MAL-2026-18277 Malicious code in @drone-js-ext/vip-badge (npm)

@drone-js-ext/vip-badge is a dependency-confusion package: it squats the @drone-js-ext scope, which matches a private internal package scope, and was published on 2026-10-25 in versions 0.0.1, 1.0.1, 2.0.0, 99.0.1 up to 99.0.1 so that builds resolving the internal name from the public registry...

MAL-2026-18250 Malicious code in tailwind-base-buttons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8028e80925294f77a399eab9c3d9402ecaa7b191df72c75c437e9f03979ebdb Package [email protected] is a small npm package with 6 files. No install-time or import-time execution of attacker-controlled code was...

MAL-2026-18249 Malicious code in noelc-css-blender (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1af88de104874d73dc5e8853fec7d4ca8b0c2c1dfa26a3cff9e44fac7eb30ea6 [email protected] declares itself as a 'tiny ESM utility for blending CSS custom-property token maps' with zero dependencies, but ships two...

MAL-2026-18251 Malicious code in tailwindcss-theme-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c828df38cf23c0b9deb4ee3d705c8dd3fe5ab0f92d426fe56f6b3301e38473c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18248 Malicious code in overarch-windows-x64-yr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4f6ee7ce14b6f82693df259b2b80baab736299f888037a09941b95b73780247 The package [email protected] contains six files and no behaviors were identified that read installer secrets, fetch and execute remote...

MAL-2026-18247 Malicious code in @liauto/win32-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a07571659f87c556108cf21bc4ef2526b864c43ad5580c813d2bfcb3963d5511 This is a platform-specific npm package win32-x64 variant with a small shipped surface 2 files. No install-time lifecycle execution, no outbound...

MAL-2026-18319 Malicious code in @sxm-web/client-sdk-core (npm)

@sxm-web/client-sdk-core is a dependency-confusion package: it is described as a "Compatibility shim", uses inflated version numbers, and its README calls it an "authorized dependency-confusion test". Each listed version 0.0.1, 1.0.0, 1.0.1, 2.0.0, 1.1.0, 3.0.0, 13.3.7 has a postinstall script th...

MAL-2026-18243 Malicious code in @k18k/entrypoint-sdk-darwin-arm64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d737b7390bb1f6e91bafe18d3f037a410e18607f3e60e1a92b24f81ccea890ed @k18k/entrypoint-sdk-darwin-arm64 is a platform-specific native artifact package darwin-arm64 variant typical of the optionalDependencies pattern use...

MAL-2026-18246 Malicious code in orqiva-runtime-win32-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a8ce12f6f6bb365ec17d64617f49a5aa08342ed91ed2ced13af4990f8accfdc This package follows the naming convention of a platform-specific prebuilt binary distribution win32-x64 suffix, commonly used by Node tooling to shi...

MAL-2026-18245 Malicious code in @k18k/entrypoint-sdk-linux-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daa27c796b86115cf9b0b7113f614ec7e53edb15e4b03b2ec52c10b4a2fb23a2 Package @k18k/[email protected] is a linux-x64 platform-specific companion artifact, consistent with the common npm pattern of...

MAL-2026-18244 Malicious code in @k18k/entrypoint-sdk-darwin-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd94f9aefc7090d1260bb8123fd1bd78f4fd973b9d00c2423fbc13ea9799699b Package @k18k/[email protected] is a darwin-x64 platform-specific sub-package, following the standard npm pattern for distributing...

MAL-2026-18283 Malicious code in @greenlake/session (npm)

@greenlake/session is a dependency-confusion package: it is described as a "Compatibility shim", uses inflated version numbers, and its README calls it an "authorized dependency-confusion test". Each listed version 3.0.0, 99.0.1, 1.0.0, 2.0.0 has a postinstall script that runs node beacon.cjs on...

MAL-2026-18318 Malicious code in @greenlake/mfe-login-url (npm)

@greenlake/mfe-login-url is a dependency-confusion package: it is described as a "Compatibility shim", uses inflated version numbers, and its README calls it an "authorized dependency-confusion test". Each listed version 2.0.0, 1.0.0, 3.0.0 has a postinstall script that runs node beacon.cjs on np...

MAL-2026-18317 Malicious code in @greenlake/context-pane (npm)

@greenlake/context-pane is a dependency-confusion package: it is described as a "Compatibility shim", uses inflated version numbers, and its README calls it an "authorized dependency-confusion test". Each listed version 3.0.0, 1.0.0 has a postinstall script that runs node beacon.cjs on npm instal...

MAL-2026-18282 Malicious code in @greenlake/common-context (npm)

@greenlake/common-context is a dependency-confusion package: it is described as a "Compatibility shim", uses inflated version numbers, and its README calls it an "authorized dependency-confusion test". Each listed version 99.0.1, 3.0.0 has a postinstall script that runs node beacon.cjs on npm...

MAL-2026-18316 Malicious code in @greenlake/auth (npm)

@greenlake/auth is a dependency-confusion package: it is described as a "Compatibility shim", uses inflated version numbers, and its README calls it an "authorized dependency-confusion test". Each listed version 3.0.0 has a postinstall script that runs node beacon.cjs on npm install, and index.js...

MAL-2026-18242 Malicious code in sitecard (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9f44333ae4aa62e60d153dfbdc535cd08f778e917a1052ecaf43722d8a7165d sitecard exposes a workspace directory over SSH via public relays srv.us, upterm, cloudflare/cloudflared, devtunnel, ws-relay as its advertised...

MAL-2026-18228 Malicious code in jobwharf (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbfb11d059a4f43447527c793da1228d2bfec1aba386532a3b2eecd00b3a9256 Analysis of jobwharf 0.1.0 for pypi surfaced no indicators of supply-chain attack behavior. No install-time or import-time network activity, no...

MAL-2026-18237 Malicious code in slatejob (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f05d3bc2833096e10d1893d82730f31f2288d826f76e94ce63fb5dfb356083b1 The package slatejob 0.1.0 was examined and no indicators of installer-side harm were identified. No lifecycle network fetches, no outbound...

MAL-2026-18234 Malicious code in reedworker (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90e3e7e4b377a02ec129d648a7b048736d59389c30267009fc378ed3c1e48dbc Analysis of reedworker 0.1.0 on PyPI surfaced no indicators of supply-chain attack behavior. No install-time or import-time network activity, no...

MAL-2026-18231 Malicious code in loadferry (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddac804a8e64115b31c6c4a2e45417f7c283c358cf80f9a76391118861512d85 Analysis of loadferry 0.1.0 on PyPI surfaced no indicators of installer harm. No install-time or import-time network activity, credential or...

MAL-2026-18235 Malicious code in runpier (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecab8a842f7dfacaf3a6294e3dd3c3a1d9c170e1ad119d52f65a94ef431fd262 Package runpier version 0.1.0 on PyPI was scanned across 10 files. No install-time network activity, no subprocess or exec invocations tied to remote...

MAL-2026-18236 Malicious code in sedgehaul (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cde2a585dd043f57af2c96aa193590190a335a411f0b2fa2f52d0ee2ec17bb9 Package sedgehaul version 0.1.0 was scanned across 11 files. No install-time or import-time network activity, credential or filesystem access to...

MAL-2026-18238 Malicious code in taskquay (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62e5ff7b7f42b9a62e4e143ad3bec7df066ea92c529f6e7b908c531b13abf237 The package taskquay 0.1.0 was examined and no credential access, outbound network activity, install-time code execution, dropper, silent-relay, or...

MAL-2026-18232 Malicious code in marshrunner (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b31e9ef561aa7074fd3ce1090d59e6e314fddeb7fc6892cbdc72257c84eb7556 Package marshrunner version 0.1.0 on PyPI was scanned with no a static rule matches and no traced behaviors indicating installer-side harm. No...

MAL-2026-18241 Malicious code in workslip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed989756ad2ee3d30bbbc314bc4b4338bf246f6e3643c9fe57df33d0f2a9649 Analysis of workslip 0.1.0 on PyPI surfaced no a static rule matches and no traced behaviors indicative of supply-chain attack patterns. No...

MAL-2026-18224 Malicious code in brookworker (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fa8f50bb0987926fc5691a191a0622aec1da809cdce6246c63de73cd679f7c2 The package brookworker 0.1.0 was examined and no credential theft, install-time or import-time code execution, outbound network beacons, dropper...

MAL-2026-18225 Malicious code in cobbleload (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20ee522ae4bca552485c294db9f0b73cb261f97f80379f2b7bde2a2f82d10ae3 Package cobbleload version 0.1.0 on PyPI was scanned across 10 files with no a static rule matches and no traced behavioral findings. No install-time...

MAL-2026-18223 Malicious code in brambletask (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bed3c7b9b467652f58bd7ff55383900d1e7fbe73c1acbce4c79e12040b96ce9f Analysis of brambletask 0.1.0 on PyPI surfaced no indicators of supply-chain attack behavior. No install-time or import-time network activity, no...

MAL-2026-18226 Malicious code in ferretqueue (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c588ca6b9a165d16dfd359719e48c63cbcddf5c6e141076cc9a42165a0ae689b The package ferretqueue 0.1.0 contains no observed install-time network activity, no lifecycle code that fetches or executes remote content, no reads...

MAL-2026-18233 Malicious code in otterload (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a18fefd3ce281d250aec34b05b6f11f1100968f8bda69e9961b795031fd5bb1b No a static rule matches and no traced-code findings were produced for otterload 0.1.0 on PyPI. The package exhibits no lifecycle-time network...

MAL-2026-18222 Malicious code in badgertask (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dec1f79725a3b93471456baaf9c5b4ea9b889270fb5526070a136c1c9e06b08c Analysis of badgertask 0.1.0 produced no findings indicating installer-side harm. No install-time or import-time network activity, credential or...

MAL-2026-18230 Malicious code in larchworker (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 87e174c9dc2485263894e4d6c3d1560589659afbfbe9397ca1e1b53fb21d96b3 This campaign consists of similar loader packages, which provide executing code from a given URL. While they do not contain the malicious payload and the usage...

MAL-2026-18240 Malicious code in thornqueue (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ea756029aedec54cd447267056236a9c4a6752d1a9973198ebf71c300fcd9112 This campaign consists of similar loader packages, which provide executing code from a given URL. While they do not contain the malicious payload and the usage...

MAL-2026-18239 Malicious code in thistlerun (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6c35afe278e655040c47dcca9e63b4ab75c1530880041568e544700daa20e887 This campaign consists of similar loader packages, which provide executing code from a given URL. While they do not contain the malicious payload and the usage...

MAL-2026-18229 Malicious code in juniperrun (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 013530dce5f4cdf34262deb2b4b105f7336b0248085fc26b815aa4e932f0cd72 Package juniperrun 0.1.0 on PyPI shows no indicators of installer-side harm in the files scanned. No install-time network activity, no lifecycle hook...

MAL-2026-18227 Malicious code in flintqueue (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02d1a0fd24e2ff483690bd10527de9cc0eef12b8eca08487707a66725117d58b Review of flintqueue 0.1.0 on PyPI did not surface install-time or import-time behavior that targets the installer. No lifecycle hook network I/O, no...

MAL-2026-18221 Malicious code in kestreljob (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4a86144582538adae41c5d2f14f22daae1f65ecf9b93cdeb0d82889681af9222 This campaign consists of similar loader packages, which provide executing code from a given URL. While they do not contain the malicious payload and the usage...

MAL-2026-18220 Malicious code in skillward (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c3ad90106c904f14f7b4987775b3e5701d66fc6ca669f4de658dd442bfb9f61 skillward ships a set of lint/scan rules under dist/rules/ that detect suspicious patterns in other code. SW003-encoded-payload.js contains detection...

MAL-2026-18219 Malicious code in onsokets (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86e89c263593521f9795193907958f4c642d34253fe9a65526dea1c681808760 onsokets/run.py walks the Android primary storage path /storage/emulated/0/, collects files ending in.json,.py,.pyrubi, and.txt, zips them by...

MAL-2026-18218 Malicious code in qowa (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 650ce7eeda9c50d942912db7495f8108fcc3b8447ff9bae79a1bd1b105c1b0d5 src/qowa/init.py contains calls to socket.gethostname at lines 30, 52, and 247 together with hardcoded Telegram Bot API endpoints...

MAL-2026-18214 Malicious code in @grabcad/company-server-shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77669bd2c3c9138e7d3ab0612febc058dfd8235eb812a40ffb5bf3f27d19bf47 Package self-describes as a Compatibility shim. for the @grabcad scope and ships no real functionality: index.js exports a Proxy whose property acces...

MAL-2026-18215 Malicious code in @grabcad/grabcad-shop-shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b255034a9e973919c82be7b2f75db934cc8a385c6cb388c6d632769b6ed0889 The package publishes under the @grabcad scope but provides no real functionality: index.js exports a Proxy stub that no-ops every property access, a...

MAL-2026-18217 Malicious code in @grabcad/user-license (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ee7b26cd209a020227ba0c1f36114bf1b1e7a533339f9e546e058dcc4af9909 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18216 Malicious code in @grabcad/preferences-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c846a3e9766d663572fb4d716588823020e219af5c1fb75793661c5c87627ba5 The package presents itself as a 'Compatibility shim' under the @grabcad scope and exports a Proxy that returns no-op functions for any property...

MAL-2026-18213 Malicious code in @cecm-web-sdk/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea27147731ca2c42e40154d06c455a4750a91588b2f8be16e1b237452e20df22 The package ships a postinstall hook scripts.postinstall: "node beacon.cjs" and a main entry index.js: require'./beacon.cjs'.fire that both invoke...

MAL-2026-18212 Malicious code in @blueskydataplatform/shared-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14dc8f9eae8cbd57b164126f279baf9f73a7bc68d6a75674dd6bdd8b4f8027f9 The package ships a beacon.cjs module that collects installer host identifiers hostname, install path, cwd, Node.js version via require'os',...

MAL-2026-18209 Malicious code in @ecg-internal/js-react-i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 533583f613bf03556a1660b5bd8eaf4d5899c96dc79f4c42ae6b883aea8fde0e The package is published under an internal-looking scope @ecg-internal and ships a stub main module that returns a Proxy of no-op functions for every...

MAL-2026-18207 Malicious code in @ecg-internal/aurora-js-formatters (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02325fb617beffd55194047faca7300b33934cd471de94bab66a24954200cba0 The package uses an internal-looking scope @ecg-internal and an implausibly high version 99.0.1 consistent with dependency-confusion targeting. On...

MAL-2026-18210 Malicious code in @ecg-internal/media-util-js-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c716438d9014063b4616588b1522ba2de2f3cf4fd961212840ed6a324cced3da The package publishes to the public npm registry under the scoped name @ecg-internal/media-util-js-lib, which resembles an internal namespace. It shi...