318702 matches found
MAL-2026-10939 Malicious code in chai-as-reddit (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2001f9e400a8a00d732bdcdfc5b0744420a7595ec39311cda805ca53fce035ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10929 Malicious code in trongrider (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 0d44486dc374cb50abaad84a7086859ce3c2a7e5b17a790aae5b426c4cf2a1e0 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...
MAL-2026-10928 Malicious code in upjsma (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25730cd7d45983434b20869fb88d5b84fd468d20341080c44adbc2c53778cb3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10926 Malicious code in defi-kit (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc3facb1f07ed97dd9001874b4c4666b939bbff2ff4d8c5859d22e6013ed0c5d On import defikit, the module compat.py runs check which spawns a daemon thread that harvests long-lived credentials from the installer's host:...
MAL-2026-10924 Malicious code in s3-lambda-dynamodb-cdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6517c8914c4ba64ce57809484229df7fbe5dd9f5129c40b19cec8a73c10a70ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10920 Malicious code in alb-lambda-cdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18b4d2c02af6232b1a73b084148490b5d46143eb883aa076d55a386e62839b3f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10922 Malicious code in lambda-cloudwatch-cdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12706a5899ff9e1862dfc4ff260b38860415e8e68511e7e7f8d98bd5d6406e04 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10918 Malicious code in automatic-octo-invention (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 9601d13b646d0f31e4053a8f1d2b159cba6c30b1860a67da0baa3d7d7086d9c4 In this campaign, packages use names similar to popular services e.g. Kimi AI to deploy cryptominer. --- Category: MALICIOUS - The campaign has clearly malicio...
MAL-2026-10906 Malicious code in your-unique-package-name1337 (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-10905 Malicious code in win-build-utils (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-10904 Malicious code in solana-web3-v1 (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-10902 Malicious code in solana-web3-patched (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-10903 Malicious code in solana-web3-stable (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-10901 Malicious code in solana-web3-lts (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-10900 Malicious code in solana-web3-fork (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-10899 Malicious code in solana-web3-fixed (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-10898 Malicious code in solana-rpc-client (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-10897 Malicious code in golan125-homepage-test (npm)
--- -= Per source details. Do not edit below this line.=-...