240511 matches found
Malicious code in ventra-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f023d55f53d30a92c8f06ca661862ee99d338f6d3719247c9390b3169009702 The package's default export module.exports = = getPlugin issues an HTTPS request to a hardcoded bare-IP host at 31.97.137.157:45000/icons/116 and...
MAL-2026-13962 Malicious code in ventra-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f023d55f53d30a92c8f06ca661862ee99d338f6d3719247c9390b3169009702 The package's default export module.exports = = getPlugin issues an HTTPS request to a hardcoded bare-IP host at 31.97.137.157:45000/icons/116 and...
MAL-2026-13959 Malicious code in prediction-trader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da26a91c3cc6d5bf4957fa3f713a63e579b820c40b57b24209df61b2a53d7e87 index.js contacts a hardcoded bare-IP endpoint at 31.97.137.157:45000/icons/108 disguised as an icon/CDN fetch variables named iconDomain/getPlugin,...
Malicious code in prediction-trader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da26a91c3cc6d5bf4957fa3f713a63e579b820c40b57b24209df61b2a53d7e87 index.js contacts a hardcoded bare-IP endpoint at 31.97.137.157:45000/icons/108 disguised as an icon/CDN fetch variables named iconDomain/getPlugin,...
Malicious code in velora-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a60310ccbaf263dc4333db7ecb716cbf5f5ae13a2cfc9d8b7416f82e4561d7bb [email protected] exports a getPlugin function that fetches content from a hardcoded bare-IP endpoint at https://31.97.137.157:45000/icons/116 and...
MAL-2026-13961 Malicious code in velora-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a60310ccbaf263dc4333db7ecb716cbf5f5ae13a2cfc9d8b7416f82e4561d7bb [email protected] exports a getPlugin function that fetches content from a hardcoded bare-IP endpoint at https://31.97.137.157:45000/icons/116 and...
Malicious code in copytrade-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00c8773c5727069f87e54d58cd3679252a90ec0fe3de3a1b4adcb9a3bbff68bd index.js exports a getPlugin function that issues an HTTPS request to the hardcoded bare-IP endpoint https://31.97.137.157:45000/icons/108, takes the...
MAL-2026-13944 Malicious code in copytrade-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00c8773c5727069f87e54d58cd3679252a90ec0fe3de3a1b4adcb9a3bbff68bd index.js exports a getPlugin function that issues an HTTPS request to the hardcoded bare-IP endpoint https://31.97.137.157:45000/icons/108, takes the...
MAL-2026-13940 Malicious code in @opezneppelin/contracts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abe04ec28ed56cb0a253131129df8078d425f8a0c579c439ced9c75b6977a6ab @opezneppelin/contracts is a typosquat of @openzeppelin/contracts. Its postinstall lifecycle script scripts/postinstall.js hex-escapes all module...
Malicious code in @opezneppelin/contracts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abe04ec28ed56cb0a253131129df8078d425f8a0c579c439ced9c75b6977a6ab @opezneppelin/contracts is a typosquat of @openzeppelin/contracts. Its postinstall lifecycle script scripts/postinstall.js hex-escapes all module...
MAL-2026-13956 Malicious code in npm-hex-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a0f1f9004b6a502c144d4d475e89a3956905aebf51fb2696d4ba05c21613727 The package's postinstall runs runtime.js, which POSTs os.hostname, os.userInfo.username, os.platform+os.arch, Node version, and OS release to...
Malicious code in npm-hex-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a0f1f9004b6a502c144d4d475e89a3956905aebf51fb2696d4ba05c21613727 The package's postinstall runs runtime.js, which POSTs os.hostname, os.userInfo.username, os.platform+os.arch, Node version, and OS release to...
MAL-2026-13953 Malicious code in js-assert-plus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acbf16a8956847ff7ed56158afe65bc0bf76cb36f8cb6af6bc143cae4cb9babe The npm package js-assert-plus masquerades as an assertion library homepage http://js-assert-plus.com and bundles the real chai source so consumers g...
Malicious code in js-assert-plus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acbf16a8956847ff7ed56158afe65bc0bf76cb36f8cb6af6bc143cae4cb9babe The npm package js-assert-plus masquerades as an assertion library homepage http://js-assert-plus.com and bundles the real chai source so consumers g...
MAL-2026-13954 Malicious code in minimalistic-assert-plus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e59f4af9a6f3f95bf4cf795fb91bcf4c7934dbb90e64d750255a2a786ed7dc75 The package typosquats minimalistic-assert and re-ships the Chai library alongside a malicious dispatcher. On require'minimalistic-assert-plus',...
Malicious code in minimalistic-assert-plus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e59f4af9a6f3f95bf4cf795fb91bcf4c7934dbb90e64d750255a2a786ed7dc75 The package typosquats minimalistic-assert and re-ships the Chai library alongside a malicious dispatcher. On require'minimalistic-assert-plus',...
MAL-2026-13958 Malicious code in power-assert-plus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff97d4bae356db6a165ae845ee186c814f89bd1ee40e839d6da054965bfbd823 power-assert-plus is a typosquat of power-assert. On every require, index.js detach-spawns node build/power-assert-plus.js. That build file is...
Malicious code in power-assert-plus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff97d4bae356db6a165ae845ee186c814f89bd1ee40e839d6da054965bfbd823 power-assert-plus is a typosquat of power-assert. On every require, index.js detach-spawns node build/power-assert-plus.js. That build file is...
Malicious code in postcss-initialize-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c75b316d71a07c70e033fe47d5a3efbd6c3dbccb3b1ae8466a4d325c0d1ada79 postcss-initialize-plugin is a typosquat of postcss-initial. Its README, repository URL, and author metadata are copied verbatim from...
MAL-2026-13957 Malicious code in postcss-initialize-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c75b316d71a07c70e033fe47d5a3efbd6c3dbccb3b1ae8466a4d325c0d1ada79 postcss-initialize-plugin is a typosquat of postcss-initial. Its README, repository URL, and author metadata are copied verbatim from...