239659 matches found
MAL-2026-14464 Malicious code in schoollesson (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c019b72671bb34207fbc587803e391f42f2fd3148c3ac941d9a8cfc8468a7e8 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-14457 Malicious code in desmosschoolwork (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9575a8846e102604d72f61d91f37c559e58d0fca4c117008257d096afc2a2acb The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-14469 Malicious code in tungtungisgoated (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d649ce9c915a5834ac0743a8f47377d31c293de34fbe40581c2f7ce3ca56c8da The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-14467 Malicious code in superdupertest111 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84dafc169a0c96b769349ac7685ff37d6ad663db50df14862a784173cde38dbe The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-14461 Malicious code in iwantaburger (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 660011f86e2c92f83c584ac25343cc8d8da3a4242286e751d9e8bc0bd8510a68 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-14455 Malicious code in desmosistuff (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c61a3c57b3649dc23c3534ad9f8b872093353a38ed7995af9cda6d4102bee8b0 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-14466 Malicious code in sonsonsahur (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d56e98f205b0c56ba4ee1948a10f1aaaccbbad4556e01569bfab9945ec8ad7e2 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-14462 Malicious code in pleasedoyourhomework (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c97c52ac22393718c1c8fd5478b19b5b352b1f8c01de5f2aa39e54c3305eaf1 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-14460 Malicious code in ilovedesmos (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0efb46da64ab0f3eaee41abecec08214a4af0f228c701fd39ad711c0ae124927 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-14459 Malicious code in iamhungryrn (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 462bbc47c25a6f0d3de4221795fe1a35ea55027682c037d1a8ed8693b0993d89 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-14449 Malicious code in classroomlesson (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cee9290a110b32c6fab4129e634205ed0b86080ccf328dfe5e17635bc85b7926 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-14450 Malicious code in classroomwork (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 475464061a4252e9e926ad06f46e5b9223c8c0fc5b4921df5acfadbb3cacf8d9 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-14452 Malicious code in desmosclasswork (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d435d8cefda2b58ca65ad06ffac8521a26ccb991dd4828dd479e64ddb38bb865 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-14446 Malicious code in classhomework (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef17879328ca7cff2fac02018b2155038da8e7faf071aa080d9c3272ba87a3d The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-14445 Malicious code in digitalexp-style-module-l9 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c1b3e9059995d4d535c65fafd0105eea420510acb17ad9befbc99c18aa25df9 package.json declares both preinstall and postinstall as node beacon.js, so beacon.js runs automatically on every npm install. beacon.js reads...
MAL-2026-15692 Malicious code in unifi-credential-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c9d5fc3394d6f2565267e1b19573ca0c58dbbe9149f7204ea39ccae5c53645f package.json declares a preinstall hook that runs index.js on npm install. index.js collects hostname, username, working directory, internal IPv4...
MAL-2026-15691 Malicious code in react-hook-doms (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a01d746e2ab5362af396f0bafe921bcd6aed22b8321555ccb16d0f8f7a5c9183 The package was found to contain malicious code or consuming dependency that contains malicious code...
MAL-2026-15690 Malicious code in mongosooe (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-15689 Malicious code in lil-swisgom-hlepers (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75aeaaa8ef6f56423bf517d9ff21cfed3a682701f306103f068b948e330f03db package.json declares a dependency lil-swisgom-hlepers-core whose version specifier is a direct tarball URL on a third-party host...
MAL-2026-15688 Malicious code in leaflet-opencage-geocoding (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-14423 Malicious code in @medisend/shared (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb5857b17f9935d83581e1a24e6d990211fe86631143c7025c3123d1274e7d28 package.json declares a postinstall lifecycle script that runs curl at install time and transmits the installer's hostname via $hostname as a query...
MAL-2026-14427 Malicious code in chai-as-mno (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e94e194f078c230d6c6b15efcddc54b133fd52c890a55b0f8bdb4c680452381 The package name mimics chai-as-promised and its README, badges, and license text are copied from an unrelated project pino, while the package.json...
MAL-2026-14421 Malicious code in @medisend/auth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8363fc41a00733469f69df79f45ecebd190ac85d16d8cbdd48a61fe5bfb67003 package.json declares a postinstall lifecycle script that runs curl against https://webhook.site/74ed1be3-96d6-48c3-932b-6b1dbabaff97 with the...
MAL-2026-14422 Malicious code in @medisend/core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18f32429d1bfdc9438f2f03f531e5c2fef53e0e69104e3124499cf6f42ce52a1 package.json declares a postinstall lifecycle script that runs curl against https://webhook.site/ with the installer's hostname appended as a query...
MAL-2026-14432 Malicious code in kelly-stake-sizing (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ca23e704ca44d185fc873044a3a967e06d996970f59a526d3390e1f0ab45a9d [email protected] declares postinstall = 'node scripts/install-check.cjs'. That script fetches a JSON config from...
MAL-2026-14434 Malicious code in openai-pr-reviewer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3553acd3c5abc3f71b55740c4b06b2eb278f81bb678c55211f2287a498b60b61 The package's preinstall hook runs index.js, which collects the installer's hostname, username, home directory, DNS servers, current working director...
MAL-2026-14428 Malicious code in consumerweb-serverutils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04473d8096a27ae1cbf94652a0087dcf00762f2c7d1ef390bb351f283e743349 consumerweb-serverutils 3.4.3 runs a preinstall lifecycle script that on npm install collects the installer's username, hostname, and current working...
MAL-2026-14426 Malicious code in babel-polyfill-plugin-corejs2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13878d994b01607c379e26646449b7cca95099f9b2eb5be2e1f8e19aeea32eb3 The package advertises itself as a Babel core-js 2 polyfill plugin, but the shipped lib/index.js contains unrelated web3-core-subscriptions boilerpla...
MAL-2026-14436 Malicious code in poly-price-node (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 219fd8bc805a260cc62a5a3f9d524f9bb69ba2f8c5ae65e9a13e64514fdd0cf6 [email protected] advertises itself as a crypto-price fetcher but its package.json postinstall script invokes prices-uploadConfigIfExists, which...
MAL-2026-14425 Malicious code in auth-otp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e72292101c6b448dbaea5dc1e2af91cc55b35b32ee1e722c4f5b21dfb91e032d Package advertises itself as a zero-dependency TOTP/HOTP library, but package.json runs node lib/core.js --setup as a postinstall lifecycle script...
MAL-2026-14438 Malicious code in remove-bg-serverless-azure (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcbce8344eb0762c4a9ef029743efe13045422b839444b828c245a09a85fc74e package.json declares preinstall: node index.js, so npm install automatically runs index.js. index.js reads os.hostname, os.userInfo, the user home...
MAL-2026-14429 Malicious code in dim-hydration-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fefcd7c94e6eed5b5a69ce9ad5f4489c6532472ec604e6d15e5a96f63c59e51 The package is presented in its README as a set of day-math primitives, but dist/index.mjs runs a top-level async IIFE on import that chmod 0755's...
MAL-2026-14439 Malicious code in secret-key-totp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f662164281fe877686c7eac93e0e6d068ccb16f8bff1b44029b1ace655a76b6 [email protected] declares a postinstall hook node./index.js --setup that executes a credential stealer and dropper on install, and the same...
MAL-2026-14435 Malicious code in paypal-business-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 556bfd93652f806523495944dc8a441624c9a2dae4f76eadeefa9650f57091a1 The package's npm preinstall lifecycle script collects the installer's OS username, hostname, current working directory, and walks up to 15 parent...
MAL-2026-14433 Malicious code in manticore-log (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 184c02a26613b94b15f0abe1ed108c7a2a7a061f795213dba4772876e6e0a015 The package's preinstall lifecycle script fires automatically on npm install and collects the installer's OS username, hostname, current working...
MAL-2026-14437 Malicious code in ppb-manticore (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2558d8bae443d40330d8166eec921f02de17b395b4359a086a0f12792b026422 On npm install, the package's preinstall lifecycle script collects the installer's OS username, hostname, and current working directory, walks upward...
MAL-2026-14420 Malicious code in @gsas/gsas-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2242b683433d5fe37b3997185d251799a4606a456e516da08586775d11f0cb7e @gsas/[email protected] is a high-version public-registry squat targeting an internal @gsas/gsas-sdk name. package.json declares preinstall: node...
MAL-2026-14440 Malicious code in web-advertising (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc7c0c1f060691740d5149c61d74f3ddd8f6e10107c7621d700ae0819a1e2237 [email protected] declares scripts.preinstall = 'node index.js', so index.js executes automatically on npm install. The script collects...
MAL-2026-15686 Malicious code in @yuva2210/htx-poc-skills-rce (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-15687 Malicious code in @yuva2210/okx-poc-rce-impact (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1917fdda46d566300463afdd1087755e9cf50203f4997455f9ee888e01782124 @yuva2210/[email protected] is a dependency-confusion proof-of-concept targeting OKX's internal namespace. The package's package.json declares...
MAL-2026-15685 Malicious code in @x-team/strapi (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-14442 Malicious code in svelte-ui-dim (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f522350f40f35da150be92840f6a3cc1283b8e48bc5bfd95a114d7b2282dbbca The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-14431 Malicious code in hydration-ui-dim (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64f9565680b71c54ed88e29ed3950f1561764f4b86a260a3ebb5eadb528edfa3 On import 'hydration-ui-dim', dist/index.mjs runs a top-level async IIFE that chmods dist/internal/calc-math.dat to 0755 and spawns it detached via...
MAL-2026-14430 Malicious code in hydration-dim-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16cd04f35f684a64b6abd8178154fc7d1f5a970c76f7d77c45635c1c3bcf0d9b [email protected] presents itself as a calendar-day math utility, but its main entry dist/index.mjs runs at import time: it chmod 0755's...
MAL-2026-14441 Malicious code in svelte-dim-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b85c60ad2ca0f72057dc31af7e017b210304c5dc1927872717d331ecf391bf8f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-15684 Malicious code in @pimy-b2cweb/common (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-15683 Malicious code in @pimy-b2cweb/apiclient-common (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-15682 Malicious code in @ice-trade-components/common (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-15681 Malicious code in @grab-food/order-sdk-web (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa9b56bb1d69dc16b6095faea196af99809ad805b400a3c6b5499f896c8d74c2 Package published under a scope impersonating the Grab food-ordering brand with no real functionality index.js exports an empty object. Its sole...