Malicious code in desmosschoolwork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9575a8846e102604d72f61d91f37c559e58d0fca4c117008257d096afc2a2acb The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in desmosisfire (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0679b40ac71c7b8ce0dc0557c8779a85ad10fac03ff678128ec4aa687c5e243 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in classroomhomework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b64edbbd8d1e23d937c4697de257a67981be2ebb2934a4280424a86f4af7028f The package's index.html impersonates Google Classroom title, gstatic favicon, hardcoded student email [email protected], decoy schedule/gradebook...

Malicious code in tungtunggod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cfc083fc4a77544ba957b1c1d771998929fc71453f905f6d9c474e2bd3fb51f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in tungtungisgoated (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d649ce9c915a5834ac0743a8f47377d31c293de34fbe40581c2f7ce3ca56c8da The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in iamhungryrn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 462bbc47c25a6f0d3de4221795fe1a35ea55027682c037d1a8ed8693b0993d89 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in classroomlesson (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cee9290a110b32c6fab4129e634205ed0b86080ccf328dfe5e17635bc85b7926 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in schoollesson (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c019b72671bb34207fbc587803e391f42f2fd3148c3ac941d9a8cfc8468a7e8 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in whatsgoodlookingbabycreed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e598067256b5fe5407b1f8b201925a118b6a08ea19be59cc80db3c60082fe19b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in desmosclasswork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d435d8cefda2b58ca65ad06ffac8521a26ccb991dd4828dd479e64ddb38bb865 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in iwantaburger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 660011f86e2c92f83c584ac25343cc8d8da3a4242286e751d9e8bc0bd8510a68 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14445 Malicious code in digitalexp-style-module-l9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c1b3e9059995d4d535c65fafd0105eea420510acb17ad9befbc99c18aa25df9 package.json declares both preinstall and postinstall as node beacon.js, so beacon.js runs automatically on every npm install. beacon.js reads...

0.extends.whistle (1.0.65), 0g-aura (>=0.1.0, <=0.4.31) +10668 more potentially affected by CVE-2026-76845 via adm-zip (>=0.5.9, <=0.6.0)

adm-zip NPM version =0.5.9, =0.1.0, =1.0.0, =0.1.0, =0.2.9, =1.125.0, =1.0.1, =1.0.10 - 3d-core-raub 3.7.0 - 5c-docx-parser 0.3.2 - 5c-docx-slate 0.1.6 and more Source cves: CVE-2026-76845 Source advisory: SNYK:JS-ADMZIP-19276676...

Malicious code in unifi-credential-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c9d5fc3394d6f2565267e1b19573ca0c58dbbe9149f7204ea39ccae5c53645f package.json declares a preinstall hook that runs index.js on npm install. index.js collects hostname, username, working directory, internal IPv4...

MAL-2026-15692 Malicious code in unifi-credential-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c9d5fc3394d6f2565267e1b19573ca0c58dbbe9149f7204ea39ccae5c53645f package.json declares a preinstall hook that runs index.js on npm install. index.js collects hostname, username, working directory, internal IPv4...

MAL-2026-15691 Malicious code in react-hook-doms (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a01d746e2ab5362af396f0bafe921bcd6aed22b8321555ccb16d0f8f7a5c9183 The package was found to contain malicious code or consuming dependency that contains malicious code...

Malicious code in lil-swisgom-hlepers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75aeaaa8ef6f56423bf517d9ff21cfed3a682701f306103f068b948e330f03db package.json declares a dependency lil-swisgom-hlepers-core whose version specifier is a direct tarball URL on a third-party host...

MAL-2026-15689 Malicious code in lil-swisgom-hlepers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75aeaaa8ef6f56423bf517d9ff21cfed3a682701f306103f068b948e330f03db package.json declares a dependency lil-swisgom-hlepers-core whose version specifier is a direct tarball URL on a third-party host...

MAL-2026-14423 Malicious code in @medisend/shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb5857b17f9935d83581e1a24e6d990211fe86631143c7025c3123d1274e7d28 package.json declares a postinstall lifecycle script that runs curl at install time and transmits the installer's hostname via $hostname as a query...

Malicious code in chai-as-mno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e94e194f078c230d6c6b15efcddc54b133fd52c890a55b0f8bdb4c680452381 The package name mimics chai-as-promised and its README, badges, and license text are copied from an unrelated project pino, while the package.json...