MAL-2026-18061 Malicious code in ccl-global-shopping (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 31f39d40e2c7700b1c070cbd26ea533789dc444daaf58e77d191f7eb10036fc9 The OpenSSF Package Analysis project identified 'ccl-global-shopping' @ 99.9.1 npm as malicious. It is considered malicious because: - The packa...

MAL-2026-18062 Malicious code in sc-wizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 54691cc130e614ee031186f7e646c3e6076efad6105a6e9cad68f62aa736516b The OpenSSF Package Analysis project identified 'sc-wizard' @ 99.9.1 npm as malicious. It is considered malicious because: - The package...

CVE-2024-3094-Vulnerabity-Checker

CVE-2024-3094-Vulnerabity-Checker Verify that your XZ Utils version is not vulnerable to CVE-2024-3094 ┌──lypd0㉿kali- └─$ ./CVE-2024-3094checker.sh / / \ / \ \ /. | / \ / \ /. | \ / / / / / \ \ / \ / / / / / You are NOT vulnerable to CVE-2024-3094. Background CISA Cybersecurity and...

Malicious code in @an1mshnpmb9c84920/pipe-dns-m19t2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 548a4b4d6c63df4cc62bd7e753758dc32f98b3ed9adb7fbee204493838614eea The package's prepare lifecycle script executes index.js, which builds a subdomain string from the installer's hostname and the npm lifecycle event...

MAL-2026-18054 Malicious code in @decoopus/claude-setup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1329498b9f2a24897a73f2e5d2d0ffb8ea848d5f6699a703fa88dcbe8b578852 The CLI prompts the user for an Anthropic API key sk-ant-... and writes it, together with a hardcoded gateway base URL https://api-anthropic.help, in...

Malicious Package

Overview vinted-mocked-apis is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-17952 Malicious code in 8i7pp4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c623f39e0d4b0b51a05de329eccc8daa9ea567d83dc8365f3523462b2bd08b09 Package 8i7pp4 version 0.0.0-stage contains only two files and no detected behaviors of concern. There are no lifecycle scripts fetching or executing...

Malicious code in dsjklweuvhgsdcq (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 920a2b5125f18a77594d8cbc33936a2c0aa1ff3a3a885c3910ac9fc86c738159 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mxckjdgweuxpsiohd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac994d415521db946a7f88a0915ff5e7b89d53569d4227980d3a9832f06ec3e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zxhgssiyluwxchn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e026531d4c72147180eef854ceee292ef8cf4da100b348ff7eb526734c249d64 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nsdhjuiwqxmhsf1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c744817916474123d9e76c5a569eb6c71387549bdfe29cd4c99dc0e6182d134 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mx3dxhgic8xhd6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c845fb0cbb218ab8c1affe9c9964c9c2fd342e6b70070115f93fdd5ef4e8cca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview a-vailable-al-bum-file-36850-other-peoples-lives-vys1z-fuucqk is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection...

Malicious Package

Overview mp3-do-wnload-file-to-day-d-nu951-cjkdsy is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organizati...

Malicious Package

Overview 4p9kgm is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview avail-able-albu-m-down-load-almanac-tdedm-bajrnj is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...

Malicious Package

Overview new-al-bum-av-ailable-131000-eton-alive-qzngy-cjxczf is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between tha...

Malicious Package

Overview 5k5t5q is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview a-lbum-do-wnload-avai-lable-file-10635-about-to-choke-pzt0k-onnsvp is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connecti...

Malicious Package

Overview mp3-do-wnload-file-to-day-27091-usa-united-state-of-atlanta-xoisl-pqpsio is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no...