MAL-2026-11220 Malicious code in @patternfly-4/react-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5f54e5643951668f9122f9909e456f67938b47d7ecb0cddf1fde02666a66ddb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zsbing1 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-9467 Malicious code in wprox-c217-extra4 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in wgsfoshttp2 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-9185 Malicious code in wandczvof9hg (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in v3zzgbqvirfx (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-8529 Malicious code in rjan4 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in grpdf1 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7670 Malicious code in enc30778 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in model-poc-suhail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5632cd6f241c640005252e66d1d85f09ba30b019890cb696ada78760ed8e6fed Package ships poc.js which requires childprocess and spawns /bin/sh, connecting its stdin/stdout to a TCP socket at 0.tcp.in.ngrok.io:10023. This giv...

MAL-2026-1924 Malicious code in testcatplzignore (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in redshift-build-geodynamo-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eb6dba5456ba6db7b6f8b463cbe02f3929d795d4d1027a1cbc0a88a12d75528 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188444 Malicious code in ophiuchus-spectron-webdriver-sedna-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71fa83ca1c2d7a7aaa4d2de8c7a3e5b67b553a789c8feb8c2b2f77e620a77f73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183501 Malicious code in lobac-uibg-abufavigaaute (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da3310245e6cca2c71dcc87b5a8dd2f841748ec97c9e04d235723afb1696d5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181587 Malicious code in astam-akif-dak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4857c32a5bd3b949470c99c3240ae9fa3d15dbe26b49470766177863321120dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06fe34e6a9dc3d6851687cb5f05e41c5621b95ded4aaa65e6a430adbf3a0c79c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahunim-sat-fadabidantu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34e336141c7a8b6d9d7fcd26363fbfca4d7a28ec2411a0205027d6d9107541b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-135312

Malicious code in tray-iutuzp-terzu npm...

EUVD-2025-147796

Malicious code in tehah-murasaf-manta npm...

MAL-2025-160296 Malicious code in messi-buysa-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7893fe0873ac77701c46b19138ec843951e16245e7e41f3a3999512a6364a37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...