Malicious Package

Overview web-main is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious code in web-main (npm)

Source: amazon-inspector 61680a5d53758bc9eb99b1cd2566e6e19139d09fee10a0096a5e72bb0953a5b2 package.json declares preinstall: node index.js, causing index.js to execute automatically on npm install. The script collects os.hostname, os.userInfo username/uid/gid/shell, platform, arch, homedir, and th...

MAL-2026-16153 Malicious code in web-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61680a5d53758bc9eb99b1cd2566e6e19139d09fee10a0096a5e72bb0953a5b2 package.json declares preinstall: node index.js, causing index.js to execute automatically on npm install. The script collects os.hostname, os.userIn...

Malicious code in web-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61680a5d53758bc9eb99b1cd2566e6e19139d09fee10a0096a5e72bb0953a5b2 package.json declares preinstall: node index.js, causing index.js to execute automatically on npm install. The script collects os.hostname, os.userIn...

MAL-2025-2161 Malicious code in adyen-web-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3cd36b7d736b57d0d4d4a6489ac6362b0ac4e74f3431e76302256745de7e745 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in adyen-web-main

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in adyen-web-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3cd36b7d736b57d0d4d4a6489ac6362b0ac4e74f3431e76302256745de7e745 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2023-17233 · Rockoa · Rockoa

Name of the Vulnerable Software and Affected Versions: Rockoa version 2.3.2 Description: A critical issue has been found in the Configuration File Handler component, specifically affecting the webmainConfig.php file. This issue leads to code injection and can be initiated remotely. The exploit fo...