MAL-2026-17868 Malicious code in @kre64/hello-npm-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 654ab50c81e138ba0fcc4b3775bc84574656f528ae4de5770a6441e850fdf8c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ts-bn-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e591f0b407bc22e3abe20da9207df2d2922f75d98ab97aaa62557ca88b8fc349 [email protected] is a credential harvester disguised as a TypeScript/lint utility. index.js defines decodeStr which base64-decodes all operationally...

Malicious code in ts-bn-lint-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8847a06a4d25b751ec7d33732a23324a42d7b2775ce441811623500b7b60f267 Package masquerades as a TypeScript lint helper but ships a credential-harvesting payload in index.js. The exported fromstr recursively walks...

MAL-2026-6317 Malicious code in ts-bn-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e591f0b407bc22e3abe20da9207df2d2922f75d98ab97aaa62557ca88b8fc349 [email protected] is a credential harvester disguised as a TypeScript/lint utility. index.js defines decodeStr which base64-decodes all operationally...

Malicious code in study-lab-npm-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddc0a35e84f7b481414283261b7ca20709c25f15da68f387188a9eb0def1b523 The package study-lab-npm-test was found to contain malicious code...

EUVD-2020-1172

Malware in sbrugna...

Malicious code in beishanxueyuan-npm-test (npm)

The package beishanxueyuan-npm-test was found to contain malicious code...

Malicious code in npm-test-install (npm)

The package npm-test-install was found to contain malicious code...

MAL-2025-27847 Malicious code in npm-test-install (npm)

The package npm-test-install was found to contain malicious code...

Malicious code in npm-test-lowerx3 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9184 Malicious code in shmam-test-npm-test-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b028136f8820f808eb720a45a7f396272c884a63944c004999ce50781449b6d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in shmam-test-npm-test-5

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious Package

Overview bbq-123-npm-test is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...

MAL-2022-4942 Malicious code in npm-test-failer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f5a379a5c56d0b7d910cd1583efec3a5fe98687eef6cc10097b99682dbde7ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in npm-test-failer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f5a379a5c56d0b7d910cd1583efec3a5fe98687eef6cc10097b99682dbde7ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Downloads Resources over HTTP in npm-test-sqlite3-trunk

Affected versions of npm-test-sqlite3-trunk insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code executio...

GHSA-MF7C-58Q5-7V65 Downloads Resources over HTTP in npm-test-sqlite3-trunk

Affected versions of npm-test-sqlite3-trunk insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code executio...

PT-2020-20976

Name of the Vulnerable Software and Affected Versions ladder-text-js affected versions not specified Description The issue concerns a malicious script within the ladder-text-js module that attempts to delete all files when the npm test command is run. Recommendations Remove the ladder-text-js...

PT-2020-20977

Name of the Vulnerable Software and Affected Versions nothing-js affected versions not specified Description The issue concerns a malicious script within the nothing-js module that attempts to delete all files when the command npm test is run. Recommendations Remove the nothing-js module from you...

Remote code execution

The npm-test-sqlite3-trunk module provides asynchronous, non-blocking SQLite3 bindings. npm-test-sqlite3-trunk downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested resources with an...