicious code in minecraftmodes (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2057275d7d6bc39e22d9147702d20b43fcabcab4e438821e823010937448eb6c The package exfiltrates Roblox cookies from the victim machine. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaig...

Malicious code in @liuliang520500/sinataoke_cn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50e3ff1d04feca3fcec866427a6d90307e3391fde1e732c8f600a06e86900af5 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15961 Malicious code in @liuliang520500/sinataoke_cn_test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3049eff160660fee9030ad57663083c1171a4e69c84b4f234660420d124c5c82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @liuliang520500/sinataoke_cn_test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3049eff160660fee9030ad57663083c1171a4e69c84b4f234660420d124c5c82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15960 Malicious code in @liuliang520500/sinataoke_cn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50e3ff1d04feca3fcec866427a6d90307e3391fde1e732c8f600a06e86900af5 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in @liuliang520500/jd-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b68e3cfe0548d1118ec047bea15f3bb902fcb9db0816251df440e2e2326a5382 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @liuliang520500/pdd-sdk-new (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a7499d71351fb91827b6e69cbea52e9a4cd6b3802693d0b4f1b545700e8ad8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @liuliang520500/pdd-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 414eaea31757ec4c7282573b38caddd11b7fd60be46bdebede8224cfa09f8110 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15959 Malicious code in @liuliang520500/pdd-sdk-new (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a7499d71351fb91827b6e69cbea52e9a4cd6b3802693d0b4f1b545700e8ad8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15958 Malicious code in @liuliang520500/pdd-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 414eaea31757ec4c7282573b38caddd11b7fd60be46bdebede8224cfa09f8110 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15957 Malicious code in @liuliang520500/jd-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b68e3cfe0548d1118ec047bea15f3bb902fcb9db0816251df440e2e2326a5382 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15962 Malicious code in @liuliang520500/taobao-topclient (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fce1760178d3d6c27bfbeac47e726c22a17252d491a2988939082c1ead4a4ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @liuliang520500/taobao-topclient (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fce1760178d3d6c27bfbeac47e726c22a17252d491a2988939082c1ead4a4ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @pilllesss/yorn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a485401c140a31985b0a8f93787f167ad44cdccd111240304c858410bc0aceb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15963 Malicious code in @pilllesss/yorn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a485401c140a31985b0a8f93787f167ad44cdccd111240304c858410bc0aceb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dcftunnel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 884e82f2b3a290f58a48f1b1527c1b3c0494447390ab9c31f4f82544040e5709 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 1cattunnel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26b08759ff9575f7cea8ef2e713458337d90c27b83a76df2e43d9b9a0af2e48d The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15943 Malicious code in 1cattunnel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26b08759ff9575f7cea8ef2e713458337d90c27b83a76df2e43d9b9a0af2e48d The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15975 Malicious code in dcftunnel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 884e82f2b3a290f58a48f1b1527c1b3c0494447390ab9c31f4f82544040e5709 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15995 Malicious code in multicore-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d643b52dafcb56aba0bd945697117be2a15447bcb4b183aabff3fa72824b75fb [email protected] is published under a spoofed author identity Blake Embrey, maintainer of array-flatten and advertises itself as an array utility,...