104 matches found
MAL-2026-10912 Malicious code in shark-e2e-bnsneo (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d634ef25cc07c2f00565518ab2cd2484a0dbf70a5d32d81376f3f7592bd1804 On import, init.py decodes a base64-encoded string and passes it to exec inside a syncmoduledocs helper invoked at module top level. The decoded...
MAL-2026-7390 Malicious code in revactjs (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7222 Malicious code in bitu-sdk (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-3511 Malicious code in @mistralai/mistralai-azure (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af58e099ab615b8869cb741b5604f6becdf1e9d1d7c5ac326f9c4065f5f590f6 The package @mistralai/mistralai-azure was found to contain malicious code. Source: ghsa-malware...
Malicious code in yahoo-commerce (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3725b1c28bf27cb9ae988e61fc0c7b790b588587cef59086e7d63460f2241a9 The package yahoo-commerce was found to contain malicious code...
Malicious code in prometheus-analysis-1 (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-495 Malicious code in h-jsencrypt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb69a1fb2f3c3ef16b7e30994095eb335b41563a498523667d83d60ed0c56c60 The package h-jsencrypt was found to contain malicious code. Source: ghsa-malware a2cacebaa99bf1715c395ba91c26e95c4ce77af5a16cbbcc4e5041c2a47b4143 An...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
EUVD-2025-198824
Malicious code in n8n-nodes-tmdb npm...
MAL-2025-190548 Malicious code in node-calculator-yktt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3a4c2bf374bfe7c2f8cf69a7d628dbcbb3716ea9cc863174110c09f490577c7 The package node-calculator-yktt was found to contain malicious code...
EUVD-2025-134208
Malicious code in lookingan-jaja35 npm...
EUVD-2025-134790
Malicious code in anabuyil-na0n-nitnualuki npm...
EUVD-2025-144072
Malicious code in nabuf-ogaf-doifaogako npm...
EUVD-2025-120233
Malicious code in xerxes-astro-axios-rocket npm...
EUVD-2025-102632
Malicious code in riana-mendoan50-riris npm...
EUVD-2025-102967
Malicious code in prospectivechickenz3n npm...
EUVD-2025-105999
Malicious code in continuingguppyz3n npm...
EUVD-2025-96312
Malicious code in nadia-serimuka24-breki npm...