MAL-2026-13839 Malicious code in vczxijghsvizu4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bae2fa8ce447bf7b8dbe7b16f14e37b56f713aff508b26f937188a1570d8309 Package [email protected] contains 2 files with no a static rule matches and no traced behavior indicating exfiltration, install-time code...

MAL-2026-13784 Malicious code in bgncvhferucfds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1bf8639ccc5d2a70ae2e0ce754b76e1ca525699413f5d696289714005e86c57 The package's sole content is a single obfuscated HTML file declared as main. When loaded in a browser, the page renders a fake Cloudflare Turnstile...

Malicious code in cvvkshuelwiu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de3f325329894b841474989d30370570a7f1b68d02334db1b98dcaf109899fa9 Package [email protected] contains 2 files with no a static rule matches and no traced behaviors of concern. No install-time scripts, network...

MAL-2026-13811 Malicious code in hcfguyfrmblp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f806fc6db71a1b888ba1f86d790b7a2866b4911e7f77ade2d375237e8c0a6ea2 The tarball contains only package.json and index.html, with no lifecycle scripts and main set to index.html. The HTML page mimics a Cloudflare...

Malicious code in clxofwfjskaz7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b4dde997a29794d4dfbb4725da833fa7cb4a221dc91d6b820901745eb77f198 The tarball contains only package.json and index.html. package.json declares main: index.html and no lifecycle scripts...

Malicious code in cvmbxcjiasdg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 925628ce795fdbf222c292ae4ccfbe710eda2fa1b6fd521db3379f9569e16f9b The package contains a single index.html file declared as main and no JavaScript entry point, lifecycle scripts preinstall/install/postinstall/prepar...

Malicious code in vkldhcmieru6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25890a37fa8da48d2dc2868e010cef8cb3427faa42218cec4b858ac82db679d7 The package contains only index.html declared as main in package.json and a minimal package.json with no lifecycle scripts. The HTML impersonates a...

MAL-2026-13837 Malicious code in unitel3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 191a863f69cdac20d9594e012bfb03929448786892a1c13d185ac4f64d2b5a8f Package [email protected] contains 2 files. No install-time lifecycle hooks, credential access, network exfiltration, dropper, or backdoor behavior was...

MAL-2026-13820 Malicious code in khanbmnxls (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2170fddb23040b2e55eeeb17188244072efdef033879036b45865f5b84ef7346 The package contains a single index.html that impersonates a Cloudflare Turnstile 'Just a moment...' challenge page. The inline JavaScript is heavily...

MAL-2026-13817 Malicious code in jhkxcixudnvm1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aecafeb32fc0bc6beb0fcd9f6cab36efa71c8e69dc966271eea55bd03ba8eadf The package contains only package.json and index.html, with index.html declared as main. The HTML imitates a Cloudflare 'Just a moment...' verificati...

Malicious code in fhj8cv9dkwm4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f91ea4120fcb82c9a36d533346c28a2ce7ed225ed31a89526d9cee45f0be2581 Package ships a single index.html that mimics a Cloudflare Turnstile 'Just a moment...' verification page. An obfuscated obfuscator.io-style script...

Malicious code in cjdfswifuem3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 565ffd2f5127412df02a03f80345ff2420dc5545b65abff5298eac3bf1bf2990 The package has no JavaScript module; package.json declares main as index.html, which cannot be require'd, so installing or importing this package...

MAL-2026-13807 Malicious code in fdhcvriwecv3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c72894ed6ed82e4ebcbd83619b2a3f591c7dab355050fc1d43a62f90d384ee08 The tarball contains only package.json and index.html. package.json declares main as index.html, and there are no...

MAL-2026-13834 Malicious code in thundertiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1c287b2a6653cf3abb51d22059dbe433959b3a2445a75f32e27ed029b1e42d7 The package's only shipped content is a single HTML file that mimics a Cloudflare 'Just a moment...' security challenge. The inline script is...

MAL-2026-13845 Malicious code in yangming708 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f670e6c07175c9534c5554cc89c44a73a22d46a18a9a19140030b5b446fba17f The tarball contains only package.json and index.html. package.json declares main: "index.html", which is not a requirable Node module, and no...

MAL-2026-13783 Malicious code in bcnfjndwbkf2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a1fc1ec45930a69372eadc47b662c5d82b247b5b4227feacda3d1c4302b4bf3 The package contains only index.html and declares main: 'index.html' with no scripts, no bin, and no JavaScript library surface. The HTML mimics a...

Malicious code in hfkcdyuwbdx1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c3d2f214c9d9ba8dcc912ba18272665044c75eb18d8335c18b959687d45cbdb Package [email protected] was scanned but produced no concrete findings from either rule-based checks or contextual code tracing. The package name i...

MAL-2026-13812 Malicious code in hfkcdyuwbdx1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c3d2f214c9d9ba8dcc912ba18272665044c75eb18d8335c18b959687d45cbdb Package [email protected] was scanned but produced no concrete findings from either rule-based checks or contextual code tracing. The package name i...

MAL-2026-13795 Malicious code in csbcldfvivwfgd4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6d7db017a0499c0fca67cc331c44fa736fe52568177990823cb17bd03ceee21 The package contains a single index.html declared as main. The HTML mimics a Cloudflare 'Just a moment...' challenge and contains obfuscator.io-style...

MAL-2026-13793 Malicious code in cjdfswifuem3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 565ffd2f5127412df02a03f80345ff2420dc5545b65abff5298eac3bf1bf2990 The package has no JavaScript module; package.json declares main as index.html, which cannot be require'd, so installing or importing this package...