MAL-2026-10766 Malicious code in syft-acp-uikit (npm)

The syft-acp-uikit package was published to the npm registry by user 'ada8877' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the 'syft-acp' internal/private package naming convention an ACP component library of a target...

MAL-2025-17613 Malicious code in cosmicray-luna-envconfig-private (npm)

The package cosmicray-luna-envconfig-private was found to contain malicious code...

MAL-2025-861 Malicious code in private-lib-bug-bounty2.0 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2684 Malicious code in my_super_private_library (npm)

--- -= Per source details. Do not edit below this line.=-...