Malicious Package

Overview @nestorhexom/qyxb is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-35 Malicious code in aiihttp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e98bbfaaccc91213e80bb0a09f5081a5701cf01629ac8b82370adbbbc42178b0 Obfuscated code downloads an encrypted binary blob, which is malware finally starting cryptomining. After starting the malware, the Python package uninstall...

Malicious Package

Overview @vietmoney/react-native-action-button is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization...

Malicious Package

Overview @ptest2535/testpackage is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

MAL-2025-192787 Malicious code in elf-stats-sparkly-toolkit-703 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1797fa5c9b17edda19db4d8014af3a10f7af33c65110eb435cfa995ab12ebfa2 The package elf-stats-sparkly-toolkit-703 was found to contain malicious code...

EUVD-2025-204892

Malicious code in elf-stats-silvered-bow-679 npm...

Malicious code in @xyuxu/i18never (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b923f08dbda49245b6cdc13f30d46556f98e438c1788b29597ff1d64446bf54 The package @xyuxu/i18never was found to contain malicious code. Source: ghsa-malware 3c5087826460532be47bc7b783c6674322cc348a195d708d058f98f7d73ec22...

Malicious Package

Overview elf-stats-mulled-wishlist-789 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview browser-client-neptune is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

MAL-2025-192485 Malicious code in elf-stats-cheery-northstar-345 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11afb900180826fdc5929d1c3095198004109bd2107d02b1b6cd36c676b8aafd The package elf-stats-cheery-northstar-345 was found to contain malicious code...

Malicious code in elf-stats-snowdusted-marshmallow-228 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eab7789ba8f7c654f5e79444be0a76d64268be8478db9d87a97e225d04b26d35 The package elf-stats-snowdusted-marshmallow-228 was found to contain malicious code...

Malicious code in @onlytoodles/crypto-jsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 731c33f548ff79b458afc89fa8f3158762537acf2db8d026864792bb3222be7c The package @onlytoodles/crypto-jsa was found to contain malicious code. Source: ghsa-malware...

Malicious code in elf-stats-nutmeg-garland-645 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd1b3fdc2a40a6e396e015feb6459f0a36fda40b3d0b547f3ecc28f43166806f The package elf-stats-nutmeg-garland-645 was found to contain malicious code...

Malicious code in elf-stats-cocoa-train-606-pwn2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38b2f0588d3a0e33bfd993faa485a07e4cd60d4c7efb4c33ed006e9c29f20c50 The package elf-stats-cocoa-train-606-pwn2 was found to contain malicious code...

Malicious code in elf-stats-silvered-bauble-482 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 873d00a53b6593aa2b1ce0a02b07bf8019709b24cd2f6242548b58408ec99240 The package elf-stats-silvered-bauble-482 was found to contain malicious code...

Malicious code in karem4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a1d3bd676881934532a2e75fd644e22b2e4f26fb08bde6d48ff6d529de7467d The package karem4 was found to contain malicious code. Source: ossf-package-analysis b843a0d849da7453ce803b77a117a501a3b1e4b04eae8222d3b59d48438931c...

CVE-2025-13632

Inappropriate implementation in DevTools in Google Chrome prior to 143.0.7499.41 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension. Chromium security severity: High...

CVE-2025-13638

Use after free in Media Stream in Google Chrome prior to 143.0.7499.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Low...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Malicious code in @ensdomains/ccip-read-cf-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd3f5e0ef4b518b71e371b472de64525c90fa98305becf54d8e15279e4d5d766 The package @ensdomains/ccip-read-cf-worker was found to contain malicious code. Source: ghsa-malware...