606474 matches found
Malicious code in fundraiserservpp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bca913238607a18079a675e2fe652c25c04c2bbc62f5c577bb2b6d2424cd4a8 [email protected] runs node index.js as a preinstall lifecycle script on npm install. The script collects host metadata from the installer machi...
Malicious code in chai-as-rendered (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 545ba2341881e666831e81156a815fdfac738830ec2918167e4c5fd3c42294bf Typosquat of chai-as-promised. The package's exported middleware spawns a detached child process lib/caller.js that fetches a JSON payload from a...
Malicious code in eth-codegen (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c111948c855e4133fbd037c268523a2118038ca498e9bdba1c743d4ee77f24bc The package advertises itself as an Ethereum codegen utility but its actual contents are an unrelated mongoose leanhooks plugin plus a hidden dropper...
Malicious code in vscode-designer-14 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcf384e12e957c8d6b3d0014504f652cd2b6f3885f49820a2907865566bb6137 package.json declares a preinstall hook that runs index.js on npm install. index.js collects the installer's hostname, username, home directory, DNS...
Malicious code in wagmi-react (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6285993305d8ff9bbf69804dcbf929539b6f48c2ef1b1ca6e5c723150c5565ee The package impersonates the wagmi/viem wallet API surface exporting createWalletClient, parseAccount, and a WalletClient constructor and, when a...
Malicious code in cors-security (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1cff2c95bb175e36d5cb7a6e4880ed0f8816cbfb1dc7acef5d8173cf2cc40bb The CommonJS entry point of [email protected] exposes a getPlugin API that issues an HTTPS GET to the hardcoded host workconfig.vercel.app and pass...
Malicious code in shift-sdk-v5 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2aca555e012d36b30d9ffe3d0f8acdca7ba67298a87ea02ea9d32731e8f2a748 [email protected] registers a postinstall script that runs dist/recon.js on npm install. The script collects hostname, username, SUDOUSER, home...
Malicious code in table-ui-new (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0b953969edf8d77d5a1be0aa33b4044b38e2352f81c54b0f343f21a1c52c13a [email protected] ships dist/config.js, exposed via the package.json ./config subpath export, which exports a module-level array named HASHES...
Malicious code in com.db.dbk.ui-forms (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c74649b28994f970d4972ffb8708378b355186eb729bf2e4c45d6acd16346e5d [email protected] is a version-inflated package published to the public npm registry under a scope that resembles an internal namespace. Its...
Malicious code in @offa/offa-uwk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a04489d4763fb48f4c5bc4ea7e99802b21a412ba55900ae7bf411070e2a42d8 package.json declares a postinstall hook that runs index.js. On install, index.js collects os.hostname, os.userInfo.username, process.cwd, and the...
Malicious code in gekko-trading-bot (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8efc19985c853a3f4fdc8bdb1f08b432456b8f55ce701567edbf593fb3e6211c The package's postinstall hook runs setup.js, which unconditionally downloads core.exe from the hardcoded Cloudflare Workers subdomain...
Malicious code in express-middle (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91c0275a4e65fc4ed9930cb89002f2c4ebc50163b292f552703c4ea6a9940567 package.json declares postinstall: node index.js, which fires automatically on npm install. index.js is a heavily obfuscated bundle obfuscator.io-sty...
Malicious code in caldora (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 720ff44cbfe1253ad00e7fa884ee51d3961308d1a0e5c8b5ec7a05cef05b1b4b [email protected] runs a top-level async routine in index.mjs on import. When executed on Linux with /mnt/c present WSL and NODEENV!= 'production', it...
Malicious code in numpyp (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 971ce16c4710dfddc439c30ec2fc190001171f79fcd66f718ad358a43ecdf876 Package name numpyp is a one-character edit of numpy top-1 PyPI package and PKG-INFO advertises it as 'the simplest module for quick work with files'...
Malicious code in opencode-engos-ai (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42180a034d43d3c6d16e223fe6fcd93f6e403f0c73c763e9b21b6aded0545274 On npm install, postinstall.mjs enumerates platform-specific sibling package names of the form opencode-engos---baseline-musl, resolves each to the...
Malicious code in ventrix-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82b68f964850d0777c1f3993c52e3b66dc425b02ee82fb33bcd958514f730926 [email protected] ships a loader that, when the package's default getPlugin export is invoked, performs an HTTP request to the hardcoded endpoint...
Malicious code in streak-bucket-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4145bc51e507e0a8b64d1267c16b0c9c8e80950a08bcf0a320b03fb8a1875b26 [email protected] advertises itself as a small dependency-free calendar/day-math helper library, but its declared main entry index.mjs is 521 ...
ROOT-APP-NPM-CVE-2025-57810 CVE-2025-57810 in jspdf - Patched by Root
Root has patched CVE-2025-57810 in the jspdf package for Root:npm. Multiple fixed versions available...