MAL-2026-10156 Malicious code in notify-logs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fec337f1c1858ad605f875ea51feb09f84fbd2eb702c7bc0462dbb427b3eff05 [email protected] presents itself as the pino logger export name pino, README and type definitions mimic pino, npm version badge points at the...

root-ctf-2026

Root- CTF 2026 - Date: 2026/06/05 - Location: NTUST...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a credential-stealing payload and worm propagation logic. A malicious actor associated with the "TeamPCP" or "Mini Shai-Hulud" campaign compromised a maintainer's access token; this allowed the...

Malicious Package

Overview vitest-globals is a malicious package. This package was recognized as part of the 'PhantomRaven' supply chain campaign, which involves credential-stealing malware. The package impersonates well-known ecosystem plugins to deceive developers into installing it. Malicious Behavior The packa...

MAL-2025-92052 Malicious code in wati-menjes73-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5757336715e3a8286548ec0dae829091607662b137d72e90b0096bee19b1997b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

From Cloudflare Bypass to Credit Card Theft

Introduction On July 6, 2025, a suspicious Python package called 'cloudscrapersafe' was uploaded to the Python Package Index PyPI. Marketed as a utility to evade Cloudflare’s anti-bot protections, this package was a modified version of a widely used 'cloudscraper' library, which is used to automa...

Malicious code in kraken-prices (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4a67a11785828e7b3f7489127f8e07868a2e871b01726d0ddd2142345f94bb96 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

Malicious code in coingecko-price (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 06ba52961b5d886349fdb5a7c3e6362cedaaa64cb5857d5645d7360a68d133d1 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...