Malicious code in kisama-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0179b9fe97920f04431eb6d6e94b46c6ef2889af5e55d6a0b79793097187fed3 [email protected] ships an obfuscated index.js that runs an HTTP+WebSocket agent binding 0.0.0.0:8000 by default and exposing /api/exec POST for shell...

Malicious code in @baipiaodajun/podman_env (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a3511ea2cf04c3094ed5559b5c23d0ebdf37d2100b904a3a37deaa0375ddab8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @baipiaodajun/reverseproxy-fm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ccf42e2bbdc37821aaae826c6225239d6a8ceeb3b1e89744b79f99c8de98bb28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @baipiaodajun/npmsshx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e607fe03408d07ef1d219557cdf4a173b4c59fb061fe4aaaeedfcb03d1d5a8f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @baipiaodajun/mcbots (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b9b824aabfb54c78238352f2f5c5a9842353be165da9e42d9f1604a6fdb923b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15639 Malicious code in @baipiaodajun/mcbot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 263956cd317cc9d1f0b3a68862e1f3c75ed8fa2652adcf49956e792184559c8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15645 Malicious code in kisama-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0179b9fe97920f04431eb6d6e94b46c6ef2889af5e55d6a0b79793097187fed3 [email protected] ships an obfuscated index.js that runs an HTTP+WebSocket agent binding 0.0.0.0:8000 by default and exposing /api/exec POST for shell...

Malicious code in @baipiaodajun/mcbot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 263956cd317cc9d1f0b3a68862e1f3c75ed8fa2652adcf49956e792184559c8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15642 Malicious code in @baipiaodajun/podman_env (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a3511ea2cf04c3094ed5559b5c23d0ebdf37d2100b904a3a37deaa0375ddab8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @pipi596888/ccursor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c50ec8f5306971a2465653457f2ef36e6dbf14a666d9d8abff92af034fe5cef The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15644 Malicious code in @pipi596888/ccursor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c50ec8f5306971a2465653457f2ef36e6dbf14a666d9d8abff92af034fe5cef The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in pig-ui-first (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 101f4ed775c904f1711511e291a76113103ac463d5b9002b77eed3970065be0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15646 Malicious code in pig-ui-first (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 101f4ed775c904f1711511e291a76113103ac463d5b9002b77eed3970065be0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in selfsigned-certificate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26324f10054a4b02e6d50af8f5373115e113a01c37d636ed70df2be1dd1b6b92 index.js contains a hidden code path where calling the library's generateCertificates API with the value 10 triggers loadSampleCertificates, which...

MAL-2026-15623 Malicious code in selfsigned-certificate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26324f10054a4b02e6d50af8f5373115e113a01c37d636ed70df2be1dd1b6b92 index.js contains a hidden code path where calling the library's generateCertificates API with the value 10 triggers loadSampleCertificates, which...

Malicious Package

Overview mn2adskhweox is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview mbxcnsuwgs1 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

Malicious Package

Overview skxcmwuncbg2 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MSC-2026-11525

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: This package contained malicious code and was...

MAL-2026-15603 Malicious code in pyservercheck (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d10f01e2954dde5faac23074d02bb989f22d0dcb78be82c1c4417531fef8b859 The package ships a bundled Node script pyservercheck/js/main.js whose visible top half is a healthcheck stub matching the README, followed by a long...