Malicious code in vfgnhlkxchrd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8d278c0d7ee5dd3f8e12e924051d7e4d77afc4e12b408e6cb1e089071fde5ec [email protected] contains a single HTML file referenced as the package main that mimics a Cloudflare 'Just a moment...' challenge. Embedded...

Malicious code in vkldhcmieru6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25890a37fa8da48d2dc2868e010cef8cb3427faa42218cec4b858ac82db679d7 The package contains only index.html declared as main in package.json and a minimal package.json with no lifecycle scripts. The HTML impersonates a...

Malicious code in xcnvjfsiewlk9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 062503dc8980c1ade02ac4fc0566a94d40b85c0a634da8b00a941f9acfcf9747 The package's sole content is an index.html disguised as a Cloudflare Turnstile 'Just a moment...' verification page. The HTML contains...

Malicious code in xhjckswqivb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a9d37b433e22c980e67c0a2991612592959f6998df3928a6a09792ecf4860bb Package contains only index.html and package.json. The HTML mimics a Cloudflare Turnstile challenge and, when loaded in a browser, assembles an...

Malicious code in hcfguyfrmblp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f806fc6db71a1b888ba1f86d790b7a2866b4911e7f77ade2d375237e8c0a6ea2 The tarball contains only package.json and index.html, with no lifecycle scripts and main set to index.html. The HTML page mimics a Cloudflare...

Malicious code in cvvkshuelwiu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de3f325329894b841474989d30370570a7f1b68d02334db1b98dcaf109899fa9 Package [email protected] contains 2 files with no a static rule matches and no traced behaviors of concern. No install-time scripts, network...

Malicious code in fghvbmniwu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8623e3b9a84e8cbe5910bc3d683f19629c49b9d3f0a2e00ab771901efef8146a Package contains a single index.html declared as main, which is a Cloudflare-branded 'Just a moment...' clone embedding a Turnstile widget and heavil...

Malicious code in mnzjgxciwadk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cccb5ec6b21fbd7d0b720bf6dd7257a5b6e0e9428fe55d8197fccec53c79a662 The package contains a single file, index.html, which is also declared as the package main. The HTML presents a Cloudflare Turnstile-styled challenge...

Malicious code in khanbmnxls (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2170fddb23040b2e55eeeb17188244072efdef033879036b45865f5b84ef7346 The package contains a single index.html that impersonates a Cloudflare Turnstile 'Just a moment...' challenge page. The inline JavaScript is heavily...

Malicious code in bgzxcuite2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc7e4c75a05788e3a757fe3ce7fc683bac9c90d12967dcf8430986799bc58fb8 Package's main entry is index.html, a page styled as a Cloudflare Turnstile challenge. The inline script is obfuscator.io-obfuscated and, after the...

MAL-2026-13808 Malicious code in fghvbmniwu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8623e3b9a84e8cbe5910bc3d683f19629c49b9d3f0a2e00ab771901efef8146a Package contains a single index.html declared as main, which is a Cloudflare-branded 'Just a moment...' clone embedding a Turnstile widget and heavil...

MAL-2026-13820 Malicious code in khanbmnxls (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2170fddb23040b2e55eeeb17188244072efdef033879036b45865f5b84ef7346 The package contains a single index.html that impersonates a Cloudflare Turnstile 'Just a moment...' challenge page. The inline JavaScript is heavily...

Malicious code in vlbhvgovbbhfab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5b717c270d7c4f965a421923d78bff7a86b044999f557386a258c7050768620 Package [email protected] contains 2 files. No install-time lifecycle scripts, exfiltration primitives, hardcoded network destinations,...

Malicious Package

Overview vfgnhlkxchrd is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-13833 Malicious code in prezdentkxheiw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b524c1b4d84ba3f109eddb254753a02dac72fa61397c4f03dbcbb814c6aaa68f The package contains only index.html declared as main and package.json. The HTML impersonates a Cloudflare 'Just a moment...' challenge and includes ...

MAL-2026-13785 Malicious code in bgzxcuite2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc7e4c75a05788e3a757fe3ce7fc683bac9c90d12967dcf8430986799bc58fb8 Package's main entry is index.html, a page styled as a Cloudflare Turnstile challenge. The inline script is obfuscator.io-obfuscated and, after the...

MAL-2026-13840 Malicious code in vfgnhlkxchrd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8d278c0d7ee5dd3f8e12e924051d7e4d77afc4e12b408e6cb1e089071fde5ec [email protected] contains a single HTML file referenced as the package main that mimics a Cloudflare 'Just a moment...' challenge. Embedded...

MAL-2026-13816 Malicious code in hxckdoeaqjlc8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d324cd3fd06a0d97ae5fb9263df818bc505d28ebcdda8e90814b5630de70e108 The package ships a single HTML file that impersonates Cloudflare's 'Just a moment...' interstitial. On Turnstile widget callback, embedded JavaScrip...

MAL-2026-13811 Malicious code in hcfguyfrmblp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f806fc6db71a1b888ba1f86d790b7a2866b4911e7f77ade2d375237e8c0a6ea2 The tarball contains only package.json and index.html, with no lifecycle scripts and main set to index.html. The HTML page mimics a Cloudflare...

MAL-2026-13825 Malicious code in mnzjgxciwadk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cccb5ec6b21fbd7d0b720bf6dd7257a5b6e0e9428fe55d8197fccec53c79a662 The package contains a single file, index.html, which is also declared as the package main. The HTML presents a Cloudflare Turnstile-styled challenge...