Malicious Package

Overview rojo-rbx is a malicious package. This package contains malicious code. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship. Remediation Avoid using all malicious instances of the rojo-rbx...

Malicious code in rojo-rbx (npm)

Source: amazon-inspector 8bf25c0dd3a1b933c3ee2fe887301590c3b92e383a1e6c380fcdb9544578720b The package impersonates the legitimate Rojo Roblox tooling project. Its npm install lifecycle runs scripts/install.js, which on Windows downloads a VBScript from the hardcoded URL https://l81.me/updater.vbs...

Malicious code in rojo-rbx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bf25c0dd3a1b933c3ee2fe887301590c3b92e383a1e6c380fcdb9544578720b The package impersonates the legitimate Rojo Roblox tooling project. Its npm install lifecycle runs scripts/install.js, which on Windows downloads a...

MAL-2026-16059 Malicious code in rojo-rbx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bf25c0dd3a1b933c3ee2fe887301590c3b92e383a1e6c380fcdb9544578720b The package impersonates the legitimate Rojo Roblox tooling project. Its npm install lifecycle runs scripts/install.js, which on Windows downloads a...

Malicious code in @rbx-ts/services (npm)

Source: amazon-inspector 22a1774c78b52b3d507d305227a1a258795a4e68d52b8366e0010c5d0bb80126 scripts/postinstall.js is obfuscated with hex-escaped identifiers and base64-encoded strings that hide standard API names 'https', 'fs', 'childprocess', 'powershell', '.exe' and a download URL. On npm instal...

MAL-2026-13630 Malicious code in @rbx-ts/services (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9476bbe7c2ce12348142e93deffe53c9d4d6dfef3400030af81cff902bac5935 This package impersonates the @rbxts/services Roblox typings library and re-exports its public API in index.js as cover. Its postinstall script...

Malicious code in rbx-autohit (PyPI)

--- Credit: OpenSSF source...

Malicious code in rbx-cookie (PyPI)

--- Credit: OpenSSF source...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001278)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001278 advisory. An issue was discovered in the Linux kernel through 4.17.11, as used in Xen through 4.11.x. The xenfailsafecallback entry point in arch/x86/entry/entry64.S does not...

Malware in rbx-handler

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-49374 Malicious code in rbx-handler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d4ecda15069813165d8d13bb57d1f3897a9cf9ff78f99e9351d6f70718652a0 The package rbx-handler was found to contain malicious code. Source: ghsa-malware f13b7df25e6160dc2918d838b4d1f1823318fa34c5e29990e87a57a293c0e0d9 An...

EUVD-2025-37946

Malicious code in rbx-reader-ts npm...

EUVD-2025-37948

Malicious code in rbx-api-ts npm...

Malicious code in rbx-handler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d4ecda15069813165d8d13bb57d1f3897a9cf9ff78f99e9351d6f70718652a0 The package rbx-handler was found to contain malicious code. Source: ghsa-malware f13b7df25e6160dc2918d838b4d1f1823318fa34c5e29990e87a57a293c0e0d9 An...

MAL-2025-49375 Malicious code in rbx-reader-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26b8d14a0bd74bf3ed3daec6aa05cdff66d71efb652ea3727f5eee4812f39293 The package rbx-reader-ts was found to contain malicious code. Source: ghsa-malware e2cc8e418629e96adc1f49efc1c9e67a21f94eb0594d1e6a66ce25023f0afcc4...

MAL-2025-49373 Malicious code in rbx-api-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adcdceb1d10e901a9b6e6666de7760a70b8a30d2e4f4230f37f089714d62227d The package rbx-api-ts was found to contain malicious code. Source: ghsa-malware 40b2b2f44e007e32202c67b4c33caf98936df9a60df7dc60e7163078fff8b7d3 Any...

Malicious Package

Overview rbx-handler is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

Malicious Package

Overview rbx-api-ts is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview rbx-reader-ts is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in rbx-api-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adcdceb1d10e901a9b6e6666de7760a70b8a30d2e4f4230f37f089714d62227d The package rbx-api-ts was found to contain malicious code. Source: ghsa-malware 40b2b2f44e007e32202c67b4c33caf98936df9a60df7dc60e7163078fff8b7d3 Any...