MAL-2026-13584 Malicious code in dolyame-ui-inputsecure (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4fa9effd850891eced167c6313a3e722c359890792d59446d9f28f7898bd4a0 On require of the package's main entry, shim.js and lib/telemetry.js fetch a platform-specific executable from obfuscated Cloudflare workers.dev...

MAL-2026-13541 Malicious code in delivery-ci-documentation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af740a7d6bb84ba6086ce037139d5e0a6008c308db58069c184fff16e0a4a203 On require'delivery-ci-documentation', index.js loads init.js which selects a platform-specific payload endpoint, reconstructs destination hostnames ...

MAL-2026-12242 Malicious code in tinkoff-fb-rf-add-application (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 788686e9aacdc59ec40f42563a7d9ba5020c75d6c724c8bf59623213b51df780 The package's main entry loads bootstrap.js on require, which downloads a platform-specific executable from string-fragment-obfuscated...

Malicious code in pycalculater (PyPI)

Source: kam193 84e239de4d2d6d9652a78ead4c1ebb6b3f4952aeb54dc51dc30765eaaf806368 During installation, a remote, obfuscated executable is downloaded and started. The executable at least disables automated updates, malware protection and other security mechanisms. --- Category: MALICIOUS - The...

Undesired Behavior

Overview Affected versions of this package are vulnerable to Undesired Behavior. It contains a dependency on the SponsorLink package, which runs an obfuscated closed-source executable at buildtime. That executable spawns OS processes and performs network requests, including transferring a...