MAL-2026-9760 Malicious code in zrzjj4 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-9523 Malicious code in xe159448863 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-9474 Malicious code in wprwn3xyz (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-9401 Malicious code in wmwk5nobab (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-9337 Malicious code in wgsfmore73 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-9270 Malicious code in wandsdock7wre22semijan (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in slnprobe25 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in oakmi17400 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-8114 Malicious code in mytemptest1778551000 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in m8402v3uig (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7772 Malicious code in hwc4v (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in eiljtiiahbuj (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7583 Malicious code in chmid7000x584110 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7495 Malicious code in aiuovjltsvrq (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7475 Malicious code in agfossgrant23 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @higherlogic/ocfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2bbd559291bd6c2d7889aebe011bb43bef61938171904f5c9ff378f33fd9e5e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-6911 Malicious code in @higherlogic/ocfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2bbd559291bd6c2d7889aebe011bb43bef61938171904f5c9ff378f33fd9e5e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zluri-ad-connector (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b7a807f066f0255f7480ebd7d445043282260b464b0ef54a32a2d022c93bbf7 The package declares a preinstall hook node index.js that runs automatically on npm install. index.js requires os, dns, https, querystring, and the...

MAL-2026-6910 Malicious code in zluri-ad-connector (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b7a807f066f0255f7480ebd7d445043282260b464b0ef54a32a2d022c93bbf7 The package declares a preinstall hook node index.js that runs automatically on npm install. index.js requires os, dns, https, querystring, and the...

Malicious code in express-mongo-limit (npm)

The npm package express-mongo-limit masquerades as an Express/MongoDB payload sanitization middleware likely typosquatting express-mongo-sanitize but is a credential stealer, remote-code-execution backdoor, crypto clipboard hijacker, and screenshot spyware. It declares a postinstall: node index.j...