137299 matches found
Malicious code in bytecraft (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-10889 Malicious code in @public-for-cdao/utils (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-10879 Malicious code in @dxcl/user-js (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-10875 Malicious code in @dxcl/http-common-js (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-10872 Malicious code in @dxcl/account-js (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-10850 Malicious code in @gocortexio/npmgremlinbox-tapr-ohl-1-0 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0fbd65fb65b76a2422d3780b7c2c82554753c78740a272f5c064d40fa239437 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10839 Malicious code in @gocortexio/npmgremlinbox-mpl-2-0 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fee530f600c3dda2f184f9f4cbeb4dbe23b98fa5c6e426e89afceffadce4175d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10853 Malicious code in @gocortexio/npmgremlinbox-typosquat-chalk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9195f06446d35d2bfefdd565bd2c6f88680cd808d77ff00b4ff0b295cc84110 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10845 Malicious code in @gocortexio/npmgremlinbox-polyform-small-business-1-0-0 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0866e7aff8ea636693be1eeddf556d478e3445fee6eb018cda424075a73f1434 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10838 Malicious code in @gocortexio/npmgremlinbox-mpl-1-1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16b711dafb2bb4c7dfab16c8144346191d7e09f630cfa91e7dd9e3b9b9960151 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10840 Malicious code in @gocortexio/npmgremlinbox-ms-lpl (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c00cf6119e52189754e58f2c2460b83968a20c5086aa9424d58123b077c9e7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10843 Malicious code in @gocortexio/npmgremlinbox-osl-3-0 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d30579e205476f67d9146972cc0e2aabdd79345dabe3af1c9e0d07fd8d81a9f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10848 Malicious code in @gocortexio/npmgremlinbox-simpl-2-0 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19cca0040a0e06465540014785a7885bdcb84de6915594fc7b1802db431e67ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10934 Malicious code in twilio-internal (npm)
The twilio-internal package is one of four byte-identical dependency-confusion squats of Twilio's npm namespace published by user 'yuva2210' maintainer email [email protected], all at the sentinel version 99.99.99 chosen to outrank any internal/private version and win resolution against ...
Malicious code in supplyhub (npm)
The npm package supplyhub is a credential / SSH-key stealer. Its package.json declares a postinstall lifecycle hook postinstall: node postinstall.js that executes automatically on npm install, before the package is ever imported. postinstall.js uses fs.readFileSync to read the user's SSH private...
MAL-2026-10944 Malicious code in zer0onetencent (npm)
The zer0onetencent package was published to the npm registry by user 't2423048543' maintainer email [email protected]. It is described as 'A simple date formatting utility' but ships no such functionality; index.js only exports a hello stub returning the package name, indicating a package...
MAL-2026-10731 Malicious code in date-utils-light (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99bd644fd9a59518d6f77e8d76c077ffef8a2afdc7ae2b00a6ca87299879a671 Package presents itself as a trivial date-formatting utility index.js exports a one-line ISO date helper but ships a postinstall.js that runs...
MAL-2026-10711 Malicious code in @funny-booth/agent-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6693129f8b6f8b6c2d52722ca7746d6ef3dd792476297fa3583d3956548eb2b4 The package ships heavily obfuscated runtime files dist/index.js, dist/launcher.js built with javascript-obfuscator. The MCP server registered as the...
Malicious code in websight-p2p (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9366852644237a1af32c3638d31bddffe3faef750e6a190c91f069340aa9ee6f The package's only content file is index.html declared as the package main. On load, it unconditionally calls...