Malicious code in identity-two-factor (npm)

[email protected] is a dependency-confusion package aimed at Coinbase its README and postinstall.js say so, and the beacon path is cbhq-canary with no functional code. Its postinstall script runs node postinstall.js on npm install, which writes a marker file to the temp directory and...

Malicious code in spectral-net-probe (npm)

spectral-net-probe has no functional code. Versions 1.0.1 and 1.0.4 have a postinstall script that runs node index.js on npm install, which sends an HTTPS GET to a Cloudflare quick tunnel https://nobody-johnston-with-enabling.trycloudflare.com/aa?x=1 and...

Malicious code in glyphmatrix-fixture (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60654856e47cfe1a27ce4877b94172d0b760896c061789013a34d8b888d282f5 Package [email protected] contains two files. No install-time lifecycle hooks, no network callouts, no credential or environment reads, no...

Malicious code in trajmetrics (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f024efebedf9b6fd0adbd2aa9b03293b7cdefdcede29ded30128cabc84290f73 The package is published as 'lightweight metrics helpers for trajectory analysis' but ships only compiled Cython.so modules that implement filesystem...

Malicious code in ccsec-crypto-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea1ae7dd68e77ee9ae1b007dd87e4ffb8a3627f74d08f8812eca811bf2a351d4 The package consists of 2 files with no install-time execution, no network activity, no credential or filesystem access, and no obfuscated or...

Malicious code in ccsec-form-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d63f5a2ae5ff88439a658fdc6a0c8de8fa078a068a1d872be6afcfb5d29fb5b6 Package ccsec-form-validator at version 0.0.0-stage contains two files with no detected malicious behavior. No install-time lifecycle scripts, no...

Malicious code in ccsseecc-form-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1957737b5d2ab838803b712aeea38f8b15bbb5ae465dfab85cecd9f49662bb41 Package ccsseecc-form-validator at version 0.0.0-stage contains two files with no detected install-time scripts, no network exfiltration code, no...

Malicious code in csec-crypto-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2abb8bc55cfdb0121f6d5699665198f00bd78fbbaa555a695f2fe5188c733ef5 Package csec-crypto-toolkit version 0.0.0-stage ships two files and no detectable installer-harm behavior. No lifecycle scripts...

Malicious code in csec-form-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae9c21d4483a24c6cb9c8d70bc589a499b7c4bd952b99cc3e2502c276e8ce6c6 The package consists of two files with a pre-release version suffix 0.0.0-stage suggesting a placeholder or staging publication. No install-time...

Malicious code in csec-form-validatorr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aff8facc55023666afe4d90942161c6319aee23e3bbfc66fc3cd05a828e15140 Package csec-form-validatorr version 0.0.0-stage ships a minimal set of files with no observed install-time lifecycle execution, no network...

Malicious code in ccsseecc-crypto-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81c4912c99dca882662d90321869801dc0e8ad05a98823dc9527509b67c92798 Package ccsseecc-crypto-toolkit at version 0.0.0-stage ships two files with no code patterns associated with credential theft, install-time remote co...

Malicious code in agentenact (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07db0f79773c0790dd0cda967228203b58861c89d78540a25c8ff7ac28152f29 Review of [email protected] npm surfaced no evidence of credential theft, install-time or import-time remote code execution, silent-relay of caller da...

Malicious code in dsh-vm-tester (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0402f4d4ed70da37124eb7d4e1cfd585f2b9afbb63cca44436692a3d21d090 Package dsh-vm-tester 0.1.2 ships agent/tunnel-host.js, which imports Node's childprocess module and performs HTTP GET operations. Keyword...

Malicious code in @webapp-shared/login-vmok (npm)

@webapp-shared/login-vmok is a dependency-confusion package: it uses the @webapp-shared scope, which matches a private internal package scope, and was published on 2026-10-27 in versions 1.0.0, 1.0.1, 1.1.0, 2.0.1, 3.0.0 and 99.0.1 so that builds resolving the internal name from the public regist...

Malicious code in numprint (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2767ab63222f7b2b6c76334822fb6e8c8b0385df53833206362fcf52f93392a numprint 1.2.0 on PyPI could not be fully characterized from the available signals. No specific installer-harm fingerprint hardcoded C2, credential...

Malicious code in adyen-web-v6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3a519911b834e3563c817f3ee58c0d70c589e4f29f26ef97f849668dfc5598f Package adyen-web-v6 version 0.0.0-stage contains two files and no detected install-time or import-time code that reads installer secrets, contacts...

Malicious code in buttoncontent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9d44a5a2d3a96bab51870b046a7d474991b20c52e850f7e5639281ba8bff80e Package [email protected] contains two files with no install-time lifecycle scripts, no network activity, no filesystem reads of...

Malicious code in string-target-mapper-hash (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f356f513bed48330cd1a0538e53ac429f5570385e8b0bcc3fcc5c94876e437b package.json declares its sole dependency shard-writer-parser-mutex as a bare HTTPS URL to a non-registry host...

Malicious code in fetch-hash-cache-atomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fa5c13f5b907c79079d9030292f1a6dac9d2f0ced56c2efe0e1bfd7021acdb4 package.json declares its sole dependency as a direct HTTPS URL https://artifacts.creditslib.com/npm/plugin-client-queue-field rather than a registry...

Malicious code in macro-kernel-record-reader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9ab8754c7e4e3a0a8c6ffd0c1980bbd81bd002c90ebccbbc275df296dfeddf9 package.json declares its sole dependency cache-locale-runner-writer as an arbitrary HTTPS tarball URL...

Malicious code in @azure-growth/signup-ux-components (npm)

@azure-growth/signup-ux-components 1.2.2, 1.2.3 and 2.9.9 are dependency-confusion packages that take the name of a package used internally by Microsoft's Azure signup site and not published on the npm registry; 2.9.9 carries a version number above the internal release, so resolvers that also che...

Malicious code in @camera.ui/camera-ui-nvr-windows-amd64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c000e7f2af1a8ca7d6255b3f8fdc035f9b39bc84a8227e29e5cfc388c6a2e22c Package @camera.ui/camera-ui-nvr-windows-amd64 appears to be a platform-specific prebuilt binary distribution Windows amd64 variant for the camera.ui...

Malicious code in h13t0ry-hello-demo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34a52ed4e00f54dc99a4b460ad2d881b62a7a85c636085f4166f4062cebea374 On import, the package's top-level module code opens a TCP socket to the hardcoded IP 115.190.210.22:80, duplicates the socket over stdin/stdout/stde...

Malicious code in ctf-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae799a3444c808e1efc1027f5f9ee3bce7e972a8357d43fc96f1e5a53a2c76c8 Analysis of [email protected] npm across 154 files produced no indicators of credential theft, exfiltration, install-time or import-time remote code...

Malicious code in csvflow-schema (npm)

csvflow-schema is described as a "Lightweight CSV column-schema validation helper" index.js exports a small validateSchema function and adds a postinstall script that runs node ./postinstall.js on npm install. postinstall.js writes the username, hostname, working directory, parent process id and...

Malicious code in @iobandamwer/native-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cce0282c2e8975376db9fdb7a69afc7ed77c0e7649178967496467e09d7ba328 The package self-labels as a 'temporary placeholder stub' in package.json and README but ships active install-time dropper artifacts: a 93-byte...

Malicious code in path-stream-utils-testmetest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64a028e4ea3039755f4b18b003e2d9722722ca96c51652674dd1bb27f375e4d0 The package self-describes as a 'Temporary package placeholder for staged publishing' package.json stub:true, README 'Temporary Holding Version' but...

Malicious code in @iobandamwer/cache-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0a88993bf967d1bbbc61cb5f43b4d9af5d9ef74b920e70d828b4a52bf880979 The package advertises itself as 'Cache utilities' but ships no source, no binding.gyp, and no build configuration — only two prebuilt native addons...

Malicious code in postcss-semantic-themes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21c91b39929f03c30e501726fc2d1c1fa43f17bf2ed77bda52380e563c1171e0 The package advertises itself as a zero-runtime CSS theming kit but on require/import executes a chain of obfuscated JavaScript modules. lib.mjs...

Malicious code in harlow-css-mixer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 967e3d3d323d36c24348b9530654c33f19bb96bbc21ddeba103dd755a0c07683 The package contains two files and no code paths that read installer secrets, perform install-time or import-time network fetches, execute remote...

Malicious code in netweavex (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3818fe7f3387637c23d6bc51d62f8fd64dc981c82167750cd3059eec73d2849c netweavex is a typosquat of the popular NetworkX library, reusing its public API, module layout, and README examples including the import netweavex a...

Malicious code in zagents-framework (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d16d137f59725b57a8d4dfbb6c9e5b88a07e1bf4fac71faf28e044208a21bccd Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in changes-lxc-wrapper (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23181d1a705554588eb6fb03e8cee4af7e0c815e74d8b40d7bd13a39944ccae9 The distribution changes-lxc-wrapper ships a trivial package whose top-level import name is cacertificates, creating a mismatch between the...

Malicious code in @worca/app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f80211818fca675d402d600a4a024b91f844e94907f87b978cbc6f23f75d1c67 The package appears to be an agent/workspace tooling application that includes a browser-extension sidebar bundle, a local bridge server, an egress...

Malicious code in publish-poc-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bf2f71038e46898cc03f9bf5081547bb6d725e6a480ef22b80f4dc259c721d9 On install, the postinstall script in package.json reads the first line of../../README.md from the installer's parent workspace, creates a mktemp...

Malicious code in publish-poc-test3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4001a75b24abfa181a10e5d40931194f254304fcf5fda554488d3c242cc5db85 The package's postinstall lifecycle script creates a temporary directory, writes a fabricated package.json whose name is 'publish-poc-found-' random...

Malicious code in @apexacc/cli (npm)

@apexacc/cli is distributed by "Apex Accelerator" Apex Arena, a fake Web3 accelerator that lures crypto founders with free AI credits and audits. Elastic Security Labs REF8801, published 2026-10-12 found it is a repackaged Oh My Pi coding agent 1,351 of 1,363 files identical with malicious...

Malicious code in numbors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9965eb6c2b7018707d2ca2ea1840355875eec43f0fc1efb9f03b45cf0566e1a The numbors npm package publishes its entire shipped surface as heavily obfuscated JavaScript: every file under dist/ the main entry dist/mcp.js,...

Malicious code in dsh-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c9c9d92d65945abec57f269176d5080795ae9d832ab6f95525756cd508951bb The package's index.js contains occurrences of the token 'ping' across several lines 19, 526, 656, 690, 980, which triggered a pattern rule for...

Malicious code in bow-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f616a5be7835fbfd40088761cce2863d5ab04d1230e6b22a3e6dcd3fe2fc49b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in css-hnhxwd-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fd2df1dd4f68e1495d31e75e18917e99ee002c60d5e0327d5d84f9e01d52e8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in css-flexgap-shim (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f54735b551cfa311e09f18668c3b10360105519f2277b27d782036d3224c5b19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in util-foriepft (npm)

[email protected] was published to npm on 2026-10-08 17:34 UTC by user regex33-hackerone. It is described as utility helpers but ships no library code: index.js is an empty module. thunderboltRegistry.js runs when the package is loaded, executes host commands through childprocess and sends thei...

Malicious code in @regex33-hackerone/tb-compat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfbbff5e8cb2f0f8b14d300fed9343e48339c9c4e52579af53f926ced1218922 Package @regex33-hackerone/[email protected] contains two files with no detected malicious behavior. No install-time lifecycle scripts fetching remote...

Malicious code in css-grid-snap-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62b283b75dfc6a5bc055d778b3c5855b75f1f80e95639420cabeb24f8440ec42 [email protected] ships a stub index.js that returns a static object and declares no install lifecycle hooks. The tarball additionally include...

Malicious code in @walknpm/todo-cli (npm)

@walknpm/[email protected] is a new release of a todo-list CLI and web app whose only change from 2.0.0 is a postinstall script, sh scripts/miner.sh, that runs on npm install. The script downloads a gzip carrier from amplify-gursha-dev-121835-deployment.s3.amazonaws.com to /tmp/.smh; as root or with...

Malicious code in dsh-plugin-blender-3d (npm)

[email protected] is a new release of a DeepSeek Harness plugin for Blender 3D modeling whose only change from 0.2.0 is a postinstall script, sh scripts/miner.sh, that runs on npm install. The script downloads a gzip carrier from amplify-gursha-dev-121835-deployment.s3.amazonaws.com to...

Malicious code in @s4yhiitestpoc/r2-echo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95d0e909637faadf9360929eb9b01bfac02f0a4bdf7bff852267657d09c5b459 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @s4yhiitestpoc/r2-dns (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d0c56aeb91a20a757ea94500434819d64c0ab2a067c00ccf7dc325e23abdb46a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @s4yhiitestpoc/scan-control-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d0a8c4d5ab871942d5301ffe7797ba35882108ed4f9195f5000f7e274455827 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...