Malicious code in lodahsjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e9c02962476bddd8c1cde1b5c222ee420f4957a1e4ce3a906a3c9d36fda6318 Package name typosquats 'lodash'; index.js exports nothing. scripts/postinstall.js runs at install time and performs two hostile actions. First, it...

Malicious code in mutex-thread (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e142539248a690ef78ebe7ceeaa4c16e9903107a04704e1947cf296bce543097 The package presents itself as a mutex library but lib/Mutex.js contains an injected branch in runExclusive that, when a caller passes...

Malicious code in @library-dev-team/data-sanitizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec70432fa5463156a41cb4031ccdd89aa76b724eaac0c6e8e61949cb18403d02 The package's main entrypoint runs an unconditional IIFE at require time that reads .env from the current working directory and extracts values label...

MAL-2026-14157 Malicious code in typscript-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5120bfde64344d0e161bac3b4128d7eeecc483ad796361db09eacd138ecd3945 typscript-core is a typosquat of the 'typescript' package. Its scripts/postinstall.js reconstructs a GitHub download URL and shell commands from byte...

Malicious code in typscript-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5120bfde64344d0e161bac3b4128d7eeecc483ad796361db09eacd138ecd3945 typscript-core is a typosquat of the 'typescript' package. Its scripts/postinstall.js reconstructs a GitHub download URL and shell commands from byte...

Malicious code in typscript-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1425e6f0bb2305eeddecaab5403e09ead0e8f60b9b1f817581a343cb5a3dd062 typscript-cli is a typosquat of 'typescript' index.js exports an empty object; no library functionality. Its scripts/postinstall.js is the only...

MAL-2026-14156 Malicious code in typscript-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1425e6f0bb2305eeddecaab5403e09ead0e8f60b9b1f817581a343cb5a3dd062 typscript-cli is a typosquat of 'typescript' index.js exports an empty object; no library functionality. Its scripts/postinstall.js is the only...

MAL-2026-14154 Malicious code in typesript-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ac32bb6c3db806740bda125cf58a8f348256baa021b0a6c7b901ebb86720505 Package name is a one-character typosquat of the widely-used 'typescript' family. On npm install, scripts/postinstall.js XOR-decodes key 'stf2026' a...

Malicious code in typesript-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8b6f2a112a6a6d3b065b205c4cbb1d8183340054a2d57d7697360e30dbdccd9 [email protected] is a typosquat of 'typescript' whose index.js is an empty object; the package has no library functionality. Its only behavior is...

MAL-2026-14155 Malicious code in typesript-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8b6f2a112a6a6d3b065b205c4cbb1d8183340054a2d57d7697360e30dbdccd9 [email protected] is a typosquat of 'typescript' whose index.js is an empty object; the package has no library functionality. Its only behavior is...

MAL-2026-14152 Malicious code in typescriptt-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b701541fd1cac460b8ab9a3e24dd1d0e476965e4d247826f5108e4a8eb6996d8 typescriptt-core is a typosquat of the TypeScript ecosystem double-t with an empty main module.exports = and no library functionality. The only code...

Malicious code in typescriptt-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b701541fd1cac460b8ab9a3e24dd1d0e476965e4d247826f5108e4a8eb6996d8 typescriptt-core is a typosquat of the TypeScript ecosystem double-t with an empty main module.exports = and no library functionality. The only code...

Malicious code in typescirpt-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef20a464d9f616eecfd6457a02895da80d1fabf558ef49de83dca18046551e90 Package name 'typescirpt-core' typosquats 'typescript'. scripts/postinstall.js runs automatically on npm install and posts a JSON platform beacon to ...

MAL-2026-14149 Malicious code in typescirpt-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef20a464d9f616eecfd6457a02895da80d1fabf558ef49de83dca18046551e90 Package name 'typescirpt-core' typosquats 'typescript'. scripts/postinstall.js runs automatically on npm install and posts a JSON platform beacon to ...

MAL-2026-14150 Malicious code in typescrip-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44399cd197dfa6f24adf7c96a380d2e0c95a4123d8c14932ceb0a85e32ebc9b9 Package name 'typescrip-cli' typosquats 'typescript-cli'; index.js exports an empty object and the package has no library functionality...

Malicious code in typescrip-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44399cd197dfa6f24adf7c96a380d2e0c95a4123d8c14932ceb0a85e32ebc9b9 Package name 'typescrip-cli' typosquats 'typescript-cli'; index.js exports an empty object and the package has no library functionality...

MAL-2026-14148 Malicious code in typescirpt-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09d82fa51e42e6766fe0819517e9fb5be633702a0e22cb4da05d8920cb413c53 The package's postinstall script scripts/postinstall.js XOR-decodes obfuscated byte arrays using the key 'stf2026' to reconstruct a download URL and ...

MAL-2026-14151 Malicious code in typescriptt-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 023f754538f603fbb5379ee8be82cb9524f710495e5dddc4e631e5aafbf323b5 typescriptt-cli is a typosquat of typescript-cli whose index.js is an empty module; its only real behavior is in scripts/postinstall.js. On npm...

Malicious code in tyepescript-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2ba91f9b227b017ddbfa6a908a0a8f0263292a0af2c11aeef0ccd24b2894862 Package name 'tyepescript-core' is a typosquat of 'typescript'; the module itself exports an empty stub. scripts/postinstall.js XOR-decodes byte arra...

MAL-2026-14145 Malicious code in typecript-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03604fc37a8607bf5c14f409dc9d13308bff3e7ec145de955ae13a07c13da92e [email protected] is a typosquat of 'typescript' whose scripts/postinstall.js performs an install-time dropper attack. Payload strings are stored a...