319052 matches found
MAL-2026-10897 Malicious code in golan125-homepage-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 705b0dc2e3b9aafb6d0e72ecb5ad51d873cd59104a045f74bb27161c87a24960 Package self-identifies as a security research test 'Security research test - do not install'. The package.json homepage field contains...
Malicious code in golan125-homepage-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 705b0dc2e3b9aafb6d0e72ecb5ad51d873cd59104a045f74bb27161c87a24960 Package self-identifies as a security research test 'Security research test - do not install'. The package.json homepage field contains...
MAL-2026-10896 Malicious code in flow-eslint-oxidized (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in exodus-payments (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51394e5297d9dc765ee318eabd49e400b9f843c342ed91e3df9bd9befc84254e Package is self-identified as a dependency-confusion proof-of-concept. Its postinstall hook src/canary.js performs a DNS lookup and HTTPS GET to a...
MAL-2026-10895 Malicious code in exodus-payments (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51394e5297d9dc765ee318eabd49e400b9f843c342ed91e3df9bd9befc84254e Package is self-identified as a dependency-confusion proof-of-concept. Its postinstall hook src/canary.js performs a DNS lookup and HTTPS GET to a...
Malicious code in exodus-checkout (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b10e41b9a87dc4927d3c4bc63b25bc1fa438cfae1bcf5f1d483204a18d5765f6 Package exodus-checkout self-identifies as a security-research dependency-confusion proof-of-concept targeting an internal Exodus payments SDK. It...
MAL-2026-10894 Malicious code in exodus-checkout (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b10e41b9a87dc4927d3c4bc63b25bc1fa438cfae1bcf5f1d483204a18d5765f6 Package exodus-checkout self-identifies as a security-research dependency-confusion proof-of-concept targeting an internal Exodus payments SDK. It...
MAL-2026-10893 Malicious code in ecto-cargo-wk1tm59a (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee496f01ecebc77637213e597ba523c8cccda7efcd65e7ad2e700d804553dd29 Package [email protected] exhibits several contextual red flags worth human review: a randomized-suffix name pattern -wk1tm59a typical of...
Malicious code in ecto-cargo-wk1tm59a (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee496f01ecebc77637213e597ba523c8cccda7efcd65e7ad2e700d804553dd29 Package [email protected] exhibits several contextual red flags worth human review: a randomized-suffix name pattern -wk1tm59a typical of...
MAL-2026-10892 Malicious code in claude-code-timer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04950731ec6589eebae22166fb042e4253719f71bfd3fc2b58f28d26ede9e43c [email protected] was scanned with no findings of concern. No install-time lifecycle scripts, no outbound network calls to attacker-controlled...
Malicious code in claude-code-timer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04950731ec6589eebae22166fb042e4253719f71bfd3fc2b58f28d26ede9e43c [email protected] was scanned with no findings of concern. No install-time lifecycle scripts, no outbound network calls to attacker-controlled...
MAL-2026-10891 Malicious code in bytecraft (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b4433b369e2ff82bc33b11110ddfa63c15a2d685bf3484fb37092ae4bd077f No suspicious behavior was identified in this version of bytecraft. There is no evidence of install-time network activity, lifecycle scripts fetching...
Malicious code in bytecraft (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b4433b369e2ff82bc33b11110ddfa63c15a2d685bf3484fb37092ae4bd077f No suspicious behavior was identified in this version of bytecraft. There is no evidence of install-time network activity, lifecycle scripts fetching...
MAL-2026-10890 Malicious code in analysis-chart (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-10889 Malicious code in @public-for-cdao/utils (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-10888 Malicious code in @public-for-cdao/signer (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-10887 Malicious code in @public-for-cdao/sdk (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-10886 Malicious code in @public-for-cdao/deploy (npm)
--- -= Per source details. Do not edit below this line.=-...