1028 matches found
MAL-2026-10524 Malicious code in @velkov/isows (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fee1d7d5125231d00f9c5f9afe9817b76900ca385b7d077bb4b8bcf3d9ca660 Package is published as @velkov/isows while its README, repository wevm/isows, description "Isomorphic WebSocket", and author jxom.eth impersonate th...
Malicious code in node-sysmon-native (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 612887c8528ff96b3bc3a61d678b6376099480c080d2d8a0960fe7798ac25f33 On module load, index.js reconstructs a hex-encoded URL Buffer.from'687474703a2f2f3135322e35332e3132302e39302f636d64','hex' that decodes to...
MAL-2026-10259 Malicious code in abuden216 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 136d8dabbba25b7fb10fa921d1eafe01d4f6710465dfc33ad213f02043973b49 The tarball ships auto-publish.sh, a script that republishes the same payload under 100 distinct npm names ishowfeet1-ishowfeet20, nottuff1-nottuff30...
MAL-2026-10357 Malicious code in nottuff5 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e18070e680629849560dab1723a73f80d61312d0a9efe429b0c8f43b2177bbd The tarball ships auto-publish.sh, a script that republishes the same payload under 100 distinct npm names ishowfeet1-ishowfeet20, nottuff1-nottuff30...
MAL-2026-10094 Malicious code in @equansservices/setup (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b071598889a04c74a8398157555ccfffda5bbc713429df4cafbcf48df7f811af package.json declares a postinstall hook node setup.js that fires automatically on npm install. setup.js selects a platform-specific target and fetch...
MAL-2026-10033 Malicious code in @wagni_bot/polymarket-sdk (npm)
The npm package @wagnibot/polymarket-sdk is a supply-chain credential stealer disguised as a Polymarket SDK. It is one member of a coordinated campaign of 25 crypto/web3 typosquat packages published under the single npm scope @wagnibot on 2026-07-09. Each package declares a postinstall lifecycle...
Malicious code in events-alias (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 164642716a755117674746c1c2534b0ac47d56bed2348e7a800c3d37a98074e9 The package's preinstall hook "node index.js" runs automatically on npm install and executes an exfiltration payload. index.js requires childprocess,...
MAL-2026-7090 Malicious code in @spinstorm/derng (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9962 Malicious code in zzpdfvar05 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9848 Malicious code in zwcalx5 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9810 Malicious code in ztestlamb01 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9787 Malicious code in zsday2811778553469 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9529 Malicious code in xla11778568189 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9413 Malicious code in wn5wknotxt1 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9366 Malicious code in wjin3 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9336 Malicious code in wgsfmore63 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9275 Malicious code in wandshack2 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in wandczvof10hg (RubyGems)
--- -= Per source details. Do not edit below this line.=-...