MAL-2026-16402 Malicious code in ndmcmsujey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d10bd4751b8aa4de0e747f955230af0c50c2df3f6423f0a88cbcf392d0410d8 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16401 Malicious code in ndmckauxuoincv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfd29f430051fb1e4809ff59728851a683aa0fc25eabec2f807067e928245222 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16400 Malicious code in ndmcjcxiebysfdb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d6d78591ddbd2abc8045f5bdbe7694d000b3508dc8df6393ffd46d093351ef4 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16397 Malicious code in kambxjowhdsgyw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 966589b88833a788509808e69f3fd935c370ff4093b9fc3fb50482431434a6b5 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16399 Malicious code in lufxchwmxwyps (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 429d0ebe2bf5d42b37720d76547ef6105c01c3276283fd64836d42ed209d732a The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in lufxchwmxwyps (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 429d0ebe2bf5d42b37720d76547ef6105c01c3276283fd64836d42ed209d732a The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16396 Malicious code in fdhcxvnwhjiofv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7125babb23f8900d46ed2c500ef373d4de463c6260810c17719922435bdac54 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16398 Malicious code in luftmvfiwgxydes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e487d10b32b0e42f4ed6478fa461451bcacc8eb9d679a58931bc474c339feae7 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in oracle-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c800d0651330b1c1cd5d9c5cb2b6966eecefb2d2c28949d0670f485d820db3a6 The package publishes as oracle-redis but ships a verbatim copy of the ioredis README, source tree, and repository URL...

MAL-2026-16390 Malicious code in oracle-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c800d0651330b1c1cd5d9c5cb2b6966eecefb2d2c28949d0670f485d820db3a6 The package publishes as oracle-redis but ships a verbatim copy of the ioredis README, source tree, and repository URL...

MAL-2026-16389 Malicious code in noverojava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7fbf0d1519b05868b34e9e2c1d3588a0596003a5cb53e4cd28fd3a856ecff26 package.json declares the runtime dependency libsignal as github:tenka-san/libsignal-node rather than a registry version range or pinned commit SHA. ...

Malicious code in nodetokyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ec0e3f7b963353d4d2928e12ca3898cce5100ed3e3537383faa9c7f9a93f203 The package's declared main launcher.js executes launch at module top level, so require'nodetokyo' automatically installs Python 3.12 via winget or b...

MAL-2026-16388 Malicious code in nodetokyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ec0e3f7b963353d4d2928e12ca3898cce5100ed3e3537383faa9c7f9a93f203 The package's declared main launcher.js executes launch at module top level, so require'nodetokyo' automatically installs Python 3.12 via winget or b...

Malicious Package

Overview epic-diesel-feed is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview tibcwmpoeafh is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @tvg-mar/promos-context is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

Malicious Package

Overview solo-async-pipe is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview envforge2 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview fdhcxvnwhjiofv is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview ndmcmsujey is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...