MAL-2026-8708 Malicious code in slnprobe19 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-8546 Malicious code in rxlambjan (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-8366 Malicious code in oaklfjan9 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-8364 Malicious code in oaklfjan7 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-8080 Malicious code in m8405v2llz (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7980 Malicious code in lcalx1468283 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7807 Malicious code in lambhgproxy2oai (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7696 Malicious code in g8249sspor (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in daslam173851 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7503 Malicious code in aiwbizkcowwn (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7494 Malicious code in aiumidgzwyzv (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in pygremlinbox-malware-code-obfuscation (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7459 Malicious code in pygremlinbox-malware-c2-beacon (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-6891 Malicious code in tailwindcss-framer-motion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6dc5a8dd698d8d64c33611de6927d9f3df6f24d8948f0b9ed4ec9ca66c62e18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-6634 Malicious code in @multformats/multiaddr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3ff8f79934c43d48f410746d2fe1a9244365c8bac615e7552dcedbfae15b900 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-6668 Malicious code in player-theming (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e05a52956ea43decfbc163e23b0d1e03facc2d089ba9ec5182eecc322815874 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in syco1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e43be65a0930b121cf4d610c70b2d07165e4d335dece4344590b471d078fa5b5 Package self-describes as a 'System binary configuration tool' but ships a covert screen and clipboard surveillance overlay. pointer.py captures...

Malicious code in ts-bn-lint-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8847a06a4d25b751ec7d33732a23324a42d7b2775ce441811623500b7b60f267 Package masquerades as a TypeScript lint helper but ships a credential-harvesting payload in index.js. The exported fromstr recursively walks...

MAL-2026-6004 Malicious code in @mastra/blaxel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cecc2be49f20a0d56a77e30e6da0ad8716ecc2fe9410e6b83a93fbce2db5c66 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in @mastra/couchbase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 693f6ba494800c38ce77ad49fa5d74745125fc4d3bb68c047ea96032580b7a93 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...