Malicious Package

Overview anuaja is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview queeuees is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview darkglitch is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview bfox-build-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @cat-gen/material is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in focaleys (npm)

Source: amazon-inspector 481093b5037c8aafc763d4543e5a6a39c2ebc7055673eb1d4f480f885593bcd2 package.json declares the dependency 'libsignal' as 'github:rexxzyid/libsignal-node' with no tag, version, or commit SHA. On npm install, this resolves to whatever the default branch HEAD contains at that...

Malicious code in @cat-gen/material (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29d893495467ec3f9830bc7b9eccdb44c76def4c89075bc7318d2d6d0dd3113e The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in @cat-gen/materia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82db812495375af001b7f4d1baf1f5b70522ae7f843387f1142ba7882d29c564 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-17334 Malicious code in @cat-gen/material (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29d893495467ec3f9830bc7b9eccdb44c76def4c89075bc7318d2d6d0dd3113e The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-17333 Malicious code in @cat-gen/materia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82db812495375af001b7f4d1baf1f5b70522ae7f843387f1142ba7882d29c564 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-17335 Malicious code in @firelordzuka/pulse-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8247d4cb8f4973f229f36053baee4350a10058ec5290e6fad9659ebe1c04f8a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in link-status-page (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a885003c985463c91366a4a8615fab9c6e4d876afdf33493c3e0463066cbdd The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-17337 Malicious code in link-age-great (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9871d21579b06dadaa530e69ae728bae90420a0c9cfba6d798a43cc87795ed43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17338 Malicious code in link-status-page (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a885003c985463c91366a4a8615fab9c6e4d876afdf33493c3e0463066cbdd The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in @redman89405/my-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee7d38498dcd2e2a3afc4ed3b3a5136cb88e11693ef59fc7676bf35cd89b932c The package ships code.png alongside index.js and exports a function imageToCode that reads a length-prefixed byte stream from the first pixel row of...

MAL-2026-17336 Malicious code in @redman89405/my-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee7d38498dcd2e2a3afc4ed3b3a5136cb88e11693ef59fc7676bf35cd89b932c The package ships code.png alongside index.js and exports a function imageToCode that reads a length-prefixed byte stream from the first pixel row of...

MAL-2026-17331 Malicious code in iban-validator-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fff3da0c4ead2e4f938efa16ad1cea92e872789a3b012edfed68526898cce4fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17329 Malicious code in focaleys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 481093b5037c8aafc763d4543e5a6a39c2ebc7055673eb1d4f480f885593bcd2 package.json declares the dependency 'libsignal' as 'github:rexxzyid/libsignal-node' with no tag, version, or commit SHA. On npm install, this resolv...

MAL-2026-17328 Malicious code in fca-raihan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 241006adda5ea773d76d48d874c80a4054215ed18f05de3e392cdd86c0379785 package.json for fca-raihan declares a dependency whose key equals the package's own name fca-raihan with source github:raihan9099/fca-raihan. This i...

MAL-2026-17327 Malicious code in exiouss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43ce408818d0222061c3b6ed499d77a245aae78e30e4f57c8e6e77ee52705805 main.js in [email protected] imports childprocess and issues POST requests to hardcoded endpoints, including https://gemini.google.com and...