Malicious code in kiki-baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b5b7a87ff7f08fee548c24dce02f8904d9920735f6643ec236ac00dda5c5470 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16033 Malicious code in kiki-baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b5b7a87ff7f08fee548c24dce02f8904d9920735f6643ec236ac00dda5c5470 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Allocation of Resources Without Limits or Throttling

Overview Magick.NET-Q16-HDRI-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Use After Free

Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Use After Free

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Use After Free

Overview Magick.NET-Q16-HDRI-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

MAL-2026-16024 Malicious code in blueai-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa623814be7289a45580d8333138d25b98458b558fbe67c447294944723ec844 package.json declares "preinstall": "bun run index.js", causing npm install to execute a 499KB obfuscator.io-style file via the Bun runtime. index.js...

MAL-2026-16026 Malicious code in bmc-translate-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a55e2a625f0b96f6903cccac0251c6b8380cf9589a1f222e9de7e97dbf466156 package.json declares a preinstall script bun run index.js. index.js is a 500 KB javascript-obfuscator-packed module rotated string array 0x71ec,...

MAL-2026-16032 Malicious code in feishu-docx-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e7567437816acf6d56f5ef9e5303da39aa1663ac47d547f66552a0482158d19 package.json declares "preinstall": "bun run index.js" and lists bun as a runtime dependency, so npm install fetches the alternate Bun runtime and...

Malicious code in blueai-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa623814be7289a45580d8333138d25b98458b558fbe67c447294944723ec844 package.json declares "preinstall": "bun run index.js", causing npm install to execute a 499KB obfuscator.io-style file via the Bun runtime. index.js...

Malicious code in bmc-translate-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a55e2a625f0b96f6903cccac0251c6b8380cf9589a1f222e9de7e97dbf466156 package.json declares a preinstall script bun run index.js. index.js is a 500 KB javascript-obfuscator-packed module rotated string array 0x71ec,...

Malicious code in bmc-i18n-extract-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70d52b44b46819aa61ff57d4863315b09f655a4fb5b5787843c2a24f85d9c6db The package's package.json declares a preinstall hook bun run index.js and lists the Bun runtime bun ^1.3.13 as a dependency, causing an obfuscated...

MAL-2026-16025 Malicious code in bmc-i18n-extract-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70d52b44b46819aa61ff57d4863315b09f655a4fb5b5787843c2a24f85d9c6db The package's package.json declares a preinstall hook bun run index.js and lists the Bun runtime bun ^1.3.13 as a dependency, causing an obfuscated...

Malicious code in feishu-docx-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e7567437816acf6d56f5ef9e5303da39aa1663ac47d547f66552a0482158d19 package.json declares "preinstall": "bun run index.js" and lists bun as a runtime dependency, so npm install fetches the alternate Bun runtime and...

Malicious code in scw-mobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f92fe2c0fe1acd783b5612c30ba1976c68c421b6451a68d150928e5166c362e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-16038 Malicious code in scw-mobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f92fe2c0fe1acd783b5612c30ba1976c68c421b6451a68d150928e5166c362e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-16022 Malicious code in base-account-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae6343291a1e909323f40cb39c63de633e733d3a7ca24827d35ff2d960f9e6a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-16040 Malicious code in wallet-cds-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90a2fd556bde6edbeed9d4c1ebd8dcf4b1c24a5dfda8d70d6cb91cfc7ee3fa2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-16028 Malicious code in cb-wallet-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86afbbd47bbbe39fd4f8d9f4146149d70fbb46777c17eebf0c52fd6cef1fef8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-16030 Malicious code in cb-wallet-solana-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bddc9d7ea15dfa107dd3aa50c0b0204d42a90ba749f4941954cd458c6cbce980 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...