Malicious code in ssf-desktop-api-browser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5940c26ac6aa2f9c3682f4d383922757d2d5c361b5a70140ca289eabe304be8d The package ssf-desktop-api-browser was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in enclose-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f7fc1a375a04989c1b52036b89fefe7fbba475b3fe7ec9917335cfe3a9746bc The package enclose-eslint was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in fdir1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ba081e2ca3fffe519e73fc13330df7332fbaf118aa8f6c193b43e9b2ce8a5ce The package fdir1 was found to contain malicious code. Source: ossf-package-analysis 8f5aefdb4168145eaa4b092c9e5f4fbd482f9fbd1fc0328b3272f3e2067731e8...

Malicious code in ido-sdk-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a541a76e308d33ea53424e63677093bd2347634a5f313f6bff9fd62a4fa83c9 The package ido-sdk-web was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in fdir4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64821a4790ad9d467b84b11aa1c7038cfa1d2c7307e7db03f049a76104c15850 The package fdir4 was found to contain malicious code. Source: ossf-package-analysis 2864053a37838b568ec7f045df7742f31a81c95af5bf06a5684c8b1361a213b7...

Malicious code in sharp32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f854d89f15c6f2c295e60f0637ee2cafb7c529411ccde7fd17a6f234d35c1a4 The package sharp32 was found to contain malicious code. Source: ossf-package-analysis 845f95e2b2a4fda74205b37d644e9bacf9b283166313aeb024297e19f24d3d...

Malicious code in fdir2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19307a303580d9399ea5d4c9bee17c0e89d9f81daaab855f99563080ba79630c The package fdir2 was found to contain malicious code. Source: ossf-package-analysis 8999cc376e31073e8a5937b4bed10d25255c312d9b6c888bfad3a30401583b77...

Malicious code in ssf-desktop-api-openfin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 367b2689b7d50c48e26747ef1edce3a36165d64fd361ad3fc19f1c52fce204f9 The package ssf-desktop-api-openfin was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in evil-rce (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 74a74a4133ed8082eba8452bb59a82dcf6975e1e8c4d6630a47088c17d6b6cca Running the module starts a reverse shell --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-12-evil-rce...

Malicious code in express-my-error-handler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0f2d01a1484943569d365369896d46ee7229516152d056b0403048a740e7bcc The package express-my-error-handler was found to contain malicious code. Source: ghsa-malware...

Malicious code in qt-main (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bd1f92a69928dc8fa2a6a50cfd596c34802bc68fc28dd5dd8508fc24344bbec9 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in elf-stats-cosy-sled-550 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d003b03c0bb71b9501930d50f6b45cd0c91c9b89080bea5d69f04f0b561f3f8 The package elf-stats-cosy-sled-550 was found to contain malicious code...

Malicious code in ambient-map (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f03e10d2eec7143fda8062e504341041a8123bc6f2a0d7223ce9ced959b7dd1 The package ambient-map was found to contain malicious code...

Malicious code in elf-stats-candystriped-garland-735 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b18145cfa522b714f5a007a20544d2cad67fb9f9203ede1fec744cf537183b24 The package elf-stats-candystriped-garland-735 was found to contain malicious code...

Malicious code in elf-stats-candlelit-hollyberry-248 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f48c0580ac5b5930d0998a8fd8750cd281babbb29ef73f9ecf04334f5a8ecd0 The package elf-stats-candlelit-hollyberry-248 was found to contain malicious code...

Malicious code in elf-stats-aurora-mailbag-938 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f768068bd3991eadda7f760911cae55893177214af25cf437ad13512a836bef1 The package elf-stats-aurora-mailbag-938 was found to contain malicious code...

Malicious code in elf-stats-flickering-lantern-502 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebc613b513833195464938e6e5c51e891b1a9978f9648ee11ec41bb76519e2d2 The package elf-stats-flickering-lantern-502 was found to contain malicious code...

Malicious code in elf-stats-cranberry-pinecone-878 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41f51e6ef204472a6da74c31484ee0ae382cf13423ed26fdf88dbde3f9be7c7f The package elf-stats-cranberry-pinecone-878 was found to contain malicious code...

Malicious code in elf-stats-lanternlit-saddlebag-279 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1fe295c9017f7da0ef4b1fe47a7a422c26c794229397b63d9ea7711f26a4591 The package elf-stats-lanternlit-saddlebag-279 was found to contain malicious code...

Malicious code in elf-stats-evergreen-satchel-264 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a0cef2ea5708ca3569d122ccff1c50dae9ea55f7fc05a9dcafbc4481b5c0c13 The package elf-stats-evergreen-satchel-264 was found to contain malicious code...

Malicious code in elf-stats-midnight-rocket-813 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff097f7c813e420b8136ad3caa145a545e08d315d7f9125f824b2a3607c4ae88 The package elf-stats-midnight-rocket-813 was found to contain malicious code...

Malicious code in elf-stats-mulled-snowglobe-636 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b67abba45322e79dde009c80b6945042d05796dcb95f3a7e42a0135a03811c63 The package elf-stats-mulled-snowglobe-636 was found to contain malicious code...

Malicious code in elf-stats-northbound-drum-422 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff646d1c5430cafc2a1ae16cec7477bd8a2f9b81bec9ba8cdaba97b24f16e004 The package elf-stats-northbound-drum-422 was found to contain malicious code...

Malicious code in elf-stats-shimmering-toolkit-483 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa849828ae330627573a02a9cfec420e470cf5dcfa587e0080e3db4105f31ad2 The package elf-stats-shimmering-toolkit-483 was found to contain malicious code...

Malicious code in elf-stats-shimmering-garland-476 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfa536492435312f40e9d3433437066667d2b4723db4672e50d9893bf4966214 The package elf-stats-shimmering-garland-476 was found to contain malicious code...

Malicious code in elf-stats-sparkly-icicle-845 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c00a4c6e13ebfbe200eee9020b717298e81754ca9f6c27943ba6e02d9aa31aff The package elf-stats-sparkly-icicle-845 was found to contain malicious code...

Malicious code in elf-stats-snowdusted-chimney-406 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d86a6efef2f245df6129dd6f2942074a1f09f4a587b963499865455bddb47fbf The package elf-stats-snowdusted-chimney-406 was found to contain malicious code...

Malicious code in elf-stats-velvet-train-152 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18265736ea9a5d9727aadb6a21bf442587049cf9c8126b018a4915cf9842863a The package elf-stats-velvet-train-152 was found to contain malicious code...

Malicious code in sd-123456 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00b44fd36c7e696d952fccf6c85284d4a4b2fbd1c47062ef87b5ed6d13368fc6 The package sd-123456 was found to contain malicious code...

Malicious code in elf-stats-whimsical-pantry-974 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 609f44e692415de1702ea2e67a3f1cf76c7e96a2d2e749d66851f9072f583f4d The package elf-stats-whimsical-pantry-974 was found to contain malicious code...

Malicious code in non-modular-buildable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89c55595895f1b12b30a16c099606601b1bb2a29cd30ac341a2095d224b33963 The package non-modular-buildable was found to contain malicious code. Source: ghsa-malware...

Malicious code in native-component-list (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a5b5fc0df7145b301573dc029802ddf1c8f351945d0877d43e499a34192673f The package native-component-list was found to contain malicious code. Source: ghsa-malware...

Malicious code in elf-stats-sparkly-workbench-689 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a721ca1e0dbc8cdf7b12b79ab3bcb463d85a37fa71875c883df67fd74e25ab4c The package elf-stats-sparkly-workbench-689 was found to contain malicious code...

Malicious code in elf-stats-tinsel-muffin-395 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a656faa46cdf0ceaaa9659c09ead8312760eccefa700a36a72bb7ae3eae1186d The package elf-stats-tinsel-muffin-395 was found to contain malicious code...

Malicious code in elf-stats-cosy-toy-308 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aca3af23bbfec4f6a8b388056bdca1e75940f84912fc3413aa6f6ef991997df5 The package elf-stats-cosy-toy-308 was found to contain malicious code...

Malicious code in rendom (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1effe6d94e0635864c22ea960a22b40294c3f2e510550046139bcd78f62a33fa The package contains a Telegram bot to perform remote control of the computer. The package name additionally suggests typosquatting against standard random...

Malicious code in joyboyw (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 36ac711534f46e41704c145912a7a6c3a51f64bb1888469e0730768e00865242 Contains a function to silently download malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

Malicious code in json-map-source (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dd2d0607d185e9c26b9f948e2335066b6e537f3f192794f59fdf55548300006 The package json-map-source was found to contain malicious code. Source: ghsa-malware 3c10e01cd8946f23f63e8eb210a0de73503e9815cf616aee78f18c96c4fe2ef...

Malicious code in chai-as-deployed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ebc44576073489ddc650d352e43bee3aa036bcdc2914887eb9c36be2780e09b The package chai-as-deployed was found to contain malicious code. Source: ghsa-malware 117c632d121fc31a4f589c4d76730535c6d5b576ae6e3addab756be448c13b...

Malicious code in chai-promised-chain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a501d6eba591eb49cf120c8aee8c4e0600aacf2263984d3ae14e0d1b53daa92 The package chai-promised-chain was found to contain malicious code. Source: ghsa-malware...

Malicious code in dotnetenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad45bf9bd262cf43bb28421d876fa019b6f14d3699854454ae1677b0383a90a2 The package dotnetenv was found to contain malicious code. Source: ghsa-malware 1de4b94766b2d429c31b5469528ed35738f14af710e091dbd47b838649173953 Any...

Malicious code in tailwindcss-setfont (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f910baae4eb0176c7c1c4b6bde6db28967b1f8674784e8953fe7abb47d7730a4 The package tailwindcss-setfont was found to contain malicious code. Source: ghsa-malware...

Malicious code in tailwindcss-animation-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 481964585a35f69204d7414e9baf1d490be4d82239919026f044584bf7a64ddd The package tailwindcss-animation-helper was found to contain malicious code. Source: ghsa-malware...

Malicious code in seeds-random (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 795bbcfb5b0465693171101c152402cfb2b6c877bc4359dbb68b2844b905bcd9 The package seeds-random was found to contain malicious code. Source: ghsa-malware 47de9449cd7355e6e5c74ef85fbc39aceee380dfb0dbbb1f557dda15431d1ff6 A...

Malicious code in react-svg-fill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 995c6ef17232fb1949de6b62053246036337cb070a7b06a466bb122d789c9ca3 The package react-svg-fill was found to contain malicious code. Source: ghsa-malware b09c58dca53550942f8c2595496e45d321f85551e7ce7a94e7059e50448f4709...

Malicious code in react-svg-supporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf2d6b643ae6f9563baf5e18621fe86ff8f764a2254785e2300c96aa397a0bc The package react-svg-supporter was found to contain malicious code. Source: ghsa-malware...

Malicious code in react-svg-bundler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0653c3340d723105ee0db3b1e440d764e9c750287b1f50e796b4ce847ddaee46 The package react-svg-bundler was found to contain malicious code. Source: ghsa-malware...

Malicious code in react-icon-updater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 755e55af72b70c14edf83bdaea2cbd76dff5c7ab6410f9e3f44f7b521e7248b3 The package react-icon-updater was found to contain malicious code. Source: ghsa-malware...

Malicious code in jsonify-settings (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4542f68b7757f5b53642bfaa0e9904aa7fd388338cb001d9e7911b90641a909f The package jsonify-settings was found to contain malicious code. Source: ghsa-malware 286d141ff650d5b4b60b7ad344ea4c0f5b4c3326cf6e7ce1c5e1de74c53094...

Malicious code in node-dpapi1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a892f37c5be6dceac9cda541ce52d7dc4456d98acbfaa7d2a1e530d181567e29 The package node-dpapi1 was found to contain malicious code. Source: ghsa-malware 96a0f4f04fbe21b39cfa4fe8473fc5394bcecce0f814fcba5f89d6f6217e523d An...