Malicious code in eslint-plugin-executable-stories-vitest (npm)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security a6c7977dbc054cdb7fe56da0d2fbd26e2a6fed695deb4263ccbf4adfedd86acb The Miasma malware is a self-propagating worm that spreads across the npm registry by abusing weaponized binding.gyp files to achieve...

MAL-2025-147913 Malicious code in shelljs-farout-indus-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73d33e3ffe2787112ac2001ee15ede2dc2229ab29e8c9e967d06ea9ab158c0c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in esqstrintelsplit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 44bd8c9c505aac9a3c0174a080649b232991699c662a0bf2a4f4b7506e895a89 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in httpram (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 723a1354fa76a803fbcdba3b9dbc9439edf93c9558bdffa98083cedf25246066 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in minepyw (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx deb92e1ce70140c23dff40f129180ca4a77342ea245c3e69f1a528a8398ab735 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...