MAL-2026-11475 Malicious code in pm-claude-skills-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce00c3df3f5fdc8df05a880bb2abd711a8e1d7352b8067ef88d70d353e825e3c lib/report.js imports childprocess, fs, os, and https, then collects host and user identity data via os.hostname and os.userInfo, reads local files v...

Malicious code in sixseven4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dfd6ff82b27df8c8ecd3520e70b720e0ff6e6f4443e21d1230acebdfd032b6d The package declares no install/postinstall/preinstall lifecycle scripts, and its declared main is sw.js — a browser ServiceWorker that uses...

Malicious code in @zitterorg/occaecati-recusandae (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd65c7c9d41679af6bf5aa32ba7438189df1020b64185353405f34f4749e9ec4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internallib_v243 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f110561be9a972bdf8bbf2868742b8e147ac0e6647cc9ce9f0cee19bcd2506bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gulpreplae (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7186692889cc7ad37d17f2278a3973c92dc0d3a45dca16d95bdcdbfbcc995d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in webhook-provisioner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 697ea38acf4a193645bda704d70e5d5e598227df1456666b6997d1c09ffcbacd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...