Malicious code in workspace-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a299d08a926a020ab738de2ff3aee9ccbbdea3f90fc93c0a7a0d2ab8e8b22724 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in neon-poly-utls (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d32a00f9baf3245d9fb2850131a024274a409ca0eb90ac9db6e3e7dc37d379f The package's postinstall script reads a URL from package.json.homepage pointing to polymarket-clob-service.vercel.app/config/clob-math.json, fetches...

Malicious code in @wagni_bot/polymarket-sdk (npm)

The npm package @wagnibot/polymarket-sdk is a supply-chain credential stealer disguised as a Polymarket SDK. It is one member of a coordinated campaign of 25 crypto/web3 typosquat packages published under the single npm scope @wagnibot on 2026-07-09. Each package declares a postinstall lifecycle...

Malicious code in reamctjs (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in react-tiny-popover-next (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in react-datepicker-next (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in reaactjs (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in raeactjs (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in postgres-docker-utils (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in picnic-store-basket-miniapp (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in manage-subscription-app (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in logfuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 259fc8b205e41dea32af006c7eaa325f0d1cca2421c668b778b8d2559d8ec900 The package was found to contain malicious code or consuming dependency that contains malicious code...

Malicious code in jwt-path (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in ingularjs (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in elf-stats-merry-fir-592 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in elf-stats-bright-star-581 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in chai-as-test (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in breactjs (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in angulrrjs (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in angulprjs (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in angulbrjs (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zzwandsxabc119 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zwkact6 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zrgvff86c (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zjsrch2 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in wenc10385 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in wandshack2 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in wandproxy2 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in vand5kbjt1778552578 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in swmodsjabc (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in swcalcalh (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in swaim5a (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in slq39369 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in slnciguegg (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in slnbxwiltsbk (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in oakmi17200 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in mvv10 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in mt8320mzji (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in hwc4v (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in hgrangex2 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in hackbzr1778554791 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in eiljanlanhnz (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in dlxprobe18 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in chmid8600x585361 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in chmid8310x612257 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in aiwrfyltgujs (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in aicalunosquaz (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in pretty-pino-loggers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f1b4c6d11dae72d82f4c6d856e9445f27cee3a1ed475f2043b5d7369aad48be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chalk-pro-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca82107c7a94834e0b1631156fa6a49bd3eb3e4c5134dc6f89692e0e4739ad39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in neon-terminal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe8b090e304f95042a17db9e22edef03d8cdd073a214806e8aa3ebe7b2d138f9 neon-terminal advertises itself as an ANSI color helper but its CJS entry dist/index.cjs and ESM entry src/index.js each execute a shell command at t...