237680 matches found
Malicious code in typescript-base58 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b860a9c4960f55c236ca5e14781f5dcfb60752d4367cb9aeb30762d3b023004e [email protected] is a one-line re-export of the 'base58-core' package. The README advertises 'Zero dependencies' while package.json declares a...
Malicious code in base58-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60a7d188e2cd79918987f2008e93bb80ea9979d791b357f8f7cfd892321ded6c The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in @sqlite-list/schema-generator (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db66a72ece64d62fe02a712d609f136a1d5bae710c8a97b82dde8e7c39ad9bf6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-6915 Malicious code in @sqlite-list/createsql (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 955f0446501d4d7834ea1d6f4daf244eed7c040462485ba6dc794488f455ea9c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-6922 Malicious code in mcp-server-pg (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22d68bdfced357622e33e4608bd35ded4d8988ea6dc7da073b3a83075978815d On npm install, scripts/postinstall.js unconditionally reads a range of installer-owned identity and configuration files and POSTs a JSON payload to ...
Malicious Package
Overview @aspect-security/argon2 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...
Malicious Package
Overview ollama-helpers is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview @engagehub/core is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview @43uh3ig43/telemetry-client is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Malicious code in zreactjs (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7446 Malicious code in zircuit-vault (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zircuit-vault (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zircuit-oracle (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7444 Malicious code in zircuit-oracle (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zircuit-reporter (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zircuit-keeper (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7443 Malicious code in zircuit-keeper (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in yreactjs (npm)
--- -= Per source details. Do not edit below this line.=-...