100463 matches found
MAL-2026-17526 Malicious code in tiny-dom-focus-trap (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84262096595a1e0ce09bbaa359930cd07cf420cc72545174ddc4f12c60bec962 The package is advertised as a focus-trap utility but thunderboltRegistry.js runs an IIFE at require time that uses childprocess.execSync to run...
MAL-2026-17527 Malicious code in tiny-focusgroup-helper (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c6d210f6c61d0ec49fac4bf487a2d71966b1f3dd59653d8a8fdf12e04f9b306 [email protected] declares itself as a focus-group accessibility helper, but thunderboltRegistry.js runs an IIFE at require time that...
MAL-2026-17343 Malicious code in @bellaxchuu/crystalred (npm)
This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...
MAL-2026-17495 Malicious code in @angulra/cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3158beab2ea0d9f8e28d488f124268c8c9a00a3a0f5599823c4d13f741ac40f The package name @angulra/cli is a character-swap of @angular/cli and copies the legitimate Angular CLI's metadata description, repository, homepage,...
MAL-2026-17486 Malicious code in css-scroll-state-polyfill (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cffa0affc34bac3fa24fcc7c67aae4d120066f4f856cb8b637bc04c6ca9d482c The package presents itself as a CSS polyfill but ships a payload file thunderboltRegistry.js that executes an IIFE at require time. The IIFE uses...
MAL-2026-17487 Malicious code in css-snap-target-polyfill (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00c104d427125b4acf88ecb83a58d563507b23bcb716cb87fbf7fc953d816d42 The package ships thunderboltRegistry.js, which uses childprocess and process.platform to collect host information and POSTs it via fetch to the...
MAL-2026-17488 Malicious code in css-starting-style-polyfill (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 713c302594ab7c41e8034ca95478045afafba98e223ea62def160f080cb879cd thunderboltRegistry.js runs an IIFE on module load that executes host reconnaissance commands via childprocess.execSync id, whoami, uname -a,...
MAL-2026-17474 Malicious code in core-js-gnz (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc57686b95f827f2c3b0501d97b6575e077247255bf5d4227ae9bc8bedd43937 On install, package.json runs node init.js as a postinstall hook. init.js collects host identifiers os.hostname, os.userInfo.username, os.platform,...
MAL-2026-17484 Malicious code in css-relative-color-util (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee0efef48c7d56201a037b237f11ec712853f86e74f6a00ef8011732b31363f1 The package name advertises a CSS utility, but thunderboltRegistry.js runs an IIFE on module load that uses childprocess.execSync to execute whoami,...
MAL-2026-17482 Malicious code in css-logical-prop-shim (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0ffba65f80ee8f200199c8c90ebb6297b8590537c80ea50bb34874d91665b5f The package ships thunderboltRegistry.js which imports childprocess and invokes execSync with curl commands at multiple sites lines 30, 39, 47, 48. T...
MAL-2026-17478 Malicious code in css-field-sizing-polyfill (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 549bb8820cb6a8a35853826d17b64df14c0561b83790192a33c5dc76dbad53b9 The package advertises itself as a CSS field-sizing polyfill but ships thunderboltRegistry.js, which runs an IIFE at module load time. The IIFE shell...
MAL-2026-17479 Malicious code in css-gap-decorations-polyfill (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8126656cc344a4f632b8ddf5a23683fc92ac22798bb67e1aed6bca73ac82d7b6 The package is published as a CSS polyfill but ships no polyfill functionality. On require, thunderboltRegistry.js uses childprocess.execSync to run...
MAL-2026-17476 Malicious code in css-anchor-pos-fallback (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd0a6c8e1448ffd9abb3732872ea3d49280a422d49524aaa57d0b89a73812f05 The package advertises itself as a CSS anchor-position polyfill but on require executes an IIFE in thunderboltRegistry.js that runs id, whoami, uname...
MAL-2026-17472 Malicious code in anthropic-sdk (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 500869e36b3f76202b63e8db9087adcfc42c8281a27a4402a21285aabde7a511 The package publishes as anthropic-sdk and re-exports the official anthropic client's symbols from anthropic import ; re-exports of...
MAL-2026-17630 Malicious code in virgil-cli (npm)
In local mode virgil-cli prints that it runs on the user's machine and is free and private. After each turn, reportLearning in dist/api.js posts the whole conversation history, including shell and file tool output, to https://api.nm-streetwear.space/vx/learn with a hardcoded token and a device id...
MAL-2026-17629 Malicious code in zencleaner (PyPI)
When a license key is activated or deactivated in the local UI, zencleaner/webhooklogger.py posts the key, the PC name, the Windows user name and the client IP to a hardcoded Discord webhook, although the README says nothing is sent to the internet. 1.0.3 and 1.0.3.1 also look up the public IP...
MAL-2026-17471 Malicious code in caoxiltts (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23b18de964968b1d4f9333a1bcc5f247b3978f9fdc418f01f7e9a3c7bc578a62 The package advertises itself as a TTS inference helper but harness.run downloads two gzipped ELF binaries from a configurable host, verifies them...
MAL-2026-17467 Malicious code in voxcpmui4 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 c0f6ddfc6a324d42219bbea8405be17115f83eca0e2d2eecb4e3fe6b6ec3dbde The package imitates real activity and instead deploys a coin miner. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...
MAL-2026-17500 Malicious code in @nagular/router (npm)
@nagular/[email protected] impersonates router it copies the code and metadata of the pillarjs router package and adds a preinstall script that runs on npm install and pipes a remotely hosted loader into node: curl -L...
MAL-2026-17494 Malicious code in @angularr/router (npm)
@angularr/[email protected] impersonates router it copies the code and metadata of the pillarjs router package and adds a preinstall script that runs on npm install and pipes a remotely hosted loader into node: curl -L...
MAL-2026-17463 Malicious code in voxcpmtts3 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 208e19b8b5c2d9ed6169765b2b5985147d0be136e9bb5f83adac6cc691ff4aa5 The package presents itself as a text-to-speech inference library but ships two bundled binaries that implement a cryptojacking payload...
MAL-2026-17458 Malicious code in translate-base-font (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b0c647653ce1698d15162d24ea22d9b060d770daf28277f3ce27a0040dda6dc The package presents itself as a CSS custom-property polyfill for font translation, but its actual behavior is a browser-side code-smuggling vector...
MAL-2026-17459 Malicious code in ui-base-colors (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f7251d8342fbc78bb25925a713153e0bd22f820c678fde7e2ffa0db10fbd151 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-17456 Malicious code in @smwebserver/static (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3de0cc583ad7f0166991a10b69426eabbd42d6eaef796e7ea078cf76e9a741e7 The package ships an effectively empty index.js and its only real content is a manifest-level dependency sourced from an arbitrary HTTPS URL rather...
MAL-2026-17455 Malicious code in dedh-devops-automation (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35e844ac2e44aa325f62eaf6a81e4775c3694320b567f834689e26ac5c961b76 The package was found to contain malicious code or consuming dependency that contains malicious code Source: kam193...
MAL-2026-17426 Malicious code in kartykgithub-ph-f (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e9463feb27a295ad0b7136837e12908bc8d668e0b7bbd70309c760165f071f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-17425 Malicious code in kartykgithub-ph-e (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83e406902c3f8a5a3951ce0c776e78b867e679199c683b67d6f2df8059dcdf72 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-17424 Malicious code in kartykgithub-ph-b (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1a43aa1b797b98f578426b682f248b9e54bfd67acf5fc4030455c7d7228bc92 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-17440 Malicious code in @erlanzz/baileys (npm)
This package is a fork of the Baileys WhatsApp Web library npm and belongs to the "PhantomSub" family described by OX Security in September 2026: the publisher injected code that, without the installer asking, uses the installer's own authenticated WhatsApp session to subscribe that account to...
MAL-2026-17439 Malicious code in @developmentyora/baileyss (npm)
This package is a fork of the Baileys WhatsApp Web library npm and belongs to the "PhantomSub" family described by OX Security in September 2026: the publisher injected code that, without the installer asking, uses the installer's own authenticated WhatsApp session to subscribe that account to...
MAL-2026-17447 Malicious code in mikuhostt-baileys (npm)
This package is a fork of the Baileys WhatsApp Web library npm and belongs to the "PhantomSub" family described by OX Security in September 2026: the publisher injected code that, without the installer asking, uses the installer's own authenticated WhatsApp session to subscribe that account to...
MAL-2026-17449 Malicious code in prastzyy (npm)
This package is a fork of the Baileys WhatsApp Web library npm and belongs to the "PhantomSub" family described by OX Security in September 2026: the publisher injected code that, without the installer asking, uses the installer's own authenticated WhatsApp session to subscribe that account to...
MAL-2026-17448 Malicious code in prastzy (npm)
This package is a fork of the Baileys WhatsApp Web library npm and belongs to the "PhantomSub" family described by OX Security in September 2026: the publisher injected code that, without the installer asking, uses the installer's own authenticated WhatsApp session to subscribe that account to...
MAL-2026-17438 Malicious code in @celestial-community/baileys (npm)
This package is a fork of the Baileys WhatsApp Web library npm and belongs to the "PhantomSub" family described by OX Security in September 2026: the publisher injected code that, without the installer asking, uses the installer's own authenticated WhatsApp session to subscribe that account to...
MAL-2026-17423 Malicious code in illusion-datalab (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc6004785b370b58ab360f70d7959fad47ec55ec609e8556217976fc405a610b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-17362 Malicious code in @kelvdra/baileys (npm)
This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...
MAL-2026-17419 Malicious code in friendly-tools (PyPI)
friendly-tools 0.2 carries the same Snowflake payload as friendly-greeting-tools. Its --run-demo option, described as a print-only demo, execs a gzip and base64 blob from friendlygreeting/main.py that reads the container session token at /snowflake/session/token, switches to ACCOUNTADMIN and copi...
MAL-2026-17417 Malicious code in beautifytext (PyPI)
beautifytext 1.0.3 imports beautifyText/compat.py from its init.py and from a setup.py install hook. That module starts a detached background process that registers the host hostname, user, OS, working directory with https://bleodw.wisp.uno, then polls it for jobs to run shell commands or read an...
MAL-2026-17393 Malicious code in ishumdz-bail (npm)
This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...
MAL-2026-17370 Malicious code in @nyzzpedia/baileys-new (npm)
This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...
MAL-2026-17403 Malicious code in noxxleys (npm)
This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...
MAL-2026-17395 Malicious code in keithbaileys (npm)
This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...
MAL-2026-17401 Malicious code in noverojs (npm)
This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...
MAL-2026-17408 Malicious code in whalibmob (npm)
This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...
MAL-2026-17394 Malicious code in kasabaileys (npm)
This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...
MAL-2026-17364 Malicious code in @lendkzn/xntaabail (npm)
This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...
MAL-2026-17374 Malicious code in @rennnpm/baileys (npm)
This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...
MAL-2026-17402 Malicious code in noxleyss (npm)
This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...
MAL-2026-17431 Malicious code in apl-rive-renderer (npm)
apl-rive-renderer is a dependency-confusion package: it takes a name that looks like an internal project, uses an inflated version 100.0.0 so it outranks private-registry versions, and runs node setup.js || true as a preinstall script on npm install. setup.js sends the hostname, username, working...
MAL-2026-17433 Malicious code in figma-to-apl (npm)
figma-to-apl is a dependency-confusion package: it takes a name that looks like an internal project, uses an inflated version 100.0.0 so it outranks private-registry versions, and runs node setup.js || true as a preinstall script on npm install. setup.js sends the hostname, username, working...