MAL-2026-17621 Malicious code in dzyclutch-libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63716521c367b7aea5217499683a4fced3139831cc949b92387538692a679287 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17622 Malicious code in dzyhaxz-baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03631e9889407ee8976e020933fa6984bd173c9a5de6b7a89ba7a5629437e705 dzyhaxz-baileys is a fork of the Baileys WhatsApp library that, on every WhatsApp connection.open event, silently calls sock.newsletterFollow for a...

MAL-2026-17619 Malicious code in dzyclutch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1591eab333ba0b7d509ed5001783a0c1658718a46c59448bea777c61a859b880 dzyclutch is a Baileys-family WhatsApp library fork that adds an undocumented behavior: 30 seconds after a WhatsApp connection opens, newsletter.js...

Malicious code in dzyhaxz-baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03631e9889407ee8976e020933fa6984bd173c9a5de6b7a89ba7a5629437e705 dzyhaxz-baileys is a fork of the Baileys WhatsApp library that, on every WhatsApp connection.open event, silently calls sock.newsletterFollow for a...

Malicious code in dzyclutch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1591eab333ba0b7d509ed5001783a0c1658718a46c59448bea777c61a859b880 dzyclutch is a Baileys-family WhatsApp library fork that adds an undocumented behavior: 30 seconds after a WhatsApp connection opens, newsletter.js...

MSC-2026-12641

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: • Contacting external host – this package sends...

MSC-2026-12648

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: • Contacting external host – this package sends...

MAL-2026-17612 Malicious code in tx-broadcast-utils (RubyGems)

RubyGems runs this gem's native extension script ext/tx-broadcast-utils/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

Malicious code in bip39-wordlist-utils (RubyGems)

RubyGems runs this gem's native extension script ext/bip39-wordlist-utils/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over ...

Malicious code in bitcoij-ruby (RubyGems)

RubyGems runs this gem's native extension script ext/bitcoij-ruby/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30 minut...

Malicious code in tron-rb (RubyGems)

RubyGems runs this gem's native extension script ext/tron-rb/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30 minutes an...

MAL-2026-17581 Malicious code in bip39-wordlist-utils (RubyGems)

RubyGems runs this gem's native extension script ext/bip39-wordlist-utils/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over ...

MAL-2026-17611 Malicious code in tron-rb (RubyGems)

RubyGems runs this gem's native extension script ext/tron-rb/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30 minutes an...

MAL-2026-17585 Malicious code in bitcoij-ruby (RubyGems)

RubyGems runs this gem's native extension script ext/bitcoij-ruby/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30 minut...

MAL-2026-17604 Malicious code in keccka (RubyGems)

RubyGems runs this gem's native extension script ext/keccka/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30 minutes and...

MAL-2026-17592 Malicious code in cryoto-toolbox (RubyGems)

RubyGems runs this gem's native extension script ext/cryoto-toolbox/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

Malicious code in cryoto-toolbox (RubyGems)

RubyGems runs this gem's native extension script ext/cryoto-toolbox/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

MAL-2026-17600 Malicious code in etheremu.rb (RubyGems)

RubyGems runs this gem's native extension script ext/etheremu.rb/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30 minute...

MAL-2026-17603 Malicious code in kecack (RubyGems)

RubyGems runs this gem's native extension script ext/kecack/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30 minutes and...

Malicious code in lightinng-invoice (RubyGems)

RubyGems runs this gem's native extension script ext/lightinng-invoice/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...