MSC-2026-11527

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: • Contacting external host – this package sends...

MAL-2026-15603 Malicious code in pyservercheck (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d10f01e2954dde5faac23074d02bb989f22d0dcb78be82c1c4417531fef8b859 The package ships a bundled Node script pyservercheck/js/main.js whose visible top half is a healthcheck stub matching the README, followed by a long...

MAL-2026-15601 Malicious code in eslint-prettier-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 657c75af75154da75ac5073b9dcea65c04bdb3f493f3a72d79f1847df90bf449 The package's postinstall hook runs index.cjs's onInstall, which performs await fetch"https://2939e69fc408.ngrok-free.app/stats" and passes the...

Using Hyper-V Sockets for Real-Time Data Extraction from a Malware Analysis Sandbox

We present how Hyper-V sockets can be used as a real-time communication channel for a malware analysis sandbox. We show that, compared to WinSock TCP sockets, Hyper-V sockets are not subject to TCP/IP-layer blocking and are not enumerated by common TCP connection listing tools. We compare the...

Harden-Windows-Security HardenSystemSecurity-v1.0.80.0

Harden Windows Security | A New Threat to Malware Harden Windows Safely, Securely, Only With Official Microsoft Methods How To Use Related Trust Support Security Recommendations Resources License Wiki Basic FAQs Roadmap Donation !IMPORTANT Here are Quick Access Points to Important Sections of thi...

Malicious code in brat-codex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c333154957d5d184f708ad5a73487dedde9f9e3600564467a69d6620a6cc3f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in nuvyra-marketplace-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5db08e65aec25f1dc4fd0c33173154dbd0e6ef6e79aa2f1b7f8b4f8df0b9a3a8 dist/client.js executes initializeProvider at module top level, so the code runs whenever a consumer requires or imports this SDK. The function...

systeminformer v4.0.26241.138

System Informer A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc...

Malicious code in loading-performance-instrumentation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27dab9307010475c57195f838ba7d7299fe4a753b92926536aa8376f8d096150 package.json line 11 declares a dependency whose source is a bare URL rather than a registry version range: "loading-performance-instrumentation":...

MAL-2026-15493 Malicious code in ozturk-mfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99e9596887f3f2f79c96c517c99990def7caa32883f97e9486ed2b52e1e90cdf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eip712-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bb8d4640ca63919533ea826766c735fb8a8bdf8501bb33187ae30f905d82fc2 index.js contains an IIFE that fires on require and walks the installer's home and project directories collecting.env files filtered by...

MAL-2026-14872 Malicious code in 3layerdipstackpcv17m (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 341115d5cb8bd44ffcf82bc4d8d35f995473df6f24abccb910c9c16fb70cea36 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14771 Malicious code in 3layerdipstackhcymwm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f9ceeb1377cded900160b5cde819d2490edebf76264bed649b7ccec5cb013f7 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstack74ooau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3c87f721e29042d053778452bffe7e6a3756bc0b4b77ae76bdba347a646a30b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackvcdkrp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e942d987e7abce19624bf16a6e376f8a607a87d963d8838737e7b923b0ab4b92 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstack6ih5ru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20a2c09619d3e25f0b44bfcaaac14edd03b62c113f3fb7d3fc88e29bc27a986d The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackmokfkh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da015575c29fe6af032ba0c966d1adcdab17b367ca32bfb54fb11bbcfa4d890c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 3layerdipstackvdy7nf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb8345a33d68a541bbd486d2095eda3279011cc8dbc69d8dafcbef98551eedc4 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14859 Malicious code in 3layerdipstackoj4nf9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 968e6bdb11b4ae272e4d6e1aba1ea5e06d56e607a5ff9b93969936dd0bca2c48 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14954 Malicious code in 3layerdipstackuyd45d (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92b49a0c197bc8d1d72c142586ce6a7b4c6a6694574fb33ced9f7a770f046bae The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...