MAL-2026-18109 Malicious code in rs-lookout-sandbox-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f28ed1c404dad5afc7b70b345eeef6f81e04dcee77be3a7553956c7a43f8e7c On module load, index.js reads os.userInfo.username and issues an HTTPS GET to a hardcoded third-party collector at...

MAL-2026-18106 Malicious code in memories-core-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aa2bc32ff519468287f8a87deeff1349332b710735b9f78ee34ffd46c9511cb package.json declares a preinstall lifecycle script that runs curl to a hardcoded webhook.site collector URL...

MAL-2026-18104 Malicious code in semvver (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbc16b0ced0bad1a33b912dfdb29cbaef211f30974d942991257d4e6b60a8ece setup.py performs an install-time fetch-and-execute: it calls urllib.request.urlretrieve against https://c2-worker.crawlnet-claim.workers.dev/dl/pyup...

MAL-2026-18102 Malicious code in semveer (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d86237b957fd063a0e1fcf250a510b2fb9566ab48652e56fe787d2e1a02e351a The sdist for 'semveer' ships an inert module semveer/init.py contains only a version stub and places all runtime behavior inside setup.py's install...

MAL-2026-18101 Malicious code in semmver (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8de323d5976a26f2d9540680d1706a53bcb3ca743409821e83f7a2f1b60e8594 The package is a typosquat-style empty stub semmver/init.py contains only version = '1.0.0' whose only functional code is in setup.py. At pip install...

MAL-2026-18103 Malicious code in semverr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 110e0a64dd80654ca98caa5e291499d158a39eb66c1d35efe896a42095c85118 semverr is a near-empty package a one-line version whose name resembles the popular semver library. Its setup.py runs at install time invoked by pip...

MAL-2026-18107 Malicious code in nwfp-build-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 905a5825cb8abf7b385b98cfade02c315a4bc776bc37cfacd5ab20d5b8d03640 On require of nwfp-build-config, index.js loads lib/telemetry.js, which immediately runs an IIFE that reads the installer's hostname os.hostname and...

MAL-2026-18100 Malicious code in unicode-title-normalizer (npm)

[email protected] was published to npm on 2026-10-19 at 14:50:39 UTC by the account bluntyblunks, about one minute after npm's staged-publish placeholder 0.0.0-stage. The tarball has three files. index.js exports a function that returns the string "hello", and README.md is an unedite...

MAL-2026-18099 Malicious code in formatting-subtitles-for-claude (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f683c00ef9c42d55e37cdb367179f21e58ce2441dba55485d6d19670bcefa700 The package declares a postinstall hook sh./nodemodules/unicode-title-normalizer/x.js && exit 0, which runs arbitrary shell content shipped by the...

MAL-2026-18098 Malicious code in security-research-startup-snapshot-810764b303 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c7f807a5943ac03cda3bdddc675ad3192d210e1f0ba1300959feff5d1d29c915 The package is most likely a reconnaissance of a shared infrastructure, collecting potentially sensitive data from cloud endpoints, activated via a PTH file on...

MAL-2026-18097 Malicious code in research-probe-6150c1c915 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3696b3aaa62ad07c027d3471a6061628fe63f07faa135887342362ceb424e604 The package ships a .pth file that imports researchprobe6150c1c915.boot on every Python interpreter startup, with no explicit import by the user...

MAL-2026-18096 Malicious code in workalender (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bb4f2824499fd64a22d9dfdb23c454bbb8797422f5281fdd5f454ea64095853a Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2026-18094 Malicious code in pafex (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f048e6c59bed3c95094e9baaf28b7234a917300b81a4c81db0eb0a3f859ff4e3 No install-time or import-time network I/O, credential access, subprocess execution, or other installer-harm behavior was observed in this package...

MAL-2026-18095 Malicious code in resion (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1b4088658d04bc0725d06a035fa9d83254699e6c26ce3653433199de9b10821 No a static rule matches were produced for this package version, and no concrete behavioral evidence of credential access, install-time code executio...

MAL-2026-18093 Malicious code in workcalender (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6a50d22163d9cc8d0eda40abaaa32d88d5c8657ce914ba8b8c792a16cb5ca58 Analysis of the package's shipped files produced no indicators of installer-side harm: no install-time or import-time network I/O, no credential or...

MAL-2026-18092 Malicious code in test-workalendar-internal (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06eccee3c04982c18f9f348949477e1540d3e63eab7ae66f5d851428d0308597 test-workalendar-internal 0.0.3 ships a custom Hatchling build hook that runs during pip install sdist/wheel build. The hook downloads two standalone...

MAL-2026-18091 Malicious code in @platform-services/hrm-mfe-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6340950b2d19371534634bc33af5c0b785b1fa105a5c1084c5689879c4b03da8 package.json declares a dependency whose key equals the package's own name, @platform-services/hrm-mfe-core, with its source set to the bare URL...

MAL-2026-18064 Malicious code in sc-announcer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a03b9445f383410d981355df7ba577b7834a37d226e05852b4a0b9c7d998d9c [email protected] ships an empty stub module.exports = and declares a single dependency ltidisafe sourced from an off-registry HTTPS tarball URL...

MAL-2026-18063 Malicious code in fanarena-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0da88f07c843cff93266258d7d4e30c369b05fb52974170e25abb1e6c33e3c5 package.json declares a dependency ltidisafe sourced directly from the bare HTTPS URL...

MAL-2026-18061 Malicious code in ccl-global-shopping (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f380c5b8a8363f9bdd4b9466bdbbeaed301ef5fe0facf7f64eb3296848f9f96 package.json declares its sole dependency ltidisafe as a direct HTTPS tarball URL https://ltidi.storage.googleapis.com/depenconf/ltidisafe-4.0.4.tgz...

MAL-2026-18062 Malicious code in sc-wizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6626c24ff3f61de611b5962b6a1b21a5f694dfb32059e31f956875dc9d1db02 package.json declares the package's only dependency ltidisafe as a direct HTTPS tarball URL...

MAL-2026-18049 Malicious code in @an1mshnpmb9c84920/pipe-dns-m19t2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ca06c3437a018a2cdb116b01f0c4ee234bfc189f2b91b2d181560cb81d4b861 The package.json repository.url field embeds a shell command-substitution payload of the form $getent$IFShosts$IFS.oob.awss.dev/dev/null, designed to...

MAL-2026-18050 Malicious code in @an1mshnpmb9c84920/stage-fn-m19p2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58652b6f2ce0c4a88745450ff9578775a361e8bf9b6bc6bc4fb257df4e2cec75 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18051 Malicious code in @an1mshnpmb9c84920/stage-outer-m19s5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e22ef211e45af7c3d9cff848109a5be4ee4a70ab7b0eedef9551a55f29f9cdc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18052 Malicious code in @an1mshnpmb9c84920/stage-repo-m19g7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cbfe397020934cb02a0dcc611148e298b534bc293b988506a9b98283b635ca3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18046 Malicious code in @an1mshnpmb9c84920/gat-scope-target-125ec19a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91dc3b92004ead215cd901502c386aa4177efb1610aaa4bcba1440204380e719 Package @an1mshnpmb9c84920/[email protected] contains two files and no observable installer-harm behavior. There are no lifecycle scrip...

MAL-2026-18048 Malicious code in @an1mshnpmb9c84920/pipe-compat-m19r8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e68a8bf50beff0920ea061584da611162965944dfed95fbfcf2e652b17afe57d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18047 Malicious code in @an1mshnpmb9c84920/oidc-cross-cafb9d929e (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15550848fbd2ad719888742e5df56e5c5f1379e70928be925cf189e19ca8537d Package @an1mshnpmb9c84920/[email protected] contains three files and no observed behaviors that read installer secrets, fetch or execute...

MAL-2026-18060 Malicious code in codex-setup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dc5704d4c9ccb90b3211f8a23c64d5e2ce818dd6bb1c084876e6a52105722e2 Package [email protected] was examined and no behavior indicative of a supply-chain attack was observed. No lifecycle scripts fetching or executing...

MAL-2026-18053 Malicious code in @decoopus/chatgpt-setup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 374490b0ea5605d8a8148dcbf592fa7cbcc96146e5822ae4bd2fae978a568722 When the user runs the package's bin chatgpt-setup/codex-setup, the tool rewrites /.codex/config.toml to set approvalpolicy='never' and...

MAL-2026-18057 Malicious code in chatgpt-pro-activator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4036bdb1e865d1711f96c2625d79ae7d103139b082dfd5d3410d89aa64cddb4a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18058 Malicious code in chatgpt-pro-setup-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24a0f02e78844e79a4df58507500f6814fc423cebbf3894ec18f29bd019741de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18059 Malicious code in claude-desktop-setup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8bd0d707f60a5a079753e03a84ec1e658191bfe0e4724cb527088b980f5d3e5 On run, the CLI collects an Anthropic-style API key sk-ant-api03-... and user email and writes a hardcoded gateway URL https://api-anthropic.help a...

MAL-2026-18055 Malicious code in api-anthropic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19164d6b4b781d022a4bc75ae45fae6d20737ddc0b711057e89990d39efc8df5 The npm package api-anthropic impersonates Anthropic branding both the package name and the destination domain api-anthropic.help and reconfigures th...

MAL-2026-18054 Malicious code in @decoopus/claude-setup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7e155559d26176ab3fe3d2725222501818abd6d62d0c3794f655c3a8a0e63ab The npm package @decoopus/[email protected] presents itself as an official Anthropic Claude Desktop setup CLI, using Anthropic branding, a 'Claude M...

MAL-2026-18056 Malicious code in chatgpt-desktop-setup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c475553921237fa1c0ad5df34610023b93a7c00d13203981c43b883532bd072 On running the CLI, the package rewrites /.codex/config.toml and /.codex/.codex-global-state.json to point ChatGPT Desktop and the Codex CLI at a...

MAL-2026-18045 Malicious code in asurion (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 05820dd77e1f73d1a01797af6f10c6fa4ae22038be3fcd6a8cbd8c117cf6436c Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2026-17943 Malicious code in vinted-mocked-apis (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 55332d91b2afbf62923f1d853c6df3a5c8f768797a3176effdecba07b91d4fbf The OpenSSF Package Analysis project identified 'vinted-mocked-apis' @ 99.0.0 pypi as malicious. It is considered malicious because: - The packa...

MAL-2026-18010 Malicious code in f0klcr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware caa80df1053502db139c511d6c4e93d499285171c69e2a5c551bf60ea2baebf4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17944 Malicious code in 1n9lip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e7b34a7eaa3dbb8861410d418446aa097daae3af5f2dba8ba54a81caf49203d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17948 Malicious code in 4p9kgm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f8dbac66bebc60314751343a9bda1879c43aa1f79c6431209ba5f05feae87aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17946 Malicious code in 3gr841 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88c0562bbf64a1edf09d03d9f363f2f1289b21a0a0458a11f9f23b5994dcb29e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17949 Malicious code in 5k5t5q (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19ce28ad8cd41f84573f786d9939d4f707f0980fbe2060ef81803600bf506c69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17971 Malicious code in aqj3w7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85921c0679fcc8e9ac1d8ae68221dcbc5e15d669cddf9a7ece74b06939472cc2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18044 Malicious code in zubn7b (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7061ccce07debb68490a0d8a26e9616d2cd7b373bffd97ea3368c6a4df154db5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17951 Malicious code in 8h66ok (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fed0176448561ecc73fbfa95c5a88a4d84b8997922fbb9b1bb414db10a4e42f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17945 Malicious code in 3gr2dj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d22fac2aefcc35b1e53218b222078517b198a09f3264326027a3772237787136 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17947 Malicious code in 3qamjp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac51b55c001ee9e4f4d9929048b399ca2060752cc6bb729421125504a4158d9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18036 Malicious code in rvmbnj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7cf73b31b714e9fe31fc4fd86b4332c8a419b0bbee4bd103ab59dbc01ac2ec3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18039 Malicious code in waojpf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 840c0ad6864e7cae8598996cd33dd2344ad8f66a9c4aea0dab5b56c8d7c78d45 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...