Malicious code in qagfypuewln (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-8351 Malicious code in oaitsvnxpamle (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-8312 Malicious code in oaipkesbgrrqn (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in oaiix7984341 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-8114 Malicious code in mytemptest1778551000 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in m8405v2llz (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in m8403v1zxu (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in lambbzrproxyoai (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in eilhgtestfsmmg (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7591 Malicious code in chmid8320x613915 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7590 Malicious code in chmid8310x612257 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7569 Malicious code in chatoaifetch177855557914 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7539 Malicious code in aizwhvgtkghn (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in aiuzxgqioltv (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-6710 Malicious code in vitest-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e0165cbb3d6ed37a96889c4b016463706346e1c09413635c31ea1ceedde8774 The package's postinstall script node lib/utils/index.js spawns a detached, stdio-suppressed Node child process that runs...

Malicious code in @huobi-ui/activity-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2dc07679f0c801fbb465a2502687e29ed687871964c5d84c0dd5f2b7f94e8ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Improper Neutralization of Argument Delimiters in a Decompiling Package Process in APKLeaks

APKLeaks prior to v2.0.4 allows remote authenticated attackers to execute arbitrary OS commands via package name inside the application manifest. Impact An authenticated attacker could include arguments that allow unintended commands or code to be executed, allow sensitive data to be read or...

MAL-2026-6567 Malicious code in eslint-commit-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fc51e200a141d1dbbb4f7eb9e5e3dec18507572e5dc9562278713c554fad195 The package is published under the name eslint-commit-parser but its contents are a verbatim copy of the supertest HTTP-testing library — package.jso...

PT-2026-53378

APKLeaks prior to v2.0.4 allows remote authenticated attackers to execute arbitrary OS commands via package name inside the application manifest. Impact An authenticated attacker could include arguments that allow unintended commands or code to be executed, allow sensitive data to be read or...

MAL-2026-6545 Malicious code in crossmint-wallets-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd4caebfba35b43bf10f156fe687f455e95b09a514b8644fe1a900b63f1bf78a Package name impersonates the Crossmint wallet SDK family. Both preinstall.js and index.js import childprocess, capture host identifiers hostname is...