235867 matches found
Malicious code in sixseven6 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fce7a5f40c9f40116627ed8a771d60c34786bc52648e39e0741fe392ed0120b The package declares no install/postinstall/preinstall lifecycle scripts, and its declared main is sw.js — a browser ServiceWorker that uses...
Malicious code in imillegal5 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f821da7c50910d456dfcf5a26ae1afd56a7ec95836a16f570edb014d02a6608 The tarball ships auto-publish.sh, a script that republishes the same payload under 100 distinct npm names ishowfeet1-ishowfeet20, nottuff1-nottuff30...
Malicious code in whatsadmaidk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 604f59cbac58a8e35ba82016c72efe0c02226eec9273e96ee9215dd72cbe0392 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in omgyesyesyes (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eeb53892156b3a1354703f4f8beb2591548726886a017ccc7129407eb128ed9 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in openai-apps (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b14c6aa9b0f0ab8c4eef077cf58971cd053092124a8d91cb2d478f04bc22ad4d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in mcp-notes-server-poc-praetorian (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a926b6d3f87c9242af654ce9379abe9e511aa6366efe7667822080968c66f65 On startup of the CLI/bin entry, [email protected] issues an unconditional HTTPS GET to the hardcoded host ft8swuagwwf6newi.ixx.s...
Malicious code in tinyparrot (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec7ebbcc82edaa241764193ea85c0492b99f9ed3be805c57ef0914518cd4b6f9 The postinstall script src/build.js reconstructs the strings 'https', 'POST', and the destination host 'rnjkerbf.org/P' from integer-encoded arrays v...
Malicious code in paysafe-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ce9ede35fc7679965ba83f58e829a328482bf1fbdb2e450d23e20bed24d708f The package presents itself as a Paysafe REST SDK PaysafeClient with payments and customers methods but the SDK methods are stubs that return...
Malicious code in llama-tokenizer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b22305b1026f27be6d5b78dc19f7db7a05cc9d1818b7ebc7cda0fce92431aa02 This package typosquats llama-tokenizer-js. On require, index.js reconstructs a host and URL path from String.fromCharCode numeric arrays, downloads ...
Malicious code in workspace-scripts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a299d08a926a020ab738de2ff3aee9ccbbdea3f90fc93c0a7a0d2ab8e8b22724 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in cookie-js-ease (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2908ef4ab9f019d4675b39066f876acb959cd9814b47bb66f8f4554c517abe0d [email protected] impersonates the popular js-cookie library same repository URL, banner comment, API surface, and reused upstream author name...
Malicious code in chai-as-modified (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab841cd3ab01bfcd1257a214489b41f10e236779e236a0672642777160245a9e Package name is a 1-2 character variant of the widely-used chai-as-promised plugin. The exported function — the entry point users pass to chai.use...
Malicious code in @calm2026/imux (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a755ff37a1fe6e18a3c050a0cf93bfadf80e790fd585c8e09a70179d07ec62f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @wagni_bot/wagni (npm)
The npm package @wagnibot/wagni is a supply-chain credential stealer disguised as a the campaign's own namesake handle SDK. It is one member of a coordinated campaign of 25 crypto/web3 typosquat packages published under the single npm scope @wagnibot on 2026-07-09. Each package declares a...
Malicious code in @wagni_bot/hyperliquid (npm)
The npm package @wagnibot/hyperliquid is a supply-chain credential stealer disguised as a Hyperliquid SDK. It is one member of a coordinated campaign of 25 crypto/web3 typosquat packages published under the single npm scope @wagnibot on 2026-07-09. Each package declares a postinstall lifecycle ho...
Malicious code in @wagni_bot/pumpfun-sdk (npm)
The npm package @wagnibot/pumpfun-sdk is a supply-chain credential stealer disguised as a Pump.fun SDK. It is one member of a coordinated campaign of 25 crypto/web3 typosquat packages published under the single npm scope @wagnibot on 2026-07-09. Each package declares a postinstall lifecycle hook...
Malicious code in na-rony-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73b485b2a162e7940eb348df343cb7bc4a1a84ab2533e71df742204df778e4b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in whs4_npm_test (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68d797ee3c8111cffee8603aa24625cb71a7f958438e33207b33376b260acc59 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in base58-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60a7d188e2cd79918987f2008e93bb80ea9979d791b357f8f7cfd892321ded6c The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in @sqlite-list/schema-generator (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db66a72ece64d62fe02a712d609f136a1d5bae710c8a97b82dde8e7c39ad9bf6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in zircuit-reporter (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in wreactjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in ureactjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in suit-base (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in smtp-test-server-node (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in reiactjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in anguxarjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in angusarjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in angulorjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in angulcrjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in angulaxjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in angulanjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in angulamjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in angulaljs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in angulagjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in angulafjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in angulaejs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in angulacjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in angukarjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in angujarjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zwkact6 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zrztrans (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zpx52530rm (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zjina1 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zjhash80 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zhgx02ab9f (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in xxproxywebtestdfg (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in wphraA (RubyGems)
--- -= Per source details. Do not edit below this line.=-...