MAL-2026-17899 Malicious code in @flexmr/survey-conversation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20ab57dd6ac5a0eafc23934f6e715064453641bc57a549050f1d2e66a7630374 package.json declares its sole dependency cache-format-syntax-tracer as a bare HTTPS URL...

MAL-2026-17898 Malicious code in @flexmr/survey-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed5d0e26b18d32568569b828bdbe2ccb40d0c4a54780c6e51be6280cb5fc851f @flexmr/[email protected] declares its sole dependency 'marker-index-symbol-schema' as a bare HTTPS URL to...

MAL-2026-17897 Malicious code in fromthehotel-poems (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bf72dad3e2f32ee2e66a3a5ee5642b4a20a9fb9458fcd677f6250b1e4b805906 One of the provided functions hides executing remote code from a newly created domain. During analysis, the remote code did not contain any malicious action. T...

MAL-2026-17892 Malicious code in xmd-baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79a85f0f80af9a736d2f4a26eb74220eeaa0f7deb07ff911a822221a980f78df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17890 Malicious code in @developmentyora/yorakids (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d16bc35a010f7219764c00ca6703b36997bf3ccdf410b7e4cd71d043009938f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17439 Malicious code in @developmentyora/baileyss (npm)

This package is a fork of the Baileys WhatsApp Web library npm and belongs to the "PhantomSub" family described by OX Security in September 2026: the publisher injected code that, without the installer asking, uses the installer's own authenticated WhatsApp session to subscribe that account to...

MAL-2026-17891 Malicious code in asistenyorstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 159e4bc42ce900113481aa39dc41ea3c2bfe29a74a1cbb383cc80323dad13858 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17438 Malicious code in @celestial-community/baileys (npm)

This package is a fork of the Baileys WhatsApp Web library npm and belongs to the "PhantomSub" family described by OX Security in September 2026: the publisher injected code that, without the installer asking, uses the installer's own authenticated WhatsApp session to subscribe that account to...

MAL-2026-17889 Malicious code in proxyrobika (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ca9520dcc3936b679b577bee42392ecb6ee65cd658c4858d325de5c738a7a200 The package contains code for automated files exfiltration. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

MAL-2026-17893 Malicious code in buyerdashboard (npm)

[email protected] describes itself as "User dashboard IP info". Its preinstall hook runs node index.js on npm install and requests https://realwbx.com/ip.php?ip=8.8.8.8 with the hardcoded Authorization value 8eb5e8641a5795b022d68e14d8858415, which differs from the value in each of the account...

MAL-2026-17896 Malicious code in xapi-lib (npm)

[email protected], 88.2.5, 90.2.1, and 90.3.1 describes itself as a package for getting IP location and metadata. Its preinstall hook runs node index.js on npm install and requests https://realwbx.com/ip.php?ip=8.8.8.8 with the hardcoded Authorization value fa79878bc2cfb48bd5127ae26fb661b1, which i...

MAL-2026-17895 Malicious code in web-pixels-manager (npm)

[email protected] describes itself as a package for getting IP location and metadata. Its preinstall hook runs node index.js on npm install and requests https://realwbx.com/ip.php?ip=8.8.8.8 with the hardcoded Authorization value 207e4133bd083b9e3e89c5556fc8677e, which differs from the...

MAL-2026-17894 Malicious code in idlive-face-capture-web-development (npm)

[email protected] describes itself as a package for getting IP location and metadata. Its preinstall hook runs node index.js on npm install and requests https://realwbx.com/ip.php?ip=8.8.8.8 with the hardcoded Authorization value a3b620ea8719eae2fa9b62726364bcc9, which...

MAL-2026-17887 Malicious code in proxy-rubikis (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0326ad29540efd267d15181087b384b25da962e7bcd6ac40c39641699e212e50 The package contains code for automated files exfiltration. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

MAL-2026-17886 Malicious code in py-wormgpt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6f7fef8f962798019886211ac43e0e0660feae94e4396fc7969643400b2fa139 The package installs a persistent job that allows the attacker for exfiltrating files and executing remote code on the victim's machine. --- Category: MALICIOU...

MAL-2026-17885 Malicious code in proxyrubika (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 dd55df978007c1a7548ff7e6a548553cf89bd536afffbc8b0921eb3efe31a342 The package contains code for automated files exfiltration. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

MAL-2026-17884 Malicious code in getpubip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6a07d6dd387bbd88252ffdda7f8c10daf988f0622250daf20e7ec8ee0f63c6d5 During import, obfuscated code downloads and executes an infostealer. Campaign shares some similarities with the campaign 2026-10-fontcase. --- Category:...

MAL-2026-17883 Malicious code in py-worm (PyPI)

Importing py-worm's agentaix module downloads a mutable Python file from https://raw.githubusercontent.com/anonrider404/pypl/refs/heads/main/readme.txt to a temporary .py file and launches it without a visible console on Windows. Versions 0.1.0 and 2.0.0 do this directly during import; version...

MAL-2026-17881 Malicious code in py-sock2 (PyPI)

Importing py-sock2's agentaix module downloads a mutable Python file from https://raw.githubusercontent.com/anonrider404/pypl/refs/heads/main/readme.txt to a temporary .py file and launches it without a visible console on Windows. Its agentaix console entry point imports the module. The remote...

MAL-2026-17882 Malicious code in tailwindcss-uniform (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f1697009648c97e7dd3a40ca390dc89a11bef7b8af037d249021e5a74a874a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17877 Malicious code in saeka (PyPI)

When a user invokes the card-checking feature, saeka sends the supplied card number, expiration month and year, and CVV as a single value to https://uncoder.eu.org/cc-checker/api.php using an HTTP POST. The package description does not disclose this external recipient or the transfer of complete...

MAL-2026-17876 Malicious code in @xxxfnbs21/hello-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69ca1e29da88b95415d443f6911d2facdbabec1a0cd7b756594ffdf4336e1442 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17880 Malicious code in seapy-ops (PyPI)

In seapy-ops versions 1.0.0, 1.0.1, 1.0.2, 1.1.0, 1.1.1, and 1.1.2, an advertised local file analysis tool conceals folder collection and upload commands behind an unlock gate. Once unlocked, it recursively uploads eligible files from the working directory to a configured remote server; a hidden...

MAL-2026-17888 Malicious code in @flexmr/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7039d72eee8d5f1abdc19889f0712d38273fd988a32aee832fc651712e386c52 @flexmr/[email protected] ships a one-line re-export stub whose package.json declares its sole dependency daemon-thread-lookup-buffer via a direct HTTPS U...

MAL-2026-17868 Malicious code in @kre64/hello-npm-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 654ab50c81e138ba0fcc4b3775bc84574656f528ae4de5770a6441e850fdf8c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17863 Malicious code in crelic-bqwheel-52f66a3f1d (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0ca34d571eaf519847a961f7da1f203d35f7a3c011f5fd4df3744f50a0615d2e Package attempts to collect environment variables from a specific environment, self-identified as BigQuery user-defined functions research. The final...

MAL-2026-17879 Malicious code in @flexmr/ui (npm)

@flexmr/[email protected] runs node beacon.js preinstall, node beacon.js install, and node beacon.js postinstall during installation. These lifecycle scripts send the package name, lifecycle event, a fixed token, and host identity details to 177.7.60.239:48080 and encode the hostname in a DNS query und...

MAL-2026-17862 Malicious code in fontcase (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9e2c4992e5295f2b094f3c7c2b2e6c2dbc8d0d9ca6242d58318e6e1b83a4255c During import, the package downloads and executes an infostealer. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2026-17861 Malicious code in sysdiagd (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0d396ad34176d29956d695014d261847ada859c184d7a8e7820d96087af7eafe Disguised as a system monitoring tool, the package delivers a Discord bot acting as an infostealer exfiltrating credentials, browser data, files and recording...

MAL-2026-17855 Malicious code in opencode2-linux-arm64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4a8829a49ed8b89e9b5b2e55e453eb1cec86c288c766ed209e907ee331a76f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17856 Malicious code in opencode2-linux-arm64-musl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29d77295b1fca10788c9203f4cddd81390c2257ed49c9f260838bf5c383bab8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17860 Malicious code in opencode2-windows-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0fe5351d5ca6ebd5f4af15467079d2d442bad22237d10e6d5cb06d0b11beb2a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17858 Malicious code in opencode2-linux-x64-musl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5865a6de931f6eeceeaa7735203a1da71c5d55a10a580273fc8111210a14eaf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17852 Malicious code in opencode2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1c255dbe0332f8e9a436b4e71e3a6079680d1b6c64da0537c8600754a9948ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17853 Malicious code in opencode2-darwin-arm64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c6a79212b7f12e5d4cae1e3d44b47da54ab2e77545f488b99f6f2dab8a5e638 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17854 Malicious code in opencode2-darwin-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5536c7ac30ec68d1e8ab9f64da77fa154f6d1806df263ad0abaf3af38ab0e378 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17859 Malicious code in opencode2-windows-arm64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 263b5345eacdaa0cb508c1d73db3da28902fd6e018ce8c01dc99ebc6babb9f97 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17857 Malicious code in opencode2-linux-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf9deaf78da8cb6d551cd438b47ce0b248159ff7ee5768fd54427262a271be93 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17851 Malicious code in yoodan-github-single-ver-pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5ec21b694320e65a8b1f38838f14f00ed00b3b1e4f6a5d6aeef960f900d1d55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17867 Malicious code in @accenturecodefoundry/mfe-pot-shared-ui-scds-core (npm)

@accenturecodefoundry/mfe-pot-shared-ui-scds-core describes itself as “A simple placeholder for npm.” Its preinstall hook runs node index.js || true on npm install. Version 99.99.2 encodes the hostname and username as hexadecimal query parameters and sends them to...

MAL-2026-17850 Malicious code in @chatest/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe80b7b76923a24948c1d095c3dc2474c0aac3574a3cf2046bf152c7dcde0aac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17849 Malicious code in brass-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 657abbbfdd17b21af7ad85e8634e0fb2ac36e35c6b95996322f10584ef4c1570 [email protected] declares its only dependency ltidisafe as a direct HTTPS tarball URL...

MAL-2026-17871 Malicious code in @mntv-analysis/workspaces-components (npm)

npm user 'conx3993' published this package in a dependency confusion campaign. It squats a name that looks like an internal package and uses version 65.11.3 so misconfigured resolvers pick it over the real one. Version 0.0.0-stage is an empty placeholder. A 'preinstall' hook runs 'index.js', whic...

MAL-2026-17873 Malicious code in @newspage/libx-amount (npm)

npm user 'priyashareek' published this package in a dependency confusion campaign against the internal scopes @accenturecodefoundry and @newspage. The publisher used 99.99.x versions to outrank the internal packages. 0.0.0-stage and 99.99.1 are empty placeholders. In versions 99.99.4 and 99.99.41...

MAL-2026-17874 Malicious code in @user-interface-common/common-styles (npm)

npm user 'conx3993' published this package in a dependency confusion campaign. It squats a name that looks like an internal package and uses version 66.1.6 so misconfigured resolvers pick it over the real one. Version 0.0.0-stage is an empty placeholder. A 'preinstall' hook runs 'index.js', which...

MAL-2026-17872 Malicious code in @newspage/lib-ng-async-routes-ui (npm)

npm user 'priyashareek' published this package in a dependency confusion campaign against the internal scopes @accenturecodefoundry and @newspage. The publisher used 99.99.x versions to outrank the internal packages. 0.0.0-stage and 99.99.1 are empty placeholders. In version 99.99.4, index.js sen...

MAL-2026-17869 Malicious code in @mntv-analysis/ui (npm)

npm user 'conx3993' published this package in a dependency confusion campaign. It squats a name that looks like an internal package and uses version 99.1.1 so misconfigured resolvers pick it over the real one. Version 0.0.0-stage is an empty placeholder. A 'preinstall' hook runs 'index.js', which...

MAL-2026-17875 Malicious code in monkey-tags-ip (npm)

npm user 'conx3993' published this package in a dependency confusion campaign. It squats a name that looks like an internal package and uses version 53.4.1 so misconfigured resolvers pick it over the real one. Version 0.0.0-stage is an empty placeholder. A 'preinstall' hook runs 'ip.js', which...

MAL-2026-17870 Malicious code in @mntv-analysis/ui-components (npm)

npm user 'conx3993' published this package in a dependency confusion campaign. It squats a name that looks like an internal package and uses version 50.1.1 so misconfigured resolvers pick it over the real one. Version 0.0.0-stage is an empty placeholder. A 'preinstall' hook runs 'index.js', which...

MAL-2026-17847 Malicious code in npp-ml (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7f575d02caf2363703b49c45c7f5ba106b798ee4f5b02f1977b118f2b52ff30e The package claims to provide a Notepad++ distribution, but in fact delivers ADExplorer, an Active Directory analysis tool. --- Category: MALICIOUS - The...