MAL-2026-1179 Malicious code in magala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc2ceda3b525a2f1555d03e847a3aff72c1df445ec927b649ff1e6d1ded31814 The package magala was found to contain malicious code. Source: ghsa-malware ec9a78f20b197535bd4d520e64130e9e44e6fa2b194761337901521399309456 Any...

Malicious code in openclaw-droid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f44b4e03b9d39603b2f92afff328117f480b35edd9fa3b64b40d6175b3432906 The package openclaw-droid was found to contain malicious code. Source: ghsa-malware a9462b166b838e565ac3aeb11533c69cb1168a95efc54468c0ed81628d080281...

Malicious code in danzxoffc74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e877557d9e7863e313c0524e6752daab739308df7d062c227dc45da6422e06a The package danzxoffc74 was found to contain malicious code. Source: ghsa-malware c665df7f545b35a9e4e23e8bddad61473e5846f08a58ed73bcbb16688239421e An...

Malicious code in xpack-test-3.0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4fcebf35e85158afa53ce21da1265a4c3acac20914c4c76285d9043ac3a2d62 The package xpack-test-3.0 was found to contain malicious code. Source: ghsa-malware 825d559cd29d6d2efd0f89583e84f31a7b471bfbc3376252e71872d8f9863d87...

Malicious code in xpack-video-submission (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7775173f0b8d7a6612c5a88940a5e371896db6f065c1b7c94bf87b2fcb6f51a1 The package xpack-video-submission was found to contain malicious code. Source: ghsa-malware...

Malicious Package

Overview xpack-per-device is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview test-npm-style is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-1160 Malicious code in xpack-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62edc6bb089c839e93cf7b71b8b46ca1f5d064272cac586b49cda41fc40b1c19 The package xpack-subscription was found to contain malicious code. Source: ghsa-malware...

Malicious code in hackpreinstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a33e3f8d27139e08c22f475145ed3748570d6aadbd5f194bb0cce5be5a93fbf5 The package hackpreinstall was found to contain malicious code. Source: ghsa-malware 75af598258a7a91741c032e5d4ae8deafd1d54d392cbc950c3e0b3da69936c7e...

Malicious Package

Overview hackpreinstall is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-1149 Malicious code in hackpreinstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a33e3f8d27139e08c22f475145ed3748570d6aadbd5f194bb0cce5be5a93fbf5 The package hackpreinstall was found to contain malicious code. Source: ghsa-malware 75af598258a7a91741c032e5d4ae8deafd1d54d392cbc950c3e0b3da69936c7e...

Malicious Package

Overview yuji-baileys is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in danzxz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4833c4fc240e2ee3782998738394ab42ff4d28ba2edcdf9e6aa97e195b12b32e The package danzxz was found to contain malicious code. Source: ghsa-malware 3426bcec6ad873a2aee246f7333e939a481c489dbbdffab631e2f588c421b629 Any...

MAL-2026-1108 Malicious code in hapi-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90adf52f1b608bcddb8f6471e64ded19817bef1b8aa1715256182f0e7a3ab690 The package hapi-lint was found to contain malicious code. Source: ghsa-malware 388b8a57423bf6789ce0a82c22d6856663fcbc1cd2ff7ce5c6f7ef701567c19e Any...

Malicious Package

Overview bcryptance is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview promanage is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview loadash-lint is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-1112 Malicious code in sequelization (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 456b2b9d323b090f464c9192617e5837b462aaaf654d9da5aca02dd9deadd516 The package sequelization was found to contain malicious code. Source: ghsa-malware 98293858bc27dde3605f9e7765b31d966632968ae9c66036f2bce73a8dfe7ddb...

Malicious code in jsnwebapptoken (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae3c045f3e6ca79915965788d10accc663e97bacc01fd6d94baa9bf781c38a0c The package jsnwebapptoken was found to contain malicious code. Source: ghsa-malware 26490b6a28e0b832aa5d386d750166e3cab2c2eb776706c9cf05fa16757758c6...

Malicious Package

Overview jslint-config is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...