319266 matches found
MAL-2026-10894 Malicious code in exodus-checkout (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b10e41b9a87dc4927d3c4bc63b25bc1fa438cfae1bcf5f1d483204a18d5765f6 Package exodus-checkout self-identifies as a security-research dependency-confusion proof-of-concept targeting an internal Exodus payments SDK. It...
MAL-2026-10893 Malicious code in ecto-cargo-wk1tm59a (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee496f01ecebc77637213e597ba523c8cccda7efcd65e7ad2e700d804553dd29 Package [email protected] exhibits several contextual red flags worth human review: a randomized-suffix name pattern -wk1tm59a typical of...
Malicious code in ecto-cargo-wk1tm59a (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee496f01ecebc77637213e597ba523c8cccda7efcd65e7ad2e700d804553dd29 Package [email protected] exhibits several contextual red flags worth human review: a randomized-suffix name pattern -wk1tm59a typical of...
MAL-2026-10892 Malicious code in claude-code-timer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04950731ec6589eebae22166fb042e4253719f71bfd3fc2b58f28d26ede9e43c [email protected] was scanned with no findings of concern. No install-time lifecycle scripts, no outbound network calls to attacker-controlled...
Malicious code in claude-code-timer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04950731ec6589eebae22166fb042e4253719f71bfd3fc2b58f28d26ede9e43c [email protected] was scanned with no findings of concern. No install-time lifecycle scripts, no outbound network calls to attacker-controlled...
MAL-2026-10891 Malicious code in bytecraft (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b4433b369e2ff82bc33b11110ddfa63c15a2d685bf3484fb37092ae4bd077f No suspicious behavior was identified in this version of bytecraft. There is no evidence of install-time network activity, lifecycle scripts fetching...
Malicious code in bytecraft (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b4433b369e2ff82bc33b11110ddfa63c15a2d685bf3484fb37092ae4bd077f No suspicious behavior was identified in this version of bytecraft. There is no evidence of install-time network activity, lifecycle scripts fetching...
MAL-2026-10890 Malicious code in analysis-chart (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-10889 Malicious code in @public-for-cdao/utils (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-10888 Malicious code in @public-for-cdao/signer (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-10887 Malicious code in @public-for-cdao/sdk (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-10886 Malicious code in @public-for-cdao/deploy (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-10885 Malicious code in @public-for-cdao/core (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-10884 Malicious code in @public-for-cdao/contracts (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-10883 Malicious code in @public-for-cdao/bot (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-10882 Malicious code in @public-for-cdao/backend (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @irys-solutions/odesa-main (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 525ae6b33885c1153dac485b830c8977b433ba4cdd2cc9556415b146ed801569 No malicious behavior was identified in this package version. No lifecycle scripts performing remote fetches, no credential reads, no exfiltration...
MAL-2026-10881 Malicious code in @irys-solutions/odesa-main (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 525ae6b33885c1153dac485b830c8977b433ba4cdd2cc9556415b146ed801569 No malicious behavior was identified in this package version. No lifecycle scripts performing remote fetches, no credential reads, no exfiltration...