Malicious Package

Overview auth-app-streamlit is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview trongridor is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

MAL-2026-15598 Malicious code in verify-contract-ethers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec7cfabb396e93e034caeb560ea029e3ca2bde784b8c713d5f8941a2b621dd36 The package ships a single bin entry bin/cli.js that, when invoked, runs whoami and POSTs the package name, username, hostname, and platform to a...

Malicious code in verify-contract-ethers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec7cfabb396e93e034caeb560ea029e3ca2bde784b8c713d5f8941a2b621dd36 The package ships a single bin entry bin/cli.js that, when invoked, runs whoami and POSTs the package name, username, hostname, and platform to a...

Malicious code in fuels-typegen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4dcadcdf880021763232df96239a6a07acd6360bfcd941ae8026a37aee2eb2f The package name resembles the legitimate @fuel-ts/typegen. On execution of the CLI in bin/cli.js, the code collects the local username whoami /...

MAL-2026-15593 Malicious code in fuels-typegen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4dcadcdf880021763232df96239a6a07acd6360bfcd941ae8026a37aee2eb2f The package name resembles the legitimate @fuel-ts/typegen. On execution of the CLI in bin/cli.js, the code collects the local username whoami /...

Malicious code in cre-setup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcc14c964a76dde24165930e971dac9a2a9f36ecae68d596c7bf920cac8e1c29 bin/cli.js collects the current user whoami/os.userInfo, os.hostname, and os.platform and POSTs them, along with URL query parameters carrying the sa...

MAL-2026-15591 Malicious code in cre-setup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcc14c964a76dde24165930e971dac9a2a9f36ecae68d596c7bf920cac8e1c29 bin/cli.js collects the current user whoami/os.userInfo, os.hostname, and os.platform and POSTs them, along with URL query parameters carrying the sa...

Malicious code in verify-contract-viem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1037ebeeb5eff8da3b46c8275a09151604157ddc24db244d76d27d97bfdddad bin/cli.js executes whoami and reads os.hostname / os.userInfo / os.platform, then POSTs those values to the hardcoded endpoint...

MAL-2026-15599 Malicious code in verify-contract-viem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1037ebeeb5eff8da3b46c8275a09151604157ddc24db244d76d27d97bfdddad bin/cli.js executes whoami and reads os.hostname / os.userInfo / os.platform, then POSTs those values to the hardcoded endpoint...

MAL-2026-15595 Malicious code in generate-schema-viem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82b43ea1e723ebd0c0ef5c4cd564b106089f9b5f9fd119dcac26dc1e130a14bf Package publishes as generate-schema-viem but exposes a bin named generate-schema-ethers a dependency-confusion / typosquat shape against the...

Malicious code in generate-schema-viem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82b43ea1e723ebd0c0ef5c4cd564b106089f9b5f9fd119dcac26dc1e130a14bf Package publishes as generate-schema-viem but exposes a bin named generate-schema-ethers a dependency-confusion / typosquat shape against the...

MAL-2026-15592 Malicious code in fuels-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c632848960231dec103d878a13a714e057a5922edcc0398884b6fd6d621e0971 The package's bin script bin/cli.js collects whoami, os.hostname, and os.platform and POSTs them along with the package name to a hardcoded Cloudflar...

Malicious code in fuels-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c632848960231dec103d878a13a714e057a5922edcc0398884b6fd6d621e0971 The package's bin script bin/cli.js collects whoami, os.hostname, and os.platform and POSTs them along with the package name to a hardcoded Cloudflar...

Malicious code in generate-schema-ethers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 794f10449a8a47c4428b68edcff212be94917e229322394e9dda43e4c5b2b2e0 On require/npx invocation, bin/cli.js runs whoami and POSTs the OS username, hostname, platform, and package name as JSON to the hardcoded URL...

MAL-2026-15594 Malicious code in generate-schema-ethers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 794f10449a8a47c4428b68edcff212be94917e229322394e9dda43e4c5b2b2e0 On require/npx invocation, bin/cli.js runs whoami and POSTs the OS username, hostname, platform, and package name as JSON to the hardcoded URL...

MAL-2026-15578 Malicious code in trongridor (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 46fcd4ed6da56295fe0a0b4a25cbaf848f10874c6905723472a57e7f59341341 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

Malicious code in trongridor (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 46fcd4ed6da56295fe0a0b4a25cbaf848f10874c6905723472a57e7f59341341 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

MAL-2026-15575 Malicious code in opiumbest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d3c33077e46f79b1a53edad20c8cb8c7fc67c5cbedd8406257cb5ce9581097 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in opiumbest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d3c33077e46f79b1a53edad20c8cb8c7fc67c5cbedd8406257cb5ce9581097 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...