170008 matches found
MAL-2026-16414 Malicious code in @tvg-mar/storyblok-bridge (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5750ec8381c607c94fcf3c1530662ccef3b296753f9ace22e3f760e5fe9d58af The package's scripts.install runs node index.js, which loads a runtime bootstrap that reaches a 'telemetry probe' helper. The helper dynamically loa...
MAL-2026-16416 Malicious code in @tvg-mar/utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de7194acad05327ce23172c262747b8d6e57d33606580a0b9e7222d1ecfee3ab package.json declares scripts.install="node index.js", which loads runtime/index.js and then support/telemetry/probe/impl.js. That module reconstruct...
MAL-2026-16415 Malicious code in @tvg-mar/tvg-promos-atomic-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22c22841398a01b681136598baf046a8ad9ad9ef6d728899a0fbce056ff66369 The package's package.json declares an install lifecycle script that runs node index.js, which loads runtime/support/telemetry/probe/impl.js. That fi...
MAL-2026-16466 Malicious code in wurl_show_data (RubyGems)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 17d2e80b42383fadbe9bde12ef17decad8b9dfa9b48f93b6e7f9162091e2a69d The OpenSSF Package Analysis project identified 'wurlshowdata' @ 3.1.42.99 rubygems as malicious. It is considered malicious because: - The...
MAL-2026-16411 Malicious code in no-fun (RubyGems)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1b9d03f97112ed77c073cd246f4cc95b0ff69acf9888ee9fd6682f8acee4e44f The OpenSSF Package Analysis project identified 'no-fun' @ 999.99.99 rubygems as malicious. It is considered malicious because: - The package...
MAL-2026-16410 Malicious code in auclean (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 535d1083af63653f3cc6befeffe23a6fd97cea9b183b95eac92779a5abcdcd9d The pip install of auclean 0.4.2 runs a custom setup.py buildpy command that chmod 0755's and executes a 1.8MB bundled Rust ELF binary...
MAL-2026-16409 Malicious code in ubiquiti-agents-link-mcp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8827e987697ea6ef619055c53ae1654800a838c18419ffc8a09e872c6f16adc4 The package's bin entry index.js runs execSync'id' and collects os.userInfo.username and os.hostname, then HTTPS-POSTs the JSON payload to the...
MAL-2026-16407 Malicious code in poly-check-b (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 0e03276b0825e5aa683a1edd8c9a7f9947888cd03cde8c5351895a0fa3c2fba6 During installation, the package attempts to silently execute code. In analyzed versions, the payload file was missing. --- Category: MALICIOUS - The campaign...
MAL-2026-16406 Malicious code in crypto-trader-py (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33e855a3ce62e35b613e702e710b81900769c241707c80f6a61462df0927529c The package presents itself as a crypto trading and backtesting toolkit, but ships no library code matching that description — SOURCES.txt lists only...
MAL-2026-16405 Malicious code in tailwind-form-styles (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 353df78be0134825a2efc6d7e4d4cbf25dfba4d057925e64fc117e78a3f2814a The package presents itself as a Tailwind CSS forms plugin but its main entry src/index.js is heavily obfuscated obfuscator.io-style rotated string...
MAL-2026-16395 Malicious code in envparse3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 910a8a8e205bc9a9540696320007c14926950b5a4f832efc577f2fd67ddc80a4 On require'envparse3', the package's main entrypoint invokes a top-level function dispatchAnalytics that reads a bundled image dist/stest.jpg, extrac...
MAL-2026-16392 Malicious code in envforge2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9033f3a6856b87cc07c657d93ce184d02db70e8bb67ea2319e634b7531640c11 [email protected] ships a hidden Windows dropper that fires automatically both on require'envforge2' via dist/index.cjs and on invocation of the bundle...
MAL-2026-16394 Malicious code in envparse2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59aed7381a2a7026336f5e79671e05e9313688533ca35e15cf7010a975c2c897 On require of the package's main entry and on invocation of the dot2env CLI, the module reads the bundled dist/stest.jpg, parses JPEG markers, and...
MAL-2026-16393 Malicious code in envforge3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3770550d6db043006c8b2aa75dcac951db1cd9eb7494b0259d7eb69d28f26e32 On require of the package's main entry, dist/index.cjs invokes dispatchAnalytics at module top level. That routine reads dist/stest.jpg, extracts byt...
MAL-2026-16403 Malicious code in node-env-buffer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0011ed2fd25fdc35a89f50c2eb1d7d895210908c637be0fcaca077d032baaee6 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-16404 Malicious code in sysverify (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7edfe23ae0c8a79c155c23e410616585061296886bb752d734feb1b2180ffc82 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-16401 Malicious code in ndmckauxuoincv (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfd29f430051fb1e4809ff59728851a683aa0fc25eabec2f807067e928245222 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-16400 Malicious code in ndmcjcxiebysfdb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d6d78591ddbd2abc8045f5bdbe7694d000b3508dc8df6393ffd46d093351ef4 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-16391 Malicious code in cloudndmcedu (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52078708a6f96873c6cd92997b0c1bc150b94ea6f0346a224a4ae7c82511be7e The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-16397 Malicious code in kambxjowhdsgyw (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 966589b88833a788509808e69f3fd935c370ff4093b9fc3fb50482431434a6b5 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-16398 Malicious code in luftmvfiwgxydes (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e487d10b32b0e42f4ed6478fa461451bcacc8eb9d679a58931bc474c339feae7 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-16390 Malicious code in oracle-redis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c800d0651330b1c1cd5d9c5cb2b6966eecefb2d2c28949d0670f485d820db3a6 The package publishes as oracle-redis but ships a verbatim copy of the ioredis README, source tree, and repository URL...
MAL-2026-16389 Malicious code in noverojava (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7fbf0d1519b05868b34e9e2c1d3588a0596003a5cb53e4cd28fd3a856ecff26 package.json declares the runtime dependency libsignal as github:tenka-san/libsignal-node rather than a registry version range or pinned commit SHA. ...
MAL-2026-16388 Malicious code in nodetokyo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ec0e3f7b963353d4d2928e12ca3898cce5100ed3e3537383faa9c7f9a93f203 The package's declared main launcher.js executes launch at module top level, so require'nodetokyo' automatically installs Python 3.12 via winget or b...
MAL-2026-16542 Malicious code in zeal-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7a4b9b4fcb0a48aa3602fc7bc865eff738f8ab42a4c9e56ea31e70b0b6b826f canary.js in [email protected] collects host reconnaissance data os.hostname, os.userInfo, process.platform, cwd, node version and POSTs it to the...
MAL-2026-16540 Malicious code in style-class-utils (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16539 Malicious code in speaker_tagging_media_player (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16537 Malicious code in spark-common (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16536 Malicious code in mx-www-locales-common (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16534 Malicious code in halali-sample (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16533 Malicious code in exodus-firestore-synchronize (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 210b71fe2403143719408cea9a34626d7788c9aaa87b3f5a1276a92bd5578ce6 package.json declares a postinstall hook that auto-runs on npm install and executes whoami and hostname, then enumerates process.env for keys matchin...
MAL-2026-16531 Malicious code in @yuva2210/okx-poc-preinstall (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16532 Malicious code in @yuva2210/poc-depconf (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16529 Malicious code in @larocas-bbresearch/tp-probe-e29834ce (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7279432ffb7dc233307df869ac5faaded0fef16333ec8a5948b15bae7bd716a7 The package was found to contain malicious code or consuming dependency that contains malicious code...
MAL-2026-16528 Malicious code in @larocas-bbresearch/tp-probe-dc7a3670 (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16526 Malicious code in @larocas-bbresearch/tombstone-probe-live-z6xz56 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eb64220c40c3aaf61d0c2911ff0950a968c4c03d9ba2af1620420077f532a2d The package was found to contain malicious code or consuming dependency that contains malicious code...
MAL-2026-16525 Malicious code in @larocas-bbresearch/tombstone-probe-8ejnsa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8656a15600371992dd90c60b5c0280339218d62a8f22473380f37eaf8d952e9b The package was found to contain malicious code or consuming dependency that contains malicious code...
MAL-2026-16524 Malicious code in @ks-cqc/h5-sig4 (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16523 Malicious code in @ks-cqc/fingerprint-generator (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16521 Malicious code in @egencia/uitk-react-spacing (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16520 Malicious code in @egencia/uitk-react-layout-flex (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16518 Malicious code in @egencia/uitk-react (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16516 Malicious code in @egencia/uitk-global-styles (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16514 Malicious code in @client-web-next/utils (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16513 Malicious code in @client-web-next/ui-business (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16512 Malicious code in @client-web-next/ui (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16511 Malicious code in @client-web-next/ua-parser (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16510 Malicious code in @client-web-next/transfer-state (npm)
--- -= Per source details. Do not edit below this line.=-...