MAL-2026-18062 Malicious code in sc-wizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 54691cc130e614ee031186f7e646c3e6076efad6105a6e9cad68f62aa736516b The OpenSSF Package Analysis project identified 'sc-wizard' @ 99.9.1 npm as malicious. It is considered malicious because: - The package...

CVE-2024-3094-XZ-Backdoor-Detector

Description Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used to modify specific...

CVE-2024-3094-Vulnerabity-Checker

CVE-2024-3094-Vulnerabity-Checker Verify that your XZ Utils version is not vulnerable to CVE-2024-3094 ┌──lypd0㉿kali- └─$ ./CVE-2024-3094checker.sh / / \ / \ \ /. | / \ / \ /. | \ / / / / / \ \ / \ / / / / / You are NOT vulnerable to CVE-2024-3094. Background CISA Cybersecurity and...

Malicious code in @an1mshnpmb9c84920/pipe-dns-m19t2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 548a4b4d6c63df4cc62bd7e753758dc32f98b3ed9adb7fbee204493838614eea The package's prepare lifecycle script executes index.js, which builds a subdomain string from the installer's hostname and the npm lifecycle event...

MAL-2026-18054 Malicious code in @decoopus/claude-setup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1329498b9f2a24897a73f2e5d2d0ffb8ea848d5f6699a703fa88dcbe8b578852 The CLI prompts the user for an Anthropic API key sk-ant-... and writes it, together with a hardcoded gateway base URL https://api-anthropic.help, in...

Malicious Package

Overview vinted-mocked-apis is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-17952 Malicious code in 8i7pp4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c623f39e0d4b0b51a05de329eccc8daa9ea567d83dc8365f3523462b2bd08b09 Package 8i7pp4 version 0.0.0-stage contains only two files and no detected behaviors of concern. There are no lifecycle scripts fetching or executing...

CVE-2023-35674

Description CVE-2023-35674 is a high-severity zero-day security vulnerability in the Android Framework. This vulnerability allows an attacker to escalate their privileges without requiring user interaction or additional execution permissions. The vulnerability occurs in how the Android Framework...

Malicious code in dsjklweuvhgsdcq (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 920a2b5125f18a77594d8cbc33936a2c0aa1ff3a3a885c3910ac9fc86c738159 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mxckjdgweuxpsiohd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac994d415521db946a7f88a0915ff5e7b89d53569d4227980d3a9832f06ec3e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zxhgssiyluwxchn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e026531d4c72147180eef854ceee292ef8cf4da100b348ff7eb526734c249d64 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nsdhjuiwqxmhsf1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c744817916474123d9e76c5a569eb6c71387549bdfe29cd4c99dc0e6182d134 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mx3dxhgic8xhd6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c845fb0cbb218ab8c1affe9c9964c9c2fd342e6b70070115f93fdd5ef4e8cca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview zxhgssiyluwxchn is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview dsjklweuvhgsdcq is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview vjkpwjxbvndelta is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview mxckjdgweuxpsiohd is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview ava-ilable-down-load-mp3-today-2018-120200-young-sick-camellia-qvg9z-dqpzyh is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no...

Malicious Package

Overview down-load-available-zip-now-42301-gloria-tp7wn-dcxkwl is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between th...

Malicious Package

Overview alb-um-availa-ble-zip-mp3-file-43857-green-light-mrpup-qmtshy is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection...