Malicious code in eslint-plugin-executable-stories-vitest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37cda64660196ba2834eebfa1c7c1debc8367bb89d9b953d1c01fa0c5b722e7a The package was found to contain malicious code or consuming dependency that contains malicious code Source: google-open-source-security...

MAL-2025-147913 Malicious code in shelljs-farout-indus-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73d33e3ffe2787112ac2001ee15ede2dc2229ab29e8c9e967d06ea9ab158c0c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in esqstrintelsplit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 44bd8c9c505aac9a3c0174a080649b232991699c662a0bf2a4f4b7506e895a89 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in httpram (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 723a1354fa76a803fbcdba3b9dbc9439edf93c9558bdffa98083cedf25246066 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in minepyw (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx deb92e1ce70140c23dff40f129180ca4a77342ea245c3e69f1a528a8398ab735 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...