Malicious code in zsbing1 (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a06bd9e0a8bc1db412e88d3f3cc9274e9367a651435d367e625492e0e4e33ed3 --- Credit: OpenSSF source...

MAL-2026-9467 Malicious code in wprox-c217-extra4 (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 598125d7276ea48313cdbfc0c87ed8fefd7026734c8302d79d0e625d3ade2470 --- Credit: OpenSSF source...

Malicious code in wgsfoshttp2 (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b488347e8e0e9297fab66f1adfa71d68aa444c46251bddb161b1b29a9d2ca08 --- Credit: OpenSSF source...

MAL-2026-9185 Malicious code in wandczvof9hg (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 150aae1fc458563c9a1649f8c27ef8363b223861083fe53664261bf70566f960 --- Credit: OpenSSF source...

Malicious code in v3zzgbqvirfx (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc37fa1971a729d1b82133a2996bb0b72e8c61ebd41c0c3b6c8efc653cc47bb5 --- Credit: OpenSSF source...

MAL-2026-8529 Malicious code in rjan4 (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0313e14c081cccb1f1f52c1bb613c7d06a25977fb783d2d80be7e67a1eb795d8 --- Credit: OpenSSF source...

Malicious code in grpdf1 (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f89593b16edd7c2de2f781ec0538d72bf550ff3d357ee9d10236b03f3e232071 --- Credit: OpenSSF source...

MAL-2026-7670 Malicious code in enc30778 (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a7c931da6174e57980a37afbe8ca486c1f16edfbde18b7d8bfbbe4b5e024696 --- Credit: OpenSSF source...

Malicious code in model-poc-suhail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0077cfbeca02c255952633606e9fc0c50ef11fe0e50a083f9ab632b6ee01569 The package model-poc-suhail was found to contain malicious code. Source: ossf-package-analysis...

MAL-2026-1924 Malicious code in testcatplzignore (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f25dbded0e3d244b41d80da107d018f5d871a34bf2fe1aaf3f211ec087cd146c --- Credit: OpenSSF source...

Malicious code in redshift-build-geodynamo-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eb6dba5456ba6db7b6f8b463cbe02f3929d795d4d1027a1cbc0a88a12d75528 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188444 Malicious code in ophiuchus-spectron-webdriver-sedna-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71fa83ca1c2d7a7aaa4d2de8c7a3e5b67b553a789c8feb8c2b2f77e620a77f73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183501 Malicious code in lobac-uibg-abufavigaaute (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da3310245e6cca2c71dcc87b5a8dd2f841748ec97c9e04d235723afb1696d5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181587 Malicious code in astam-akif-dak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4857c32a5bd3b949470c99c3240ae9fa3d15dbe26b49470766177863321120dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-135312

Malicious code in tray-iutuzp-terzu npm...

Malicious code in sahunim-sat-fadabidantu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34e336141c7a8b6d9d7fcd26363fbfca4d7a28ec2411a0205027d6d9107541b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06fe34e6a9dc3d6851687cb5f05e41c5621b95ded4aaa65e6a430adbf3a0c79c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-gasasd-16s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1766a647e537c4090a528bac92c27544c0a72b52d88c9013a2a6b538f888ad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-148597

Malicious code in tealove-dana10 npm...

EUVD-2025-146284

Malicious code in verify-ticul-biuyaua npm...