Malicious code in simple-date-formatter-util-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6ec6c790f702e0bb6617bb6bf16ad8b3a154bc7d539938535cde7a2cf205f17 The package's npm postinstall script curls cloud instance-metadata endpoints AWS 169.254.169.254, Alibaba 100.100.100.200, Tencent...

MAL-2026-12205 Malicious code in simple-date-formatter-util-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6ec6c790f702e0bb6617bb6bf16ad8b3a154bc7d539938535cde7a2cf205f17 The package's npm postinstall script curls cloud instance-metadata endpoints AWS 169.254.169.254, Alibaba 100.100.100.200, Tencent...

MAL-2026-12201 Malicious code in simple-date-formatter-util-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdd747d615be16a4af8508b6151d829c49f8ba2e1d045b8c1cbc9d8f2f219de9 package.json declares a postinstall script that, on npm install, collects installer reconnaissance id, hostname, uname, cgroups, docker.sock, Linux...

Malicious code in simple-date-formatter-util-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53f8a19e2cff3bcaf070316f16650d8c1af6714f4c44db56971299ef01c16a25 Package advertises itself as a trivial date-formatting utility index.js exports a one-line formatDate wrapper but ships a package.json postinstall ho...

MAL-2026-12200 Malicious code in simple-date-formatter-util-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53f8a19e2cff3bcaf070316f16650d8c1af6714f4c44db56971299ef01c16a25 Package advertises itself as a trivial date-formatting utility index.js exports a one-line formatDate wrapper but ships a package.json postinstall ho...

Malicious code in simple-date-formatter-util-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe9863d2e47d22ca16f42efd68d0c79e0b2730b48984bf68b040f6f920fb70ec Package presents itself as a date-formatting utility index.js is a four-line toLocaleDateString wrapper but its package.json postinstall hook runs an...

Malicious code in simple-date-formatter-util-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 043fc72acaebb0b8e96a80ee338611c81567284213ea047911a851d3f00dcc46 package.json declares a postinstall lifecycle script that runs a shell pipeline enumerating /home/work directory contents, probing the internal...

MAL-2026-12203 Malicious code in simple-date-formatter-util-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 043fc72acaebb0b8e96a80ee338611c81567284213ea047911a851d3f00dcc46 package.json declares a postinstall lifecycle script that runs a shell pipeline enumerating /home/work directory contents, probing the internal...

Malicious code in simple-date-formatter-util-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d57172cd3c0a47afc03e1a15ca2ead758bb6f5c78a2234d42487d65cb4944c5 package.json declares a postinstall script that runs automatically on npm install. The script creates a block-device node for the host disk mknod...

MAL-2026-12204 Malicious code in simple-date-formatter-util-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d57172cd3c0a47afc03e1a15ca2ead758bb6f5c78a2234d42487d65cb4944c5 package.json declares a postinstall script that runs automatically on npm install. The script creates a block-device node for the host disk mknod...

MAL-2026-12197 Malicious code in simple-date-formatter-new-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcbd38bc87a61131881784bb9e919a03a4cfa2f69934fd17e3735b34ce75e3f6 package.json declares a postinstall script that runs a shell pipeline collecting host identifiers uname, id, routing and ARP tables, TCP-probe result...

Malicious code in simple-date-formatter-new-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a752053edcc35b1de91b1eb5bb0a8b18e22ac32120f4b8871ecf84c3c4aec54 The package presents itself as a trivial date-formatting utility index.js exports a one-line wrapper around toLocaleDateString, but its package.json...

Malicious code in simple-date-formatter-new-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a09ab26676285be9c12d5c7ecfef65a0f0ebf32cb0324a83d3249c28674a1824 Package is advertised as a date-formatting utility but its postinstall script probes an internal-range Kubernetes API 10.45.196.138:8080, endpoints...

MAL-2026-12198 Malicious code in simple-date-formatter-new-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a09ab26676285be9c12d5c7ecfef65a0f0ebf32cb0324a83d3249c28674a1824 Package is advertised as a date-formatting utility but its postinstall script probes an internal-range Kubernetes API 10.45.196.138:8080, endpoints...

MAL-2026-12199 Malicious code in simple-date-formatter-new-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f0bf9e4040cf2940b0ca9a9e5cea7def2c660925afd0ba959ed69d28ca007b7 The package.json postinstall script runs unconditionally on npm install, collecting host and internal-network reconnaissance kernel version via uname...

Malicious code in simple-date-formatter-new-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f0bf9e4040cf2940b0ca9a9e5cea7def2c660925afd0ba959ed69d28ca007b7 The package.json postinstall script runs unconditionally on npm install, collecting host and internal-network reconnaissance kernel version via uname...

MAL-2026-12195 Malicious code in simple-date-formatter-new-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaef04a98dce874de04a92b580f4f919067a0e492d38dff69a57fc09db1cfe14 The package's postinstall script in package.json runs a shell pipeline that collects host and container-runtime information kernel version via uname...

Malicious code in simple-date-formatter-new-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaef04a98dce874de04a92b580f4f919067a0e492d38dff69a57fc09db1cfe14 The package's postinstall script in package.json runs a shell pipeline that collects host and container-runtime information kernel version via uname...

Malicious code in simple-date-formatter-new-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f5ed3c402677fcfaeac396b55b9db5280445e9b0130133cc311a83f96f2a0de Package advertises itself as a date-formatting utility but its actual behavior on install is credential theft and internal-network reconnaissance. Th...

Malicious code in @zzzgenesis00/env-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfbfc9bcbea1e1b9d6c52e2585bf5b28064fe8e38fe53304450fe1fd19340f3b On npm install, postinstall.js reads installer-owned secret material — /.ssh entries, /.npmrc, /.gitconfig — and iterates a curated list of credentia...