Malicious code in commandor-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3532b684cf99d23e6ab89c60fef9f2af5b1bfe36f4d793fcaf6bcf3f718903ab The postinstall script in [email protected] scripts/postinstall.js contains XOR-obfuscated byte arrays that decode at runtime unpackSegment with k...

Malicious code in commandor-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75d139bce34f1d3290c34bb6da1c421bb579afb93672b44909ed0725eb70be3c The postinstall script in [email protected] scripts/postinstall.js XOR-decodes a hardcoded URL using key 'stf2026' that resolves to...

MAL-2026-14172 Malicious code in commandor-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75d139bce34f1d3290c34bb6da1c421bb579afb93672b44909ed0725eb70be3c The postinstall script in [email protected] scripts/postinstall.js XOR-decodes a hardcoded URL using key 'stf2026' that resolves to...

Malicious code in loadashjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99f2ee2a45d09f0e66b8c9c6c4b3f2d19d39af009f71abffba1032b185fc4981 loadashjs is a lodash typosquat whose index.js exports an empty object; the only functional code is scripts/postinstall.js, which runs automatically ...

MAL-2026-14179 Malicious code in loadashjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99f2ee2a45d09f0e66b8c9c6c4b3f2d19d39af009f71abffba1032b185fc4981 loadashjs is a lodash typosquat whose index.js exports an empty object; the only functional code is scripts/postinstall.js, which runs automatically ...

MAL-2026-14178 Malicious code in ladash-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d1b70674c7273e350d033cacec46a4981aebced798342e3b28da3dcd52a34bb ladash-cli is a one-character typosquat of lodash-cli whose main entry exports an empty object; the only functional code is scripts/postinstall.js,...

Malicious code in ladash-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d1b70674c7273e350d033cacec46a4981aebced798342e3b28da3dcd52a34bb ladash-cli is a one-character typosquat of lodash-cli whose main entry exports an empty object; the only functional code is scripts/postinstall.js,...

Malicious code in lodahsjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e9c02962476bddd8c1cde1b5c222ee420f4957a1e4ce3a906a3c9d36fda6318 Package name typosquats 'lodash'; index.js exports nothing. scripts/postinstall.js runs at install time and performs two hostile actions. First, it...

MAL-2026-14181 Malicious code in lodahsjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e9c02962476bddd8c1cde1b5c222ee420f4957a1e4ce3a906a3c9d36fda6318 Package name typosquats 'lodash'; index.js exports nothing. scripts/postinstall.js runs at install time and performs two hostile actions. First, it...

CVE-2026-72329

A flaw was found in the net/liquidio component of the Linux kernel. The Single Root I/O Virtualization SR-IOV enable path incorrectly cached Virtual Function VF pcidev pointers. This improper handling of references could lead to a use-after-free vulnerability when the cached pointer is later...

Malicious code in testingsmthb1g (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04fa6b8b5826315448e5d4f27036ab31ef115621027c040897e200894c43dfa3 scripts/postinstall.js runs at npm install and performs an install-time dropper chain. A URL stored as an integer array is XOR-decoded key 'stf2026' ...

MAL-2026-14142 Malicious code in testingsmthb1g (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04fa6b8b5826315448e5d4f27036ab31ef115621027c040897e200894c43dfa3 scripts/postinstall.js runs at npm install and performs an install-time dropper chain. A URL stored as an integer array is XOR-decoded key 'stf2026' ...

Malicious code in typescriptt-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b701541fd1cac460b8ab9a3e24dd1d0e476965e4d247826f5108e4a8eb6996d8 typescriptt-core is a typosquat of the TypeScript ecosystem double-t with an empty main module.exports = and no library functionality. The only code...

MAL-2026-14152 Malicious code in typescriptt-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b701541fd1cac460b8ab9a3e24dd1d0e476965e4d247826f5108e4a8eb6996d8 typescriptt-core is a typosquat of the TypeScript ecosystem double-t with an empty main module.exports = and no library functionality. The only code...

Malicious code in typescrip-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44399cd197dfa6f24adf7c96a380d2e0c95a4123d8c14932ceb0a85e32ebc9b9 Package name 'typescrip-cli' typosquats 'typescript-cli'; index.js exports an empty object and the package has no library functionality...

MAL-2026-14150 Malicious code in typescrip-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44399cd197dfa6f24adf7c96a380d2e0c95a4123d8c14932ceb0a85e32ebc9b9 Package name 'typescrip-cli' typosquats 'typescript-cli'; index.js exports an empty object and the package has no library functionality...

MAL-2026-14148 Malicious code in typescirpt-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09d82fa51e42e6766fe0819517e9fb5be633702a0e22cb4da05d8920cb413c53 The package's postinstall script scripts/postinstall.js XOR-decodes obfuscated byte arrays using the key 'stf2026' to reconstruct a download URL and ...

Malicious code in typescirpt-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09d82fa51e42e6766fe0819517e9fb5be633702a0e22cb4da05d8920cb413c53 The package's postinstall script scripts/postinstall.js XOR-decodes obfuscated byte arrays using the key 'stf2026' to reconstruct a download URL and ...

MAL-2026-14151 Malicious code in typescriptt-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 023f754538f603fbb5379ee8be82cb9524f710495e5dddc4e631e5aafbf323b5 typescriptt-cli is a typosquat of typescript-cli whose index.js is an empty module; its only real behavior is in scripts/postinstall.js. On npm...

Malicious code in typescriptt-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 023f754538f603fbb5379ee8be82cb9524f710495e5dddc4e631e5aafbf323b5 typescriptt-cli is a typosquat of typescript-cli whose index.js is an empty module; its only real behavior is in scripts/postinstall.js. On npm...