MAL-2026-7503 Malicious code in aiwbizkcowwn (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7501 Malicious code in aiuzubwjbsoj (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7494 Malicious code in aiumidgzwyzv (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7464 Malicious code in pygremlinbox-malware-network-indicators (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7462 Malicious code in pygremlinbox-malware-cryptomining-indicators (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7463 Malicious code in pygremlinbox-malware-install-execution (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7460 Malicious code in pygremlinbox-malware-code-obfuscation (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7459 Malicious code in pygremlinbox-malware-c2-beacon (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7455 Malicious code in myproject234 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7453 Malicious code in cyberday26szymon-logging (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7452 Malicious code in cyberday26szymon-auth (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7450 Malicious code in security_hacks (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7449 Malicious code in hackney.core.jwt (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-6908 Malicious code in express-deflect (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 284d3f4c5f55f69391b1172ba9d2c714e3ae358a2c92a501049a1495547e1588 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-6907 Malicious code in chai-spycore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbb99516f251bbd13baae5273239a6a04acefea76ddf1a7b06f4b5a328339dae Package republishes the chai-spies Chai plugin source verbatim including original author header under the near-identical name chai-spycore...

GHSA-4HF7-XXXW-64RM

creationtimestamp| type| source ---|---|--- 2026-07-07 02:04:20+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpzjbl2rdb22...

CVE-2026-53645

creationtimestamp| type| source ---|---|--- 2026-07-07 00:54:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzfeaqomd27 2026-07-07 02:04:20+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpzjbl2rdb22...

CVE-2026-48267

creationtimestamp| type| source ---|---|--- 2026-07-06 21:30:17+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpyzxkmtxx2b...

Malicious code in winston-prism (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06134c2a9c642914c91312e4d0184158fda282ec1bb3715fc143e7834993e266 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-6903 Malicious code in windrule-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12204dba8f73baf0bb7f6ce1ebd80bb2ce689752abaea290e1429aed4037bb9c No suspicious behaviors were observed in this package version. There are no lifecycle scripts fetching or executing remote code, no hardcoded...