MAL-2026-18445 Malicious code in self-v8 (npm)

Malicious package. self-v8 is an npm package that harvests sensitive data on the victim host and exfiltrates it to an attacker-controlled Discord webhook. Classification: information stealer. The package provides no legitimate functionality, so all published versions are malicious. Full indicator...

MAL-2026-18444 Malicious code in @johnruff215-dev/solana-wallet-tracker (npm)

Malicious package. @johnruff215-dev/solana-wallet-tracker is an npm Solana cryptocurrency-wallet information stealer that exfiltrates wallet data to an attacker-controlled Discord webhook. The same Discord webhook endpoint ID 1433690093175967776 is also used by the npm package...

MAL-2026-18446 Malicious code in @notrainer/nobtrainer-sdk (npm)

Malicious package. @notrainer/nobtrainer-sdk is an npm package that exfiltrates sensitive data on the victim host to an attacker-controlled Discord webhook. The same Discord webhook endpoint ID 1433690093175967776 is also used by the npm package @johnruff215-dev/solana-wallet-tracker, indicating...

MAL-2026-18365 Malicious code in b20miner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4987b21d454aad64b26fee42ee36d0d0e2a8b733dc23afbd0c7fe9bb3cd9e631 No install-time execution, credential access, network exfiltration, dropper behavior, or backdoor mechanism was observed in this package version. No...

MAL-2026-18364 Malicious code in @zaip-ai/cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6871bd0117df69d113dc6e42ef94d417f866e24b30e2b2b0484a2cb934473443 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18363 Malicious code in itsa-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware efba97f94ff89238d70b9715f9f85dea58617cc13e827ae163fdec80d00cd30b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18360 Malicious code in itsa-react-checkbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64de48442d38106cf6ce795da22aab4b4ec88546cce9d63883761e944f41c445 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18361 Malicious code in mock-transactions-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd727a8b4413f4809193cfac838d9b42ddae62a685086036a026ba2a4e7419e4 The package presents itself as a mock-transaction data generator but ships a dynamic-code loader. index.js builds the identifiers 'setTimeout',...

MAL-2026-18362 Malicious code in transaction-info-generate-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 043746546ca7cd9fc1679b0ee751cf12dc1938ba9f3b218dfbd090312f45a8ef Package [email protected] ships a minimal file set 2 files with no detected install/import-time side effects, no lifecycle...

MAL-2026-18359 Malicious code in black-spindle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dd746168a2e733a835005f5fd321e1bab9a24688a4c5d413247ae065ea29786 [email protected] declares a postinstall lifecycle hook in package.json that executes curl http://778e-181-63-25-28.ngrok-free.app/test on every...

MAL-2026-18372 Malicious code in @zmtcdn/components (npm)

@zmtcdn/[email protected] is a dependency-confusion package with an empty index.js and a description of "Security research PoC". Its postinstall script runs node postinstall.js on npm install, which POSTs the hostname, username, platform, working directory and the names of all environment...

MAL-2026-18373 Malicious code in @zmtcdn/ui (npm)

@zmtcdn/ui 9999.0.0 and 9999.0.7 are dependency-confusion packages with an empty index.js and a description of "Security research PoC". Their postinstall script runs node postinstall.js on npm install, which POSTs the hostname, username, platform, working directory and the names of all environmen...

MAL-2026-18367 Malicious code in identity-two-factor (npm)

[email protected] is a dependency-confusion package aimed at Coinbase its README and postinstall.js say so, and the beacon path is cbhq-canary with no functional code. Its postinstall script runs node postinstall.js on npm install, which writes a marker file to the temp directory and...

MAL-2026-18368 Malicious code in spectral-net-probe (npm)

spectral-net-probe has no functional code. Versions 1.0.1 and 1.0.4 have a postinstall script that runs node index.js on npm install, which sends an HTTPS GET to a Cloudflare quick tunnel https://nobody-johnston-with-enabling.trycloudflare.com/aa?x=1 and...

MAL-2026-18355 Malicious code in glyphmatrix-fixture (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60654856e47cfe1a27ce4877b94172d0b760896c061789013a34d8b888d282f5 Package [email protected] contains two files. No install-time lifecycle hooks, no network callouts, no credential or environment reads, no...

MAL-2026-18354 Malicious code in trajmetrics (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f024efebedf9b6fd0adbd2aa9b03293b7cdefdcede29ded30128cabc84290f73 The package is published as 'lightweight metrics helpers for trajectory analysis' but ships only compiled Cython.so modules that implement filesystem...

MAL-2026-18351 Malicious code in csec-crypto-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2abb8bc55cfdb0121f6d5699665198f00bd78fbbaa555a695f2fe5188c733ef5 Package csec-crypto-toolkit version 0.0.0-stage ships two files and no detectable installer-harm behavior. No lifecycle scripts...

MAL-2026-18347 Malicious code in ccsec-crypto-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea1ae7dd68e77ee9ae1b007dd87e4ffb8a3627f74d08f8812eca811bf2a351d4 The package consists of 2 files with no install-time execution, no network activity, no credential or filesystem access, and no obfuscated or...

MAL-2026-18348 Malicious code in ccsec-form-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d63f5a2ae5ff88439a658fdc6a0c8de8fa078a068a1d872be6afcfb5d29fb5b6 Package ccsec-form-validator at version 0.0.0-stage contains two files with no detected malicious behavior. No install-time lifecycle scripts, no...

MAL-2026-18353 Malicious code in csec-form-validatorr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aff8facc55023666afe4d90942161c6319aee23e3bbfc66fc3cd05a828e15140 Package csec-form-validatorr version 0.0.0-stage ships a minimal set of files with no observed install-time lifecycle execution, no network...

MAL-2026-18349 Malicious code in ccsseecc-crypto-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81c4912c99dca882662d90321869801dc0e8ad05a98823dc9527509b67c92798 Package ccsseecc-crypto-toolkit at version 0.0.0-stage ships two files with no code patterns associated with credential theft, install-time remote co...

MAL-2026-18350 Malicious code in ccsseecc-form-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1957737b5d2ab838803b712aeea38f8b15bbb5ae465dfab85cecd9f49662bb41 Package ccsseecc-form-validator at version 0.0.0-stage contains two files with no detected install-time scripts, no network exfiltration code, no...

MAL-2026-18352 Malicious code in csec-form-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae9c21d4483a24c6cb9c8d70bc589a499b7c4bd952b99cc3e2502c276e8ce6c6 The package consists of two files with a pre-release version suffix 0.0.0-stage suggesting a placeholder or staging publication. No install-time...

MAL-2026-18346 Malicious code in agentenact (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07db0f79773c0790dd0cda967228203b58861c89d78540a25c8ff7ac28152f29 Review of [email protected] npm surfaced no evidence of credential theft, install-time or import-time remote code execution, silent-relay of caller da...

MAL-2026-18345 Malicious code in dsh-vm-tester (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0402f4d4ed70da37124eb7d4e1cfd585f2b9afbb63cca44436692a3d21d090 Package dsh-vm-tester 0.1.2 ships agent/tunnel-host.js, which imports Node's childprocess module and performs HTTP GET operations. Keyword...

MAL-2026-18356 Malicious code in @webapp-shared/login-vmok (npm)

@webapp-shared/login-vmok is a dependency-confusion package: it uses the @webapp-shared scope, which matches a private internal package scope, and was published on 2026-10-27 in versions 1.0.0, 1.0.1, 1.1.0, 2.0.1, 3.0.0 and 99.0.1 so that builds resolving the internal name from the public regist...

MAL-2026-18343 Malicious code in numprint (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2767ab63222f7b2b6c76334822fb6e8c8b0385df53833206362fcf52f93392a numprint 1.2.0 on PyPI could not be fully characterized from the available signals. No specific installer-harm fingerprint hardcoded C2, credential...

MAL-2026-18344 Malicious code in adyen-web-v6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3a519911b834e3563c817f3ee58c0d70c589e4f29f26ef97f849668dfc5598f Package adyen-web-v6 version 0.0.0-stage contains two files and no detected install-time or import-time code that reads installer secrets, contacts...

MAL-2026-18339 Malicious code in buttoncontent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9d44a5a2d3a96bab51870b046a7d474991b20c52e850f7e5639281ba8bff80e Package [email protected] contains two files with no install-time lifecycle scripts, no network activity, no filesystem reads of...

MAL-2026-18342 Malicious code in string-target-mapper-hash (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f356f513bed48330cd1a0538e53ac429f5570385e8b0bcc3fcc5c94876e437b package.json declares its sole dependency shard-writer-parser-mutex as a bare HTTPS URL to a non-registry host...

MAL-2026-18341 Malicious code in macro-kernel-record-reader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9ab8754c7e4e3a0a8c6ffd0c1980bbd81bd002c90ebccbbc275df296dfeddf9 package.json declares its sole dependency cache-locale-runner-writer as an arbitrary HTTPS tarball URL...

MAL-2026-18340 Malicious code in fetch-hash-cache-atomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fa5c13f5b907c79079d9030292f1a6dac9d2f0ced56c2efe0e1bfd7021acdb4 package.json declares its sole dependency as a direct HTTPS URL https://artifacts.creditslib.com/npm/plugin-client-queue-field rather than a registry...

MAL-2026-18338 Malicious code in @azure-growth/signup-ux-components (npm)

@azure-growth/signup-ux-components 1.2.2, 1.2.3 and 2.9.9 are dependency-confusion packages that take the name of a package used internally by Microsoft's Azure signup site and not published on the npm registry; 2.9.9 carries a version number above the internal release, so resolvers that also che...

MAL-2026-18337 Malicious code in @camera.ui/camera-ui-nvr-windows-amd64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c000e7f2af1a8ca7d6255b3f8fdc035f9b39bc84a8227e29e5cfc388c6a2e22c Package @camera.ui/camera-ui-nvr-windows-amd64 appears to be a platform-specific prebuilt binary distribution Windows amd64 variant for the camera.ui...

MAL-2026-18336 Malicious code in h13t0ry-hello-demo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34a52ed4e00f54dc99a4b460ad2d881b62a7a85c636085f4166f4062cebea374 On import, the package's top-level module code opens a TCP socket to the hardcoded IP 115.190.210.22:80, duplicates the socket over stdin/stdout/stde...

MAL-2026-18335 Malicious code in ctf-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae799a3444c808e1efc1027f5f9ee3bce7e972a8357d43fc96f1e5a53a2c76c8 Analysis of [email protected] npm across 154 files produced no indicators of credential theft, exfiltration, install-time or import-time remote code...

MAL-2026-18357 Malicious code in csvflow-schema (npm)

csvflow-schema is described as a "Lightweight CSV column-schema validation helper" index.js exports a small validateSchema function and adds a postinstall script that runs node ./postinstall.js on npm install. postinstall.js writes the username, hostname, working directory, parent process id and...

MAL-2026-18330 Malicious code in @iobandamwer/native-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cce0282c2e8975376db9fdb7a69afc7ed77c0e7649178967496467e09d7ba328 The package self-labels as a 'temporary placeholder stub' in package.json and README but ships active install-time dropper artifacts: a 93-byte...

MAL-2026-18333 Malicious code in path-stream-utils-testmetest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64a028e4ea3039755f4b18b003e2d9722722ca96c51652674dd1bb27f375e4d0 The package self-describes as a 'Temporary package placeholder for staged publishing' package.json stub:true, README 'Temporary Holding Version' but...

MAL-2026-18329 Malicious code in @iobandamwer/cache-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0a88993bf967d1bbbc61cb5f43b4d9af5d9ef74b920e70d828b4a52bf880979 The package advertises itself as 'Cache utilities' but ships no source, no binding.gyp, and no build configuration — only two prebuilt native addons...

MAL-2026-18334 Malicious code in postcss-semantic-themes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21c91b39929f03c30e501726fc2d1c1fa43f17bf2ed77bda52380e563c1171e0 The package advertises itself as a zero-runtime CSS theming kit but on require/import executes a chain of obfuscated JavaScript modules. lib.mjs...

MAL-2026-18332 Malicious code in harlow-css-mixer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 967e3d3d323d36c24348b9530654c33f19bb96bbc21ddeba103dd755a0c07683 The package contains two files and no code paths that read installer secrets, perform install-time or import-time network fetches, execute remote...

MAL-2026-18328 Malicious code in netweavex (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3818fe7f3387637c23d6bc51d62f8fd64dc981c82167750cd3059eec73d2849c netweavex is a typosquat of the popular NetworkX library, reusing its public API, module layout, and README examples including the import netweavex a...

MAL-2026-18327 Malicious code in zagents-framework (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d16d137f59725b57a8d4dfbb6c9e5b88a07e1bf4fac71faf28e044208a21bccd Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2026-18326 Malicious code in changes-lxc-wrapper (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17d52ec1e761dd5273ea674453301163bdf6e6e60aa5074a4f075cb66eb850a4 setup.py defines a custom install cmdclass InstallWithBeacon that, on pip install, collects the installer's hostname and resolved local IP address an...

MAL-2026-18325 Malicious code in @worca/app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f80211818fca675d402d600a4a024b91f844e94907f87b978cbc6f23f75d1c67 The package appears to be an agent/workspace tooling application that includes a browser-extension sidebar bundle, a local bridge server, an egress...

MAL-2026-18323 Malicious code in publish-poc-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bf2f71038e46898cc03f9bf5081547bb6d725e6a480ef22b80f4dc259c721d9 On install, the postinstall script in package.json reads the first line of../../README.md from the installer's parent workspace, creates a mktemp...

MAL-2026-18324 Malicious code in publish-poc-test3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4001a75b24abfa181a10e5d40931194f254304fcf5fda554488d3c242cc5db85 The package's postinstall lifecycle script creates a temporary directory, writes a fabricated package.json whose name is 'publish-poc-found-' random...

MAL-2026-17924 Malicious code in @apexacc/cli (npm)

@apexacc/cli is distributed by "Apex Accelerator" Apex Arena, a fake Web3 accelerator that lures crypto founders with free AI credits and audits. Elastic Security Labs REF8801, published 2026-10-12 found it is a repackaged Oh My Pi coding agent 1,351 of 1,363 files identical with malicious...

MAL-2026-18322 Malicious code in numbors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9965eb6c2b7018707d2ca2ea1840355875eec43f0fc1efb9f03b45cf0566e1a The numbors npm package publishes its entire shipped surface as heavily obfuscated JavaScript: every file under dist/ the main entry dist/mcp.js,...