`tracing-check` was removed from crates.io for malicious code

This is part of an ongoing campaign to attempt to typosquat crates in the polymarket-client-sdk ecosystem to exfiltrate user credentials. The malicious crate had 1 version published on 2026-02-24 approximately 4 hours before removal and had no evidence of actual downloads. There were no crates...

Malicious code in @nazi-team/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35d42b676cf5fb92b36d77c6e032bdf4ebfda10a9fa26fa93be2d45a7e665ad8 The package @nazi-team/libsignal-node was found to contain malicious code. Source: ghsa-malware...

Malicious code in colorize-console (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f4e60bdcd92f4f5690797fa091f0acb0a463de5c353ded0f6f5e7317a2f84eb The package colorize-console was found to contain malicious code. Source: ghsa-malware a0e5faaa04c5e7d06c634dc2be1f148aa27acb8842f1731dad902bdb3e33d1...

Malicious code in @nazi-team/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe057f6743744866cb43bc64a47f0b4e814f4de1d503ea59e8b3db6b3880ad00 The package @nazi-team/baileys was found to contain malicious code. Source: ghsa-malware...

MAL-2026-1120 Malicious code in @nazi-team/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35d42b676cf5fb92b36d77c6e032bdf4ebfda10a9fa26fa93be2d45a7e665ad8 The package @nazi-team/libsignal-node was found to contain malicious code. Source: ghsa-malware...

MAL-2026-1119 Malicious code in @nazi-team/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe057f6743744866cb43bc64a47f0b4e814f4de1d503ea59e8b3db6b3880ad00 The package @nazi-team/baileys was found to contain malicious code. Source: ghsa-malware...

MAL-2026-1128 Malicious code in colorize-console (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f4e60bdcd92f4f5690797fa091f0acb0a463de5c353ded0f6f5e7317a2f84eb The package colorize-console was found to contain malicious code. Source: ghsa-malware a0e5faaa04c5e7d06c634dc2be1f148aa27acb8842f1731dad902bdb3e33d1...

Malicious Package

Overview @sanzxcode/libsignal-node is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in @sanzxcode/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15bab1682cf8fc2aaa7d7f45b24bd1bf279b1e823e8f1c59f6def120297bccc0 The package @sanzxcode/baileys was found to contain malicious code. Source: ghsa-malware...

Malicious code in @sanzxcode/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31f6946c2edfc02e3a350dd33240e415111649135472f9f5c1d4e22d74fa529d The package @sanzxcode/libsignal-node was found to contain malicious code. Source: ghsa-malware...

MAL-2026-1122 Malicious code in @sanzxcode/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31f6946c2edfc02e3a350dd33240e415111649135472f9f5c1d4e22d74fa529d The package @sanzxcode/libsignal-node was found to contain malicious code. Source: ghsa-malware...

MAL-2026-1121 Malicious code in @sanzxcode/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15bab1682cf8fc2aaa7d7f45b24bd1bf279b1e823e8f1c59f6def120297bccc0 The package @sanzxcode/baileys was found to contain malicious code. Source: ghsa-malware...

Malicious Package

Overview @daffadeveloper/baileys is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

MAL-2026-1118 Malicious code in @daffadeveloper/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c4d6e1233759183f848159d1b47ee443d914e4ce13251df4518a1a5becdbc6 The package @daffadeveloper/libsignal-node was found to contain malicious code. Source: ghsa-malware...

Malicious code in @daffadeveloper/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 443f6c930af301fb07e4cb5ec253084b9b1f6ca1847399be1ecdb9120056700b The package @daffadeveloper/baileys was found to contain malicious code. Source: ghsa-malware...

MAL-2026-1117 Malicious code in @daffadeveloper/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 443f6c930af301fb07e4cb5ec253084b9b1f6ca1847399be1ecdb9120056700b The package @daffadeveloper/baileys was found to contain malicious code. Source: ghsa-malware...

Malicious code in yuji-baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b7ba59a8cca0d955d0763a6cfa26acceb20506ce8f3fa0faef31d0cf59cf7c5 The package yuji-baileys was found to contain malicious code. Source: ghsa-malware 3303459ce999de4740a84cadfa5aa3bccefa3d5fb9520a67622b617efa5e7d1a A...

Malicious code in danzxz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4833c4fc240e2ee3782998738394ab42ff4d28ba2edcdf9e6aa97e195b12b32e The package danzxz was found to contain malicious code. Source: ghsa-malware 3426bcec6ad873a2aee246f7333e939a481c489dbbdffab631e2f588c421b629 Any...

Malicious code in sukuna-baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e07b29340747170d24de4cad05110d564fdbd92e9f3fbbd5af57ab84bf85e619 The package sukuna-baileys was found to contain malicious code. Source: ghsa-malware 5708a63cc8ed7f411f26a07bdf5a6653f438a103c0ddee8518c172f4adb73c73...

MAL-2026-1133 Malicious code in sukuna-baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e07b29340747170d24de4cad05110d564fdbd92e9f3fbbd5af57ab84bf85e619 The package sukuna-baileys was found to contain malicious code. Source: ghsa-malware 5708a63cc8ed7f411f26a07bdf5a6653f438a103c0ddee8518c172f4adb73c73...