MAL-2026-10897 Malicious code in golan125-homepage-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 705b0dc2e3b9aafb6d0e72ecb5ad51d873cd59104a045f74bb27161c87a24960 Package self-identifies as a security research test 'Security research test - do not install'. The package.json homepage field contains...

Malicious code in golan125-homepage-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 705b0dc2e3b9aafb6d0e72ecb5ad51d873cd59104a045f74bb27161c87a24960 Package self-identifies as a security research test 'Security research test - do not install'. The package.json homepage field contains...

MAL-2026-10896 Malicious code in flow-eslint-oxidized (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in exodus-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b10e41b9a87dc4927d3c4bc63b25bc1fa438cfae1bcf5f1d483204a18d5765f6 Package exodus-checkout self-identifies as a security-research dependency-confusion proof-of-concept targeting an internal Exodus payments SDK. It...

MAL-2026-10894 Malicious code in exodus-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b10e41b9a87dc4927d3c4bc63b25bc1fa438cfae1bcf5f1d483204a18d5765f6 Package exodus-checkout self-identifies as a security-research dependency-confusion proof-of-concept targeting an internal Exodus payments SDK. It...

MAL-2026-10892 Malicious code in claude-code-timer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04950731ec6589eebae22166fb042e4253719f71bfd3fc2b58f28d26ede9e43c [email protected] was scanned with no findings of concern. No install-time lifecycle scripts, no outbound network calls to attacker-controlled...

Malicious code in bytecraft (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b4433b369e2ff82bc33b11110ddfa63c15a2d685bf3484fb37092ae4bd077f No suspicious behavior was identified in this version of bytecraft. There is no evidence of install-time network activity, lifecycle scripts fetching...

Malicious code in analysis-chart (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-10889 Malicious code in @public-for-cdao/utils (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @public-for-cdao/backend (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-10879 Malicious code in @dxcl/user-js (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @dxcl/transaction-js (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @dxcl/log-function-js (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-10875 Malicious code in @dxcl/http-common-js (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-10872 Malicious code in @dxcl/account-js (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @azure-lab-services/ml-ts (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious Package

Overview @gocortexio/npmgremlinbox-typosquat-express is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...

Malicious Package

Overview @gocortexio/npmgremlinbox-sspl-1-0 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

Malicious Package

Overview @gocortexio/npmgremlinbox-osl-3-0 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

MAL-2026-10850 Malicious code in @gocortexio/npmgremlinbox-tapr-ohl-1-0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0fbd65fb65b76a2422d3780b7c2c82554753c78740a272f5c064d40fa239437 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...