MAL-2026-10917 Malicious code in tinkoff-cloud-apis-internal (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 30caca1d5e67322644a0eb6cf8098151d975415baab826d14a0bba75117ae95e Package presents little functionality, but excessive fake 'telemetry' module. This fake telemetry is used to download and run malicious executables. Code is...

MAL-2025-116281 Malicious code in oktafian-otak-otak88-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caf98bafaef6ff3128462d1d33ecf5fa3a36b311fae6dd2e389ba2f58af0b494 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...