239513 matches found
MAL-2026-10001 Malicious code in zztxtwtmp14 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9998 Malicious code in zztxtwtmp11 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9986 Malicious code in zztestownedtmp1 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9740 Malicious code in zrgvq60cf (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9715 Malicious code in zrgvf6b4a (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9700 Malicious code in zrgvbi0fe1 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9597 Malicious code in zjia23 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9592 Malicious code in zjfull3351 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9569 Malicious code in zgitjina64499a (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9472 Malicious code in wprwn2xyz (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9448 Malicious code in wprox-c217-0hg (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9417 Malicious code in wnizcisqddnw (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9363 Malicious code in wjgrants (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9336 Malicious code in wgsfmore63 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9118 Malicious code in vcsmodpdfx1 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-8913 Malicious code in swaim5a (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-8361 Malicious code in oaklfjan4 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-8297 Malicious code in oailmc (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-8290 Malicious code in oailm5 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-8285 Malicious code in oailamtest3 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-8284 Malicious code in oailamtest2 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-8280 Malicious code in oaikx8809714 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-8274 Malicious code in oaikfossilwlvflh (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-8266 Malicious code in oaijx3058720 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-8264 Malicious code in oaijx1603962 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-8256 Malicious code in oaijhghatpit (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-8255 Malicious code in oaijgitzxwjqb (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-8168 Malicious code in oaidx1466937 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-8078 Malicious code in m8405v0nhw (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-8029 Malicious code in loot993 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7936 Malicious code in lbmtq6x (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7819 Malicious code in lambprobe7763 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7736 Malicious code in hgpathr3 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7706 Malicious code in g8405fcjbu (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7525 Malicious code in aiwsamimxhff (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-6949 Malicious code in vps-adapter-core (npm)
The package 'vps-adapter-core' is a purpose-built malware package published by the npm account 'srm0rgan' [email protected] as part of a coordinated campaign of fake 'Paperclip' VPS-maintenance adapters siblings: paperclip2, vps-maintenance, vps-maintenance-paperclip-adapter, paperclip-host-util...
MAL-2026-6903 Malicious code in windrule-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12204dba8f73baf0bb7f6ce1ebd80bb2ce689752abaea290e1429aed4037bb9c No suspicious behaviors were observed in this package version. There are no lifecycle scripts fetching or executing remote code, no hardcoded...
MAL-2026-6878 Malicious code in sleek-pretty (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba44435dd6e0686c11ff8a9e27c60eef2f2fbdbcdbd0c3936d1f07cc78d38090 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-6858 Malicious code in npm-eslint-helper (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc5c1992c3d9f33bca28c1ce098d769809e44a12a671972925815e9890e5e9f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-6854 Malicious code in modulyn (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36dbfd55bdaee5086ac85e09ff2ca9459e303cb1be26220cff4e36844a5e793b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-6828 Malicious code in chalk-pro-logger (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca82107c7a94834e0b1631156fa6a49bd3eb3e4c5134dc6f89692e0e4739ad39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-6850 Malicious code in logger-beauty (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29f894c613d7ea8f407e4515aca877e6f13b5bb8e72530ce8032a534336b5a25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-6836 Malicious code in eslint-vite (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14896c6402e739a2a63d840aef7a65a169ba110c11a9498b42a6bf68278f73e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-6807 Malicious code in bootstrap-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9ac4913fc1ffcabe1ed6637abc6d532abc014683f48b341ece6127a51da15d8 The package's index.js is heavily obfuscated with classic string-array shuffling patterns e.g., while!! loops with repeated 'shift' calls and...
MAL-2026-6816 Malicious code in emojiprint-logger (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6cbf02130e84c5829369887b3e109fbf7ad94e2fbf4b4b2ca82c28f0059a7ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-6811 Malicious code in chalks-logger (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 869473c144b82d7a8d2b10aee4e19061c20e777604902932a3c14632aea446b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10236 Malicious code in tme-xca (npm)
The tme-xca package was published to the npm registry by user 'click2ai' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the internal/private package naming convention of a target organization a 'tme' Travel Mall /...
MAL-2026-10237 Malicious code in tme-xca-react (npm)
The tme-xca-react package was published to the npm registry by user 'click2ai' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the internal/private package naming convention of a target organization a 'tme' internal...
MAL-2026-6750 Malicious code in procwire (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42f7077b3fb95ad31689f096805811e51afe78e7f21c2123d5dcc25343a11ff2 setup.py auto-executes on pip install only guarded by an internal PWDIST env var check and, on Windows, reconstructs an attacker C2 URL and XOR key a...
MAL-2026-6747 Malicious code in web-api-node (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ca2f8dce9e845346901818eadd06a0cda318c99ac3e059cd076d9f4065e2c17 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...