MAL-2026-18514 Malicious code in @goparrot-dashboard-api/shared (npm)

@goparrot-dashboard-api/shared is a dependency-confusion probe: it takes a name in a @goparrot-dashboard-api scope that its publisher created on npm, next to GoParrot's public @goparrot scope, so a build that resolves that scope from npm gets it instead of a private package of the same name...

MAL-2026-18506 Malicious code in @goparrot-dashboard/menu (npm)

@goparrot-dashboard/menu is a dependency-confusion probe: it takes a name in a @goparrot-dashboard scope that its publisher created on npm, next to GoParrot's public @goparrot scope, so a build that resolves that scope from npm gets it instead of a private package of the same name. Version 0.0.1...

MAL-2026-18498 Malicious code in @goparrot-dashboard/franchise-directory (npm)

@goparrot-dashboard/franchise-directory is a dependency-confusion probe: it takes a name in a @goparrot-dashboard scope that its publisher created on npm, next to GoParrot's public @goparrot scope, so a build that resolves that scope from npm gets it instead of a private package of the same name...

MAL-2026-18497 Malicious code in @goparrot-dashboard/combos (npm)

@goparrot-dashboard/combos is a dependency-confusion probe: it takes a name in a @goparrot-dashboard scope that its publisher created on npm, next to GoParrot's public @goparrot scope, so a build that resolves that scope from npm gets it instead of a private package of the same name. Version 0.0....

MAL-2026-18500 Malicious code in @goparrot-dashboard/franchise-marketing (npm)

@goparrot-dashboard/franchise-marketing is a dependency-confusion probe: it takes a name in a @goparrot-dashboard scope that its publisher created on npm, next to GoParrot's public @goparrot scope, so a build that resolves that scope from npm gets it instead of a private package of the same name...

MAL-2026-18451 Malicious code in contracts-upgradeable (npm)

contracts-upgradeable takes the unscoped name of @openzeppelin/contracts-upgradeable and has no functional code. Its preinstall script runs node preinstall.js on npm install, which POSTs the machine's hostname, the OS username and the local time to the Discord webhook...

MAL-2026-18439 Malicious code in @an1mshnpmb9c84920/pipeprobe-obf-m19n5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66025f4cca9a4269af1b3b1278d850c9454b62d8e9ec90ad6e4ba8ac73c0fce2 The package's prepare lifecycle script executes node index.js, which reconstructs the hostname npmp19n5--768.oob.awss.dev by joining a string array a...

MAL-2026-18440 Malicious code in @axo_cuy/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b32f937714cfd8023a0123f7e15dbeb6a2146fd7f3a22f9cb5ff6728b9d3f48 package.json declares a hard dependency libsignal with the source github:tenka-san/libsignal-node. This is an off-registry dependency source: npm...

MAL-2026-18441 Malicious code in @bil-rgb/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bcbf6493a6aa37ccc827723d6fd73b082c66d10a549af2413aba2a8a6f47b7f package.json for @bil-rgb/[email protected] declares its libsignal dependency as github:tenka-san/libsignal-node with no commit SHA, no tag, and no...

MAL-2026-18438 Malicious code in dsh-screenshot-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9b2c3c72e63a884e3af047f9e01a823237d1d6d37ccf876ac04acca6714710b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18459 Malicious code in wallet-adapter-base (npm)

wallet-adapter-base takes the unscoped name of @solana/wallet-adapter-base and has no functional code. Its preinstall script runs node preinstall.js on npm install, which POSTs the machine's hostname, the OS username and the local time to the Discord webhook...

MAL-2026-18457 Malicious code in bigbob22-test (npm)

[email protected] has no functional code and an empty README. Its preinstall script runs node preinstall.js on npm install, which POSTs the machine's hostname, the OS username and the local time to the Discord webhook...

MAL-2026-18437 Malicious code in atlassian-wallboard-plugin (npm)

[email protected] uses an Atlassian internal-looking name with a high version number and has no code; its package.json declares the dependency node-ac2 as a tarball from the GitHub repository GamerD11/pingtest, which in turn pulls node-ac3 from the same repository. On npm install,...

MAL-2026-18436 Malicious code in macs-shoaibs-pro17 (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c7ce0186e7517c1df32cfd61177f90bee77d43a19d7c3963cc657e07109123a The gem declares ext/mkrfconf.rb as a native extension, which RubyGems auto-executes during gem install. The script contains no mkmf/rake build logic...

MAL-2026-18433 Malicious code in @axon-web/icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee650ff91eeb70cc76f880c6b66b586b21c471c95eac22a9e23160aaffa45a58 The package is advertised as an SVG icon library but, on require, runs an IIFE that constructs an identifier from os.hostname and...

MAL-2026-18434 Malicious code in hs-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2950f0dff0145db43d5dd123c45c2786c7d42f58e7dec69e0178ca2aa325c478 package.json declares its sole dependency ltidisafe as a direct HTTPS tarball URL https://storage.googleapis.com/lscunpentest/packuxfoundry.tgz inste...

MAL-2026-18435 Malicious code in privacypass-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ca6e88317dac5ec524d2dc6ec4b2af7934e2213569ed7c8a757e59edb45b0c3 The package presents itself as 'Privacy Pass client primitives' but ships no cryptographic functionality. Its only runtime effect is a...

MAL-2026-18492 Malicious code in @goparrot-dashboard/app (npm)

@goparrot-dashboard/app is a dependency-confusion probe: it takes a name in a @goparrot-dashboard scope that its publisher created on npm, next to GoParrot's public @goparrot scope, so a build that resolves that scope from npm runs its code instead of a private package of the same name. In 0.0.2 ...

MAL-2026-18456 Malicious code in axelarjs-sdk (npm)

[email protected] takes the unscoped name of @axelar-network/axelarjs-sdk and has no functional code. Its preinstall script runs node preinstall.js on npm install, which POSTs the machine's hostname, the OS username and the local time to the Discord webhook...

MAL-2026-18452 Malicious code in sol-wallet-adapter (npm)

sol-wallet-adapter takes the unscoped name of @project-serum/sol-wallet-adapter and has no functional code. Its preinstall script runs node preinstall.js on npm install, which POSTs the machine's hostname, the OS username and the local time to the Discord webhook...

MAL-2026-18458 Malicious code in cutekitten-test (npm)

[email protected] describes itself as a security test package for a school project and has no functional code. Its preinstall script runs node preinstall.js on npm install, which POSTs the machine's hostname, the OS username and the local time to the Discord webhook...

MAL-2026-18454 Malicious code in calculator-preinstall-hook-demo (npm)

[email protected] presents itself as a test fixture for npm lifecycle hooks. Its preinstall script runs node preinstall.js on npm install, which POSTs the machine's hostname and the OS username to the Discord webhook...

MAL-2026-18453 Malicious code in calculator-preinstall-chain-demo (npm)

[email protected] has no install script of its own but depends on exactly [email protected], so npm install runs that package's preinstall script node preinstall.js. The script POSTs the machine's hostname and the OS username to the Discord webhook...

MAL-2026-18432 Malicious code in pystr-codec (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9f8b8630f88afc0b4a1aedeefb4e20adbf3fb9dea06f64747fb0bdf65c0a7bc1 Package embeds a malicious PTH file that on every Python startup executes obfuscated JavaScript code, using a Bun engine. It then exfiltrates credentials to a...

MAL-2026-18450 Malicious code in claims-ac1 (npm)

claims-ac1 1.0.0 contains only a package.json declaring a single dependency, node-ac2, that is not fetched from the npm registry but from a tarball in the GitHub repository GamerD11/pingtest https://github.com/GamerD11/pingtest/raw/main/node-ac2.tgz. That tarball has no code and in turn depends o...

MAL-2026-18431 Malicious code in @mamans2973/maman (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5080387e9f0ad397e73a8405b463024af443bffef67f3fa00d3dadc1bb97c12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18430 Malicious code in doctreelstm (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9609b278449fb9d196f4929f422f22288aa202df7b8417d91053ab0180711bb8 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2026-18449 Malicious code in ms-client-portal (npm)

ms-client-portal is a dependency-confusion package with no functional code; its README says the name is an internal project name exposed in the production web bundle of a health-sector client portal. Its preinstall and postinstall scripts each run a node -e one-liner on npm install that sends an...

MAL-2026-18429 Malicious code in multi-convert (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 63d1834ac673303487e7c46affaf2be63ac0b142aaab8e79027144aad9cbd9de In this campaign, specific versions of involved affected packages hide malicious actions. The malicious code is hidden in specific versions of a dependency...

MAL-2026-18428 Malicious code in md-to-slides (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b11c84f48dc5185cf83056d55f0b2fa64fa415afae3f258baa5887c1ce44bc7c In this campaign, specific versions of involved affected packages hide malicious actions. The malicious code is hidden in specific versions of a dependency...

MAL-2026-18427 Malicious code in skills-analyzer (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 415c95c384a9901bda7b98bdcf86142c041e21de2759e7048769a49bf54d9bea In this campaign, specific versions of involved affected packages hide malicious actions. The malicious code is hidden in specific versions of a dependency...

MAL-2026-18426 Malicious code in is-it-ai (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6a8580750a7d490d65866e9407c451efa8dbad9a90c35a54b87416c57eef1fea In this campaign, specific versions of involved affected packages hide malicious actions. The malicious code is hidden in specific versions of a dependency...

MAL-2026-18425 Malicious code in local-commander-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bddef1c4c8e802c4c5b624072b68ff1fea4d66455da428306cd506196e02c6dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18423 Malicious code in vas-tops2-digital-assistant-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9200deb4c1b7b103f7bfb70a824828ba4a94b5ae4450e6d2379b1edb6ae8162d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18421 Malicious code in vas-tops2-core-clients-search (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8f34cc049db12f4eae49cc8977f2d6e09de6f9c7a49e46962f53466fa32122b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18422 Malicious code in vas-tops2-core-property-search (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b717592099bb17727ccdcad2fb928bf90c9cddaba9439bb084d62b715ed4c605 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18424 Malicious code in vas-tops2-reportingui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba605f5250413f2e4298788eca10f4f24ce20e6f91c6c9f6df3549d147cf6506 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18420 Malicious code in vas-tops2-core-client-cleanup-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d3626e72813ef48b7fa712d21bcfc04b886915dac40f1bf4073caeee0c33be4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18415 Malicious code in @tops2/digital-assistant-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60912457b183aa62c0101d164fd7accb4e1d9886de72fb59cb4ba69dfea4309c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18419 Malicious code in vas-tops2-bidmatrix-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e4abeeac694ba2d227a41a8e82d0525018201d486e23b94805684af4e07d644d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18418 Malicious code in tefeest-npm-com-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c80a97b5efe6344f25a34ed662f62f49fa91b032c477766b4fbad94f3ff15c5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18411 Malicious code in neuralwhatsapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a341f13b84ee9c8702ac43dd0af78bc97a5ade2ed81a3593817d389529d73a50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18410 Malicious code in apex-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6e333b1835e39c7456b9e9ad49d5582e9c4d0b56f1ca5884ee7ed02e8b5cbc7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18412 Malicious code in ourin-baileys (npm)

ourin-baileys is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own authenticated WhatsApp account to an author-chosen WhatsApp Channel. Part of the campaign OX Security documented as "PhantomSub" 2026-09-28:...

MAL-2026-18601 Malicious code in @atfm/atfm-material-ui (npm)

@atfm/[email protected] is a dependency confusion package: it uses an inflated version under the @atfm scope so that a build resolving an internal @atfm package of the same name picks the public one instead. Its package.json declares a preinstall script that runs on npm install. The scrip...

MAL-2026-18602 Malicious code in @atfm/utils (npm)

@atfm/[email protected] is a dependency confusion package: it uses an inflated version under the @atfm scope so that a build resolving an internal @atfm package of the same name picks the public one instead. Its package.json declares a preinstall script that runs on npm install. The script...

MAL-2026-18408 Malicious code in grizzly-baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c286b1b2c91a0349c63b3d0215c0e8ab29b7d3410a79f2027305482b5fc0fc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18409 Malicious code in tabby-fknat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a884dedd8a80f96b1c13bfb40644acb25a1f729a1eb6e063cf6981d684f2629a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18407 Malicious code in @nexlayerlabs/postcss-keyframe-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ca26cea829c3eb710321f002ade10441a026bef12b2c2eff288d329f203ce2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18406 Malicious code in stdid-nyxprobe (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0178d6c7a642f90327546548a88f64bd17da5aa97e519249f515c0e6232c73f1 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...