Supply-chain incident feed

What we've been watching.

Malicious packages across npm, PyPI, RubyGems, crates.io, Go modules, Packagist, NuGet, Open VSX, Docker Hub, and GitHub Actions, curated from public vendor advisories. Each entry is labelled by what it is: a compromise of a package people already use, a typosquat, a dependency-confusion probe, a package malicious from its first publish, or a daily advisory sweep. We list every version we can verify so the scanner picks them up directly: 5,378 package–version pairs across 217 incidents and counting.

Scan your lockfile Submit an incident ↗

HighAdvisory sweep13 Oct 2026
87 packages tracked
GitHub Advisory malware sweep - 2026-10-13 (**Baileys/libsignal lure operator wave 3** - 60+ npm packages across `@revizahoshii/*`, `@fazzcodestudio/*`, `@sanzoffc/*`, `@wanzlonely/*`, `@mikudeveloper/*`, `@modss/*`, `@ikanngeming/*`, `@fhkryxv/*`, `@saazkira/*`, `@badzz88/*`, `@alipclutch/*`, `@mivesensei/*`, `@kanaraa/*`, `@chatunity/*`, `@zanta/*`, `@yudzxml/*`, `@zeronexcode/*`, plus `baileys-xbats`/`bailslonely`/`nakkinpm`/`amprem` unscoped - all CWE-506 boilerplate takedowns against `@WhiskeySockets/Baileys` WhatsApp-automation lures; **confirmed-payload carve-outs within the sweep**: PyPI `npp-ml` Notepad++ impersonator deploying ADExplorer AD-recon tool, PyPI `minecraftaccfinder` Gmail/Roblox/Discord/Minecraft infostealer+RAT with keylogger/screenshots/browser-creds, RubyGems `wallet-balance-scanner` fake-native-extension reverse-shell to hardcoded endpoint; **s4yhii wave 3 continuation** `@s4yhiitestpoc/r2-https-b` on `collector.oob.s4yhii.com`; plus 25+ dep-confusion probes at `99.x`/`100.x`/`101.x` sentinels: `@myorder-frontend-commons/*`, `risk-detection`, `unified-platform`, `@pinecone-experience/*`, `@airbnb-extended/*`, `@tesla-insurance/*`, `@user-services/*`, `app-sca-info-banking`, `com.apple.unityplugin.storekit` Apple-brand impersonator, and more)
GHSA 2026-10-12 batch (ingested 2026-10-13): ~90 fresh malware advisories, dominated by a Baileys/libsignal lure operator wave 3 of 60+ WhatsApp-automation-brand typosquats (continuation of 2026-10-10 Cluster C). Confirmed payloads: PyPI npp-ml Notepad++ impersonator deploying ADExplorer, PyPI minecraftaccfinder multi-platform infostealer+RAT, RubyGems wallet-balance-scanner fake-native-extension reverse shell. Plus @s4yhiitestpoc/r2-https-b continuing s4yhii wave 3 and 25+ dep-confusion sentinel probes.
npmPyPIRubyGems
Affected packages87 packages · 109 versions
npm@airbnb-extended/typescript-config
*
npm@alipclutch/libsignal-node
*
npm@astracode/byles-new
*
npm@badzz88/baileys
*
npm@badzz88/eslint-config
*
npm@chatunity/baileys
*
npm@dransay/api
*
npm@fazzcodestudio/baileys
*
npm@fazzcodestudio/fbot
*
npm@fazzcodestudio/mediaformater
*
npm@fazzcodestudio/wa-web
*
npm@fhkryxv/baileys
*
npm@fhkryxv/baileys-new
*
npm@ikanngeming/blubub
*
npm@ikanngeming/ikannbail
*
npm@ikanngeming/npm
*
npm@jojoxyz/condemnedforce-baileys
*
npm@kanaraa/baileys
*
npm@lekzo_dev/amprem
*
npm@lekzo/baileys
*
npm@lendxntaa/baileys
*
npm@mikudeveloper/baileys
*
npm@mikudeveloper/grace
*
npm@mikudeveloper/libsignal-node
*
npm@mivesensei/baileys
*
npm@modss/baileys
*
npm@modss/libsignal
*
npm@myorder-frontend-commons/analytics
0.0.0-stage0.0.10.1.00.2.01.0.01.1.01.2.02.0.03.0.05.0.010.0.099.0.0100.0.0101.0.0
npm@nexustechpro/baileys
*
npm@pinecone-experience/messages
*
npm@revizahoshii/baileys
*
npm@revizahoshii/hoshino
*
npm@revizahoshii/hoshino-fake-server
*
npm@revizahoshii/hoshino-mcp-server
*
npm@revizahoshii/hoshino-media-utils
*
npm@revizahoshii/hoshino-native
*
npm@revizahoshii/hoshino-store-mongo
*
npm@revizahoshii/hoshino-store-mysql
*
npm@revizahoshii/hoshino-store-postgres
*
npm@revizahoshii/hoshino-store-redis
*
npm@revizahoshii/hoshino-store-sqlite
*
npm@revizahoshii/hoshino-voip
*
npm@revizahoshii/hoshino-wam
*
npm@s4yhiitestpoc/r2-https-b
1.0.0
npm@saazkira/baileys
*
npm@saazkira/libsignal-node
*
npm@sairidev/baileys-new
*
npm@sakataoffc/baileys
*
npm@sanzoffc/baileys
*
npm@sanzoffc/libsignal-node
*
npm@smwebserver/static
*
npm@tesla-insurance/vinless-quote
*
npm@user-services/web-components
*
npm@wanzlonely/bails4u
*
npm@wanzlonely/bailsforme
*
npm@wanzlonely/bailsme
*
npm@wanzlonelyy/bailslonely
*
npm@wanzxlonelyy/bailslonely
*
npm@we3js/framework
*
npm@wenzyx1/bails
*
npm@xrelly-stack/bails
*
npm@yudzxml/baileys
*
npm@zaka13/zakasite
*
npm@zanta/baileys
*
npm@zeronexcode/baileys
*
npmalipclutch-baileys
*
npmamprem
*
npmap3-foundations-ui
*
npmapi-nebula
*
npmapp-sca-info-banking
*
npmbaileys-xbats
*
npmbailslonely
*
npmcom.apple.unityplugin.storekit
*
npmeslint-config-compact-base
*
npmhelpersutils-dev-tools
*
npmikanngeming
*
npmllm-nebula
*
PyPIminecraftaccfinder
0.1.00.1.10.1.20.3.00.3.10.4.02.0.03.0.0
npmnakkinpm
*
npmnode-telegram-sockets
*
npmnpmscript_tesstalert_unpkg
*
PyPInpp-ml
0.1.70.1.80.1.9
npmrisk-detection
*
npmtestmgkregme
*
npmunified-platform
*
RubyGemswallet-balance-scanner
0.9.1
npmwebpackbootstrap5
*
multi-2026-10-13-ghsa-malware-sweepSource advisory
HighAdvisory sweep12 Oct 2026
27 packages tracked
GitHub Advisory malware sweep - 2026-10-12 (**s4yhii operator wave 3**: 8 npm packages across `@s4yhiitestpoc/*` + `@coopeuch/*` Coopeuch-brand dep-confusion all beaconing `collector.oob.s4yhii.com/_npm-poc/beacon`; **`185.158.107.175:8787/_ah/dc` operator wave 2**: 6 npm `beacon.cjs`-pattern recon packages (`nitro-cjs-requirer`, `nitro-bundled-dep`, `nested-lib`, `cloudflare_module`, `another-very-long-name`, `some-very-long-package-name`); **`64.181.165.115/dc` native-addon operator**: 4 npm packages with HTTP/1.0 raw-socket beacons (`ksp-app`, `ksp-client-registry`, `pay-methods-kmf`, `deposit-limit-fe`); `liferay-workspace-scripts` bundled-dep from `ltidi.storage.googleapis.com/depenconf/`; `react-dropzone-v4`/`react-paginate-v5`/`kmf-vendor-pack`/`exodus-firestore-synchronize` dep-confusion probes; `hardhat-option@2.0.1` npm `hardhat-promised`-family stealer; `css-nesting-transform@1.0.0` Wix-brand `webhook.site` recon; PyPI `ig-gox` (`goxtools.shop` encrypted-loader) + `py2ops` trojaned-REPL. Big RubyGems wgkit wave-2 crypto cluster split out to its own carve-out.)
GHSA 2026-10-11 batch (ingested 2026-10-12): 25+ fresh malware advisories across npm + PyPI, dominated by s4yhii operator wave 3 (collector.oob.s4yhii.com/_npm-poc/beacon across @s4yhiitestpoc/* + @coopeuch/*) and a second 185.158.107.175:8787/_ah/dc dep-confusion family. Also hardhat-option@2.0.1 npm hardhat-promised-family stealer, PyPI ig-gox goxtools.shop encrypted-loader, and py2ops trojaned Python-2 REPL. The 24 RubyGems wgkit wave-2 crypto gems were split into their own carve-out.
npmPyPI
Affected packages27 packages · 51 versions
npm@coopeuch/button
1.999.999
npm@coopeuch/common
1.999.999
npm@coopeuch/components
1.999.999
npm@coopeuch/config
1.999.999
npm@coopeuch/core
1.999.999
npm@s4yhiitestpoc/r2-https
1.0.0
npm@s4yhiitestpoc/r3-https
1.0.0
npm@s4yhiitestpoc/scan-https-d
1.0.0
npmanother-very-long-name
1.0.11.1.02.0.02.0.1
npmcloudflare_module
1.0.01.0.13.0.099.0.1
npmcss-nesting-transform
1.0.0
npmdeposit-limit-fe
100.100.101100.100.102100.100.106
npmexodus-firestore-synchronize
0.0.1
npmhardhat-option
2.0.1
PyPIig-gox
1.0.0
npmkmf-vendor-pack
99.0.0
npmksp-app
100.100.100
npmksp-client-registry
100.100.100100.100.101
npmliferay-workspace-scripts
99.9.1
npmnested-lib
1.0.01.0.11.1.0
npmnitro-bundled-dep
99.0.12.0.11.1.0
npmnitro-cjs-requirer
0.0.11.0.01.1.02.0.03.0.099.0.1
npmpay-methods-kmf
100.100.100100.100.101100.100.102
PyPIpy2ops
2.2
npmreact-dropzone-v4
99.0.0
npmreact-paginate-v5
99.0.0
npmsome-very-long-package-name
1.0.02.0.02.0.13.0.099.0.1
multi-2026-10-12-ghsa-malware-sweepSource advisory
HighMalicious package12 Oct 2026
24 packages tracked
RubyGems wgkit wave 2 - 24 DeFi/MEV/wallet/NFT crypto gems at `0.9.1` drop a direct `/bin/sh` reverse shell to `45.138.12.177:8089` from `extconf.rb`, same operator as the 2026-10-05 wgkit cluster
OpenSSF/Amazon Inspector flagged 24 fresh malicious RubyGems on 2026-10-11 (ingested 2026-10-12) - all v0.9.1, all shipping an ext/<name>/extconf.rb base64-decoded Ruby payload that double-forks, sleeps 20-40 min, and pipes a TCP socket to /bin/sh against 45.138.12.177:8089. Same C2 IP, same evasion gates, same bitcoin_rpc_lite_native cover extension as the 2026-10-05 wgkit cluster - this is wave 2 of the same operator, now targeting DeFi/MEV/wallet-HD/NFT/TRC20/jetton verticals.
RubyGems
Affected packages24 packages · 24 versions
RubyGemsairdrop-eligibility-check
0.9.1
RubyGemsblock-explorer-api
0.9.1
RubyGemsbtc-fee-estimator
0.9.1
RubyGemscrypto-tax-export
0.9.1
RubyGemsdefi-yield-calculator
0.9.1
RubyGemsdex-router-abis
0.9.1
RubyGemserc20-approve-audit
0.9.1
RubyGemseth-gas-oracle
0.9.1
RubyGemsevm-tx-decoder
0.9.1
RubyGemsgas-refuel-bridge
0.9.1
RubyGemshd-wallet-generator
0.9.1
RubyGemsmev-sandwich-detect
0.9.1
RubyGemsmultichain-rpc
0.9.1
RubyGemsnft-metadata-resolver
0.9.1
RubyGemsperp-funding-rates
0.9.1
RubyGemsseed-phrase-validator
0.9.1
RubyGemssol-mint-utils
0.9.1
RubyGemsstaking-apr-fetcher
0.9.1
RubyGemston-jetton-tools
0.9.1
RubyGemstron-trc20-utils
0.9.1
RubyGemswallet-balance-scanner
0.9.1
RubyGemswallet-hd-derive
0.9.1
RubyGemsweb3-signer-kit
0.9.1
RubyGemsxrp-ledger-utils
0.9.1
rubygems-2026-10-12-wgkit-wave-2-crypto-defi-clusterSource advisory
HighMalicious package12 Oct 2026
1 package tracked
npm `hridoy-ultimate@8.0.0` ships Facebook email + password + TOTP 2FA secrets to `minhdong.site/api/v1/facebook/login_ios` and pins its `fca-unofficial` dep at `VangBanLaNhat/fca-unofficial#HEAD`
hridoy-ultimate@8.0.0 on npm advertises as an "unofficial Facebook chat client", but module/loginHelper.js posts the caller-supplied FB email, password, AND TOTP 2FA secret to minhdong.site/api/v1/facebook/login_ios, and the package pins its fca-unofficial dependency to a bare VangBanLaNhat/fca-unofficial GitHub repo (no SHA, no tag) so the attacker can swap install-time code at will. GHSA-8chm-j6jp-f4h3 / MAL-2026-17803, published 2026-10-11.
npm
Affected packages1 package · 1 version
npmhridoy-ultimate
8.0.0
npm-2026-10-12-hridoy-ultimate-fb-credential-stealerSource advisory
HighAdvisory sweep11 Oct 2026
6 packages tracked
GitHub Advisory malware sweep - 2026-10-11 (new `webreader` + `pafer` PyPI two-package pickle-execution RAT with disclosed `frjmzbjbhwvtdnsuodmu.supabase.co` + `api.npoint.io/40e32d283a9d97e59252/a` C2 and `.pth` persistence, where the main package hides the pickle and the mandatory dependency unpickles it; new `agentaix` PyPI 3-package first-publish RAT cluster (`agentaix`, `agent-vx`, `media-manager5`) with autorun persistence beaconing `googleforum.pythonanywhere.com`; and standalone `@library-wide/library-shell@99.9.1` npm dep-confusion sentinel flagged by OpenSSF Package Analysis for malicious-domain egress)
GHSA 2026-10-11: 6 fresh malware advisories (1 npm, 5 pypi) in 3 clusters. Headline: new webreader+pafer PyPI pickle-execution RAT - lure ships a pickle "config", its mandatory pafer dep unpickles it (RCE), drops a .pth autoloader, pulls stage 2 from a Supabase bucket via api.npoint.io. Plus a 3-package agentaix RAT cluster beaconing googleforum.pythonanywhere.com.
npmPyPI
Affected packages6 packages · 8 versions
npm@library-wide/library-shell
99.9.1
PyPIagent-vx
0.1.0
PyPIagentaix
0.1.00.2.0
PyPImedia-manager5
0.1.0
PyPIpafer
0.9.70.9.8
PyPIwebreader
2.3.8
multi-2026-10-11-ghsa-malware-sweepSource advisory
HighAdvisory sweep10 Oct 2026
47 packages tracked
GitHub Advisory malware sweep - 2026-10-10 (new `s4yhii` native-binary credential-stealer dep-confusion operator - 16 npm packages across `@galicia-toolkit-nestjs/*`, `@galicia-toolkit-nestjs-20/*`, `@galicia-toolkit-nestjs-20-lite/*`, `@galicia-toolkit-cheques-nc/*`, `@brick-v2/*` loading prebuilds/-/metrics.node ELF+PE that forks+setsid and exfils AWS/GitHub/npm/Azure DevOps/Actions tokens to oob.s4yhii.com/native; `@tunstock/remact-dom@19.2.0` react-dom typosquat with confirmed `tele.metry.orgin.net/api/v1/events` beacon; Baileys/libsignal lure continuation `@fer2809fl/baileys`+`cloud-baileys`+`arsya-baileys`+10-package `asepxyz*` cluster; crates.io `sharpnes` Telegram-Desktop + Chrome-extension/wallet infostealer (first cargo malware advisory this week); 3-package `kmf-*` + 2-package internal-frontend dep-confusion with oast.pro OAST; 5-package `@tvg-mar/*` dep-confusion probes; 2 Tailwind typosquats; plus pypi `ig-gox` Instagram abuse)
GHSA 2026-10-10: ~48 fresh malware advisories across 10 clusters (46 npm, 1 pypi, 1 crates). Headline items: new s4yhii operator native-binary credential-stealer dep-confusion cluster (16 packages across @galicia-toolkit-nestjs* and @brick-v2 scopes, prebuilds/metrics.node ELF+PE forks+setsid and exfils cloud/CI tokens to oob.s4yhii.com/native); first-seen crates.io infostealer sharpnes targeting Telegram Desktop sessions + Chrome extension/wallet data via Telegram Bot API; and @tunstock/remact-dom@19.2.0 react-dom typosquat with confirmed install-time beacon to tele.metry.orgin.net.
crates.ionpmPyPI
Affected packages47 packages · 120 versions
npm@aseppxyzz12/baileys
*
npm@brick-v2/brand
999.0.1999.0.2999.0.3
npm@brick-v2/core
999.0.1999.0.2
npm@brick-v2/form
999.0.1999.0.3
npm@brick-v2/icons
999.0.1999.0.2999.0.3
npm@brick-v2/table
999.0.1999.0.2999.0.3
npm@brick-v2/tour
999.0.1999.0.2999.0.3
npm@fer2809fl/baileys
1.4.51.4.61.4.71.4.97.0.0-rc137.0.07.0.17.0.27.0.47.0.57.0.67.0.7
npm@galicia-toolkit-cheques-nc/front
999.0.1999.0.2999.0.3
npm@galicia-toolkit-nestjs-20-lite/commons
999.0.1999.0.2999.0.3
npm@galicia-toolkit-nestjs-20-lite/paas
1.0.201.0.211.0.221.0.24
npm@galicia-toolkit-nestjs-20/archetype
999.0.1999.0.2
npm@galicia-toolkit-nestjs-20/commons
999.0.1999.0.2999.0.3
npm@galicia-toolkit-nestjs-20/paas
3.0.33.0.53.0.63.0.7999.0.1
npm@galicia-toolkit-nestjs/archetype
999.0.1999.0.5999.0.6
npm@galicia-toolkit-nestjs/commons
999.0.1999.0.6999.0.7999.0.83.0.1
npm@galicia-toolkit-nestjs/paas
999.0.3999.0.4999.0.5999.0.6
npm@galicia-toolkit-nestjs/swagger
999.0.1999.0.2999.0.3
npm@myorder-frontend-commons/analytics
3.0.010.0.099.0.0
npm@tunstock/remact-dom
19.2.0
npm@tvg-mar/promos-context
*
npm@tvg-mar/promos-gtm
*
npm@tvg-mar/storyblok-bridge
*
npm@tvg-mar/tvg-promos-atomic-ui
*
npm@tvg-mar/utils
*
npmarsya-baileys
9.2.09.2.19.2.29.2.39.2.4
npmasepxyz
*
npmasepxyz-baileys
*
npmasepxyz-eslint-config
*
npmasepxyz-signal
*
npmasepxyz12
*
npmasepxyznew
*
npmasepxyzxrazamodsnew-baileys
*
npmasepxyzz
*
npmcloud-baileys
1.0.01.0.11.0.21.0.31.0.41.0.51.1.01.1.11.1.21.1.31.1.331.1.341.1.351.1.361.1.371.1.381.1.391.1.401.1.411.1.42
npmhanncap
*
PyPIig-gox
1.0.0
npmkmf-bootstrap
100.100.102100.100.103
npmkmf-i18n
100.100.102
npmkmf-vendor-pack
99.0.0
npmpahinuy
*
npmpino-testkit
*
npmrazamodsxasepxyz
*
crates.iosharpnes
0.1.00.1.1
npmtailwind-animatecss-form
*
npmtailwind-animatecss-uniform
*
npmtest-account-portal-fe
100.100.102
multi-2026-10-10-ghsa-malware-sweepSource advisory
HighAdvisory sweep9 Oct 2026
50 packages tracked
GitHub Advisory malware sweep - 2026-10-09 (xwise8887 wave-2 continuation `wie888r`/`testrrrd`/`xblaxw`/`@wxwxtest/testrrrdd` to `185.158.107.175:8787/_ah/dc`; Wix dep-confusion cluster `wix-reg-poc-bypass` (webhook.site) + `css-overscroll-contain` (dxpoc.gt.tc, K8s SA-token theft + container escape); `pxnpm` nfjbill-operator npm proxy weaponization (same operator as 2026-08 `yakuza0`); 16-package `@bellaxchuu/*` + sibling Baileys-themed lure cluster; 6-package `@dransay/*` oast.site dep-confusion probes; `@bitwardne/*` 2-package Bitwarden typosquat; 5-package `@galicia-toolkit/*`+`@design-system-coopeuch/web` dep-confusion cluster; 9 dev-tooling typosquats; 2 pypi `kafka-roller`/`kafka-helmsman` 99.x dep-confusion probes; plus standalones)
GHSA 2026-10-09: 50 fresh malware advisories across 10 clusters (48 npm, 2 pypi). Headline items: continuation of the xwise8887 dep-confusion operator (wie888r/testrrrd/xblaxw/@wxwxtest/testrrrdd beaconing to the same 185.158.107.175:8787/_ah/dc endpoint as yesterday); Wix dep-confusion cluster including css-overscroll-contain which carries K8s service-account token theft and container-escape payload; and pxnpm npm proxy weaponization from the same operator (nfjbill.ren) as the 2026-08 yakuza0@2.23.40 malicious release.
npmPyPI
Affected packages50 packages · 91 versions
npm@bellaxchuu/bails
*
npm@bellaxchuu/crystalred
*
npm@bellaxchuu/familyxtrx
*
npm@bellaxchuu/flowblue
*
npm@bellaxchuu/libsignal-node
*
npm@bellaxchuu/overbugs
*
npm@bellaxchuu/privatebails
*
npm@bellaxchuu/skyblue
*
npm@bellaxchuu/velvetry
*
npm@bellaxchuu/xbailey
*
npm@bellaxchuu/xbails
*
npm@bellaxchuu/xtrxbails
*
npm@bellaxchuu/yarnbails
*
npm@bitwardne/cli
1.0.1
npm@bitwardne/jslib
1.1.0
npm@design-system-coopeuch/web
*
npm@dransay/db
99.0.0
npm@dransay/feature-flags
99.0.0
npm@dransay/logger
99.0.0
npm@dransay/phone-fix-test
99.0.0
npm@dransay/secrets
99.0.0
npm@galicia-toolkit/core
*
npm@galicia-toolkit/error-master
*
npm@galicia-toolkit/spa-build-config
*
npm@galicia-toolkit/tag-manager
*
npm@kxafunc/xbails
0.0.8
npm@wxwxtest/testrrrdd
0.0.10.1.01.0.01.0.12.0.02.0.13.0.0
npm@xayz/libsignal-node
*
npmbrat-generator
*
npmcentralogger
*
npmclickfix_npm_delivery
1.0.01.0.2
npmconnector-agent
*
npmcss-overscroll-contain
1.0.11.0.21.0.3
npmdom-utils-lite
*
npmdransay
99.0.0
PyPIkafka-helmsman
99.0.199.0.299.0.399.0.499.0.599.0.6
PyPIkafka-roller
99.0.099.0.199.0.299.0.399.0.499.0.599.0.6
npmmy-baileys
*
npmnode-env-resolve
*
npmnode-fetch-lite
*
npmnode-gyp-runtime
*
npmpxnpm
7.0.0-beta.67.0.0-beta.87.0.0
npmrevine
2.4.0
npmsystem-driver
*
npmtailwindcss-effects-kit
*
npmtailwindcss-ui-extensions
*
npmtestrrrd
0.0.11.0.01.1.02.0.02.0.13.0.099.0.1
npmwie888r
0.0.11.0.01.0.11.1.02.0.02.0.13.0.099.0.1
npmwix-reg-poc-bypass
1.0.0
npmxblaxw
1.0.01.0.11.1.02.0.02.0.13.0.099.0.1
multi-2026-10-09-ghsa-malware-sweepSource advisory
CriticalCompromise8 Oct 2026
1 package tracked
`tensorlake` npm maintainer-account compromise - malicious `0.5.144` published one patch above the real `0.5.143` latest and quarantined by npm security
On 2026-10-08 a malicious tensorlake@0.5.144 was published to npm, exactly one patch above the real TensorLake AI 0.5.143 latest. The upstream package is the official TensorLake AI document-ingestion / sandbox CLI/SDK with 100 legitimate releases across four maintainers; 0.5.144 was removed from the registry and GHSA-rqxj-g25x-4v9v flagged the version as malware. Pattern is a maintainer-account or publish-credential compromise.
npm
Affected packages1 package · 1 version
npmtensorlake
0.5.144
npm-2026-10-08-tensorlake-maintainer-compromiseSource advisory
HighAdvisory sweep8 Oct 2026
19 packages tracked
GitHub Advisory malware sweep - 2026-10-08 (named compromise carve-out: `tensorlake@0.5.144` maintainer-account compromise; plus npm `internallib_v788` wave-3 continuation of the `internallib_v<N>` RFC1918 reverse-shell operator; new npm `troubleshooting`/`browser-metrics-plugin.contrib` dep-confusion probe from `xwise8887` with HTTP beacon to `185.158.107.175:8787`; new npm `personio-pipeline-projen` dep-confusion probe from `reaperhackbot256f` with `oast.fun`+`oastify.com` DNS/HTTPS exfil; new npm `imgbundle`+`cdn-img-fetch` img-themed sleeper cluster from `malfexteste2`; npm `function-color@1.7.3`+`function-flag@1.7.3` 2025-08-04 backfilled low-version sideload sleepers caught today; 3-package npm `@ikyyjee/ikkysingle`/`ikyysingle`/`ikyysinggle` typosquat burst; 2 Amazon-Inspector namespace-holder takedowns `windows_registry_editor`/`store-webpack-config`; and 5 CWE-506 boilerplate takedowns)
GHSA 2026-10-08: 20 fresh malware advisories across 9 clusters (19 npm, 1 pypi carried forward from end-of-day yesterday). The dominant story is the tensorlake maintainer-account compromise (tensorlake@0.5.144 published one patch above the real 0.5.143 latest of the official TensorLake AI SDK - carved out as its own named incident). Also: wave-3 of the internallib_v<N> RFC1918 reverse-shell operator (internallib_v788); two new dep-confusion probes with confirmed network beacons; a 2-package img-themed sleeper cluster; two 2025-08-04 sideload sleepers (function-color/function-flag@1.7.3) caught today; and a 3-package @ikyyjee typosquat burst.
npm
Affected packages19 packages · 36 versions
npm@ikyyjee/ikkysingle
1.0.0
npm@ikyyjee/ikyysinggle
1.0.0
npm@ikyyjee/ikyysingle
1.0.0
npmbrowser-metrics-plugin.contrib
0.0.11.0.01.0.11.1.02.0.199.0.1
npmcdn-img-fetch
1.0.01.0.3
npmfunction-color
1.0.01.7.3
npmfunction-flag
1.7.3
npmimgbundle
1.0.01.0.11.0.2
npminternallib_v788
1.0.1
npmpersonio-pipeline-projen
1.171.31
npmrandom-certs
0.0.1
npmspf-analytics
1.0.0
npmstore-webpack-config
0.0.1-security1.0.0
npmtailwindcss-animatecss-keyframes
1.0.0
npmtensorlake
0.5.144
npmtroubleshooting
0.1.01.0.01.0.11.1.02.0.13.0.099.0.1
npmvectorizers
1.0.0
npmwaie-crash-baileys
1.0.0
npmwindows_registry_editor
0.0.1-security1.0.0
multi-2026-10-08-ghsa-malware-sweepSource advisory
HighAdvisory sweep7 Oct 2026
10 packages tracked
GitHub Advisory malware sweep - 2026-10-07 (wave-2 continuation of 2026-10-05 operators: npm `hardhat-init` pino-impersonator jsonspack sibling of yesterday`s `hardhat-roof`/`hardhat-plus`, npm `css-jptvix-polyfill` Wix dep-confusion recon + NEW `appsecc.com/js` reverse-shell second stage, npm `@pinecone-experience/messages@99.9.1` Pinecone-impersonator tarball-URL install-RCE from `ltidi` GCS bucket, 4-package npm `internallib_v23/30/86/875` RFC1918 `10.0.19.80` reverse-shell cluster, pypi `lore-cs` HackerOne-bugbounty dep-confusion probe, plus 2 CWE-506 boilerplate takedowns `@kxa/xbails` and `captchetat-angularv8`)
GHSA 2026-10-07: 10 fresh malware advisories across 6 clusters (1 pypi, 9 npm). Dominated by wave-2 continuations of yesterdays operator families - the jsonspack.com pino-impersonator (hardhat-init), the Wix dep-confusion operator now with an appsecc.com/js reverse-shell second stage (css-jptvix-polyfill), a new 4-package internallib_v<N> reverse-shell cluster at 10.0.19.80 RFC1918, and a Pinecone-impersonator tarball-URL install-RCE (@pinecone-experience/messages@99.9.1`).
npmPyPI
Affected packages10 packages · 12 versions
npm@kxa/xbails
1.0.0
npm@pinecone-experience/messages
99.9.1
npmcaptchetat-angularv8
1.0.0
npmcss-jptvix-polyfill
1.0.0
npmhardhat-init
2.21.0
npminternallib_v23
1.0.1
npminternallib_v30
1.0.1
npminternallib_v86
1.0.01.0.11.0.2
npminternallib_v875
1.0.1
PyPIlore-cs
1.0.0
multi-2026-10-07-ghsa-malware-sweepSource advisory
HighAdvisory sweep6 Oct 2026
6 packages tracked
GitHub Advisory malware sweep - 2026-10-06 (3 fresh advisories: pypi `zencleaner` Discord-webhook infostealer + Windows event-log wipe, npm `virgil-cli` runtime conversation/shell-output exfil to api.nm-streetwear.space, npm `dotenv-async` CWE-506 boilerplate takedown; plus 2026-10-05 backfill: 2 npm `@inpeek/odata*` dep-confusion probes at 99.99.99-102 sentinel versions, pypi `erc7730-hackathon@99.0.0` OpenSSF-flagged PROBABLY_PENTEST probe; 25-gem RubyGems Ethereum/crypto wgkit cluster from 2026-10-05 SPLIT OUT)
GHSA 2026-10-06: 3 fresh malware advisories (zencleaner pypi, virgil-cli + dotenv-async npm) plus 3 same-week backfill (@inpeek/odata* npm dep-confusion probes, erc7730-hackathon pypi pentest probe) across 5 clusters. The 25-gem RubyGems Ethereum/crypto wgkit cluster from 2026-10-05 is SPLIT OUT.
npmPyPI
Affected packages6 packages · 18 versions
npm@inpeek/odata
99.99.9999.99.10099.99.10199.99.102
npm@inpeek/odata-angular
99.99.9999.99.10099.99.10199.99.102
npmdotenv-async
1.0.0
PyPIerc7730-hackathon
99.0.0
npmvirgil-cli
0.1.00.1.10.1.20.1.30.1.4
PyPIzencleaner
1.0.01.0.31.0.3.1
multi-2026-10-06-ghsa-malware-sweepSource advisory
HighAdvisory sweep5 Oct 2026
52 packages tracked
GitHub Advisory malware sweep - 2026-10-05 (10 npm `hellscripter`/gitflic.ru typosquats of @angular/@babel/express/nuxt via preinstall `curl | node`; 26 npm Wix dep-confusion recon probes - CSS polyfill/a11y/tiny-*/rgx33-* names; 4 npm pino-impersonator jsonspack obfuscator trojans - hardhat-*/chai-as-testmode; 5 npm `4444.vbs` ChaCha20 PowerShell loader siblings - lite-matte/studiocode; plus `@kibt/www-nuxt-i18n` dep-confusion, `internallib_v275` reverse-shell, `monitoring-agent` express credential middleware, `promises-dotenv3` steganographic VBS dropper, `oleh-modal` wallet-connect phishing, `ultimate-websocket` tarball-URL RCE, `core-js-gnz` Python-payload postinstall; `anthropic-sdk` pypi typosquat SPLIT OUT)
GHSA 2026-10-05: 52 new npm advisories across 11 clusters. Cluster A - 10 hellscripter gitflic.ru typosquats of @angular/@babel/express/nuxt. Cluster B - 26 Wix dep-confusion recon probes. Cluster C - 4 pino-impersonator jsonspack obfuscator trojans. Cluster D - 5 4444.vbs ChaCha20 PowerShell loader siblings. Clusters E-K - 7 standalone operator one-offs. The pypi anthropic-sdk typosquat is SPLIT OUT as its own named incident.
npm
Affected packages52 packages · 59 versions
npm@angularr/cli
22.2.1
npm@angularr/core
1.0.67
npm@angularr/router
2.2.0
npm@angulra/cli
22.2.1
npm@angulra/core
1.0.67
npm@babell/core
8.0.6
npm@kibt/www-nuxt-i18n
0.0.10.1.01.0.01.0.11.1.02.0.13.0.099.0.1
npm@nagular/core
1.0.67
npm@nagular/router
2.2.1
npma11y-tabindex-manager
1.0.0
npmchai-as-testmode
1.4.7
npmcore-js-gnz
1.0.0
npmcss-a11y-contrast-utils
1.0.0
npmcss-anchor-pos-fallback
1.0.0
npmcss-env-function-shim
1.0.0
npmcss-field-sizing-polyfill
1.0.0
npmcss-gap-decorations-polyfill
1.0.0
npmcss-interop-observer-polyfill
1.0.0
npmcss-light-dark-polyfill
1.0.0
npmcss-logical-prop-shim
1.0.0
npmcss-reading-flow-polyfill
1.0.0
npmcss-relative-color-util
1.0.0
npmcss-scroll-anchor-polyfill
1.0.0
npmcss-scroll-state-polyfill
1.0.0
npmcss-snap-target-polyfill
1.0.0
npmcss-starting-style-polyfill
1.0.0
npmexpress-enhanced
5.2.2
npmexpress-fork
5.2.2
npmfocus-visible-polyfill-lite
1.0.0
npmhardhat-jsx
2.0.1
npmhardhat-plus
2.21.0
npmhardhat-roof
2.21.0
npminternallib_v275
1.0.3
npmlite-mater
1.0.0
npmlite-matte
1.0.0
npmlite-matterr
1.0.0
npmminimal-a11y-contrast-check
1.0.0
npmmonitoring-agent
1.0.1
npmoleh-modal
1.0.0
npmpopover-anchor-polyfill
1.0.0
npmpostcss-gap-fallback-util
1.0.0
npmpromises-dotenv3
1.0.0
npmrgx33-css-grid-utils
1.0.0
npmrgx33-flex-layout-core
1.0.0
npmstudiocode_eligibility
1.0.1
npmstudiocode_tools
1.0.1
npmtiny-css-token-parser
1.0.0
npmtiny-dom-focus-trap
1.0.0
npmtiny-focusgroup-helper
1.0.0
npmtiny-viewport-unit-calc
1.0.0
npmultimate-websocket
1.0.0
npmwcag-color-a11y-helpers
1.0.0
multi-2026-10-05-ghsa-malware-sweepSource advisory
HighTyposquat5 Oct 2026
1 package tracked
pip `anthropic-sdk` typosquat of Anthropic`s official `anthropic` SDK - credentials, env vars, AI chat files, SSH keys exfiltrated over HTTPS and DNS (OpenSSF campaign `2026-10-anthropic-sdk`, GHSA-xxp4-7566-29xj)
A single-version PyPI package anthropic-sdk@0.1.0 (GHSA-xxp4-7566-29xj) typosquats the official Anthropic Python SDK (real name: anthropic). On install it fingerprints the sandbox, downloads a remote stage, and exfiltrates credentials, env vars, AI chat files, and SSH keys over HTTPS and DNS. Classify typosquat + high.
PyPI
Affected packages1 package · 1 version
PyPIanthropic-sdk
0.1.0
pypi-2026-10-05-anthropic-sdk-typosquatSource advisory
HighMalicious package5 Oct 2026
25 packages tracked
RubyGems Ethereum/crypto wgkit cluster - 25 gems drop `/tmp/.w1/wg_install.sh` from 45.138.*.*
OpenSSF/Amazon Inspector flagged 25 RubyGems packages posing as Ethereum/Bitcoin/Lightning crypto utilities on 2026-10-05. All v1.0.0; extconf.rb base64/XOR-decodes a Ruby payload, double-forks, sleeps 20-40 min, then downloads wgkit.tar.gz from 45.138.*.*:8089-8092 and runs /tmp/.w1/wg_install.sh. Fires only on dev hosts with SSH/git/gem creds.
RubyGems
Affected packages25 packages · 25 versions
RubyGemsbitcoin-rpc-lite
1.0.0
RubyGemsblockchain-sync-utils
1.0.0
RubyGemsbtc-wallet-tools
1.0.0
RubyGemscoinmarket-utils
1.0.0
RubyGemscrylto-toolbox
1.0.0
RubyGemscryoto-toolbox
1.0.0
RubyGemscrypti-toolbox
1.0.0
RubyGemscrypto-key-utils
1.0.0
RubyGemscrypto-mnemonic-tools
1.0.0
RubyGemselectrum-protocol-lite
1.0.0
RubyGemseth-address-utils
1.0.0
RubyGemseth-keystore-utils
1.0.0
RubyGemsetherdum.rb
1.0.0
RubyGemsetheremu.rb
1.0.0
RubyGemsethereum-tx-helper
1.0.0
RubyGemshdkey-derive-helper
1.0.0
RubyGemskecack
1.0.0
RubyGemskeccka
1.0.0
RubyGemsligbtning-invoice
1.0.0
RubyGemslighthing-invoice
1.0.0
RubyGemsmerkle-proof-lite
1.0.0
RubyGemstron-rb
1.0.0
RubyGemstx-broadcast-utils
1.0.0
RubyGemsweb3-eth-utils
1.0.0
RubyGemsweb3-sign-helper
1.0.0
rubygems-2026-10-05-eth-crypto-wgkit-clusterSource advisory
HighAdvisory sweep4 Oct 2026
11 packages tracked
GitHub Advisory malware sweep - 2026-10-03 (late) + 2026-10-04 (10 pip `voxcpm*`/`voxel-tts`/`caoxiltts`/`infrabench` siblings of the `2026-10-voxeval` cryptominer campaign - continuation of yesterday`s `voxeval` NEW campaign entry, same OpenSSF campaign slug, CWE-506 "imitates real activity and instead deploys a coin miner"; 1 pip `echogen` generic install-time info-exfil pentest probe with no corpus siblings)
GHSA 2026-10-03 (late): 11 new pip advisories. Cluster A - 10 voxcpm*/voxel-tts/caoxiltts/infrabench siblings of yesterdays 2026-10-voxeval cryptominer campaign (yesterdays voxeval was sibling 1 of 12). Cluster B - 1 generic install-time info-exfil pentest probe echogen. No new npm, Go, or RubyGems advisories in this 24h window.
PyPI
Affected packages11 packages · 17 versions
PyPIcaoxiltts
0.1.00.1.1
PyPIechogen
1.0.0
PyPIinfrabench
0.1.00.1.10.2.0
PyPIvoxcpmeval
0.1.0
PyPIvoxcpmintel
0.1.0
PyPIvoxcpmkit
0.1.0
PyPIvoxcpmruntime
0.1.0
PyPIvoxcpmtts3
0.1.00.1.10.1.2
PyPIvoxcpmui3
0.1.0
PyPIvoxcpmui4
0.2.0
PyPIvoxel-tts
0.5.00.5.1
multi-2026-10-04-ghsa-malware-sweepSource advisory
HighAdvisory sweep3 Oct 2026
24 packages tracked
GitHub Advisory malware sweep - 2026-10-02 (late) + 2026-10-03 (npm `amel10` AWS API Gateway dep-confusion mass push targeting Amazon/Alexa internal names - 6 confirmed packages sharing C2 `s85r5k14qk.execute-api.us-east-1.amazonaws.com`: `alexa-cybertron-team-code-review-agent`, `okra-cloud-cdk`, `ai-workshop-radio-app`, `ai-workshop-maa15-radio`, `ai-workshop-radio-lambda`, `niksinnkatalapp`; 5 npm PhantomSub Baileys silent WhatsApp follow siblings `mikuhostt-baileys`, `luoxy-baileys`, `@zanta/baileys`, `wailib`, `prastzy`; pip `dedh-devops-automation` AWS Lambda + Secrets Manager credential theft `spo365-graph` family continuation; pip `voxeval` cryptominer NEW campaign `2026-10-voxeval`; 2 Go module `Graphalgo` campaign expansion `gogets.dev/btreex`, `gocommunity.io/orderedbtree`; npm `@bluewin/utils` Burp-Collaborator Swisscom-scope dep-confusion probe by `securityresearch1`; npm `@smwebserver/static@99.9.1` sentinel-version malicious-domain beacon; 9 npm CWE-506 boilerplate takedowns `turbo-ws`, `hardhat-zet`, `ui-base-colors`, `translate-base-font`, `ui.dist.min.js`, `@woodpecker-web-shared/components`, `bnppf-flag-icons`)
GHSA 2026-10-02 (late) + 2026-10-03: ~26 new advisories. Confirmed payloads: 6-package amel10 npm dep-confusion mass push against Amazon/Alexa internal names (shared C2 s85r5k14qk.execute-api.us-east-1.amazonaws.com); 5 PhantomSub Baileys siblings (query ID 7871414976211147); pip dedh-devops-automation AWS Lambda credential theft (spo365-graph family day 2); pip voxeval cryptominer; 2 Go modules in the Graphalgo campaign.
GonpmPyPI
Affected packages24 packages · 37 versions
npm@bluewin/utils
1.0.0
npm@smwebserver/static
99.9.1
npm@woodpecker-web-shared/components
1.0.0
npm@zanta/baileys
1.0.01.0.1
npmai-workshop-maa15-radio
100.0.0
npmai-workshop-radio-app
100.0.0
npmai-workshop-radio-lambda
100.0.0
npmalexa-cybertron-team-code-review-agent
100.0.0
npmbnppf-flag-icons
1.0.0
PyPIdedh-devops-automation
0.0.15.0.05.6.05.6.15.6.9995.8.05.8.15.9.0
Gogocommunity.io/orderedbtree
Gogogets.dev/btreex
npmhardhat-zet
1.0.0
npmluoxy-baileys
7.1.17.1.27.1.3
npmmikuhostt-baileys
1.0.01.0.11.0.2
npmniksinnkatalapp
100.0.0
npmokra-cloud-cdk
100.0.0
npmprastzy
1.0.0
npmtranslate-base-font
1.0.0
npmturbo-ws
1.0.0
npmui-base-colors
1.0.0
npmui.dist.min.js
1.0.0
PyPIvoxeval
0.4.20.4.30.4.40.4.5
npmwailib
1.0.0
multi-2026-10-03-ghsa-malware-sweepSource advisory
HighAdvisory sweep2 Oct 2026
25 packages tracked
GitHub Advisory malware sweep - 2026-10-01 (late) + 2026-10-02 (npm Baileys silent WhatsApp follow mass batch, 15 siblings sharing query ID `7871414976211147`: `@xayz/baileys`, `xvinleys`, `yonzoffic-baileys`, `xzbails`, `xzvexpzcbailey`, `yonzofficial`, `kiyoramarkets`, `kasabaileys`, `my-baileys`, `lilys-baileys`, `noxleyss`, `syncxbails`, `whalibmob`, `ishumdz-bail`, `eliteprotech-baileys`; pip `spo365-graph` NEW campaign - AWS Lambda deploy + AWS Secrets Manager credential theft; pip `friendly-tools` Snowflake credential-theft `friendly-greeting-tools` family continuation; pip `shortneer` Chrome-extension crypto-wallet + Telegram infostealer (`sherpy` campaign continuation); npm `future-scripts` browser DoS `boom()` time-bomb detonating 2026-10-10; npm `online-header@99.0.0` sentinel-version malicious-domain beacon; 5 npm CWE-506 boilerplate takedowns `illusion-datalab`, `homestack-cheer`, `kartykgithub-ph-f`, `kartykgithub-ph-e`, `kartykgithub-ph-b`)
GHSA 2026-10-01 (late) + 2026-10-02: 26 new advisories (23 npm + 3 pip). Confirmed payloads: 15 npm Baileys silent-WhatsApp-follow siblings (jexkcode/noverojs family); pip spo365-graph AWS Lambda + Secrets Manager credential theft (new); pip friendly-tools Snowflake exfil; pip shortneer Chrome-wallet stealer; npm future-scripts browser DoS time-bomb set for 2026-10-10.
npmPyPI
Affected packages25 packages · 95 versions
npm@xayz/baileys
3.0.04.0.05.0.0>=6.0.0 <=6.0.75>=6.1.0 <=6.1.8
npmeliteprotech-baileys
1.1.01.1.11.1.2
PyPIfriendly-tools
0.10.2
npmfuture-scripts
0.0.20.0.3
npmhomestack-cheer
1.0.01.0.11.0.21.1.01.1.11.1.21.1.31.1.51.1.61.1.71.1.81.1.9
npmillusion-datalab
1.1.11.1.21.1.31.1.41.1.5
npmishumdz-bail
1.0.11.0.21.0.31.0.41.0.61.0.71.0.81.0.91.0.101.0.111.0.131.0.141.0.151.0.16
npmkartykgithub-ph-b
0.0.1-security0.0.1-security.01.0.0
npmkartykgithub-ph-e
1.0.0
npmkartykgithub-ph-f
1.0.0
npmkasabaileys
0.3.151.0.01.0.11.0.2
npmkiyoramarkets
8.0.16
npmlilys-baileys
1.3.21.3.3
npmmy-baileys
1.0.11.0.21.0.31.0.41.0.5
npmnoxleyss
1.0.01.1.01.1.11.1.21.1.31.1.41.1.51.1.61.1.71.1.81.1.91.1.101.1.11
npmonline-header
99.0.0
PyPIshortneer
0.1.0
PyPIspo365-graph
1.0.01.1.01.1.11.1.2
npmsyncxbails
1.0.01.0.1
npmwhalibmob
>=5.24.0 <=5.33.5
npmxvinleys
1.0.0
npmxzbails
0.0.30.0.40.0.5
npmxzvexpzcbailey
1.0.02.0.02.1.02.5.0
npmyonzoffic-baileys
8.6.90
npmyonzofficial
2.1.02.1.12.1.22.1.3
multi-2026-10-02-ghsa-malware-sweepSource advisory
HighAdvisory sweep1 Oct 2026
25 packages tracked
GitHub Advisory malware sweep - 2026-09-30 (late) + 2026-10-01 (pip `beautifytext` import-time RAT; pip `friendly-greeting-tools` Snowflake credential theft to attacker-controlled S3; npm `noverojs` Baileys silent WhatsApp follow family continuation; npm `com.epi.e2e_test` dep-confusion reconnaissance beacon to `meta.brs.cx`; 7 npm Epic Games Store scope dep-confusion probes (`set-egs-backend`, `qa-egs-rollback`, `generator-epic-react`, `player-support-tools-ui`, `mod-manager`, `ssp-config-management-tool`, `store-service-worker`); 6 npm `mms-*` scope dep-confusion probes; 8 npm CWE-506 boilerplate bug-bounty researcher probes)
GHSA 2026-09-30 (late) + 2026-10-01: 26 new advisories (24 npm + 2 pip). Confirmed payloads: pip beautifytext import-time RAT; pip friendly-greeting-tools Snowflake credential theft to s3://pkusinski-external/; npm noverojs Baileys silent-WhatsApp-follow family continuation. Remainder are dep-confusion scope probes (Epic Games Store, mms-*) and CWE-506 boilerplate.
npmPyPI
Affected packages25 packages · 51 versions
PyPIbeautifytext
1.0.31.0.41.0.7
npmcom.epi.e2e_test
1.2.2
npmddok-modal
1.0.0
PyPIfriendly-greeting-tools
0.1.00.1.10.20.30.3.10.3.20.3.30.3.40.3.50.3.60.3.7
npmgenerator-epic-react
0.0.1-security1.0.0
npmmms-ref-client
0.0.1-security1.0.0
npmmms-ref-dedserver
0.0.1-security1.0.0
npmmms-service
0.0.1-security1.0.0
npmmms-simulation
0.0.1-security1.0.0
npmmms-thin-client
0.0.1-security1.0.0
npmmms-tools
0.0.1-security1.0.0
npmmod-manager
0.0.1-security1.0.0
npmmy-ctf-helper-script-9921
*
npmnoverojs
1.0.11.0.4
npmpf23727
*
npmpf25133
*
npmpf25262
*
npmpflag14570
*
npmpflag29424
*
npmplayer-support-tools-ui
0.0.1-security1.0.0
npmpulse-pwn-9f3a2
*
npmqa-egs-rollback
0.0.1-security1.0.0
npmset-egs-backend
0.0.1-security1.0.0
npmssp-config-management-tool
0.0.1-security1.0.0
npmstore-service-worker
0.0.1-security1.0.0
multi-2026-10-01-ghsa-malware-sweepSource advisory
HighAdvisory sweep30 Sept 2026
26 packages tracked
GitHub Advisory malware sweep - 2026-09-29 (late) + 2026-09-30 (npm `tailwind-forms-kit` EtherHiding on Ethereum mainnet with wallet `0xa322E5...63e1a`; npm `web-vitals-polyfill-core-v1` chinazhangsan service-worker hijack via DoH + Sepolia-adjacent PWA_ROUTER; pip `bfox-build-utils` GitHub-Actions workflow-injection worm; npm `dotenv-precheck` Telegram wallet-mnemonic infostealer; npm `fabric-loader-core` install-time `vm.runInContext` RCE; npm `mfahelper` unpinned-GitHub-tarball RCE; npm `get-power` self-deleting AES payload typosquatting `get-proto`; npm `jexkcode` Baileys silent WhatsApp newsletter-follow; npm `zeal-utils`/`zeal-util-hooks` aveliscare canary continuation; pip `queeuees` .py-comment vandalism; 15 npm CWE-506 boilerplate takedowns)
GHSA 2026-09-29 (late) + 2026-09-30: 27 new advisories - 25 npm + 2 pip. Cluster A is a fresh EtherHiding sample (tailwind-forms-kit, ETH wallet 0xa322E5...63e1a) on Ethereum mainnet RPCs. Cluster B extends the chinazhangsan.ccwu.cc service-worker hijack family (web-vitals-polyfill-core-v1) using DoH lookups. Cluster C is a pip GitHub-Actions worm (bfox-build-utils) that self-installs .github/workflows/ci-health-check.yml. Clusters D-J are single-package droppers, stealers, and canaries; Cluster K is 15 CWE-506 boilerplate takedowns with no analysis.
npmPyPI
Affected packages26 packages · 34 versions
npm@cat-gen/materia
*
npm@cat-gen/material
*
npm@firelordzuka/pulse-poc
*
npm@larocas-bbresearch/tombstone-probe-odvz5y
0.0.1
npm@larocas-bbresearch/tp-probe-e29834ce
1.0.01.0.1
npm@redman89405/my-module
*
npm@zaka13/thing
1.0.0
npmanalytics-widget
*
PyPIbfox-build-utils
1.0.997
npmbuilding-build
*
npmdotenv-precheck
1.0.01.1.01.1.1
npmfabric-loader-core
1.0.0
npmfeed-widget-helper
*
npmget-power
1.0.3
npmiban-validator-js
*
npmjexkcode
1.0.11.1.01.1.11.1.21.1.31.1.4
npmlink-age-great
*
npmlink-status-page
*
npmmfahelper
1.0.0
PyPIqueeuees
0.0.1
npmradio-player-theme
*
npmragacateslikodi
*
npmtailwind-forms-kit
0.5.1
npmweb-vitals-polyfill-core-v1
1.0.0
npmzeal-util-hooks
0.0.0
npmzeal-utils
0.0.0
multi-2026-09-30-ghsa-malware-sweepSource advisory
HighAdvisory sweep29 Sept 2026
25 packages tracked
GitHub Advisory malware sweep - 2026-09-28 (late) + 2026-09-29 (donutautosellsrc campaign extends to pip `aseitylab` day 3; npm `hardhat-*` pino-impersonator Ethereum-dev lure; npm `nebula-*` Windows `.kntrat` RAT dropper family; npm `fabric-*` Minecraft credential stealer via Discord webhook; npm `chalk-figlet` family Windows RuntimeBroker.exe dropper; npm `dotenv`-lookalike JPEG-EXIF steganography → PowerShell chain; npm `simple-date-formatter-new-12` OAST SSRF probe)
GHSA 2026-09-28 (late) + 2026-09-29: 26 new advisories - 25 npm + 1 pip. Cluster A extends the donutautosellsrc Polygon-blockchain-C2 pip campaign to aseitylab (day 3, 6 packages now under wallet 0x9c0a507300fd902787bb193d80fca5ce6e1bff9a). Clusters B-F are four distinct npm operators active in the window: hardhat pino-impersonator, nebula-* Windows .kntrat RAT, fabric-* Minecraft-credential Discord-webhook stealer, chalk-figlet RuntimeBroker.exe dropper. Cluster K is 4 npm CWE-506 boilerplate takedowns with no analysis.
npmPyPI
Affected packages25 packages · 27 versions
npm@digift/cli
*
PyPIaseitylab
0.1.00.1.1
npmchalk-figlet
1.2.0
npmdotenv-native
1.0.1
npmfabric-asset-pipeline
1.0.01.0.1
npmfabric-native-loader
1.0.0
npmfabric-render-bridge
1.0.0
npmfiglet-chalk-render
1.2.1
npmhardhat-cap
*
npmhardhat-lock
2.21.0
npmhardhat-zet
2.0.1
npmimg-to-native
*
npmitems-validator
1.0.5
npmllm-nebula
1.0.0
npmmini-hardhat
1.1.4
npmnative-env
1.0.1
npmnative-runner
*
npmnebula-llm
1.0.0
npmnebula-sdk
*
npmnebulaai-sdk
1.0.0
npmnebulajs-api
*
npmrai6jaisahthaghee5ou-loader-package
1.0.0
npmsimple-date-formatter-new-12
1.0.0
npmtest-agency-assignment
1.0.2
npmvite-plugin-crypto
*
multi-2026-09-29-ghsa-malware-sweepSource advisory
HighAdvisory sweep28 Sept 2026
23 packages tracked
GitHub Advisory malware sweep - 2026-09-27 (late) + 2026-09-28 (donutautosellsrc campaign extends to pip `aseity`, `coinscan`, `donutpromotion`, `claudedashbord`; pip `scrapetools2` novel IPFS-gateway auto-updater; pip `caracas4check` targeted setup.py remote-EXE; pip `metrio`/`metrics-sdk` sentinel-version pentest recon; 15-package npm CWE-506 boilerplate batch with no published analysis)
GHSA 2026-09-27 (late) + 2026-09-28: 23 new advisories - 8 pip + 15 npm. Cluster A extends yesterdays donutautosellsrc Polygon-blockchain-C2 campaign to 4 more pip packages sharing the same payload hash and attacker wallet. Cluster B scrapetools2` uses IPFS gateways for auto-update payload distribution. Cluster E is a 15-package npm CWE-506 boilerplate batch with no published analysis - likely a mix of typosquats, dep-confusion probes, and unknown-classification takedowns.
npmPyPI
Affected packages23 packages · 34 versions
npm@consts/links
*
npm@digi-kernel/digi-kernel-constrains
*
npmapi-typings
*
PyPIaseity
0.1.0
npmcapacitor-plugin-service-worker
*
PyPIcaracas4check
1.1.11.1.2
PyPIclaudedashbord
0.1.00.1.10.1.20.1.3
PyPIcoinscan
0.1.0
npmdiscord-mfa-solver
*
npmdiscord-players
*
npmdiscord-resolvers
*
PyPIdonutpromotion
0.1.0
PyPImetrics-sdk
999.0.01000.0.01001.0.0
PyPImetrio
999.0.01000.0.01001.0.0
npmopen-item-validator
*
npmriot-private
*
PyPIscrapetools2
0.2.00.2.11.2.01.2.1
npmseek-pass
*
npmspotify-url-resolvers
*
npmswiper_angular
*
npmtanksync
*
npmultra-ws
*
npmvinzzsync-wacli
*
multi-2026-09-28-ghsa-malware-sweepSource advisory
HighAdvisory sweep27 Sept 2026
4 packages tracked
GitHub Advisory malware sweep - 2026-09-26 (late) + 2026-09-27 (pip `donutautosellsrc` steganographic infostealer + Polygon-blockchain C2 resolver; pip `requests-cache-utils` `setup.py` remote-EXE downloader/browser-data infostealer; npm `chai-as-relay` `pino` impersonator with 4.4MB obfuscated IIFE loaded on import; npm `cma-self-hosted-sandbox-cf` preinstall `/etc/passwd`+`/etc/hosts`+DNS recon exfil to `oastify.com` OOB. No fresh `ltidi.storage.googleapis.com` or `algamil7x` variants in the window)
GHSA 2026-09-26 (late) + 2026-09-27: 4 new advisories - 2 pip + 2 npm not caught by yesterdays sweep. Worst confirmed items are pip donutautosellsrc (steganographic loader + Polygon-blockchain-resolved C2 + native infostealer) and pip requests-cache-utils (setup.py-installed remote EXE + browser data exfil). npm chai-as-relay impersonates pino and loads a 4.4MB obfuscated IIFE on import. npm cma-self-hosted-sandbox-cf preinstall harvests /etc/passwd+/etc/hosts`+DNS config to a Burp Collaborator OOB host.
npmPyPI
Affected packages4 packages · 6 versions
npmchai-as-relay
1.2.1
npmcma-self-hosted-sandbox-cf
1.0.0
PyPIdonutautosellsrc
0.3.70.3.80.3.9
PyPIrequests-cache-utils
1.0.0
multi-2026-09-27-ghsa-malware-sweepSource advisory
HighAdvisory sweep26 Sept 2026
8 packages tracked
GitHub Advisory malware sweep - 2026-09-25 (late) + 2026-09-26 (pip `sherpy` Chrome-wallet + Telegram infostealer; pip `reqparser` crypto-wallet + browser + keylogger + persistence loader; pip `tego-managed-agents-test` `setup.py` env-var exfil; npm `@airbnb-extended/typescript-config` `@airbnb`-typosquat with external `ltidi.storage.googleapis.com` tarball loader; npm `shoplist-app` + `@digift/cli` dep-confusion / Pipedream beacon probes; npm `@nubjs/types` + `app-sca-info-banking` CWE-506 boilerplate takedowns. No fresh `oob.algamil7x.xyz` day-8 additions caught in the window)
GHSA 2026-09-25 (late) + 2026-09-26: ~8 new advisories - 4 pip + 4 npm not caught by yesterdays sweep. Worst confirmed items are pip sherpy (Chrome-extension crypto-wallet + Telegram infostealer) and pip reqparser (crypto-wallet + browser + keylogger + persistence). npm @airbnb-extended/typescript-config typosquats @airbnb/typescript-config and pulls an external tarball from a Google Cloud Storage bucket. No fresh algamil7x` day-8 entries appeared in the window.
npmPyPI
Affected packages8 packages · 11 versions
npm@airbnb-extended/typescript-config
99.9.1
npm@digift/cli
99.99.100
npm@nubjs/types
0.9.4
npmapp-sca-info-banking
0.0.24
PyPIreqparser
1.0.01.0.1
PyPIsherpy
0.1.00.1.1
npmshoplist-app
99.99.99993.99.99
PyPItego-managed-agents-test
0.1.0
multi-2026-09-26-ghsa-malware-sweepSource advisory
HighAdvisory sweep25 Sept 2026
24 packages tracked
GitHub Advisory malware sweep - 2026-09-24 (late) + 2026-09-25 (npm `@nf-addons/am-global-header` + `@osl-design/react` `oob.algamil7x.xyz` DNS-OOB day-7 late-adds missed by yesterday`s sweep; `n8n-nodes-moonlet-helpers`/`-utils`/`n8n-nodes-flowstats` `mkicom.com` fake `.well-known/pki-validation/` dropper family with `104.21.3.16` bare-IP + magic-key RCE; `secure-env3` + `better-dotenv3` JPEG-APP13/APP14 hidden VBS/PowerShell Windows dotenv typosquat dropper family; `agency-test-exercise` + `agency-testts` `wscript.exe 4444.vbs` AES+ChaCha20 Windows dropper; `chromatitle` + `chromatitle-js` ANSI-color-lure obfuscated fetch-and-execute; `wallet-connect-adapter` Windows XOR-encrypted Python dropper; `simple-date-formatter-new-11/13/14/15` continuation of the `124.221.154.135` SSH-key + `oast.fun` campaign (13/14/15 new C2 hosts); `aliftech-ui` + `@birbalo/aliftech-ui` shared-`webhook.site` dep-confusion siblings; `@alphaspace/core` Yahoo-internal dep-confusion Pipedream + istio/yahoo DNS recon; `eslint-config-compact-base` AWS API Gateway CI recon; `c2-client` postinstall command channel; pip `prosocks` proxy-network hijack campaign + `my-private-pkg` + `vercel-runtime-python` Vercel dep-confusion pentests)
GHSA 2026-09-24 (late) + 2026-09-25: ~24 new npm advisories + 3 pip. Two oob.algamil7x.xyz day-7 late-adds yesterdays sweep missed (@nf-addons/am-global-header, @osl-design/react). New n8n-nodes-* mkicom.com dropper family. secure-env3/better-dotenv3 JPEG-hidden Windows dropper family. simple-date-formatter-new-11/13/14/15 extend the 124.221.154.135 campaign. @alphaspace/core` targets Yahoo internal builds.
npmPyPI
Affected packages24 packages · 58 versions
npm@alphaspace/core
99.0.099.0.199.0.2
npm@birbalo/aliftech-ui
99.9.9
npm@nf-addons/am-global-header
9.9.10
npm@osl-design/react
9.9.10
npmagency-test-exercise
1.0.2
npmagency-testts
1.0.0
npmaliftech-ui
99.9.9
npmbetter-dotenv3
1.0.1
npmc2-client
1.0.0
npmchromatitle
1.0.0
npmchromatitle-js
1.0.0
npmeslint-config-compact-base
1.0.0
PyPImy-private-pkg
99.1.1
npmn8n-nodes-flowstats
1.0.0
npmn8n-nodes-moonlet-helpers
1.0.01.0.4
npmn8n-nodes-moonlet-utils
1.0.0
PyPIprosocks
1.0.01.0.11.0.21.0.31.0.41.0.51.0.61.0.71.0.81.0.91.0.131.0.141.0.151.0.161.0.171.0.181.0.191.0.201.0.211.0.221.0.231.0.251.0.261.0.271.0.281.0.291.0.301.0.311.0.32
npmsecure-env3
1.0.1
npmsimple-date-formatter-new-11
1.0.0
npmsimple-date-formatter-new-13
1.0.0
npmsimple-date-formatter-new-14
1.0.0
npmsimple-date-formatter-new-15
1.0.0
PyPIvercel-runtime-python
0.1.099.99.99100.99.99100.100.99
npmwallet-connect-adapter
1.4.2
multi-2026-09-25-ghsa-malware-sweepSource advisory
HighAdvisory sweep24 Sept 2026
20 packages tracked
GitHub Advisory malware sweep - 2026-09-23 (late) + 2026-09-24 (npm `@baanx/*` + `@insiderintelligence/componentlibrary` `oob.algamil7x.xyz` DNS-OOB day 7; `@rixxcodex/baileys` + `sea-baileys` Baileys-wave WhatsApp session-hijack extension; `pino-testkit` chai/pino/jsonspack family Function-constructor RCE; `vite-dev-launcher` `~/.gradle/caches/` sibling of yesterday`s `@vitemirrorte` mall4cloud-react RAT; pip `memoryos` maintainer-compromise infostealer + npm `@memtensor/memos-cloud-openclaw-plugin` openclaw plugin; `internallib_v657` + `internallib_v463` RFC1918 `10.0.73.186:443` curl-pipe reverse shell (new subnet vs v497/v550 `10.0.5.109`); `godzz`/`godzzz` Cloudflare-Worker + Groq API key exfil siblings; `com.apple.unityplugin.storekit` + `simplenewnpmpackage` shared `dapnhid534ch...oast.fun` recon beacons; `a-onesite`, `event-hunter`, `helpersutils-dev-tools` beacon-only probes; `hachutis` undeclared-binary trycloudflare tunnel; rubygems `wurl_show_data`)
GHSA 2026-09-23 (late) + 2026-09-24: ~25 new npm advisories + 1 pip + 1 rubygems. Day 7 of the oob.algamil7x.xyz DNS-OOB operator adds @baanx/common, @baanx/domain, and @insiderintelligence/componentlibrary. vite-dev-launcher@2.9.4 is a mall4cloud-react-RAT sibling of yesterdays @vitemirrorte. internallib_v657/v463` reverse shell to a new RFC1918 subnet.
npmPyPIRubyGems
Affected packages20 packages · 26 versions
npm@baanx/common
9.9.11
npm@baanx/domain
9.9.11
npm@insiderintelligence/componentlibrary
9.9.10
npm@memtensor/memos-cloud-openclaw-plugin
0.1.210.1.230.1.25
npm@rixxcodex/baileys
8.0.158.0.168.1.08.2.0
npma-onesite
99.9.9
npmcom.apple.unityplugin.storekit
1.0.2
npmevent-hunter
1.0.0
npmgodzz
1.0.0
npmgodzzz
1.0.0
npmhachutis
1.0.01.0.6
npmhelpersutils-dev-tools
1.0.11
npminternallib_v463
1.0.2
npminternallib_v657
1.0.1
PyPImemoryos
2.0.34
npmpino-testkit
10.4.5
npmsea-baileys
1.0.2
npmsimplenewnpmpackage
1.0.2
npmvite-dev-launcher
2.9.4
RubyGemswurl_show_data
3.1.42.99
multi-2026-09-24-ghsa-malware-sweepSource advisory
HighAdvisory sweep23 Sept 2026
75 packages tracked
GitHub Advisory malware sweep - 2026-09-22 (late) + 2026-09-23 (npm `@tvg-mar/*` + `@user-services/web-components` `oob.algamil7x.xyz` DNS-OOB day 6 at `9.9.10`; `hardhat-hold` axios-loader RCE typosquat wave extension; `chai-as-viem` + `chai-logger` chai/pino/jsonspack axios-loader family extension; `envforge/envparse` 6-package coordinated typosquat batch; `@wizloft/harness-*` 15-package Aug-Sep buildup batch quarantine; `oracle-redis` + `turbo-ws` transitive-dependency trojans; `@vitemirrorte/element-plus-vite-cli` `npmjs.it.com` mall4cloud-react-targeted RAT; `@gsutevil/hta-stage` Windows HTA/WSH MSI loader; org-internal dep-confusion cluster (`@tesla-insurance`, `devplatform-sdk`, `uolcs-host-uol-anuncios-fe`, `bnpl-blocks-*`, `bigops-*`, `agora402-payment-utils`, `ubiquiti-agents-link-mcp`, `internallib_v497/550` at RFC1918 `10.0.5.109`, `cisco-github-simple` oastify.com); pip `auclean` cloud-credential infostealer + `snap-queue`/`crypto-trader-py`/`poly-check-b` silent-install campaign + `kerokwis` pypi+rubygems telemetry; pentest `cloushaar-poc-exfil-91827` pip; ~60 random-name bulk quarantines)
GHSA 2026-09-22 (late) + 2026-09-23: ~120 new npm advisories + 5 pip + 2 rubygems. Day 6 of the oob.algamil7x.xyz DNS-OOB operator adds @tvg-mar/* and @user-services/web-components at 9.9.10. @vitemirrorte/element-plus-vite-cli@2.9.1 is a full Node RAT with npmjs.it.com C2 targeting mall4cloud-react. pip auclean steals cloud credentials.
npmPyPIRubyGems
Affected packages76 packages · 122 versions
npm@gsutevil/hta-stage
1.62.0
npm@httttt/mcp-demo
1.0.0
npm@httttt/mcp-npx-fetch-1
1.0.0
npm@mikudeveloper/baileys
1.0.0
npm@mr-supun-fernando/supunmd-bail
1.0.0
npm@tesla-insurance/vinless-quote
1.0.0
npm@test1230504/probe-7f3k2m-utils
1.0.0
npm@test1230504/string-format-helper
1.0.0
npm@test1230504/test-publish-verify
1.0.0
npm@tvg-mar/promos-context
9.9.10
npm@tvg-mar/promos-gtm
9.9.10
npm@tvg-mar/storyblok-bridge
9.9.10
npm@tvg-mar/tvg-promos-atomic-ui
9.9.10
npm@tvg-mar/utils
9.9.10
npm@user-services/web-components
9.9.10
npm@vitemirrorte/element-plus-vite-cli
2.9.1
npm@wizloft/harness
0.1.0-alpha.20.1.0-alpha.30.1.0-alpha.40.1.1-alpha.30.1.2-alpha.10.1.2-alpha.30.2.0
npm@wizloft/harness-authority
0.1.0-alpha.20.1.0-alpha.30.1.0-alpha.4
npm@wizloft/harness-cli-adapter
0.1.0-alpha.20.1.0-alpha.30.1.0-alpha.40.1.2-alpha.10.1.2-alpha.3
npm@wizloft/harness-commands
0.1.0-alpha.20.1.0-alpha.30.1.0-alpha.4
npm@wizloft/harness-context
0.1.0-alpha.20.1.0-alpha.30.1.0-alpha.4
npm@wizloft/harness-evidence
0.1.0-alpha.20.1.0-alpha.30.1.0-alpha.4
npm@wizloft/harness-file-providers
0.1.0-alpha.20.1.0-alpha.30.1.0-alpha.4
npm@wizloft/harness-kernel
0.1.0-alpha.20.1.0-alpha.30.1.0-alpha.4
npm@wizloft/harness-memory
0.1.0-alpha.20.1.0-alpha.30.1.0-alpha.4
npm@wizloft/harness-plugin-file-events
0.1.0-alpha.20.1.0-alpha.30.1.0-alpha.4
npm@wizloft/harness-plugin-file-memory
0.1.0-alpha.20.1.0-alpha.30.1.0-alpha.4
npm@wizloft/harness-plugin-memory-context
0.1.0-alpha.20.1.0-alpha.30.1.0-alpha.4
npm@wizloft/harness-plugin-repository-files
0.1.0-alpha.20.1.0-alpha.30.1.0-alpha.4
npm@wizloft/harness-project
0.1.0-alpha.20.1.0-alpha.30.1.0-alpha.4
npm@wizloft/harness-validation
0.1.0-alpha.20.1.0-alpha.30.1.0-alpha.4
npmaction-slack-message-root
1.0.0
npmagora402-payment-utils
1.0.0
npmanhn-cli
1.0.0
PyPIauclean
0.4.20.4.30.4.4
npmbetter-envforge
1.0.0
npmbigops-auth-interceptor
1.0.0
npmbigops-products-timeline
1.0.0
npmbnpl-blocks-atom-bnpl-search-input
1.0.0
npmbnpl-blocks-mobile-bnpl-floating-button
1.0.0
npmchai-as-viem
1.0.0
npmchai-logger
3.0.2
npmcisco-github-simple
1.0.1
PyPIcloushaar-poc-exfil-91827
0.0.1
PyPIcrypto-trader-py
1.0.0
npmdbconnectify
1.0.0
npmdevplatform-sdk
1.0.0
npmenvforge2
1.0.0
npmenvforge3
1.0.0
npmenvparse2
1.0.0
npmenvparse3
1.0.0
npmevm-validation
1.0.01.0.11.0.21.0.31.0.4
npmhardhat-hold
2.0.12.21.0
npminternallib_v497
1.0.3
npminternallib_v550
1.0.0
PyPIkerokwis
99
RubyGemskerokwis
99
npmn8n-nodes-data-transformer-utils
1.0.0
npmn8n-nodes-healthmon
1.0.0
npmn8n-nodes-metricsagent
1.0.0
RubyGemsno-fun
1.0.0
npmnode-env-buffer
1.0.0
npmnodetokyo
1.0.0
npmnoverojava
1.0.0
npmoracle-redis
5.11.3
PyPIpoly-check-b
1.0.0
PyPIsnap-queue
1.0.0
npmsysverify
1.0.0
npmtailwind-form-styles
1.0.0
npmtake-home-caller-id
1.0.0
npmturbo-ws
1.0.0
npmubiquiti-agents-link-mcp
0.0.10.0.20.2.00.2.1
npmuolcs-host-uol-anuncios-fe
1.0.0
npmz-deno-truth-bwhlsz
1.0.0
npmz-deno-truth-va499w
1.0.0
npmz-deno-truth-ya1t4m
1.0.0
multi-2026-09-23-ghsa-malware-sweepSource advisory
HighAdvisory sweep22 Sept 2026
39 packages tracked
GitHub Advisory malware sweep - 2026-09-21 (late) + 2026-09-22 (npm `@baanx/abis` + `@baanx/blockchain-config` `oob.algamil7x.xyz` DNS-OOB day 5; `hardhat-base` + `hardhat-core` + `hardhat-devkit` Ethereum-toolchain typosquats with axios-loader RCE via `ipcheck-hashed.vercel.app`; `@uh-platform/*` + `@uol-afiliados/affiliated-config-lib` + `@asdfaskdjfksadhfkasf` Burp Collaborator `oastify.com` dep-confusion; `@vite-*/*` six-package batch quarantine; `test-react-app-{in,out,way}` + `de-morgan` + `transform-es2015-unicode-regex` + `emoji-prints-fancy` Aug 4 residual typosquat quarantine; `math-universe`/`mathmain`/`mathsbase` batch quarantine; pip `pullgetsage` Telegram Desktop tdata stealer; `blue-string-formatter-utilss` `xss.report` DOM loader; pentest/CTF artefacts (`bnppf-flag-icons`, `radio-player-theme`, `my-ctf-helper-script-9921`, `bytepack-probe-a7x3`, pip `starlette-healthchecks`))
GHSA 2026-09-21 (late) + 2026-09-22: ~25 new npm advisories + 2 pip. Day 5 of the oob.algamil7x.xyz DNS-OOB operator adds @baanx/abis and @baanx/blockchain-config at 9.9.11. Three hardhat-* typosquats (Ethereum toolchain) carry real axios-loader RCE via ipcheck-hashed.vercel.app. @uh-platform/* (5 pkgs) plus @uol-afiliados and @asdfaskdjfksadhfkasf fire Burp Collaborator OOB. pip pullgetsage archives Telegram Desktop tdata and POSTs to Cloudflare Workers.
npmPyPI
Affected packages39 packages · 57 versions
npm@asdfaskdjfksadhfkasf/nadaver2
102.0.0
npm@baanx/abis
9.9.11
npm@baanx/blockchain-config
9.9.11
npm@uh-platform/cloud
101.0.0
npm@uh-platform/domain-widget
100.0.0
npm@uh-platform/nadaver
102.0.0
npm@uh-platform/nadaver2
102.0.0
npm@uh-platform/webcard
99.0.0
npm@uol-afiliados/affiliated-config-lib
102.0.0
npm@vite-mcp/vite-type
6.44.1
npm@vite-pro/vite-ui
2.5.10
npm@vite-tab/tab
3.15.105.7.0
npm@vite-tab/tabui
7.15.16
npm@vite-ts/vite-ui
6.44.1
npm@vitets/vite-ts
1.5.10
npm@woodpecker-web-shared/components
1.20.42.20.54.20.5
npm@zig-design-system/react
99.0.0
npmblue-string-formatter-utilss
1.2.0
npmbnppf-flag-icons
99.99.99
npmbytepack-probe-a7x3
1.0.01.0.1
npmde-morgan
2.1.3
npmemoji-prints-fancy
5.6.4
npmhardhat-base
2.2.02.2.2
npmhardhat-core
1.0.02.1.2
npmhardhat-devkit
2.3.6
npmmath-universe
1.0.01.0.11.0.2
npmmathmain
1.0.0
npmmathsbase
1.0.01.0.11.0.2
npmmy-ctf-helper-script-9921
1.0.0
PyPIpullgetsage
0.1.2
npmradio-player-theme
1.0.02.0.03.0.04.0.05.0.06.0.0
npmreact-context-form-tdsss
9.0.0
PyPIstarlette-healthchecks
1.3.11.3.2
npmtest-react-app-in
1.0.0
npmtest-react-app-out
1.0.0
npmtest-react-app-way
1.0.0
npmtransform-es2015-unicode-regex
6.24.1
npmwos-library
99.0.0999.999.999
npmwos-library-ui
99.0.0999.999.999
multi-2026-09-22-ghsa-malware-sweepSource advisory
HighAdvisory sweep21 Sept 2026
19 packages tracked
GitHub Advisory malware sweep - 2026-09-20 + 2026-09-21 (npm `@nimbusedge2/*` + `@nimbsuedge3/xar` `147.93.157.202` reverse-shell dep-confusion continuation of 2026-09-12 Cluster G; `@baanx/solana-lib` `oob.algamil7x.xyz` DNS-OOB day 4; `test1*` + `chat-adapter-matrix` `128.199.122.145` / `pipedream.net` dep-confusion probe wave; `chai-testing` obfuscated axios-loader require-time RCE; `npmscript_tesstalert_unpkg` `webhook.site` cookie exfil; `@pwaplatform/module-sso-integration` `99.0.x` sentinel; `testmgkregme` binding.gyp GYP-expansion loader)
GHSA 2026-09-20 + 2026-09-21: 18 new npm advisories (plus 1 from 09-20). Day 4 of the oob.algamil7x.xyz DNS-OOB operator (@baanx/solana-lib bxsol prefix). Continuation of the 2026-09-12 @nimbusedge/auth dep-confusion reverse-shell operator: six new @nimbusedge2/* + @nimbsuedge3/xar packages shell out to 147.93.157.202:8080 and beacon canarytokens.com. A dep-confusion probe wave (test1*, chat-adapter-matrix) targets bare-IP 128.199.122.145 and Pipedream. chai-testing and testmgkregme add real require-time RCE.
npm
Affected packages19 packages · 23 versions
npm@baanx/solana-lib
9.9.99.9.10
npm@nimbsuedge3/xar
1.1.1
npm@nimbusedge2/auth
1.1.1
npm@nimbusedge2/authxsas
1.1.0
npm@nimbusedge2/authxsas1
1.1.0
npm@nimbusedge2/x
1.1.1
npm@nimbusedge2/xa
1.1.0
npm@pwaplatform/module-sso-integration
99.0.099.0.1
npmchai-testing
1.1.4
npmchat-adapter-matrix
99.99.99
npmnpmscript_tesstalert_unpkg
1.0.11.0.2
npmnpx-test-ma980
1.0.1
npmtest12vv36
99.99.99
npmtest1df23
99.99.99
npmtest1gg234
99.99.99
npmtest1hh235
99.99.99
npmtest1ro
99.99.99999.99.99
npmtest1sdsd2
99.99.99
npmtestmgkregme
1.0.1
multi-2026-09-21-ghsa-malware-sweepSource advisory
MediumAdvisory sweep20 Sept 2026
1 package tracked
GitHub Advisory malware sweep - 2026-09-19 late + 2026-09-20 (pip `urc@99.99.99` install-time host-info exfil probe; light day, one entry)
GHSA 2026-09-19 late + 2026-09-20: only one new advisory in the 24h window - pip urc@99.99.99 (GHSA-3c7m-3qhf-wqrr, MAL-2026-16298), a setup.py-override install-time host-info exfiltrator (IP + username) flagged by GHSA as PROBABLY_PENTEST under campaign GENERIC-standard-pypi-install-pentest. Cataloguing depth reserved for the corresponding named incident when a payload appears; no worm / hijack / typosquat cluster in this window.
PyPI
Affected packages1 package · 1 version
PyPIurc
99.99.99
multi-2026-09-20-ghsa-malware-sweepSource advisory
HighAdvisory sweep19 Sept 2026
20 packages tracked
GitHub Advisory malware sweep - 2026-09-18 late + 2026-09-19 (npm `algamil7x.xyz` DNS-OOB scope expansion `@shared-web/utils`/`@shared-web/assets`/`@shared-runtime/modules`/`@insiderintelligence/googleadmanager` day 2; `test89-auth`/`test890-auth`/`test899-auth`/`test8999-auth` dep-confusion probe siblings of yesterday`s `test89078-auth`; on-chain Ethereum-C2 `tailwindcss-form@<=0.5.1` + `tailwindcss-forms-ui@<=0.5.2` day 2 of `0xa322E5f3...`; `@sanzoffc/baileys@<=3.0.4` newsletter-follower + unpinned `@whiskeysockets/eslint-config` github ref; `chai-as-indexed@<=7.2.8` `ipcheck-hashed.vercel.app` full-`process.env` exfil + `new Function()` RCE; `x509-escaping@0.0.0-0.0.2/1.0.1` Burp Collaborator `oastify.com` recon; `internallib_v949`, `sinful`, `openmct-heatmap`, `ac-polyfills` CWE-506; pip `py-venv-doctor@0.1.0/0.1.1` full-env-var telemetry exfil; pip `google-cloud-datacatalog-lineage-producer-client@9999`/`99999999`/`0.2.7` google-cloud-* dep-confusion sentinel; npm `keroeltop@99.99.99` malicious-domain probe)
GHSA 2026-09-18 late + 2026-09-19: 4x npm @shared-* + @insiderintelligence/* scopes at sentinel 9.9.10 extend yesterdays algamil7x.xyz DNS-OOB campaign into fresh internal-lookalike scopes (day 2, same operator); 4x test89-auth dep-confusion probes continue the test89078-auth cluster; on-chain Ethereum-C2 tailwindcss-form typosquats republish under 0xa322E5f3... (day 2); chai-as-indexed POSTs the full process.env to ipcheck-hashed.vercel.app and evals the response; pip py-venv-doctor` exfils environment variables via a fake healthcheck telemetry channel.
npmPyPI
Affected packages20 packages · 26 versions
npm@insiderintelligence/googleadmanager
9.9.10
npm@sanzoffc/baileys
<=3.0.4
npm@shared-runtime/modules
9.9.10
npm@shared-web/assets
9.9.10
npm@shared-web/utils
9.9.10
npmac-polyfills
>=0
npmchai-as-indexed
<=7.2.8
PyPIgoogle-cloud-datacatalog-lineage-producer-client
9999999999990.2.7
npminternallib_v949
>=0
npmkeroeltop
99.99.99
npmopenmct-heatmap
>=0
PyPIpy-venv-doctor
0.1.00.1.1
npmsinful
>=0
npmtailwindcss-form
<=0.5.1
npmtailwindcss-forms-ui
<=0.5.2
npmtest89-auth
>=0
npmtest890-auth
>=0
npmtest899-auth
>=0
npmtest8999-auth
>=0
npmx509-escaping
0.0.00.0.10.0.21.0.1
multi-2026-09-19-ghsa-malware-sweepSource advisory
HighAdvisory sweep18 Sept 2026
51 packages tracked
GitHub Advisory malware sweep - 2026-09-17 late + 2026-09-18 (npm Baileys-fork `libsignal`-hijack wave `xzvbailey`/`xzvbailsx`/`zero-baileys`/`@lekzo/baileys` unpinned GitHub-ref RCE; `blue-string-formatter-utils` `xss.report/c/k3rne111` require-time eval loader; `@railone/image-utils` `api.npoint.io/641d37178a880b1e8b8f` sibling of `process-lhpm`/`process-mite`; `xa424234657567` `duel.com` host-gated `unpkg.com/x6842179305` remote payload; `tailwindcss-form-utils`/`-form-ui` Ethereum-on-chain C2 (`0xa322E5f3...` publicnode/drpc/1rpc); `@tink/tink-link-core@9.9.10` + `test89078-auth@99.99.99` dep-confusion DNS OOB pair; pip `requests-auroras`/`-triwes`/`-asetwe` `2.34.2` setup.py reverse shells + probes; pip `marketing-mcp` webhook.site SSH/AWS-key exfil MCP tool; pip `aiosendletter`/`index-forum`/`pyjstat-smooth` cloned-legit file exfil; npm `kartykgithub-multiversion-a` pentest continuation; 25x `lisa-*` tea.xyz autopublish flood)
GHSA 2026-09-17 late + 2026-09-18: 4x npm Baileys-fork packages redirect libsignal to unpinned GitHub refs for install-time RCE; blue-string-formatter-utils runs xss.report XMLHttpRequest+eval on require; @railone/image-utils reuses the api.npoint.io loader pattern of process-lhpm/process-mite; tailwindcss-form-* typosquats fetch commands from an attacker-authored Ethereum address; pip marketing-mcp exfils ~/.ssh/id_rsa + ~/.aws/credentials via a webhook.site endpoint.
npmPyPI
Affected packages51 packages · 78 versions
npm@lekzo/baileys
0.0.1
npm@railone/image-utils
<=1.1.10
npm@tink/tink-link-core
9.9.10
PyPIaiosendletter
0.2.03.73.83.94.04.14.34.54.6
npmblue-string-formatter-utils
1.0.0
PyPIindex-forum
2.5.4
npmkartykgithub-multiversion-a
1.0.01.0.1
npmlisa-esdoger11-ruro
>=0
npmlisa-esdoger24-miaww
>=0
npmlisa-gado-gado20-sukiwir
>=0
npmlisa-gandul10-breki
>=0
npmlisa-gandul17-riris
>=0
npmlisa-gaplek22-sukiwir
>=0
npmlisa-gaplek6-sluey
>=0
npmlisa-gembus35-sumpek
>=0
npmlisa-gembus72-riris
>=0
npmlisa-getuk69-miaww
>=0
npmlisa-getuk7-riris
>=0
npmlisa-getuk77-sluey
>=0
npmlisa-gorengan62-sluey
>=0
npmlisa-gudeg13-sluey
>=0
npmlisa-gudeg30-sumpek
>=0
npmlisa-gudeg42-riris
>=0
npmlisa-gudeg59-breki
>=0
npmlisa-gulai30-breki
>=0
npmlisa-gulai32-sluey
>=0
npmlisa-gulai37-sukiwir
>=0
npmlisa-gulai61-sukiwir
>=0
npmlisa-gulai65-sukiwir
>=0
npmlisa-ikan25-riris
>=0
npmlisa-ikan40-breki
>=0
npmlisa-jamblang15-sukiwir
>=0
npmlisa-jamblang16-remi
>=0
npmlisa-jamblang60-sluey
>=0
npmlisa-jamblang72-breki
>=0
npmlisa-jamblang9-sluey
>=0
npmlisa-jengkol34-miaww
>=0
npmlisa-jengkol46-miaww
>=0
npmlisa-jus17-ruro
>=0
PyPImarketing-mcp
0.1.0
PyPIpyjstat-smooth
1.5.02.5.02.5.12.5.22.5.32.5.42.5.52.5.62.5.72.5.82.5.92.5.102.5.112.5.122.5.132.5.142.5.152.5.162.5.17
PyPIrequests-asetwe
2.34.2
PyPIrequests-auroras
2.34.2
PyPIrequests-triwes
2.34.2
npmtailwindcss-form-ui
<=0.5.1
npmtailwindcss-form-utils
<=0.5.1
npmtest89078-auth
99.99.99
npmxa424234657567
1.0.0
npmxzvbailey
1.0.0
npmxzvbailsx
1.0.0
npmzero-baileys
2.7.0
multi-2026-09-18-ghsa-malware-sweepSource advisory
HighAdvisory sweep17 Sept 2026
28 packages tracked
GitHub Advisory malware sweep - 2026-09-16 late + 2026-09-17 (13x `strapi-plugin-*-meeb` port-80 hostname-gated (`ubuntu-fc-uvm`) reverse-shell follow-on to 14.225.210.85:80; `strapi-plugin-osag`/`os-rec` Burp Collaborator OOB recon; `@traktis/environment` + `@traktis/core` dep-confusion pair to `tko.amgsec.com`; `process-mite` npoint.io remote-code loader sibling of `process-lhpm`; `jexkcode` Baileys WhatsApp newsletter-follower; `kartyk-github-*` CWE-506 pentest artefacts; pip `praetorian-mind-rce-test-2026` env exfil + `trongappy` Tron key stealer + `rak-lab-yoav-orca-*` dep-confusion; npm `idx_form_script@999.0.4` 2026-09-17 dep-confusion probe)
GHSA 2026-09-16 late + 2026-09-17: 13 more strapi-plugin-*-meeb reverse-shell packages targeting 14.225.210.85:80 with ubuntu-fc-uvm hostname gating; -osag/-os-rec Burp Collaborator OOB recon variants from the same operator; @traktis/environment+@traktis/core dep-confusion pair exfiltrating CI env vars to tko.amgsec.com; process-mite reuses the same api.npoint.io loader as yesterdays process-lhpm; jexkcode` is another Baileys newsletter-follower.
npmPyPI
Affected packages28 packages · 39 versions
npm@traktis/core
<=99.99.2
npm@traktis/environment
99.99.199.99.2
npmbender-rspack-config
<=1.0.0
npmidx_form_script
999.0.4
npmjexkcode
1.0.11.1.01.1.11.1.21.1.31.1.4
npmkartyk-github-oidc-test-pkg
1.0.11.0.21.0.4
npmkartyk-github-single-ver-pkg
>=0
npmkartyk-github-token-pkg
1.0.31.0.4
npmpkg-rollback-dreed-viced-sonic-ponds
>=0
PyPIpraetorian-mind-rce-test-2026
0.0.10.0.20.0.3
npmprocess-mite
<=1.1.79
PyPIrak-lab-yoav-orca-zrktd2cp5hjmo4x7
9.9.9
npmstrapi-plugin-cccon-meeb
3.6.8
npmstrapi-plugin-ccip-meeb
3.6.8
npmstrapi-plugin-ccrec-meeb
3.6.8
npmstrapi-plugin-ccrev-meeb
3.6.8
npmstrapi-plugin-conresh-meeb
3.6.8
npmstrapi-plugin-feedmeeb
3.6.8
npmstrapi-plugin-honey-meeb
3.6.8
npmstrapi-plugin-listcc-meeb
3.6.8
npmstrapi-plugin-maylog-meeb
3.6.8
npmstrapi-plugin-os-rec
<=3.6.8
npmstrapi-plugin-osag
3.6.8
npmstrapi-plugin-perev-meeb
3.6.8
npmstrapi-plugin-persh-meeb
3.6.8
npmstrapi-plugin-portcc-meeb
3.6.8
npmstrapi-plugin-pysh-meeb
3.6.8
PyPItrongappy
0.0.1
multi-2026-09-17-ghsa-malware-sweepSource advisory
CriticalMalicious package17 Sept 2026
10 packages tracked
indexed-btree + 9 sibling npm packages: runtime-triggered loader, Ethereum Sepolia smart-contract C2 (Checkmarx disclosure)
Checkmarx disclosed on 2026-09-17 that npm user charlessadler25 had published indexed-btree (impersonating sorted-btree) plus 9 sibling packages, together reaching ~2M weekly downloads before npm removed them on 2026-09-03. The loader lives inside BTree.prototype.set() - not a lifecycle hook - and resolves its C2 by polling an Ethereum Sepolia smart contract (EtherHiding), exfiltrates via Slack and Telegram, and is tied to a wallet holding 109 ETH.
npm
Affected packages10 packages · 10 versions
npmbtree-core
*
npmbtree-leaderboard
*
npmbtree-lru-cache
*
npmbtree-range-store
*
npmbtree-time-index
*
npmindexed-btree
*
npmneighbor-key-map
*
npmordered-kv-index
*
npmpriority-slot-queue
*
npmsliding-score-window
*
npm-2026-09-17-indexed-btree-sepolia-etherhidingSource advisory
HighCompromise17 Sept 2026
1 package tracked
visanduma/nova-two-factor - PolinRider malware planted in four dev-* branches via compromised Visanduma GitHub org
Socket disclosed on 2026-09-17 that the DPRK-linked PolinRider operators compromised the Visanduma GitHub organisation and implanted staged infostealer code in the dev-main, dev-nova4support, dev-using-inertia, and dev-nova5 branches of visanduma/nova-two-factor, a Laravel Nova 2FA package on Packagist with ~700K cumulative downloads. No stable release is affected; Packagist has frozen the package.
Packagist
Affected packages1 package · 4 versions
Packagistvisanduma/nova-two-factor
dev-maindev-nova4supportdev-using-inertiadev-nova5
packagist-2026-09-17-visanduma-nova-two-factor-polinriderSource advisory
HighAdvisory sweep16 Sept 2026
25 packages tracked
GitHub Advisory malware sweep - 2026-09-15/16 (npm `plogme` Baileys WhatsApp fork with `crysnovax.link` fingerprinting; `webpackbootstrap5`/`webpackbootstrapscripts`/`@zaka13/thing` in-browser Scramjet proxy typosquat kit; pip `faiss-cpu-avx512` FAISS typosquat with `catbox.moe` `indexwrm` daemon; 14x npm `strapi-plugin-*-meeb`/`-meeb322k` bulk reverse-shell wave to 14.225.210.85:443; `process-lhpm` npoint.io remote-code loader; `fulfillment-cuprum-auth-widget`/`alkajsdfoiwqeusdflkjsdf` dr0gas.com env exfil; `csa-mfa` dep-confusion probe)
GHSA 2026-09-15 late + 2026-09-16: plogme is a malicious Baileys WhatsApp fork fingerprinting to crysnovax.link; three zaka13 npm packages ship an in-browser Scramjet proxy loader; pip faiss-cpu-avx512 typosquats FAISS with a catbox.moe daemon; 14 strapi-plugin-*-meeb/-meeb322k packages drop reverse shells to 14.225.210.85:443; process-lhpm fetches remote JS from npoint.io.
npmPyPI
Affected packages25 packages · 37 versions
npm@zaka13/thing
1.0.0
npmalkajsdfoiwqeusdflkjsdf
<=3.7.3
npmcsa-mfa
1.1.151.1.16
PyPIfaiss-cpu-avx512
1.9.01.9.11.9.21.9.31.9.41.9.51.9.61.9.7
npmfulfillment-cuprum-auth-widget
<=3.7.2
npmkartykp-prod-oidc-test-pkg
1.0.31.0.4
npmkartykp-token-pkg
<=1.0.2
npmplogme
1.0.01.0.11.0.21.0.3
npmprocess-lhpm
<=1.1.79
npmstrapi-plugin-ccresh-meeb
3.6.8
npmstrapi-plugin-plsresh-meeb
3.6.8
npmstrapi-plugin-proccresh-meeb
3.6.8
npmstrapi-plugin-resh-meeb322k
3.6.8
npmstrapi-plugin-revs-meeb322k
3.6.8
npmstrapi-plugin-revs01-meeb322k
3.6.8
npmstrapi-plugin-revs02-meeb322k
3.6.8
npmstrapi-plugin-revsh-meeb322k
3.6.8
npmstrapi-plugin-rs-meeb322k
3.6.8
npmstrapi-plugin-sucresh-meeb
3.6.8
npmstrapi-plugin-tryccresh-meeb
3.6.8
npmstrapi-plugin-uicc-meeb
3.6.8
npmstrapi-plugin-yayccresh-meeb
3.6.8
npmstrapi-plugin-yesccresh-meeb
3.6.8
npmwebpackbootstrap5
5.0.0
npmwebpackbootstrapscripts
5.110.3
multi-2026-09-16-ghsa-malware-sweepSource advisory
HighAdvisory sweep15 Sept 2026
23 packages tracked
GitHub Advisory malware sweep - 2026-09-14/15 (npm `pino-ulid` cross-platform persistent RAT typosquat, `noblox-asset.js` Roblox typosquat with TRLX.exe Windows binary, `n8n-nodes-sysdiag`/`sysdiag2` n8n community-node credential exfil, `concierge-sdk` dep-confusion with Azure IMDS + GITHUB_TOKEN theft, `@aiwfm/communitywfm.scripts.api` Cloudflare Workers env exfil, `get-power`/`postgreesqlhelper` get-proto base64+eval RCE)
GHSA 2026-09-14/15 (npm-only day): pino-ulid<=2.12.3 is a persistent multi-OS RAT typosquat impersonating pino+ulid; noblox-asset.js v7.4.0-7.4.2/7.6.0 impersonates the Roblox noblox.js API wrapper and drops the TRLX.exe Windows binary; n8n-nodes-sysdiag/sysdiag2 are n8n community-node credential exfilters; concierge-sdk@99.99.99+ is a dep-confusion probe that actually hits Azure IMDS and GITHUB_TOKEN; plus @aiwfm/communitywfm.scripts.api Cloudflare Workers env exfil and get-proto typosquat RCE loaders.
npm
Affected packages23 packages · 37 versions
npm@aiwfm/communitywfm.scripts.api
28.1.28
npm@gfe/lx-watcher
*
npm@merazmz/project-tracker
*
npm@yggbrasil/api
*
npmafhmxiewpsf
1.0.01.0.11.0.21.0.31.0.41.0.5
npmapp-rrhh
999.0.0
npmconcierge-sdk
99.99.9999.99.10099.99.101
npmdilxztech
*
npmexpect-dotenv
*
npmget-power
1.0.3
npmlpulogin
*
npmmeraz-project-tracker
*
npmn8n-nodes-buildcheck
>=1.0.0
npmn8n-nodes-sysdiag
1.0.01.0.11.0.21.0.31.0.4
npmn8n-nodes-sysdiag2
2.0.0
npmnoblox-asset.js
7.4.07.4.17.4.27.6.0
npmos-info-meeb322k
1.0.0
npmpino-ulid
<=2.12.3
npmpostgreesqlhelper
<=1.0.3
npmsql-limit-enforcer
10.0.0
npmstrapi-plugin-os-info-meeb322k
3.6.8
npmultra-ws
1.0.0
npmweb-main
22.1.2
multi-2026-09-15-ghsa-malware-sweepSource advisory
HighAdvisory sweep14 Sept 2026
58 packages tracked
GitHub Advisory malware sweep - 2026-09-13/14 (`chroma-client` continues `2026-09-openaii` AI SDK typosquat wave, `python-fork` PyPI fork bomb, `job-iteration` npm CWE-506, huge `joko-*` Indonesian-food tea.xyz spam explosion with autopublish sources `joan-teadev`/`joknmax`, `joint_*_z3n`/`_0xrequest` continuation, `joker123`/`joker388` casino spam)
GHSA 2026-09-13/14: PyPI chroma-client extends the 2026-09-openaii typosquat wave (chromadb typosquat, same infostealer+cryptominer payload as openaii/langgrap/transfomers/ollamaa); PyPI python-fork is a plain import-time fork bomb; npm job-iteration flagged as CWE-506 malware. Otherwise the day is a massive tea.xyz autopublish spam wave — hundreds of joko-{Indonesian food}-{suffix} names sourced from joan-teadev/joknmax autopublish scripts, plus joint_*_z3n/joint_*_0xrequest continuation of the 2026-09-11 family_*_z3n operator and joker123/joker388 casino-themed spam.
npmPyPI
Affected packages58 packages · 59 versions
PyPIchroma-client
<=0.5.7
npmjnmirdcugstvxqaz
*
npmjoan-teadev
*
npmjob-iteration
*
npmjoint_elephant_z3n
*
npmjoint_hedgehog_z3n
*
npmjoint_hookworm_z3n
*
npmjoint_panther_z3n
*
npmjoint_perch_0xrequest
*
npmjoint_pony_z3n
*
npmjoint_porpoise_0xrequest
*
npmjoint_primate_0xrequest
*
npmjoint_raccoon_z3n
*
npmjoint_sheep_z3n
*
npmjoint_swan_z3n
*
npmjoint_tortoise-appteadev
*
npmjoker123
*
npmjoker123-gaming
*
npmjoker123-slot
*
npmjoker388
*
npmjoknmax
*
npmjoko-asinan24-riris
*
npmjoko-asinan36-riris
*
npmjoko-asinan56-sluey
*
npmjoko-asinan6-sluey
*
npmjoko-asinan99-breki
*
npmjoko-bakso14-miaww
*
npmjoko-bakso39-sukiwir
*
npmjoko-bakso41-sukiwir
*
npmjoko-bakso42-breki
*
npmjoko-bakwan60-breki
*
npmjoko-bakwan85-riris
*
npmjoko-botok25-sluey
*
npmjoko-botok45-breki
*
npmjoko-keraktelor64-breki
*
npmjoko-keraktelor75-breki
*
npmjoko-keripik1-apidev
*
npmjoko-keripik33-riris
*
npmjoko-keripik43-sukiwir
*
npmjoko-keripik55-sluey
*
npmjoko-keripik64-sluey
*
npmjoko-keripik88-riris
*
npmjoko-keripik89-sluey
*
npmjoko-keripik93-miaww
*
npmjoko-ketan28-sukiwir
*
npmjoko-ketan29-breki
*
npmjoko-ketan40-breki
*
npmjoko-ketan94-breki
*
npmjoko-ketoprak31-breki
*
npmjoko-ketoprak39-breki
*
npmjoko-ketoprak70-breki
*
npmjoko-ketoprak89-breki
*
npmjoko-klanting28-sluey
*
npmjoko-klanting55-breki
*
npmjoko-klanting57-breki
*
npmjoko-klanting70-riris
*
npmjoko-klanting72-miaww
*
PyPIpython-fork
0.1.00.1.1
multi-2026-09-14-ghsa-malware-sweepSource advisory
HighAdvisory sweep12 Sept 2026
16 packages tracked
GitHub Advisory malware sweep - 2026-09-11/12 (`greensaver` jsonkeeper AES continuation, `tailwind-form-kit` EtherHiding continuation, `2026-09-openaii` AI SDK typosquat wave `langgrap`/`openaii`/`transfomers`/`ollamaa`, `eth-account`/`web3-eth-account` blockchain-C2 pair, `@nimbusedge/auth` dep-confusion reverse shell)
GHSA 2026-09-11/12: greensaver continues the jsonkeeper.com/b/V6NBX AES operator (4th package in 5 days); tailwind-form-kit continues the 0xa322E5… EtherHiding operator; new 2026-09-openaii PyPI wave hits langgrap/openaii/transfomers/ollamaa; web3-eth-account/eth-account-web3 fetch payload URLs from a smart contract; @nimbusedge/auth drops a reverse shell.
npmPyPI
Affected packages16 packages · 24 versions
npm@nimbusedge/auth
*
PyPIaitextkit-py
0.1.00.1.1
PyPIaitextutils-py
0.1.00.1.1
npmcr-bot-common
1.0.0
PyPIeth-account-web3
0.14.0
npmgreensaver
1.2.11.2.21.2.3
PyPIlanggrap
0.2.45
PyPIollamaa
0.4.2
PyPIopenaii
*
PyPIplatform-telemetry-client
1.0.0
PyPIpymem-win
1.14.01.14.11.14.41.14.51.14.6
npmstrapi-plugin-vinsoc-1109
3.6.8
npmtailwind-form-kit
*
npmtracker-cloudflare
1.0.0
PyPItransfomers
4.44.2
PyPIweb3-eth-account
0.14.0
multi-2026-09-12-ghsa-malware-sweepSource advisory
HighAdvisory sweep11 Sept 2026
111 packages tracked
GitHub Advisory malware sweep - 2026-09-10/11 (`pinochiomathm` picomatch typosquat with AES payload, `tailwindcss-contact-forms` Ethereum-RPC wallet drainer, `lucy-python-script-2030` Telegram infostealer, `@fyxzpediaa/baileys` wave 4, tea.xyz mass spam wave)
GHSA published between 2026-09-10 and 2026-09-11 UTC: a picomatch typosquat (pinochiomathm) with AES payload from jsonkeeper.com, tailwindcss-contact-forms Ethereum-RPC wallet drainer, a PyPI Telegram infostealer, a fourth Baileys hijack (@fyxzpediaa/baileys) - plus a very large tea.xyz spam wave (hundreds of fancy_*_z3n / famous_*_z3n / family-island-unlimited-energy* packages).
npmPyPI
Affected packages111 packages · 122 versions
npm@fyxzpediaa/baileys
8.1.29.1.0
npm@yongot/canary-mcp-isolation
*
npm@yongot/canary-mcp-test
*
npm@yongot/canary-mcp-test-2
*
npmcat-sis2go-utils
*
npmdaytona-test-filereader
*
npmdaytona-test-miner
*
npmdaytona-test-npm
*
npmfalse-positive-reddit-rce
0.0.2
npmfamiliar_bison_z3n
*
npmfamiliar_finch_z3n
*
npmfamiliar_firefly_z3n
*
npmfamiliar_guan_z3n
*
npmfamiliar_hare_z3n
*
npmfamiliar_herring_z3n
*
npmfamiliar_hippopotamus_z3n
*
npmfamiliar_jackal_z3n
*
npmfamiliar_jaguar_z3n
*
npmfamiliar_kiwi_z3n
*
npmfamiliar_limpet_z3n
*
npmfamiliar_lynx_z3n
*
npmfamiliar_marlin-appteadev
*
npmfamiliar_marten_dumbs
*
npmfamiliar_minnow_z3n
*
npmfamiliar_porcupine_z3n
*
npmfamiliar_prawn_scarlet-18
*
npmfamiliar_ptarmigan_z3n
*
npmfamiliar_puma_z3n
*
npmfamiliar_scorpion_z3n
*
npmfamiliar-olive-pelican
*
npmfamiliar-orange-camel
*
npmfamily-island-unlimited-energy167
*
npmfamily-island-unlimited-energy285
*
npmfamily-island-unlimited-energy362
*
npmfamily-island-unlimited-energy447
*
npmfamily-island-unlimited-energy463
*
npmfamilylink
*
npmfamous_anaconda_z3n
*
npmfamous_angelfish_dumbs
*
npmfamous_angelfish-notthedev
*
npmfamous_ape_0xrequest
*
npmfamous_cicada_z3n
*
npmfamous_firefly_0xrequest
*
npmfamous_firefly_z3n
*
npmfamous_goose_z3n
*
npmfamous_heron_z3n
*
npmfamous_hippopotamus_z3n
*
npmfamous_hummingbird_z3n
*
npmfamous_marsupial_z3n
*
npmfamous_mite_z3n
*
npmfamous_ox_z3n
*
npmfamous_skunk_z3n
*
npmfamous_swordtail_z3n
*
npmfamous_tahr_z3n
*
npmfamous_whale_z3n
*
npmfamous-amethyst-coyote
*
npmfamous-aquamarine-unicorn
*
npmfamous-beige-tern
*
npmfamous-coral-fly
*
npmfamous-cyan-crayfish
*
npmfamous-jade-felidae
*
npmfamous-red-stoat
*
npmfamous-scarlet-dog
*
npmfanada
*
npmfancy_alligator_z3n
*
npmfancy_bobcat_dumbs
*
npmfancy_bovid-appteadev
*
npmfancy_cattle_z3n
*
npmfancy_cricket_z3n
*
npmfancy_cuckoo_z3n
*
npmfancy_dormouse_z3n
*
npmfancy_firefly_0xrequest
*
npmfancy_goose_z3n
*
npmfancy_roadrunner_z3n
*
npmfancy_snail_z3n
*
npmfancy_wolf_z3n
*
npmfancy_wombat_z3n
*
npmfancy-apricot-whitefish
*
npmfancy-beige-gamefowl
*
npmfancy-blue-sailfish
*
npmfancy-blush-egret
*
npmfancy-pure-vfk847-project
*
npmfancy-radiate-ygx449-project
*
npmfancy-tomato-pony
*
npmfandyx
*
npmfanfav
*
npmfankctoxvrkdsmgq
*
npmfanta-notthedevs
*
npmfantastic_bug_z3n
*
npmfantastic_goat_dumbs
*
npmfantastic_goldfish_z3n
*
npmfantastic_gopher_z3n
*
npmfantastic_hamster_z3n
*
npmfantastic_hedgehog_z3n
*
npmfantastic_koi_z3n
*
npmfantastic_lemur_z3n
*
npmfantastic_lion_z3n
*
npmfantastic_locust_z3n
*
npmfantastic_lynx_z3n
*
npmfantastic_mackerel_z3n
*
npmfantastic_magpie_z3n
*
npmfantastic_mollusk_z3n
*
npmfantastic_rat_0xrequest
*
npmfantastic_toad_z3n
*
npmfantastic-coffee-lynx
*
npmfantastic-copper-heron
*
npmfantastic-crimson-dolphin
*
npmfantastic-violet-hoverfly
*
PyPIlucy-python-script-2030
0.1.10.1.2
npmpinochiomathm
2.3.22.3.32.3.42.3.5
npmtailwindcss-contact-forms
0.5.40.5.50.5.60.5.70.5.80.5.90.6.0
multi-2026-09-11-ghsa-malware-sweepSource advisory
HighAdvisory sweep10 Sept 2026
28 packages tracked
GitHub Advisory malware sweep - 2026-09-09/10 (Baileys wave 3, `@umschool/platform` K8s harvester, "Master Harvester" Solana wallet drainers, Discord MFA lures)
Between 2026-09-09 and 2026-09-10 UTC GHSA published ~26 new npm/PyPI malware advisories: a third Baileys WhatsApp scope-hijack wave, a @umschool/platform follow-up that adds a live Kubernetes-secrets + cloud-metadata harvester, a shared "Master Harvester" template hitting Solana wallets via gmgn-trading-kit and soltinel-pro, a coordinated Discord MFA lure trio, plus BigQuery/Databricks PyPI probes and boilerplate takedowns.
npmPyPI
Affected packages28 packages · 38 versions
npm@auction-fe/base
*
npm@auction-fe/portal
*
npm@auction-fe/reporting-system
*
npm@auction-fe/ui-kit
*
npm@convertics/script
*
npm@neroxkira/vangal-baileys
1.0.01.0.1
npm@nexustechpro/baileys
2.2.7
npm@sahril2nd/baileys
1.0.21
npm@staticj/cropperxmjs
1.6.0
npm@umschool/platform
999.0.0999.0.1999.0.2
PyPIbq-build-probe-vrp-2026
0.2.0
PyPIbq-sdist-probe-vrp
0.0.1
npmchai-as-testkit
*
npmcrypto-validates
*
PyPIdatabricks-webapp-navigation-homepage
999.0.0
npmdiscord-mfa-solver
1.0.01.0.11.0.2
npmgmgn-trading-kit
1.7.01.7.11.7.2
npmgraphql-js-client-transform
*
npmmatrixkit-js
1.0.0
npmmfaby
1.0.0
npmmfatest2
1.0.0
npmpolygon-toolkits-validator
*
npmraydium-clmm-sdk
*
npmreact-remove-properties
*
npmsams-run-style
*
npmsams-text-style
*
npmsoltinel-pro
0.2.00.2.10.2.2
npmtwilio-hackerone-poc-b8f21a
1.0.01.0.1
multi-2026-09-10-ghsa-malware-sweepSource advisory
HighAdvisory sweep9 Sept 2026
25 packages tracked
GitHub Advisory malware sweep - 2026-09-08/09 (coordinated `sonner` typosquat trio, Baileys scope hijacks, `rojo-rbx` Windows persistence, dep-confusion probes and remote-code loaders)
Between 2026-09-08 and 2026-09-09 UTC GHSA published ~25 npm/PyPI malware advisories: a coordinated sonner typosquat trio (sonmors/gloggo/file-type-detector) with a PNG-steganography loader gated on a fake isSign(); three @*/baileys WhatsApp scope hijacks; a rojo-rbx Roblox typosquat with Windows Run-key persistence; plus dep-confusion probes and remote-code loaders.
npmPyPI
Affected packages25 packages · 45 versions
npm@aspect-adv-ui/consent-manager
2.4.02.4.1
npm@haimiya/baileys
*
npm@umschool/analytics
999.0.0999.0.1999.0.2999.0.3999.0.4
npm@vallensofficial/baileys
*
npm@versacode/baileys
*
npm@yongot/canary-mcp-isolation
1.0.1
npm@yongot/canary-mcp-test
2.0.03.0.04.0.0
npmalloy-graphql
1.0.1
npmbx-ui-view
1.0.0
npmexpress-session-timer
1.0.01.0.11.0.131.0.141.0.16
npmfile-type-detector
1.1.01.1.1
npmgloggo
1.1.21.1.31.1.4
npmopen-item-validator
1.0.31.0.5
npmpunypump
1.2.21.2.41.2.5
PyPIpy-devoli-common
999.999.999
npmreact-hook-doms
<=5.3.1
npmrojo-rbx
<=1.4.3
npmselfcerts
1.0.0
npmsonmors
2.11.2<=2.11.2
npmtailwind-aspect-styles
<=0.4.2
npmtailwindcss-aspectratio-styles
0.3.40.3.5
npmtoru-ultimate
1.0.0
npmtwilio-functions
99.99.9999.99.100
npmunifi-credential-server
99.0.0
npmvinzz-wcli
<=1.0.1
multi-2026-09-09-ghsa-malware-sweepSource advisory
HighAdvisory sweep8 Sept 2026
71 packages tracked
GitHub Advisory malware sweep - 2026-09-07/08 large corporate-namespace dep-confusion wave (Air Canada, Medisend, OPAP, Optimizely/Fastly, MATLAB/Azure DevOps, SimpliSafe, Tidal, PayPal, Twilio, Afterpay, Ecobee, Karapace, Glia, Jobber, Feishu, BMC, Coinbase-adjacent) + oast.online-beaconed probe cluster + 2026-09-08 fresh drops
Between 2026-09-07 and 2026-09-08 UTC GHSA flushed 100+ npm advisories in a single wave dominated by corporate-namespace dep-confusion probes (Air Canada, Medisend, Swisscom, OPAP, Optimizely/Fastly, MATLAB/Azure DevOps, SimpliSafe, Tidal, PayPal, Twilio, Afterpay, Ecobee, Karapace, Glia, Jobber, Feishu, BMC, and more). Two probes exposed shared IOCs (oast.online + 5.189.159.252). Plus 2026-09-08 fresh drops (krdpass-auth-react-native, PyPI telegram-helper).
npmPyPI
Affected packages71 packages · 73 versions
npm@aircanada/components
0.0.0
npm@aircanada/core
0.0.0
npm@aircanada/navigation-handler
0.0.0
npm@caliperx2/components
0.0.0
npm@cp-shared-14/frontend-ui
6.3.4
npm@idkruan-10/dpd-depconf-probe
0.0.0
npm@jacksher/install-exec-poc
0.0.0
npm@medisend/auth
0.0.0
npm@medisend/core
0.0.0
npm@medisend/shared
0.0.0
npm@medisend/webview-bridge
0.0.0
npm@opap/player-kyc-widget
0.0.0
npmaedes_clusters
0.0.0
npmafterpay-sdk-example-server
0.0.0
npmagent-free
0.0.0
npmagentrc-security-poc-policy
1.0.0
npmb2b-frontend-external-library
0.0.0
npmblueai-cli
0.0.0
npmbmc-i18n-extract-cli
0.0.0
npmbmc-translate-utils
0.0.0
npmboardwalk-js-tests
0.0.0
npmchai-as-synced
0.0.0
npmcontent-publisher-sdks
0.0.0
PyPIcv-train
0.0.599.0.0
npmdbt-language-server
0.0.0
npmdigitalexp-style-module-l9
0.0.0
npmdojo-rn-interview
0.0.0
npmdynstrg-howto
0.0.0
npmecobee-api
0.0.0
npmecobee-home
0.0.0
npmecobee2
0.0.0
npmfeishu-docx-mcp
0.0.0
npmforge-extended
0.0.0
npmgithub-app-sts-action
0.0.0
npmglia-functions-tools
0.0.0
npmglobal-intel
0.0.0
npmhyper-kube-config
0.0.0
npmjobber-app-template-react
0.0.0
npmkarapace-docs
0.0.0
npmkelly-stake-sizing
0.0.0
npmkiki-baileys
0.0.0
npmknowledge-grader
0.0.0
npmkrdpass-auth-react-native
0.0.0
npmllm-traces-app
0.0.0
npmlog-update-ts
0.0.0
npmmatlab-azure-devops-extension
0.0.0
npmoctopus-action
0.0.0
npmomni-channel-configurator-wireline-frontend
0.0.0
npmop-ts-server-core
0.0.0
npmopenai-pr-reviewer
0.0.0
npmoptimizely-starter-kit-for-fastly-compute
0.0.0
npmorbitron-cli
0.0.0
npmorbitron-tui
0.0.0
npmoscar-redis
0.0.0
npmpasskeys-react
0.0.0
npmpaypal-postman-lib
0.0.0
npmprime-coding-agent
0.0.0
npmprism-registry
0.0.0
npmredis-type-intel
0.0.0
npmremove-bg-serverless-azure
0.0.0
npmservice-home
0.0.0
npmsimplisafe-gatsby
0.0.0
npmstarship-timeline
0.0.0
npmtechnical-challenge
0.0.0
PyPItelegram-helper
0.1.10.1.2
npmtidal-embed-player
0.0.0
npmtool-registry-scripts
0.0.0
npmtriage_bot_using_sdkv3
0.0.0
npmtwilio-voice-js-reference-components
0.0.0
npmvishal_312pkg
0.0.0
npmwolverinechat
0.0.0
multi-2026-09-08-ghsa-malware-sweepSource advisory
CriticalDependency confusion7 Sept 2026
13 packages tracked
Coinbase / Base / Smart Contract Wallet internal-namespace dep-confusion drop (13 packages, `cb-wallet-*` + `base-*` + `scw-*` + `wallet-*`)
On 2026-09-07 GitHub Advisory flagged 13 new npm packages under names that exactly match Coinbase internal namespaces: cb-wallet-* (7 pkgs), base-account-core/base-app-data, scw-mobile/scw-core, wallet-engine-signing, wallet-cds-web. All carry the full-compromise malware boilerplate. Classic dep-confusion probe against Coinbase Wallet, Base L2, and Smart Contract Wallet builds.
npm
Affected packages13 packages · 13 versions
npmbase-account-core
0.0.0
npmbase-app-data
0.0.0
npmcb-wallet-analytics
0.0.0
npmcb-wallet-data
0.0.0
npmcb-wallet-env
0.0.0
npmcb-wallet-http
0.0.0
npmcb-wallet-metadata
0.0.0
npmcb-wallet-solana-provider
0.0.0
npmcb-wallet-store
0.0.0
npmscw-core
0.0.0
npmscw-mobile
0.0.0
npmwallet-cds-web
0.0.0
npmwallet-engine-signing
0.0.0
npm-2026-09-07-coinbase-base-cb-wallet-dep-confusionSource advisory
HighAdvisory sweep7 Sept 2026
186 packages tracked
GitHub Advisory malware sweep - 2026-09-06/07 alphabetical E-range backfill: tea.xyz `eka-*` Indonesian-food autopublish flood (~100 pkgs), `eigenstate-*` tea.xyz self-replicating spam (~15 pkgs), z3n research-pattern `effective_/efficient_<animal>_z3n` spam (~35 pkgs), and misc E-prefix opportunistic drops
Yesterday's (Sept 6) sweep captured 13 npm items; the queue then flushed ~200 more, mostly published as of 2026-09-06 and continuing into 2026-09-07. Three coherent clusters (tea.xyz eka-<indonesian-food><N>-<suffix> autopublish, tea.xyz eigenstate-<astronomy>-<tech>-<lib> autopublish, and effective_/efficient_<animal>_z3n research spam) plus a long tail of misc E-prefix drops.
npm
Affected packages186 packages · 186 versions
npmeffective_landfowl_requirement
0.0.0
npmeffective_lungfish_z3n
0.0.0
npmeffective_monkey_z3n
0.0.0
npmeffective_orangutan-silentdev
0.0.0
npmeffective_ostrich_z3n
0.0.0
npmeffective_penguin_z3n
0.0.0
npmeffective_ptarmigan_z3n
0.0.0
npmeffective_scallop_z3n
0.0.0
npmeffective_spoonbill_z3n
0.0.0
npmeffector-kws
0.0.0
npmeffector-react-kws
0.0.0
npmefficiant
0.0.0
npmefficient_aphid_z3n
0.0.0
npmefficient_asp_0xrequest
0.0.0
npmefficient_butterfly_z3n
0.0.0
npmefficient_catfish_chocolate-98
0.0.0
npmefficient_chickadee_z3n
0.0.0
npmefficient_duck_emerald-86
0.0.0
npmefficient_gerbil_white-13
0.0.0
npmefficient_grouse_z3n
0.0.0
npmefficient_guineafowl_z3n
0.0.0
npmefficient_hare_z3n
0.0.0
npmefficient_lemur_z3n
0.0.0
npmefficient_macaw_moccasin-85
0.0.0
npmefficient_meadowlark-smiletea
0.0.0
npmefficient_moth_dumbs
0.0.0
npmefficient_moth_z3n
0.0.0
npmefficient_python_z3n
0.0.0
npmefficient_rabbit_z3n
0.0.0
npmefficient_starfish_dumbs
0.0.0
npmefficient_takin_z3n
0.0.0
npmefficient_tarantula_z3n
0.0.0
npmefficient_termite_z3n
0.0.0
npmefficient_tiger_z3n
0.0.0
npmefficient-brown-quail
0.0.0
npmefficient-jade-mackerel
0.0.0
npmefficient-yellow-mole
0.0.0
npmeficsi
0.0.0
npmeflectron
0.0.0
npmefp9
0.0.0
npmefx-angular-components
0.0.0
npmeg-affiliates-common
0.0.0
npmeg-affiliates-common-test
0.0.0
npmeg4-fangfa
0.0.0
npmeganglia
0.0.0
npmegg-arbitrary
0.0.0
npmegg-plugin-knex
0.0.0
npmeggcoin
0.0.0
npmeggdrop
0.0.0
npmeggplant-delta-8omx
0.0.0
npmeggplant-juniper-lcjd
0.0.0
npmeggplant-radish-ka52
0.0.0
npmeggplant-umbrella-aig1
0.0.0
npmegis-tsc
0.0.0
npmegjs-cli
0.0.0
npmegmoizjqkvybsulc
0.0.0
npmegnxaqfzbjhdlvkp
0.0.0
npmegov-pep-frontend
0.0.0
npmegret_moccasin-14
0.0.0
npmegs-trusted-domains
0.0.0
npmegstore-carousel
0.0.0
npmegstore-ctx
0.0.0
npmegstore-graphql-client
0.0.0
npmegstore-query
0.0.0
npmegstore-suspense
0.0.0
npmegudkjkpcrwhlfvy
0.0.0
npmeh-fiddle
0.0.0
npmehance-assistant
0.0.0
npmehance-assistant33
0.0.0
npmehouse
0.0.0
npmehquvdznyglmrpxb
0.0.0
npmehxjimturwyqnzbk
0.0.0
npmeigenstate-archaeogenetics-singularitarianism-socketio
0.0.0
npmeigenstate-areology-deneb-parallax
0.0.0
npmeigenstate-auriga-module-chromedriver
0.0.0
npmeigenstate-bionics-alphard-hermes
0.0.0
npmeigenstate-electron-builder-despina-bionics
0.0.0
npmeigenstate-electron-lithosphere-dagda
0.0.0
npmeigenstate-gravitationalwave-config-ora
0.0.0
npmeigenstate-ophiuchus-sociobiology-koa
0.0.0
npmeigenstate-outercore-procyon-colors
0.0.0
npmeigenstate-parallax-init-miranda
0.0.0
npmeigenstate-spectron-loopback-wormhole
0.0.0
npmeigenstate-test-technocracy-javascript
0.0.0
npmeighster
0.0.0
npmeight-spend-men
0.0.0
npmeikasia
0.0.0
npmeikpndvxbtfhkcas
0.0.0
npmeimearmartin
0.0.0
npmeimearobrien
0.0.0
npmein-loader
0.0.0
npmein-services
0.0.0
npmeinfprog
0.0.0
npmeinkaufen
0.0.0
npmeinthyra-notthedevs
0.0.0
npmeip-119-json-provider
0.0.0
npmeithernet
0.0.0
npmeithernet-test
0.0.0
npmeithernet-test-fixtures
0.0.0
npmeithernet-test-fixtures-test
0.0.0
npmeivybsafunmzpxlg
0.0.0
npmeixp4ressz
0.0.0
npmejbwdr-devapptea
0.0.0
npmejdgrvaqkioslhbf
0.0.0
npmejercico
0.0.0
npmejrfsqmkdconukbl
0.0.0
npmejs-client
0.0.0
npmejson-rails
0.0.0
npmejson2env
0.0.0
npmejstags
0.0.0
npmejungle
0.0.0
npmeka-asinan10-breki
0.0.0
npmeka-asinan38-sluey
0.0.0
npmeka-asinan60-sukiwir
0.0.0
npmeka-bakso19-miaww
0.0.0
npmeka-bakso57-breki
0.0.0
npmeka-bakso64-breki
0.0.0
npmeka-bakso88-riris
0.0.0
npmeka-bakso92-breki
0.0.0
npmeka-bakso93-miaww
0.0.0
npmeka-bakwan14-breki
0.0.0
npmeka-bakwan21-breki
0.0.0
npmeka-bakwan35-riris
0.0.0
npmeka-bakwan94-miaww
0.0.0
npmeka-bika1-sukiwir
0.0.0
npmeka-bika31-breki
0.0.0
npmeka-bika74-sukiwir
0.0.0
npmeka-bika97-sukiwir
0.0.0
npmeka-botok35-miaww
0.0.0
npmeka-botok87-riris
0.0.0
npmeka-brengkes16-sluey
0.0.0
npmeka-brengkes44-ruro
0.0.0
npmeka-brengkes56-riris
0.0.0
npmeka-brengkes59-sluey
0.0.0
npmeka-brengkes76-sukiwir
0.0.0
npmeka-brengkes98-breki
0.0.0
npmeka-brongkos29-sluey
0.0.0
npmeka-brongkos41-sukiwir
0.0.0
npmeka-brongkos63-sluey
0.0.0
npmeka-brongkos66-sluey
0.0.0
npmeka-brongkos84-riris
0.0.0
npmeka-bubur49-sluey
0.0.0
npmeka-bubur69-breki
0.0.0
npmeka-buburayam24-miaww
0.0.0
npmeka-buburayam35-sluey
0.0.0
npmeka-buburayam37-breki
0.0.0
npmeka-buburayam38-riris
0.0.0
npmeka-buburayam42-miaww
0.0.0
npmeka-buburayam47-sluey
0.0.0
npmeka-buburayam76-ruro
0.0.0
npmeka-bubursumsum17-breki
0.0.0
npmeka-bubursumsum2-riris
0.0.0
npmeka-bubursumsum20-pore
0.0.0
npmeka-bubursumsum24-breki
0.0.0
npmeka-bubursumsum84-sumpek
0.0.0
npmeka-bubursumsum92-miaww
0.0.0
npmeka-dodol16-miaww
0.0.0
npmeka-dodol26-miaww
0.0.0
npmeka-dodol73-ruro
0.0.0
npmeka-dodol77-apidev
0.0.0
npmeka-dodol85-miaww
0.0.0
npmeka-dodol91-sukiwir
0.0.0
npmeka-dodol98-breki
0.0.0
npmeka-dodol98-sukiwir
0.0.0
npmeka-donat14-sluey
0.0.0
npmeka-donat34-breki
0.0.0
npmeka-donat34-sluey
0.0.0
npmeka-donat40-riris
0.0.0
npmeka-dradag100-miaww
0.0.0
npmeka-dradag43-kuki
0.0.0
npmeka-empal30-sluey
0.0.0
npmeka-empal42-sukiwir
0.0.0
npmeka-empal52-pore
0.0.0
npmeka-empal53-sukiwir
0.0.0
npmeka-empal63-sukiwir
0.0.0
npmeka-empal64-breki
0.0.0
npmeka-empal71-ruro
0.0.0
npmeka-empal71-sluey
0.0.0
npmeka-empal81-kyuki
0.0.0
npmeka-empal98-miaww
0.0.0
npmeka-enting14-breki
0.0.0
npmeka-enting48-breki
0.0.0
npmeka-enting87-breki
0.0.0
npmeka-esdoger35-breki
0.0.0
npmeka-esdoger53-breki
0.0.0
npmeka-esdoger71-pore
0.0.0
multi-2026-09-07-ghsa-malware-sweepSource advisory
HighAdvisory sweep6 Sept 2026
27 packages tracked
GitHub Advisory malware sweep - 2026-09-05/06 batch (`@liuliang520500/*` Chinese e-commerce SDK impersonators + `@domyjs/*` reactive-framework typosquats + `date-fns-formatter` date-fns typosquat + `trongridew` PyPI Tronix private-key exfil + `proxycer`/`dbt-sa-cli` generic PyPI install-time exfil)
Tail sweep after yesterday's batch. 6 @liuliang520500/* npm packages impersonate Sina Taoke, Pinduoduo, JD.com, and Taobao SDKs; 7 @domyjs/* npm packages typosquat a reactive-framework namespace; date-fns-formatter extends the date-fns typosquat family; trongridew (PyPI) is a Tron/TRX private-key exfil dropper; proxycer/dbt-sa-cli are install-time IP+username exfil pentest artefacts.
npmPyPI
Affected packages27 packages · 27 versions
npm@domyjs/collapse
0.0.0
npm@domyjs/i18n
0.0.0
npm@domyjs/intersect
0.0.0
npm@domyjs/mask
0.0.0
npm@domyjs/reactive
0.0.0
npm@domyjs/router
0.0.0
npm@domyjs/throttle
0.0.0
npm@liuliang520500/jd-sdk
0.0.0
npm@liuliang520500/pdd-sdk
0.0.0
npm@liuliang520500/pdd-sdk-new
0.0.0
npm@liuliang520500/sinataoke_cn
0.0.0
npm@liuliang520500/sinataoke_cn_test
0.0.0
npm@liuliang520500/taobao-topclient
0.0.0
npm@pilllesss/yorn
0.0.0
npm1cattunnel
0.0.0
npmarray-frames
0.0.0
npmarray-scala
0.0.0
npmbtn-particles
0.0.0
npmdate-fns-formatter
0.0.0
PyPIdbt-sa-cli
0.0.1
npmdcftunnel
0.0.0
npminfinity-grid
0.0.0
npmjwt-logger
0.0.0
npmmulticore-kit
0.0.0
npmnode-helper
0.0.0
PyPIproxycer
0.1.0
PyPItrongridew
0.0.1
multi-2026-09-06-ghsa-malware-sweepSource advisory
HighAdvisory sweep5 Sept 2026
38 packages tracked
GitHub Advisory malware sweep - 2026-09-04/05 batch (`houdus` Windows sandbox-detection dropper + `timeweave` Windows WinExec dropper + Box internal dep-confusion via `canarytokens.com` DNS + `tailwind-contact-forms` crypto-drainer typosquat + `line-through` + `real-router-telemetry` + `claude-channel-discord` recon + amirgo4496 PyPI dep-confusion campaign)
Multi-ecosystem sweep. houdus (PyPI, Sept 5) is a Windows-only sandbox-detecting dropper; timeweave fetches Windows executables from globaltimedata.com via WinExec. Also: Box internal dep-confusion via canarytokens.com DNS, tailwind-contact-forms crypto-drainer typosquat, line-through/real-router-telemetry webhook.site exfil, and the amirgo4496 PyPI dep-confusion campaign.
npmPyPI
Affected packages38 packages · 62 versions
npm@crysnovax/baileys
0.0.0
npm@crysnovax/baileys-fixed
0.0.0
npm@crysnovax/baileys-stable
0.0.0
npm@crysnovax/plug
0.0.0
PyPIastlsi
0.1.0
npmbox-sign-client
1.0.0
npmbox-sign-client-poc
1.0.0
PyPIchartkit-core
1.0
npmclaude-channel-discord
9.9.9
npmdamp_coyote_0xrequest
1.0.0
npmdamp_guanaco_z3n
1.0.0
npmdamp_haddock_requirement
1.0.0
npmdamp_manatee_z3n
1.0.0
npmdamp_mastodon_z3n
1.0.0
npmdamp_pelican_z3n
1.0.0
npmdamp_spoonbill_coral-60
1.0.0
npmdamp_vulture_z3n
1.0.0
npmdamp_wolverine_white-89
1.0.0
npmdampradio
1.0.0
npmdanangwijaya
1.0.0
npmdanasah
1.0.0
npmdandelion-amber-owt940-project
1.0.0
npmdandelion-brook-wuk348-project
1.0.0
npmdandelion-cliff-atc189-project
1.0.0
npmdandelion-coral-rpv024-project
1.0.0
npmdandelion-dune-cli341-project
1.0.0
npmdandelion-giraffe-mpa122-project
1.0.0
PyPIhoudus
1.0.01.0.1
npmline-through
1.0.0
PyPImetricboxlite
1.02.0
PyPIolympuslib
99.99.0
PyPIpymaas
99.99.0
PyPIqoeoe
0.1.0
npmreal-router-telemetry
1.0.11.0.4
npmtailwind-contact-forms
0.5.00.5.10.5.20.5.30.5.40.5.50.5.60.5.70.5.80.5.90.5.100.5.110.5.12
PyPItimeweave
1.0.01.1.01.2.01.3.01.4.01.5.01.6.01.7.01.8.01.9.0
PyPItpu-raiden-jax
99.99.0
npmulid-intel
0.0.0
multi-2026-09-05-ghsa-malware-sweepSource advisory
HighAdvisory sweep4 Sept 2026
10 packages tracked
GitHub Advisory malware sweep - 2026-09-04 batch (10-package npm-only day: `@bx-ui-framework/*` + `grivy-packages.com` remote-tarball hijack clusters + `@yuva2210/okx-poc-rce-impact` + `@avigilon/node-webrtc` dep-confusion recon + `wallet-watcher` BIP-39/ETH-key AES-256-GCM stealer + `mcp-consultasdeveiculos-client` CLI-token OOB exfil + `vitest-cli-dev` remote-`new Function()` dropper)
10-package npm-only sweep. Two remote-tarball hijack clusters (@bx-ui-framework/* via artifactorymanager.com/remoteknight.com; @grab-food/order-sdk-web+lil-swisgom-hlepers via grivy-packages.com), wallet-watcher BIP-39/ETH-key AES-256-GCM stealer, dep-confusion recon (OKX + Avigilon), and vitest-cli-dev remote-new Function() dropper.
npm
Affected packages10 packages · 24 versions
npm@avigilon/node-webrtc
2.1.42.1.5
npm@bx-ui-framework/authentication
1.2.015.0.0
npm@bx-ui-framework/common
1.2.015.0.0
npm@bx-ui-framework/microfrontend
15.0.0
npm@grab-food/order-sdk-web
49.9.9
npm@yuva2210/okx-poc-rce-impact
2.0.0
npmlil-swisgom-hlepers
49.9.9
npmmcp-consultasdeveiculos-client
0.0.20.1.00.1.1
npmvitest-cli-dev
10.0.010.0.110.0.210.0.310.0.410.0.510.0.610.0.7
npmwallet-watcher
1.0.01.0.11.0.2
multi-2026-09-04-ghsa-malware-sweepSource advisory
HighAdvisory sweep3 Sept 2026
29 packages tracked
GitHub Advisory malware sweep - 2026-09-03 batch (10-package "Frankly Malicious" `frank`/`frengki0707` Indonesian dep-confusion campaign resurgence targeting Apple + Google/GCP + PyPI `2026-09-telemetry-helper` GitHub-Gist cred-exfil campaign + `@stellarshift/*` Lark/Feishu+FortiClient targeted enterprise supply chain + `tailwindcss-fluid-styles` CHAINDROP Ethereum-RPC on-chain C2 loader + `real-router-utils` webhook.site fingerprint)
19-package sweep: Panther-tracked frengki0707 "Frankly Malicious" actor resurfaces with 10 apple-/google-/frank- dep-confusion drops after ~4 months. PyPI 2026-09-telemetry-helper campaign exfils env-vars to GitHub Gist via hardcoded PAT. `@stellarshift/ (4 pkgs) targets Lark/Feishu+FortiClient endpoints; tailwindcss-fluid-styles` uses CHAINDROP on-chain Ethereum C2.
npmPyPI
Affected packages29 packages · 49 versions
npm@quantixfinance/api
1.0.0
npm@quantixfinance/common
1.0.0
npm@quantixfinance/config
1.0.0
npm@quantixfinance/contracts
1.0.0
npm@quantixfinance/sdk
1.0.0
npm@quantixfinance/supabase
1.0.0
npm@quantixfinance/token
1.0.0
npm@quantixfinance/tron
1.0.0
npm@quantixfinance/ui
1.0.0
npm@quantixfinance/wallet
1.0.0
npm@stellarshift/abi-tools
1.0.11.0.3
npm@stellarshift/chain-metadata
1.0.11.0.3
npm@stellarshift/evm-address-kit
1.0.11.0.3
npm@stellarshift/token-units
1.0.11.0.3
npmapple-cktool-internal-api-v9
0.0.0
npmapple-internal-test-utility
0.0.0
PyPIcompany-sdk
0.0.1
PyPIenv-validator-tool
1.0.01.0.11.0.2
npmfrank-apple-sync-service
0.0.0
npmfrank-apple-utils
0.0.0
npmfrank-bot-gogle-cloning
0.0.0
npmfrank-research-poc-apple
0.0.0
npmgoogle-cloud-internal-build-helper
0.0.0
npmgoogle-cloud-internal-core-utils
0.0.0
npmgoogle-cloud-mono-repo-helper
0.0.0
npmgoogle-internal-cloud-audit-security-check
0.0.0
npmreal-router-utils
0.0.0
npmtailwindcss-fluid-styles
1.0.01.0.11.0.22.0.02.0.12.0.52.0.62.0.7
PyPItelemetry-helper
1.0.01.0.11.0.21.1.01.2.01.3.02.0.02.0.1
multi-2026-09-03-ghsa-malware-sweepSource advisory
HighAdvisory sweep2 Sept 2026
4 packages tracked
GitHub Advisory malware sweep - 2026-09-02 batch (PyPI `syswatch` Snow Stealer - third `2026-08-envprovision` campaign package + npm `eslint-rxjs@1.0.1` typosquat of `eslint-plugin-rxjs` + npm `eyiouss` + `twapfetch` CWE-506 boilerplate takedowns)
PyPI syswatch@1.0.0 is a third package in the 2026-08-envprovision Snow Stealer campaign (browser + wallet infostealer, sandbox evasion, log wiping on Windows). npm eslint-rxjs@1.0.1 typosquats eslint-plugin-rxjs (OpenSSF flagged: "communicates with a domain associated with malicious activity"). eyiouss and twapfetch are all-versions CWE-506 boilerplate npm takedowns.
npmPyPI
Affected packages4 packages · 4 versions
npmeslint-rxjs
1.0.1
npmeyiouss
0.0.0
PyPIsyswatch
1.0.0
npmtwapfetch
0.0.0
multi-2026-09-02-ghsa-malware-sweepSource advisory
HighAdvisory sweep1 Sept 2026
45 packages tracked
GitHub Advisory malware sweep - 2026-09-01 batch (19-package `@yane88/*` Windows dev-toolchain dep-confusion probe (IntelliJ IDEA 2026.2, Listary, Reqable, ripgrep, HexHub, WorkBuddy) + PyPI `pyservercheck` Lazarus/PolinRider EtherHiding v0.1.x + `kendo-angular-window` Telerik typosquat + `fuels-*` Fuel Labs SDK 4-package typosquat + `verify-contract-*`/`generate-schema-*` EVM smart-contract-verifier 4-package cluster + `hyperliquid-composer` DeFi typosquat + `@viertechjs/*` dep-confusion 3-pack (Baileys WhatsApp / API / wb) + `react-mongoose`/`express-mongo-limit` MongoDB stack typosquats + `bamru` clipboard/screen harvester (new-pointer.vercel.app C2) + PyPI `gcphelpit` GCP-help infostealer + PyPI `tallyboxlite` recon + CWE-506 boilerplate takedowns)
19-pkg @yane88/* scope probes internal Windows dev-tool naming; PyPI pyservercheck@0.1.x is a PolinRider EtherHiding stager (.pth persistence, blockchain C2); fuels-* (4) typosquats Fuel Labs SDK; verify-contract-*/generate-schema-* (4) targets viem+ethers verifiers; bamru is a clipboard/screen harvester (C2 new-pointer.vercel.app); PyPI gcphelpit is an infostealer.
npmPyPI
Affected packages45 packages · 48 versions
npm@fdr-mar/promos-types
0.0.0
npm@viertechjs/api
0.0.0
npm@viertechjs/baileys
0.0.0
npm@viertechjs/wb
0.0.0
npm@yane88/hexhub-client
0.0.0
npm@yane88/idea-2026.2
0.0.0
npm@yane88/idea-2026.2-01
0.0.0
npm@yane88/idea-2026.2-02
0.0.0
npm@yane88/idea-2026.2-03
0.0.0
npm@yane88/idea-2026.2-04
0.0.0
npm@yane88/idea-2026.2-05
0.0.0
npm@yane88/idea-2026.2-06
0.0.0
npm@yane88/listary
0.0.0
npm@yane88/listary-01
0.0.0
npm@yane88/listary-02
0.0.0
npm@yane88/ripgrep-win
0.0.0
npm@yane88/term-reqable
0.0.0
npm@yane88/term-reqable-01
0.0.0
npm@yane88/term-reqable-02
0.0.0
npm@yane88/workbuddy
0.0.0
npm@yane88/workbuddy-01
0.0.0
npm@yane88/workbuddy-02
0.0.0
npm@yane88/workbuddy-03
0.0.0
npmbamru
0.0.0
npmcore_main
0.0.0
npmcre-setup
0.0.0
npmexpress-mongo-limit
0.0.0
npmfuels-core
0.0.0
npmfuels-forc
0.0.0
npmfuels-typegen
0.0.0
npmfuels-versions
0.0.0
PyPIgcphelpit
0.1.00.1.10.1.2
npmgenerate-schema-ethers
0.0.0
npmgenerate-schema-viem
0.0.0
npmhyperliquid-composer
0.0.0
npmkendo-angular-window
0.0.0
npmmatrix-by-lmx
0.0.0
npmnpx-oob-package
0.0.0
PyPIpyservercheck
0.1.00.1.1
npmquartz-core
0.0.0
npmrandomunblockedwebsite
0.0.0
npmreact-mongoose
0.0.0
PyPItallyboxlite
1.0
npmverify-contract-ethers
0.0.0
npmverify-contract-viem
0.0.0
multi-2026-09-01-ghsa-malware-sweepSource advisory
HighAdvisory sweep31 Aug 2026
26 packages tracked
GitHub Advisory malware sweep - 2026-08-31 batch (npm `grafeno-actions@999.0.0` Wave 3 dep-confusion pivot + Deutsche Bank `Autobahn` Electron dep-confusion probe (`autobahn-electron-probe@99.99.1`, `com.db.autobahn.notification-center-electron@88.88.2`) + `fuels-*`/`verify-contract-*`/`generate-schema-*` web3-tooling typosquat cluster (6 packages) + PyPI `tronlinker` Tronix crypto-wallet-drain + late-arriving 2026-08-30 `*-codex`/`*fcrxz` clusters + late `trongridor` + `auth-app-streamlit` PyPI)
Wave 3 of the grafeno-* Brazilian-fintech campaign lands as grafeno-actions@999.0.0 - a pure dependency-confusion pivot after Waves 1-2's pre-install payload. Alongside it: a Deutsche Bank Autobahn Electron dep-confusion probe (2 pkgs), a 6-pkg web3 typosquat cluster (fuels-* / verify-contract-* / generate-schema-*), a PyPI Tronix drain, and 12 late-arriving 2026-08-30 advisories.
npmPyPI
Affected packages26 packages · 26 versions
npm@fidzzhost/baileys
0.0.0
npm@lucideproxy/svg
0.0.0
PyPIauth-app-streamlit
2.1.1
npmautobahn-electron-probe
99.99.1
npmbrat-codex
0.0.0
npmcloudfcrxz
0.0.0
npmcloufcrxz
0.0.0
npmcom.db.autobahn.notification-center-electron
88.88.2
npmcre-setup
1.0.0
npmeslint-prettier-js
0.0.0
npmfuels-core
1.0.0
npmfuels-typegen
1.0.0
npmgenerate-schema-ethers
1.0.0
npmgenerate-schema-viem
1.0.0
npmgrafeno-actions
999.0.0
npmh2-codex
0.0.0
npmh3-codex
0.0.0
npmh3client
0.0.0
npmnpx-oob-package
1.0.2
npmoriginaldevelopmentstelemetry
0.0.0
npmreal-browser-plus
0.0.0
npmredis-cookie-server
0.0.0
PyPItrongridor
0.0.1
PyPItronlinker
0.0.1
npmverify-contract-ethers
1.0.0
npmverify-contract-viem
1.0.0
multi-2026-08-31-ghsa-malware-sweepSource advisory
HighAdvisory sweep30 Aug 2026
6 packages tracked
GitHub Advisory malware sweep - 2026-08-30 batch (npm `grafeno-*` Wave 2 env-var stealer + reverse shell to 216.126.236.46:4444 (3 packages: `grafeno-webhook`, `grafeno-payments`, `grafeno-billing`) + npm CWE-506 takedown burst: `quesoeducation`, `opiumbest`, `gclassroom`)
Second wave of the grafeno-* Brazilian-fintech-themed cluster surfaced on 2026-08-30: grafeno-webhook, grafeno-payments, and grafeno-billing (all v1.0.0) reuse the 216.126.236.46 C2 host from Wave 1 but swap the x.sh + crontab mechanism for env-var scraping (AWS|TOKEN|KEY|SECRET|PASS|API) + a reverse bash shell on port 4444. Plus three CWE-506 boilerplate takedowns: quesoeducation, opiumbest, gclassroom.
npm
Affected packages6 packages · 10 versions
npmgclassroom
1.0.01.1.1
npmgrafeno-billing
1.0.0
npmgrafeno-payments
1.0.0
npmgrafeno-webhook
1.0.0
npmopiumbest
1.0.01.0.11.1.1
npmquesoeducation
1.0.01.0.67
multi-2026-08-30-ghsa-malware-sweepSource advisory
HighAdvisory sweep29 Aug 2026
46 packages tracked
GitHub Advisory malware sweep - 2026-08-29 batch (npm `access-token-delta` vercel.app remote-eval cluster (3, `eth-pino` + `js-array-tokens` + `js-tokens-array`) + npm `limbomail.com` Discord-MFA Windows dropper pair (`mfacord` + `mfakit`) + npm `secretkey2fa` Minecraft/Microsoft-account stealer + npm `supersignaturenature` RSA/DES chain via `manager-thedate` + npm `techportal` HTTP+DNS beacon to `oob.asm5.net` + npm `vs-modules` Windows .bat dropper + npm `vitest-chalk-pro` jsonbin.io detached-child C2 + npm `repo.securityctrl.com` mass dependency-confusion probe (18+ enterprise namespaces: Intuit, Atlassian, Firebase, Postman, Oracle, Amplitude, Ring, Alimama, Nx, Libra…) + npm `grafeno-*` preinstall + cron persistence cluster (9 packages, 216.126.236.46/x.sh) + PyPI `calcboxlite` + `pygame-renderkit` misc + massive scripted CWE-506 bursts (`3layerdipstack*` ~100+, `classlink-*` ~100+))
Large 24h window ending 2026-08-29: the standout is a compromise of @7nohe/openapi-react-query-codegen by the "Trinitite" Mini Shai-Hulud continuation (tracked separately). Around it: three coordinated operator clusters with full IOCs (npm vercel.app remote-eval typosquats, npm limbomail.com Discord-MFA droppers, npm repo.securityctrl.com mass enterprise-namespace dependency-confusion probe), a grafeno-* cron-persistence cluster, and hundreds of scripted CWE-506 boilerplate burst-publishes (3layerdipstack*, classlink-*).
npmPyPI
Affected packages46 packages · 49 versions
npmalimama-minisite
45.0.0
npmamplitude-experiment
55.0.0
npmborsh-lite
npmbui-react-10themes
PyPIcalcboxlite
1.0
npmclmm-fee-audit
npmconfluence-rest
30.0.0
npmeip712-lite
npmeth-pino
2.0.3
npmfirestore-lite
45.0.0
PyPIflask-header-guard
1.0.0
npmgrafeno-api
1.0.01.0.1
npmgrafeno-auth
1.0.0
npmgrafeno-client
1.0.0
npmgrafeno-config
1.0.0
npmgrafeno-core
1.0.01.0.1
npmgrafeno-logger
1.0.01.0.1
npmgrafeno-pix
1.0.01.0.1
npmgrafeno-sdk
1.0.01.0.1
npmgrafeno-utils
1.0.0
npmintuit-authz
55.0.0
npmjira-projects-backbone
45.0.0
npmjs-array-tokens
1.0.2
npmjs-tokens-array
1.0.01.1.1
npmlibrastandardlib
45.0.0
npmmanager-thedate
1.0.151.0.16
npmmfa-js
npmmfacord
1.0.21.0.3
npmmfakit
1.4.0
npmmkt-ui-library
45.0.0
npmnx-app
9999.0.0-security-test
npmoit-lib-oracle-util
45.0.0
npmone-intuit-help-system-utils
45.0.0
npmozturk-mfa
npmpaper-password-input
45.0.0
npmpayments-ui-services
45.0.0
PyPIpygame-renderkit
1.2.0
npmqbo-ui-services
45.0.0
npmsearch-reservation
55.0.0
npmsecretkey2fa
1.0.1
npmsentrykit
30.0.0
npmsupersignaturenature
1.0.51.0.6
npmtechportal
4.0.10
npmvitest-chalk-pro
10.0.7
npmvs-modules
1.2.2
npmvui-gateway
45.0.0
multi-2026-08-29-ghsa-malware-sweepSource advisory
HighAdvisory sweep28 Aug 2026
36 packages tracked
GitHub Advisory malware sweep - 2026-08-28 batch (PyPI `flyteplugins-*` dependency-confusion cluster (4) + PyPI `discordnv` Discord/Roblox DPAPI infostealer + PyPI `decoris` Roblox cookie stealer + PyPI `sap-quarterly-report` + `ekx-report-utils` DNS-exfil pair + PyPI `mathkitlite` PROBABLY_PENTEST + npm `@postman-cse/okta-aio-darwin-arm64` internal-namespace dependency-confusion probe + npm `@hd-team/*` cluster (8) + npm `hydration-ui-dlx` / `svelte-ui-dlx` hydration-lookalike continuation + npm `tailwindcss-*` typosquats (2) + npm long-tail CWE-506 boilerplate)
31 new GHSA malware advisories in the 24h window ending 2026-08-28. Highlights: 4 flyteplugins-* PyPI packages all published at the identical exact version 2.6.10 - a dependency-confusion probe against Union.ai / Flyte internal package namespaces; PyPI discordnv@0.8.0 steals Discord tokens plus DPAPI-decrypts Roblox cookies with full Discord-webhook + Google-Apps-Script + registry-persistence IOCs; PyPI sap-quarterly-report + ekx-report-utils share a DNS-exfil campaign; npm @postman-cse/okta-aio-darwin-arm64 reads as a Postman internal okta-aio binary namespace hit.
npmPyPI
Affected packages36 packages · 68 versions
npm@fleetbo/svro
0.0.20.0.30.0.40.0.50.0.60.0.70.0.90.0.100.0.110.0.120.0.130.0.140.0.150.0.160.0.170.0.190.0.200.0.210.0.220.0.230.0.240.0.260.0.270.0.290.0.300.0.310.0.320.0.330.0.340.0.350.0.370.0.380.0.390.0.400.0.42
npm@hd-team/app-dnpkg-beta
npm@hd-team/app-dnpkg-eight
npm@hd-team/app-dnpkg-prod
npm@hd-team/app-dnpkg-ten
npm@hd-team/app-dnpkg-test
npm@hd-team/app-dnpkg-three
npm@hd-team/app-impkg-prod
npm@hd-team/app-impkg-test
npm@postman-cse/okta-aio-darwin-arm64
npm@znan/wabot
npmcharclass
PyPIdecoris
0.3.00.3.3
npmdeepjoin
PyPIdiscordnv
0.8.0
PyPIekx-report-utils
0.1.00.2.00.3.00.4.0
PyPIflyteplugins-agento11y
2.6.10
PyPIflyteplugins-echo
2.6.10
PyPIflyteplugins-nsight
2.6.10
PyPIflyteplugins-redis
2.6.10
npmhydration-ui-dlx
npminspectstack
PyPImathkitlite
0.1.0
npmmodule-relpath
npmmorglog
npmpushgitquickx
1.0.01.0.41.0.51.0.61.0.71.0.81.0.91.0.101.0.111.0.121.0.131.0.141.0.151.0.161.0.17
PyPIsap-quarterly-report
1.0.0
npmsigcheck
npmstackpaths
npmsvelte-ui-dlx
npmtailwindcss-3d-animate
npmtailwindcss-form-styles
npmveloq
PyPIyaml-report-formatter
0.1.00.2.00.3.0
PyPIyamlformat-tools
0.1.0
PyPIyamlformatter-utils
1.0.0
multi-2026-08-28-ghsa-malware-sweepSource advisory
CriticalCompromise28 Aug 2026
1 package tracked
`@7nohe/openapi-react-query-codegen` compromised - "Trinitite" (Mini Shai-Hulud continuation) worm published 10 poisoned versions via a fork PR + `issue_comment` trigger without an author-association gate
On 2026-08-28 an attacker published 10 malicious versions of @7nohe/openapi-react-query-codegen (~150K npm weekly downloads) in a ~20-minute window. Root cause: an issue_comment-triggered GitHub Actions release workflow without an author-association gate - any GitHub user could open a fork PR, comment npm publish, and the pipeline checked out the fork, ran pnpm install (executing the attacker's preinstall hook) with id-token: write and minted an npm OIDC trusted-publishing token to ship the poisoned versions. Payload is a "Trinitite: Sponsored by Preview 2 Effects" credential-stealer worm continuing the Mini Shai-Hulud / TeamPCP lineage.
npm
Affected packages1 package · 10 versions
npm@7nohe/openapi-react-query-codegen
0.5.40.5.51.6.31.6.42.2.12.2.23.0.33.0.40.0.0-365d4eb738d3146583431948d3ba6e27a32556be0.0.0-ec7876d6c917dad516ba69bbfafc948b834bf0ab
npm-2026-08-28-trinitite-openapi-react-query-codegenSource advisory
HighAdvisory sweep27 Aug 2026
24 packages tracked
GitHub Advisory malware sweep - 2026-08-27 batch (npm `hydration-vli-ui` ELF-in-JS Linux RAT + npm `commonjs-code-token` remote-eval C2 + npm `spotify-url-resolvers` Telegram-C2 project-dir exfil + npm `octopus-action` Burp Collaborator preinstall exfil + npm `chai-plus` `taskforge-9xv` second-stage installer + PyPI `pybitjs` Lazarus/PolinRider PTH-injection + PyPI `trongridet` TRX private-key exfil + PyPI PROBABLY_PENTEST cluster (4) + npm CWE-506 boilerplate (14))
24 new GHSA malware advisories in the 24h window ending 2026-08-27. Highlights: npm hydration-vli-ui@1.0.0 ships a Linux x86_64 ELF disguised as JavaScript, on import establishes a full-featured RAT with SSH-key theft and systemd persistence; npm commonjs-code-token postinstall pulls a token from access-token-delta.vercel.app and eval()s it; npm spotify-url-resolvers archives the project directory (including .env) hourly to a Telegram bot; PyPI pybitjs is attributed to Lazarus/PolinRider with blockchain-based C2 delivery.
npmPyPI
Affected packages24 packages · 19 versions
PyPI0xfighter3
0.1
PyPIbigquery-agent-analytics-tracing
0.0.00.0.1
npmbnotify-web-sdk
npmchai-plus
6.2.36.2.46.2.5
npmcommonjs-code-token
1.0.01.0.1
npmdumb-binding-gyp-package
npmgrandfather_of_the_desert
npmhydration-vli-ui
1.0.0
npmmodel-poc-suhail
npmnode-pino
npmoctopus-action
1.0.01.0.1
npmparallely
PyPIpybitjs
0.1.0
PyPIrce-test
0.1
npmself-certificates
npmself-sign
npmspotify-url-resolvers
3.4.2
npmsvelte-vli-ui
PyPIsyntaxerror-package-12345
0.1
npmtaskforge-9xv
1.3.0
npmthe_tax_free_cashier_is_at_9f
PyPItrongridet
0.0.1
npmtset_racie
npmzenntechinc-cli
1.6.41.6.6
multi-2026-08-27-ghsa-malware-sweepSource advisory
HighAdvisory sweep26 Aug 2026
28 packages tracked
GitHub Advisory malware sweep - 2026-08-26 batch (PyPI `envprovision` Snow Stealer + PyPI `minecraft-ytreceiver` Telegram-C2 webcam/keylogger + PyPI `python-walletlibr-v` Windows install-time dropper + npm `twork-data-services-*` internal-scope dep-confusion + npm `wm-*` dep-confusion + npm Vue/Svelte/Vite lookalike cluster (15) + npm CWE-506 boilerplate (5))
28 new GHSA CWE-506 advisories in the 48h window ending 2026-08-26. Highlights: PyPI envprovision drops "Snow Stealer" browser/wallet infostealer with sandbox evasion; PyPI minecraft-ytreceiver runs webcam/screenshot/keylogger over Telegram C2; PyPI python-walletlibr-v fires a Windows batch dropper at pip install; npm twork-data-services-* and wm-* clusters look like internal-namespace dep-confusion probes; a 15-package Vue/Svelte/Vite lookalike cluster and 5 CWE-506 boilerplate names round out the batch.
npmPyPI
Affected packages28 packages · 11 versions
npmarray-shuffler-utils-99
npmdim-hydration-ui
npmdim-svelte-ui
PyPIenvprovision
1.2.01.3.01.4.0
npmexpress-security-policy
npmfivem-tool-helper
npmfivem-tool-helper-v2
npmfoldmap
npmhexdrift
npmhydration-cls-ui
npmhydration-ui-cls
PyPIminecraft-ytreceiver
0.1.00.2.00.3.00.4.00.5.0
PyPIpython-walletlibr-v
0.7.9
npmrenovate-config-doctolib
npmsnapbuf
npmsvelte-cls-ui
npmsvelte-ui-cls
npmtwork-data-services-proxy-prime-api-v1-account-overdraft-info
20.7.4
npmtwork-data-services-sme-operations-authorizations
20.8.9
npmvite-plugin-cleaner
npmvite-plugin-logo
npmvite-plugin-model
npmvortnode
npmvue-compiler-sfc-plugin
npmvue-template-compiler-plugin
npmwm-eslint-fe
npmwm-idp-sdk
npmwm-lib-env-provider
multi-2026-08-26-ghsa-malware-sweepSource advisory
HighAdvisory sweep25 Aug 2026
10 packages tracked
GitHub Advisory malware sweep - 2026-08-25 batch (PyPI `msrcpoc` 99.1.9 OpenSSF PA malicious-command detonation + PyPI `multyproccess` `multiprocess` typosquat infostealer with browser/wallet/clipboard theft + npm boilerplate CWE-506 spray of 8 disposable throwaway names)
10 new GHSA CWE-506 advisories in the 24h ending 2026-08-25. Highlights: PyPI msrcpoc@99.1.9 looks like a 99.x.x dep-confusion / Microsoft MSRC-lookalike probe; PyPI multyproccess is a multiprocess typosquat with a full-featured browser/wallet/clipboard infostealer; the 8 npm entries are boilerplate throwaway names with no per-package IOCs.
npmPyPI
Affected packages10 packages · 5 versions
npmclasswork
npmiamhungryrn
npmiwantaburger
PyPImsrcpoc
99.1.9
PyPImultyproccess
2.32.32.32.42.32.52.32.6
npmpleasedoyourhomework
npmsonsonsahur
npmsuperdupertest111
npmtungtungisgoated
npmwhatsgoodlookingbabycreed
multi-2026-08-25-ghsa-malware-sweepSource advisory
HighAdvisory sweep24 Aug 2026
12 packages tracked
GitHub Advisory malware sweep - 2026-08-24 batch (PyPI `envprovision` Snow Stealer + PyPI `cryptgraphy`/`mlflow-otel-instrumentor` cryptominer worm continuation of `2026-08-boto4` + npm `fund-list-filter`/`fund-portfolio` 999.9.12 dep-confusion + npm `@opap/player-kyc-widget` OPAP gambling KYC probe + npm `hydration-dim-kit`/`svelte-dim-kit` framework typosquat + npm `@sdgdfgdfhhhfd/*` mash-scope dropper + npm `conversa-sdk` 10-version hijack + npm `identitysecuretokenserv` internal-name dep-confusion)
13 new GHSA CWE-506 advisories in the 24h ending 2026-08-24. Highlights: PyPI envprovision drops the Snow Stealer infostealer on Windows; cryptgraphy+mlflow-otel-instrumentor extend the 2026-08-boto4 cryptominer-worm operator with a new campaign brand; npm @opap/player-kyc-widget is a targeted probe against Greek gambling operator OPAP.
npmPyPI
Affected packages12 packages · 18 versions
npm@opap/player-kyc-widget
3.999.999
npm@sdgdfgdfhhhfd/chainvista
npm@sdgdfgdfhhhfd/multiviewr
npmconversa-sdk
1.0.01.0.41.0.51.0.61.0.81.0.92.0.02.0.22.0.32.0.4
PyPIcryptgraphy
1.0.0
PyPIenvprovision
1.2.01.3.01.4.0
npmfund-list-filter
999.9.12
npmfund-portfolio
999.9.12
npmhydration-dim-kit
npmidentitysecuretokenserv
PyPImlflow-otel-instrumentor
1.1.0
npmsvelte-dim-kit
multi-2026-08-24-ghsa-malware-sweepSource advisory
HighAdvisory sweep23 Aug 2026
23 packages tracked
GitHub Advisory malware sweep - 2026-08-23 batch (npm `@syncraft-labs/{core,react,vue}` EtherHiding blockchain-C2 dropper + 5-package `N-*-sight-web` bitbucket dropper + 4-package `*-testing-utils`/`*-testkit` jsonstorage.net pino-impersonator + 5-package `stillm4ddpocs-*` oast.fun DNS dep-confusion + `totp-utils` Minecraft JAR + Discord stealer + `create-coin` esbuild typosquat + `@usaa-grp` USAA dep-confusion + PyPI `scrambleeeer` 5th variant + PyPI `libasync` miner)
20 new GHSA CWE-506 advisories in the 24h ending 2026-08-23. Highlights: @syncraft-labs/{core,react,vue} uses Ethereum-blockchain dead-drop C2 (EtherHiding); five N-*-sight-web packages fetch mutable Bitbucket payloads; four pino-impersonators pull from jsonstorage.net; totp-utils drops a Minecraft mod JAR + steals Discord tokens.
npmPyPI
Affected packages23 packages · 37 versions
npm@syncraft-labs/core
0.4.1
npm@syncraft-labs/react
0.4.1
npm@syncraft-labs/vue
0.4.1
npm@usaa-grp-personal-profile/personal-profile-common
999.0.0
npm10-shardsight-web
1.0.01.0.1
npm2-loadsight-web
1.0.01.0.1
npm3-buildsight-web
1.0.01.0.1
npm6-viewsight-web
1.0.01.0.1
npm8-fetchsight-web
1.0.01.0.1
npmchai-as-testkit
2.3.5
npmcreate-coin
npmhatdhat-testkit
3.2.14
npminternallib_v902
PyPIlibasync
1.0.0
npmrust-testing-utils
2.3.0
PyPIscrambleeeer
0.1.0
npmsolidity-testing-utils
1.2.0
npmstillm4ddpocs-demo-gadget
999.9.10999.9.12999.9.20
npmstillm4ddpocs-demo-sprocket
999.9.12
npmstillm4ddpocs-demo-widget
999.9.9
npmstillm4ddpocs-rtest-alpha
999.9.9999.9.10
npmstillm4ddpocs-rtest-bravo
999.9.9999.9.10
npmtotp-utils
1.4.21.4.31.4.41.4.51.4.61.4.71.4.81.4.9
multi-2026-08-23-ghsa-malware-sweepSource advisory
HighAdvisory sweep22 Aug 2026
11 packages tracked
GitHub Advisory malware sweep - 2026-08-22 batch (PyPI `requests-crypt` = fourth `2026-08-reqcrypt` variant + PyPI `boto4` Telegram-C2 miner/worm + npm `lumen-pages-community` + `@gfe/lx-watcher` dep-confusion webhooks + `fuel-react` env exfil + `rollup-packages-node-polyfills` new JFrog-shape sibling + Postman/Okta typosquat + 3 CWE-506 no-IOC pulls)
13 new GHSA CWE-506 malware advisories in the 24h ending 2026-08-22. PyPI requests-crypt is the fourth variant of the 2026-08-reqcrypt HTTP-response exec() register; boto4 is a Telegram-bot-controlled miner + LAN worm. npm side: lumen-pages-community/@gfe/lx-watcher dep-confusion beacons, fuel-react env exfil, and a new JFrog/Lazarus rollup-family sibling.
npmPyPI
Affected packages11 packages · 30 versions
npm@gfe/lx-watcher
1.5.31.5.4
npm@postman-cse/okta-aio-linux-arm64
0.8.100.8.110.9.00.9.10.10.00.10.10.10.20.10.30.10.40.10.50.10.60.10.70.10.80.10.90.11.00.11.10.11.20.11.30.11.40.11.50.11.6
PyPIboto4
1.0.01.0.2
npmfuel-react
91.0.0
npmkelly-sizing
npmlumen-pages-community
9.9.9
npmpolymarket-trading-developer-tool
PyPIrequests-crypt
0.1.0
npmrollup-packages-node-polyfills
npmsaas-f-testing
PyPIscrambleeer
0.1.00.1.1
multi-2026-08-22-ghsa-malware-sweepSource advisory
HighAdvisory sweep21 Aug 2026
2 packages tracked
GitHub Advisory malware sweep - 2026-08-21 batch (npm `coin-fees` Burp Collaborator credential recon with CI-aware dormancy + PyPI `reqcrypts` third `2026-08-reqcrypt` HTTP-response backdoor variant)
Two GHSA CWE-506 advisories published in the 24h ending 2026-08-21 06:00 UTC. npm coin-fees postinstall infostealer exfils ~/.npmrc tokens + CI/CD env secrets to a Burp Collaborator oastify.com beacon after a 30-120s dormancy delay; PyPI reqcrypts is a third variant of the 2026-08-reqcrypt HTTP-response exec() backdoor register.
npmPyPI
Affected packages2 packages · 5 versions
npmcoin-fees
20.1.1
PyPIreqcrypts
0.1.00.1.10.1.20.1.3
multi-2026-08-21-ghsa-malware-sweepSource advisory
HighAdvisory sweep20 Aug 2026
60 packages tracked
GitHub Advisory malware sweep - 2026-08-20 batch (PyPI `libasync` cryptominer typosquat continuation of `2026-07-pyqt6darktheme` register, PyPI `rc4-secure` OpenSSF PoC, npm `express-route-engine` jsonbin.io eval-loader, `base99-85x` base-x typosquat with plaintext key exfil to `168.231.81.80`, `mc-provider` Cosmos-registry impersonator with `supersig` transitive dropper, `x6842179305` XOR-Function dropper, `ai-texts-utils`+`ai-texts` bundled obfuscator payload, dep-confusion PoC families `dolyame-*`+`fb-*`+`devplatform-*`+`digital-interview-*`+`pfp-*`+`bigops-*`, express+eslint+create-react-app typosquat cluster, blockchain-toolkit typosquats `ethereum-validator`+`polygon-toolkit-validate`)
31 GHSA CWE-506 advisories in the 24h ending 2026-08-20 06:00 UTC. Headliners: PyPI libasync cryptominer with Windows-registry persistence (campaign 2026-08-libasync, continuation of 2026-07-pyqt6darktheme), npm express-route-engine eval-loader that fetches JSON payloads from jsonbin.io, and base99-85x base-x typosquat that streams caller-supplied private-key/seed material in cleartext to 168.231.81.80.
npmPyPI
Affected packages60 packages · 61 versions
npm@pablo_clueless/printr
0.0.0
npm@pablo_clueless/sniffr
0.0.0
npmai-texts
0.0.0
npmai-texts-utils
1.0.3
npmbase99-85x
5.0.2
npmbigops-umf-statist
0.0.0
npmbigops-watchdog-angular
0.0.0
npmbunnyhijack-test-0x00
0.0.0
npmcreate-react-app-text
0.0.0
npmcreate-react-app-ui
0.0.0
npmcreate-react-app-ux
0.0.0
npmdevplatform-api-clients
0.0.0
npmdevplatform-s3-client
0.0.0
npmdevplatform-spa-testing
0.0.0
npmdigital-interview-digital-interview-core
0.0.0
npmdolyame-boxy-atom-bnpl-store-button
0.0.0
npmdolyame-boxy-desktop-bnpl-card-panel
0.0.0
npmdolyame-boxy-independent-bnpl-info-images
0.0.0
npmdolyame-ui-form
0.0.0
npmemojifancy-print
0.0.0
npmeslint-commit-parser
0.0.0
npmeslint-config-consumerweb
0.0.0
npmethereum-validator
0.0.0
npmevil-pkg
0.0.0
npmexam-kit
0.0.0
npmexpress-enrouten-async
0.0.0
npmexpress-mocha-test
0.0.0
npmexpress-request-engine
0.0.0
npmexpress-route-engine
3.6.3
npmfb-cards-form-no-resident-information
0.0.0
npmfb-forms-form-boilerplate-contacts
0.0.0
npmfe-utils-core
0.0.0
npmfetchcraft
0.0.0
npmfilewisee
0.0.0
npmfinance-business-company-id-models
0.0.0
npmgoldstar-api-server
0.0.0
npmgriffin-transliterator
0.0.0
PyPIlibasync
1.0.0
npmmc-provider
1.0.10
npmnano-perf
0.0.0
npmnode-runtime-utils
0.0.0
npmo3forms
0.0.0
npmoptimize-regex
0.0.0
npmpfa-errors
0.0.0
npmpfp-block-mobile-steps
0.0.0
npmpfp-forms-independent-sme-glossary-anchor
0.0.0
npmpfp-forms-insurance-health
0.0.0
npmpfp-forms-sme-loan
0.0.0
npmpfp-forms-sme-sitebuilder
0.0.0
npmplatform-ui-codemods
0.0.0
npmpolygon-toolkit-validate
0.0.0
npmrallycoding
0.0.0
PyPIrc4-secure
1.0.0
npmsigchain-js
0.0.0
npmtest-pkg-pnpm
0.0.0
npmtest-pkg-x0
0.0.0
npmtest-pkg-yarn
0.0.0
npmtn-advertisement
0.0.0
npmwebpack-cdn-fetcher
0.0.0
npmx6842179305
1.0.01.0.1
multi-2026-08-20-ghsa-malware-sweepSource advisory
CriticalCompromise20 Aug 2026
5 packages tracked
Rust crates `arrayref` 0.3.10 + `internment` 0.8.7 + `append-only-vec` 0.1.9 poisoned with a build-time dropper via typosquat dependency `proc-macro1` (crates.io, 2026-08-20, 245M+ combined downloads, DPRK-overlap attribution)
Compromised maintainer accounts published arrayref@0.3.10 (244M downloads), internment@0.8.7, and append-only-vec@0.1.9 to crates.io. Each release added a single dependency line on typosquat crate proc-macro1, whose build.rs downloads and executes a platform-specific payload from 23.254.165.112:9089 during cargo build. Wiz attributes overlap to DPRK campaigns.
crates.io
Affected packages5 packages · 4 versions
crates.ioappend-only-vec
0.1.9
crates.ioarrayref
0.3.10
crates.iointernment
0.8.7
crates.ioproc-macro-en
crates.ioproc-macro1
1.0.107
crates-2026-08-20-arrayref-proc-macro1-build-timeSource advisory
HighAdvisory sweep19 Aug 2026
29 packages tracked
GitHub Advisory malware sweep - 2026-08-19 batch (Sui `@mysten/*` typosquat continuation day 6 `sui-graphql-rpc`+`sui-gql-rpc` targeted git-config allowlist, Chinese exam-cheat surveillance suite `sysc1`+`syjoy`+`syboy`+`sysdo`, pino/jsonspack revival `chai-as-gateway`+`chaikit`+`solidity-hold`, Streak sibling typosquat `streak-key-lib`+`streak-cal-core` ELF dropper, txs SDK Caesar loader pair `txs-runner-sdk`+`txs-lib-sdk`, `@sarex-team/*` DNS exfil pair, deepface Telegram-session PyPI typosquat `deepface-weight`+`deepface-weights`, `reqcrypt` HTTP-response backdoor)
28 GHSA CWE-506 advisories in the 24h ending 2026-08-19 06:00 UTC. Headline: *Sui `@mysten/ typosquat day 6** (sui-graphql-rpc, sui-gql-rpc) with a **targeted git-config allowlist** payload - dormant in CI, only fires for hardcoded developer identities. Also: 4-package Chinese exam-cheat surveillance, jsonspack` pino-typosquat revival, and a PyPI deepface Telegram-session stealer.
npmPyPI
Affected packages29 packages · 42 versions
npm@lilsccott6x9/devpipe-connector
1.0.0
npm@sarex-team/sdk-js
9.9.11
npm@sarex-team/viewer
9.9.11
npmchai-as-gateway
7.1.5
npmchaikit
2.3.5
npmchameleon-src
6.6.29
PyPIdeepface-weight
0.1.4
PyPIdeepface-weights
0.1.00.1.10.1.2
PyPIreqcrypt
0.1.0
PyPIreqcrypt-dev
0.1.0
npmsolidity-hold
2.0.1
npmssb-test-package
1.0.0
npmstreak-cal-core
1.0.0
npmstreak-key-lib
1.0.0
npmsui-gql-rpc
1.0.1
npmsui-graphql-rpc
1.0.1
npmsw-pluginer
1.0.01.0.11.0.21.1.01.2.0
npmsyboy
1.0.0
npmsyjoy
1.0.0
npmsysc1
1.0.01.0.1
npmsysdo
1.0.0
npmsystem-performance-helper
1.0.0
npmtable-ui-new
2.7.12.7.22.7.42.7.5
npmtailwind-custom-templates
0.7.2
npmtfjs-custom-module
1.0.0
npmtimed-assess
1.0.01.0.1
npmtwapfetch
1.1.01.1.1
npmtxs-lib-sdk
1.0.2
npmtxs-runner-sdk
1.0.01.0.1
multi-2026-08-19-ghsa-malware-sweepSource advisory
HighAdvisory sweep18 Aug 2026
13 packages tracked
GitHub Advisory malware sweep - 2026-08-17 / 2026-08-18 batch (Sui blockchain `@mysten/*` typosquat days 4-5 continuation `sui-move-graphql`+`sui-move-rpc`+`sui-gql-core`+`bcs-core`+`bucket-protocol-sdk-v2`, Tinkoff BNPL dep-confusion tail `bnpl-blocks-independent-bnpl-search`, LEB128 encoding typosquat pair `leb128x`+`ulebkit`, generic CWE-506 boilerplate `blastradar`+`runtime-health`, PyPI Telegram-RAT trio `socks5901`+`infogram-bot`+`httpz-requests`)
13 GHSA CWE-506 advisories across npm + PyPI in the 24h ending 2026-08-18 06:00 UTC (extended 2026-08-19 with two late PyPI Telegram-RAT entries). Headline: five-package Sui blockchain typosquat continuation (sui-move-graphql, sui-move-rpc, sui-gql-core, bcs-core, bucket-protocol-sdk-v2) extends the @mysten/* typosquat register into day-4/5. Also: Tinkoff BNPL dep-confusion tail, leb128x+ulebkit LEB128 typosquat pair, generic CWE-506 pair, and a PyPI Telegram-RAT trio socks5901+infogram-bot+httpz-requests.
npmPyPI
Affected packages13 packages · 26 versions
npmbcs-core
1.0.0
npmblastradar
1.0.0
npmbnpl-blocks-independent-bnpl-search
1.0.0
npmbucket-protocol-sdk-v2
1.0.0
PyPIhttpz-requests
1.8.01.21.5
PyPIinfogram-bot
1.0.01.2.01.2.11.3.01.4.01.5.01.6.01.6.11.7.01.8.01.9.0
npmleb128x
1.0.0
npmruntime-health
1.0.11.0.21.0.4
PyPIsocks5901
1.0.0
npmsui-gql-core
1.0.0
npmsui-move-graphql
1.0.0
npmsui-move-rpc
1.0.0
npmulebkit
1.0.0
multi-2026-08-18-ghsa-malware-sweepSource advisory
MediumAdvisory sweep17 Aug 2026
2 packages tracked
GitHub Advisory quiet-tail sweep - 2026-08-16 / 2026-08-17 (`@ai-vertical/ai-agent` npm generic-malware + `kb-ai` PyPI OpenSSF `setup.py`-install pentest dep-confusion demo)
Two-day quiet-tail after 08-15's 22-package burst: only two new GHSA advisories. @ai-vertical/ai-agent@1.0.0,1.0.1 (npm, GHSA-3248-8gvm-g9jv) has the generic malware boilerplate and no IOC. kb-ai@0.1.0,0.1.1 (PyPI, GHSA-34mp-hr4q-qvh5) is an OpenSSF PROBABLY_PENTEST demo overriding setup.py install to exfil IP + username.
npmPyPI
Affected packages2 packages · 4 versions
npm@ai-vertical/ai-agent
1.0.01.0.1
PyPIkb-ai
0.1.00.1.1
multi-2026-08-17-ghsa-quiet-tailSource advisory
HighAdvisory sweep15 Aug 2026
22 packages tracked
GitHub Advisory npm CWE-506 sweep - 2026-08-15 batch (`@velliajs/discord` `discord.js` impersonator with hardcoded GitHub PAT + hidden `_verifyAuthorization` kill-switch, `akamai(js)-sensor` Google-Calendar invisible-Unicode C2 trio, HackerOne/Twilio `*-probe`/`*-poc` bug-bounty-canary droppers with live payloads, `depcruise-*` + `gunzip-js` `99.9.1` dependency-confusion canary, `@wololasod/tiny-id` RC4 Windows/Linux dropper, `@finaxis/common-js` Xelis miner, `*-vim` naming-canary pair, plus IP/webhook exfiltrators)
22 npm CWE-506 advisories published 2026-08-15 - the day's headline is @velliajs/discord@1.0.3..1.0.7, a discord.js impersonator with two live hardcoded GitHub PATs, an unpinned private-repo sysframe dependency the operator can hot-swap, and a hidden Client.login() _verifyAuthorization allowlist kill-switch. Same-day clusters include a 3-package akamai(js)-sensor Google-Calendar-dead-drop trio using invisible-Unicode payloads, HackerOne/Twilio *-probe/*-poc bug-bounty-canary droppers with real credential exfil, a depcruise-* + gunzip-js 99.9.1 OpenSSF-domain-flagged canary group, @wololasod/tiny-id RC4 dropper, @finaxis/common-js Xelis miner, adxaa WordPress account-takeover, and a matching *-vim naming-canary pair.
npm
Affected packages22 packages · 57 versions
npm@finaxis/common-js
0.3.00.3.10.3.20.3.30.3.4
npm@openrepl/shared
0.0.40.0.5
npm@velliajs/discord
1.0.31.0.41.0.51.0.61.0.7
npm@wololasod/tiny-id
0.1.00.1.10.1.20.1.3
npmadxaa
1.0.0
npmakamai-sensor
1.0.0
npmakamaijs-sensor
2.0.03.0.0
npmakamaijs-sensorv1
3.0.0
npmautbank-core
99.0.099.0.2
npmdepcruise-baseline
99.9.1
npmdepcruise-fmt
99.9.1
npmdepcruise-wrap-stream-in-html
99.9.1
npmfastly-vcl-language-client
1.0.0
npmgunzip-js
99.9.1
npmharmony-app-toolkit
21.0.022.0.0
npmhunterone-build-probe-9210
1.0.01.0.11.0.21.0.31.0.41.0.51.0.61.0.7
npmkit-hydration-vim
1.0.0
npmrequire-i18next
20.0.021.0.0
npmsvelte-goal-vim
1.0.0
npmtw-pkgprobe-7731
1.0.01.0.11.0.31.0.41.0.51.0.61.0.71.1.01.1.1
npmtwilio-hackerone-poc-afe6937c
1.0.01.0.11.0.21.0.31.0.4
npmupload-to-gcp
3.2.1
npm-2026-08-15-ghsa-malware-sweepSource advisory
HighAdvisory sweep14 Aug 2026
26 packages tracked
GitHub Advisory npm CWE-506 sweep - 2026-08-14 batch (~27 packages: `jchunt.top` telemetry-canary day-2 `xrblocks-mcp`, `preinstall-hook-webhook-callback-demo` webhook.site demo, `@secauditb20y/sec-test-r3b` self-labeled sec-test POC, `webautomation_js` + `@ferudionz/*` obfuscator.io RC4 runtime exfil trio, `@guangnao/agent-proxy` Claude/Codex credential monetizer to `hub.client-llm.com`, `@lodash-js/lodash-js` Xelis miner, `@divineubg/divine` ntfy.sh EventSource C2, `@demopack/www` iOS iframe exploit injector, `@ghost_debugger/nanocache` hidden Windows binary launcher, `datefmt-simple-utils` reverse shell to `8.135.48.40:4444`, `registrynpmjs.to` typosquat cluster (`@polymarkets/clob-client-v2`, `@devmikets/hyperliquid-sdk`), Brazilian `alelo-*` dep-confusion cluster to `209.99.185.109`, plus `@peptideventure/*`, `@mexc/shared-utils`, `sui-gql-lite`, `bcs-mini`)
~27 npm CWE-506 advisories published 2026-08-14 (initial 4 clusters backfilled 08-15 with 8 more). Headliners: @guangnao/agent-proxy Claude/Codex credential monetiser to hub.client-llm.com, @lodash-js/lodash-js Xelis miner, @divineubg/divine ntfy.sh EventSource C2, registrynpmjs.to typosquat pair (@polymarkets/clob-client-v2, @devmikets/hyperliquid-sdk), Brazilian alelo-* dep-confusion cluster to 209.99.185.109, datefmt-simple-utils reverse shell to 8.135.48.40:4444, @ghost_debugger/nanocache Windows binary launcher.
npm
Affected packages26 packages · 42 versions
npm@demopack/www
0.0.12
npm@devmikets/hyperliquid-sdk
1.9.6
npm@divineubg/divine
1.0.01.0.11.0.21.0.31.0.41.0.5
npm@ferudionz/web_logger_js
1.0.0
npm@ferudionz/webautomation
1.0.0
npm@ghost_debugger/nanocache
0.1.1
npm@guangnao/agent-proxy
1.2.11.4.01.4.2
npm@lodash-js/lodash-js
0.1.00.2.00.3.0
npm@mexc/shared-utils
1.0.0
npm@peptideventure/peptide-score-modifier
1.0.0
npm@peptideventure/peptide-unit
1.0.0
npm@polymarkets/clob-client-v2
1.0.6
npm@secauditb20y/sec-test-r3b
1.0.0
npmalelo-client
99.0.099.0.2
npmalelo-common
99.0.0
npmalelo-core
99.0.099.0.199.0.2
npmalelo-payment
99.0.099.0.2
npmalelo-services
99.0.099.0.2
npmalelo-utils
99.0.0
npmbcs-mini
1.0.0
npmdatefmt-simple-utils
1.0.0
npmmeualelo
99.0.0
npmpreinstall-hook-webhook-callback-demo
1.0.01.0.1
npmsui-gql-lite
1.0.0
npmwebautomation_js
1.0.01.0.1
npmxrblocks-mcp
6.3.1
npm-2026-08-14-ghsa-malware-sweepSource advisory
HighAdvisory sweep13 Aug 2026
46 packages tracked
GitHub Advisory npm CWE-506 sweep - 2026-08-13 batch (`ltidisafe` GCS dep-confusion dropper ring `check-audit`+`cspell-esm`+`eslint-publish-release`+`in-install`+`knip-bun`+`resolve-audit`+`napi-raw`, `31.97.137.157:45000` bare-IP Chromium-DPAPI stealer kit `vexium-kit`+`ventra-kit`+`velora-kit`+`vortex-kit`+`copytrade-core`+`prediction-trader`, `@hzero-front-ui/*` internal-scope dep-confusion 5-package cluster with `callback.m0chan.co.uk` DNS+HTTPS beacon, `@khaznatech/*` webhook.site preinstall exfil 3-pack, `jchunt.top` telemetry-canary series `wct-st`+`tizen-webdriver-cli`, `8.135.48.40:4444` reverse-shell date-fmt masquerade pair `datefmt-util-helper`+`date-fmt-helper-xz`, `notafollower` AWS IMDSv2 credential theft, `bs58-15` base58 typosquat via `base65-15x` transitive, `@solana-js/web3` Windows PowerShell + `files.catbox.moe` RCE, `postcss-initialize-plugin` Ethereum-RPC-C2 continuation, `mutex-forge` Telegram+Slack+Ethereum-Sepolia RAT, `chai-as-reformed`+`process-live-log`+`external-process-live-log`+`minimalistic-assert-plus` Function-constructor R-shell family, `node-config-svg-contract` eval-from-URL, `nc-verify-127942`+`@jacksher/install-exec-poc` OAST recon POCs, `cilm-ui-commons` pipedream.net preinstall, ~10 boilerplate CWE-506)
~50 npm CWE-506 advisories published 2026-08-13. Headline: ltidisafe GCS dep-confusion dropper ring (7+ hollow-shell packages at v99.9.1 pinning ltidisafe as an https://ltidi.storage.googleapis.com/depenconf/ tarball to bypass npm registry review); 31.97.137.157:45000 bare-IP Chromium-DPAPI stealer kit family (vexium-kit, ventra-kit, velora-kit, vortex-kit, copytrade-core, prediction-trader - all fetch /icons/108|116 and eval() a credits field with @primno/dpapi+better-sqlite3+node-machine-id bundled for browser-cred theft); and a *`@hzero-front-ui/ 5-package internal-scope dep-confusion cluster** beaconing to callback.m0chan.co.uk`.
npm
Affected packages46 packages · 87 versions
npm@hzero-front-ui/c7n-ui
99.99.99
npm@hzero-front-ui/cfg
99.99.99
npm@hzero-front-ui/core
99.99.99
npm@hzero-front-ui/hzero-ui
99.99.99
npm@hzero-front-ui/themes
99.99.99
npm@jacksher/install-exec-poc
1.0.01.0.2
npm@khaznatech/common
99.0.0
npm@khaznatech/core
99.0.0
npm@khaznatech/utils
99.0.0
npm@leonardo0902/vortex-kit
12.0.2
npm@solana-js/web3
1.91.3
npmai-analyzer
1.0.01.0.11.0.21.0.31.0.41.0.51.0.61.0.71.0.81.0.91.0.101.0.111.0.121.0.131.0.141.0.151.0.161.0.171.0.181.0.19
npmbs58-15
6.0.06.0.1
npmchai-as-reformed
1.2.0
npmcheck-audit
99.9.1
npmcilm-ui-commons
1.1.0
npmcopytrade-core
2.3.0
npmcspell-esm
99.9.1
npmdate-fmt-helper-xz
1.0.01.0.11.0.21.0.31.0.4
npmdatefmt-util-helper
1.0.01.0.1
npmdebug-proxy-chrome-devtools
1.0.11.0.2
npmeslint-generate-prerelease
99.9.1
npmeslint-generate-release
99.9.1
npmeslint-publish-release
99.9.1
npmexternal-process-live-log
13.5.2
npmin-install
99.9.1
npmknip-bun
99.9.1
npmminimalistic-assert-plus
1.1.7
npmmutex-forge
2.0.12.0.2
npmnapi-raw
99.9.1
npmnc-verify-127942
1.0.0
npmnode-config-svg-contract
1.0.0
npmnotafollower
1.0.01.0.11.0.21.0.31.0.41.0.51.0.61.0.71.0.81.0.91.0.101.0.11
npmpath-match-js
1.0.0
npmpostcss-initialize-plugin
3.0.4
npmprediction-trader
2.3.0
npmprocess-live-log
11.5.2
npmreact-shield
1.0.0
npmresolve-audit
99.9.1
npmroot-locator
1.0.0
npmsource-analyzer
1.0.0
npmtizen-webdriver-cli
1.0.0
npmvelora-kit
12.0.212.1.2
npmventra-kit
1.0.2
npmvexium-kit
2.0.210.0.2
npmwct-st
1.0.0
npm-2026-08-13-ghsa-malware-sweepSource advisory
HighAdvisory sweep12 Aug 2026
159 packages tracked
GitHub Advisory npm CWE-506 sweep - 2026-08-12 batch (Web3 typosquat webhook.site ring day-2 `permit2`+`camelot-ammv2-*`+`boring-vault`+`augustdigital-sdk`+`upshift-*`, Ethereum-RPC-C2 `envpack-conf`+`tailwind-form-templates` XOR-encrypted second-stage on blockchain, `svelte-kit-vim`+`kit-map-vim` map-streak-kit day-4 continuation, `sui-gql`+`bcs-compact` Sui `@mysten/*` typosquat continuation, ~50-package `@years17/18/19/20/*` n8n-nodes-utils-helper red-team SSH-backdoor mass drop, `internallib_v756`/`v392` bare `/dev/tcp/10.0.74.63/4444` reverse shell, `mcp-util-helpers` webhook.site R-shell channel, `passkeys-react` Burp Collaborator OAST recon, `bb-twl-k7x2` Twilio-internal dep-confusion, `@telekom-ods/react-ui-kit` Deutsche Telekom internal-scope, `verify-cli`+`@assetshop/verify-cli` OAST recon pair, `dakumangalsingh` Java-Robot RAT with jpackage wrapper, boilerplate CWE-506 mass npm flood ~100 packages)
~160 npm CWE-506 advisories published 2026-08-12. Headline: Web3 typosquat webhook.site ring day-2 (permit2, camelot-ammv2-core/periphery, boring-vault, augustdigital-sdk, upshift-finance/config) with identical env/wallet-keystore exfil TTP as the 08-11 OpenZeppelin/Aerodrome ring; Ethereum-RPC-C2 pair (envpack-conf, tailwind-form-templates) fetching XOR-encrypted second-stage from blockchain via wallet 0xa322E5f3D311D3080e6f0121063e9aDC2490Ef1a; and a *~50-package `@years17/18/19/20/` red-team n8n mass drop** installing pwn@kali SSH backdoors.
npm
Affected packages159 packages · 184 versions
npm@assetshop/verify-cli
99.0.099.0.1
npm@bikli/bikli
1.0.0
npm@bikli/cli
1.0.0
npm@noxzacode/eslint-config
1.0.0
npm@noxzacode/libsignal-node
1.0.0
npm@telekom-ods/react-ui-kit
2.6.02.6.9
npm@years17/n8n-nodes-helper-utils
1.0.01.0.11.0.21.0.31.0.41.0.51.0.6
npm@years17/n8n-nodes-utils-helper
1.0.0
npm@years17/n8n-nodes-utils-helper-b
1.0.0
npm@years17/n8n-nodes-utils-helper-c
1.0.0
npm@years17/n8n-nodes-utils-helper-d
1.0.0
npm@years17/n8n-nodes-utils-helper-e
1.0.0
npm@years17/n8n-nodes-utils-helper-f
1.0.0
npm@years17/n8n-nodes-utils-helper-g
1.0.0
npm@years17/n8n-nodes-utils-helper-h
1.0.0
npm@years17/n8n-nodes-utils-helper-i
1.0.0
npm@years18/n8n-nodes-utils-helper-a
1.0.0
npm@years18/n8n-nodes-utils-helper-b
1.0.0
npm@years18/n8n-nodes-utils-helper-c
1.0.0
npm@years18/n8n-nodes-utils-helper-d
1.0.0
npm@years18/n8n-nodes-utils-helper-e
1.0.0
npm@years18/n8n-nodes-utils-helper-f
1.0.0
npm@years18/n8n-nodes-utils-helper-g
1.0.0
npm@years18/n8n-nodes-utils-helper-j
1.0.0
npm@years18/n8n-nodes-utils-helper-k
1.0.0
npm@years18/n8n-nodes-utils-helper-l
1.0.0
npm@years18/n8n-nodes-utils-helper-m
1.0.0
npm@years18/n8n-nodes-utils-helper-n
1.0.0
npm@years18/n8n-nodes-utils-helper-o
1.0.0
npm@years18/n8n-nodes-utils-helper-p
1.0.0
npm@years18/n8n-nodes-utils-helper-q
1.0.0
npm@years18/n8n-nodes-utils-helper-r
1.0.0
npm@years18/n8n-nodes-utils-helper-s
1.0.0
npm@years18/n8n-nodes-utils-helper-t
1.0.0
npm@years18/n8n-nodes-utils-helper-u
1.0.0
npm@years18/n8n-nodes-utils-helper-v
1.0.0
npm@years18/n8n-nodes-utils-helper-w
1.0.0
npm@years18/n8n-nodes-utils-helper-x
1.0.0
npm@years18/n8n-nodes-utils-helper-y
1.0.0
npm@years19/n8n-nodes-utils-helper-a
1.0.0
npm@years19/n8n-nodes-utils-helper-b
1.0.0
npm@years19/n8n-nodes-utils-helper-c
1.0.0
npm@years19/n8n-nodes-utils-helper-d
1.0.0
npm@years19/n8n-nodes-utils-helper-e
1.0.0
npm@years19/n8n-nodes-utils-helper-f
1.0.0
npm@years19/n8n-nodes-utils-helper-g
1.0.0
npm@years19/n8n-nodes-utils-helper-h
1.0.0
npm@years19/n8n-nodes-utils-helper-i
1.0.0
npm@years19/n8n-nodes-utils-helper-j
1.0.0
npm@years19/n8n-nodes-utils-helper-k
1.0.0
npm@years19/n8n-nodes-utils-helper-l
1.0.0
npm@years19/n8n-nodes-utils-helper-m
1.0.0
npm@years19/n8n-nodes-utils-helper-n
1.0.0
npm@years19/n8n-nodes-utils-helper-o
1.0.0
npm@years19/n8n-nodes-utils-helper-p
1.0.0
npm@years19/n8n-nodes-utils-helper-q
1.0.0
npm@years19/n8n-nodes-utils-helper-r
1.0.0
npm@years19/n8n-nodes-utils-helper-s
1.0.0
npm@years19/n8n-nodes-utils-helper-t
1.0.0
npm@years19/n8n-nodes-utils-helper-u
1.0.0
npm@years19/n8n-nodes-utils-helper-v
1.0.0
npm@years19/n8n-nodes-utils-helper-w
1.0.0
npm@years19/n8n-nodes-utils-helper-x
1.0.0
npm@years19/n8n-nodes-utils-helper-y
1.0.0
npm@years20/n8n-nodes-utils-helper-a
1.0.0
npm@years20/n8n-nodes-utils-helper-b
1.0.0
npm@years20/n8n-nodes-utils-helper-c
1.0.0
npm@years20/n8n-nodes-utils-helper-d
1.0.0
npm@years20/n8n-nodes-utils-helper-e
1.0.0
npm@years20/n8n-nodes-utils-helper-f
1.0.0
npm@years20/n8n-nodes-utils-helper-g
1.0.0
npm@years20/n8n-nodes-utils-helper-h
1.0.0
npm@years20/n8n-nodes-utils-helper-i
1.0.0
npm@years20/n8n-nodes-utils-helper-j
1.0.0
npmairdzticket
1.0.0
npmaugustdigital-sdk
8.20.1
npmbb-twl-k7x2
1.0.01.0.1
npmbcnfjndwbkf2
1.0.0
npmbcs-compact
1.0.0
npmbgncvhferucfds
1.0.0
npmbgzxcuite2
1.0.0
npmbiklimaster
1.0.0
npmbiklirouter
1.0.0
npmbikliwrapper
1.0.0
npmbmgki3g6fh3
1.0.0
npmboring-vault
1.0.01.1.01.1.1
npmbvdfhdfvnk3
1.0.0
npmcamelot-ammv2-core
1.0.01.1.01.1.1
npmcamelot-ammv2-periphery
1.0.01.1.01.1.1
npmchina_airlines
1.0.0
npmchmjdsidwlf5
1.0.0
npmcjdfswifuem3
1.0.0
npmclxofwfjskaz7
1.0.0
npmcsbcldfvivwfgd4
1.0.0
npmcvbmxiowkwqla6
1.0.0
npmcvbniydplwe3
1.0.0
npmcvjwyinkpas
1.0.0
npmcvmbxcjiasdg
1.0.0
npmcvvkshuelwiu
1.0.0
npmcxcbdjxcmncvfg2
1.0.0
npmdakumangalsingh
1.0.01.0.11.1.0
npmdhjksficgwu2
1.0.0
npmdzcvhfruwluwe
1.0.0
npmdzvchorehui2
1.0.0
npmegair0810
1.0.0
npmegypt0811
1.0.0
npmenvpack-conf
1.0.1
npmfdhcvriwecv3
1.0.0
npmfghvbmniwu
1.0.0
npmfhj8cv9dkwm4
1.0.0
npmgdwkh6vcbu
1.0.0
npmhcfguyfrmblp
1.0.0
npmhfkcdyuwbdx1
1.0.0
npmhgdvfuflnb
1.0.0
npmhlksdcixycvf
1.0.0
npmhngfykuvgh4
1.0.0
npmhxckdoeaqjlc8
1.0.0
npminternallib_v392
1.0.0
npminternallib_v756
1.0.01.0.11.0.21.0.31.0.41.0.51.0.61.0.7
npmjhkxcixudnvm1
1.0.0
npmjkbnwsdf8
1.0.0
npmkanyut
1.0.0
npmkhanbmnxls
1.0.0
npmkit-map-vim
1.0.0
npmmcp-util-helpers
1.0.0
npmmnchfnvbue1
1.0.0
npmmnhdjoweuq
1.0.0
npmmnmobicom
1.0.0
npmmnteckets
1.0.0
npmmnzjgxciwadk
1.0.0
npmmobicommn
1.0.0
npmmobicwkgjmx
1.0.0
npmms_aidc_com_tw
1.0.0
npmnhdxzthponv5
1.0.0
npmnihzvdeowx5
1.0.0
npmnoxleys
1.0.0
npmpasskeys-react
1.0.1
npmpassport811
1.0.0
npmpermit2
1.0.01.0.1
npmprezdentkxheiw
1.0.0
npmsui-gql
1.0.0
npmsvelte-kit-vim
1.0.0
npmtailwind-form-templates
0.7.4
npmthundertiger
1.0.0
npmtruecxikdsal
1.0.0
npmtwcvhjlksdmx
1.0.0
npmunitel3
1.0.0
npmunitel4
1.0.0
npmupshift-config
0.5.14
npmupshift-finance
1.0.0
npmvczxijghsvizu4
1.0.0
npmverify-cli
99.0.0
npmvfgnhlkxchrd
1.0.0
npmvkldhcmieru6
1.0.0
npmvlbhvgovbbhfab
1.0.0
npmxcnvjfsiewlk9
1.0.0
npmxhjckswqivb
1.0.0
npmyangming708
1.0.0
npmyangming8
1.0.0
npm-2026-08-12-ghsa-malware-sweepSource advisory
HighAdvisory sweep11 Aug 2026
38 packages tracked
GitHub Advisory npm CWE-506 sweep - 2026-08-11 batch (webhook.site Web3 typosquat credential-theft ring `@openzeppelin-4/5/contracts`+`@aerodrome-finance/contracts`+`@aerodrome-finance/slipstream`+`ethereum-vault-connector`, `safe-local-env-loader` env-local RAT sibling, `newtun` unencrypted-WebSocket PTY RAT with self-update, `svelte-vim-kit`+`kit-vim-map` map-streak-kit family continuation, `@nzeros/codebreak` Go ELF disguised as C solver, `base65-*` base-x typosquat cluster with 123KB obfuscated payload + `bs58-*` boilerplate siblings, coordinated `oastify.com`/`sslip.io`/webhook OAST dep-confusion recon beacons)
38 npm CWE-506 advisories published 2026-08-11. Headline: five-package Web3 typosquat ring (@openzeppelin-4/contracts, @openzeppelin-5/contracts, @aerodrome-finance/contracts, @aerodrome-finance/slipstream, ethereum-vault-connector) sharing the same webhook.site credential-exfil TTP with 60-240s detached-process delay + sandbox evasion, safe-local-env-loader continuing the 2026-08-10 env-local Windows RAT, and newtun shipping a PTY reverse shell with self-update.
npm
Affected packages38 packages · 117 versions
npm@aerodrome-finance/contracts
1.0.01.1.01.1.1
npm@aerodrome-finance/slipstream
1.0.01.1.01.1.1
npm@dgn-src-click-to-pay-org/srcdcfreleasecert
999.0.1
npm@nzeros/codebreak
1.3.0
npm@openzeppelin-4/contracts
1.0.01.0.1
npm@openzeppelin-5/contracts
1.0.01.0.1
npmbase65-11x
1.0.02.0.03.0.04.0.04.0.15.0.05.0.15.0.2
npmbase65-12x
1.0.02.0.03.0.04.0.04.0.15.0.05.0.15.0.2
npmbase65-13x
1.0.02.0.03.0.04.0.04.0.15.0.05.0.15.0.2
npmbase65-15x
1.0.02.0.03.0.04.0.04.0.15.0.05.0.15.0.2
npmbase65-33x
1.0.02.0.03.0.04.0.04.0.15.0.05.0.15.0.2
npmbase65-77x
1.0.02.0.03.0.04.0.04.0.15.0.05.0.15.0.2
npmbjm-low-code-components
99.0.0
npmbs58-11
1.0.0
npmbs58-12
1.0.0
npmbs58-13
1.0.0
npmchapters-core
9.999.999
npmdakumangalsingh_virus
1.0.01.2.01.3.0
npmdcfarguscert
999.0.1
npmdependencyfsdsfdsfg
99.9.0
npmdeveloper-dashboard
1.0.0
npmethereum-vault-connector
1.0.01.1.01.1.1
npmfetch-runtime
1.0.0
npmghazaly
99.9.0
npminternallib_v164
1.0.0
npmkit-vim-map
1.0.0
npmlines-columns
1.0.0
npmnewtun
1.0.01.0.11.0.21.0.31.0.41.0.51.0.61.0.71.0.81.0.91.0.101.0.111.0.121.0.131.0.141.0.151.0.161.0.171.0.181.0.191.0.201.0.211.0.221.0.231.0.241.0.251.0.261.0.27
npmnode-internal-svg-loader
1.0.0
npmsafe-local-env-loader
1.0.0
npmsui-bcs-codec
1.0.0
npmsui-gql-client
1.0.0
npmsvelte-vim-kit
1.0.0
npmtilaver-mfa
1.0.0
npmtsihealth-client
1.0.0
npmvite-svg-parse
1.0.0
npmwhs4_ued
1.0.0
npmzeal-rq-hooks
0.0.0
npm-2026-08-11-ghsa-malware-sweepSource advisory
HighAdvisory sweep11 Aug 2026
7 packages tracked
GitHub Advisory PyPI CWE-506 sweep - 2026-08-11 batch (`joule-sbx-poc`+`joule-btp-extension` 2026-08-joule-btp-extension localhost-exfil + reverse-shell PROBABLY_PENTEST pair, `telebot-pro` 2026-08-telebot-pro Telegram-session hidden-thread infostealer, `euler-sdk`+`morpho-sdk` GENERIC-standard-pypi-install-pentest setup.py install-hook IP+username exfil, `dlmm-sdk`+`dlmm` 2026-08-dlmm MALICIOUS env-var + credential + crypto wallet-directory enumeration)
7 PyPI CWE-506 advisories published 2026-08-11 across four named campaigns: 2026-08-telebot-pro starts a hidden exfiltration thread that lifts Telegram session files, pictures, and connected WiFi network info; 2026-08-dlmm exfiltrates env vars + credentials + cryptocurrency wallet directory listings on import; 2026-08-joule-btp-extension + euler-sdk/morpho-sdk are PROBABLY_PENTEST setup.py install-hook recon packages targeting DeFi vendor namespaces.
PyPI
Affected packages7 packages · 14 versions
PyPIdlmm
1.0.0
PyPIdlmm-sdk
1.0.0
PyPIeuler-sdk
1.0.0
PyPIjoule-btp-extension
0.1.00.1.10.1.20.1.30.1.40.1.50.1.6
PyPIjoule-sbx-poc
0.1.0
PyPImorpho-sdk
1.0.0
PyPItelebot-pro
2.3.72.3.8
pypi-2026-08-11-ghsa-malware-sweepSource advisory
HighAdvisory sweep10 Aug 2026
42 packages tracked
GitHub Advisory npm CWE-506 sweep - 2026-08-10 batch (`iconova-react` + `postcss-initial-provider` on-chain Ethereum RPC dead-drop C2 loader pair, `svelte-kit-streak`+`kit-map-streak` Linux implant continuation of the map-streak-kit family, `@rblxts/services` catbox.moe Windows RAT sibling of last week's `@rbx-ts/services`, `@kuperka/chainguard-sdk` browser-form + wallet exfil, `xerohub-discord-voice` Discord-token stealer, `env-local` Windows persistent screen-capture + remote control, `hex-encode-utils` Cloudflare-Workers AES-GCM Python-payload loader, `cryptostock`/`tokocrytodev` Infura wallet-drainer, `simple-date-formatter-new-9/10` bash reverse shell to 124.221.154.135:4444, `polymarket-stake-mathss` log-taker.store loader, `chai-tracker` chai-spies impersonator with `dbconnectify` C2, `@noobaihome/amis-*-area-widget` Baidu-internal dep-confusion SSRF probe, and multi-vendor SQLite/postcss/commonjs/eth-library typosquat clusters)
46 npm CWE-506 advisories published 2026-08-10. Standouts: iconova-react+postcss-initial-provider use Ethereum RPC on-chain dead-drop C2 to fetch stage-2 IP addresses (same EtherHiding technique as the CHAINDROP keyv/cacheable worm); svelte-kit-streak+kit-map-streak continue the map-streak-kit Linux-implant family; env-local installs a Windows registry-persisted screen-capture + remote-control implant impersonating dotenv.
npm
Affected packages42 packages · 74 versions
npm@kuperka/chainguard-sdk
1.0.11.0.2
npm@noobaihome/amis-simple-area-widget
1.0.0
npm@noobaihome/amis-uni-area-widget
1.0.0
npm@rblxts/services
1.6.01.6.2
npm@sqlite-labs/createsql
1.0.0
npm@sqlite-labs/nodesql
1.0.0
npm@sqlite-prime/createsql
1.0.0
npm@sqlite-prime/nodesql
1.0.0
npm@sqlite-table/schema-generator
1.0.0
npm@sqlite-table/sql-creator
1.0.0
npm@ssgw/icon
9.999.999
npmchai-as-bench
1.0.0
npmchai-as-deployer
1.0.0
npmchai-as-format
1.0.0
npmchai-as-map
1.0.0
npmchai-as-promised-plus
1.0.0
npmchai-jsonss
1.0.0
npmchai-tracker
1.1.01.1.11.1.21.1.31.2.1
npmcommonjs-assert
1.0.0
npmcommonjs-assertion
1.0.0
npmcryptostock
1.0.01.0.1
npmenv-local
18.4.018.4.118.4.2
npmeth-library-toolkit
1.0.0
npmeth-library-utils
1.0.0
npmfsbrowse
0.2.28
npmgodot-kit
1.0.1786316795
npmhex-encode-utils
1.0.01.0.11.0.21.0.31.0.41.0.5
npmiconova-react
1.30.01.30.1
npmkit-map-streak
1.0.0
npmneverthrow-js
1.0.0
npmpolymarket-stake-mathss
1.0.02.0.03.0.03.5.03.5.13.5.2
npmpost-css-transfer
1.0.0
npmpostcss-initial-provider
1.0.02.0.03.0.03.0.13.0.23.0.33.0.4
npmpostcss-theme-provider
1.0.0
npmruntimekit
1.0.0
npmsimple-date-formatter-new-10
1.0.0
npmsimple-date-formatter-new-9
1.0.0
npmspoint
0.1.6950.1.6960.1.6970.1.6980.1.6990.1.700
npmsvelte-kit-streak
1.0.0
npmtailwind-elements-ui
1.0.0
npmtokocrytodev
1.0.0
npmxerohub-discord-voice
1.0.01.0.1
npm-2026-08-10-ghsa-malware-sweepSource advisory
HighAdvisory sweep10 Aug 2026
11 packages tracked
GitHub Advisory PyPI CWE-506 sweep - 2026-08-09..2026-08-11 batch (`neutrl-core`+`neutrl-contracts`+`plp-contract` credential-stealing dep-hidden campaign 2026-08-neutrl-core, `kotanku`+`kotoraka`+`btcflx`+`btcflip` Telegram-bot wallet-file exfiltrator quartet 2026-08-kotanku campaign, `pytablute` 2025-11-spellcheckers multi-stage RCE + polling C2, `chaintest` DPRK Contagious-Interview-adjacent browser+wallet+clipboard+SSH-key infostealer, `bigtime` open()-hook file-write exfiltrator 2026-08-bigtime campaign, `cubesat-upstream-driver` env-var reconnaissance dep-confusion PROBABLY_PENTEST)
11 PyPI CWE-506 advisories published 2026-08-09..2026-08-11 across four named campaigns: 2026-08-neutrl-core hides credential theft in an intentional malicious dependency (fake backdated GitHub history); 2026-08-kotanku ships four Telegram-bot cryptocurrency-wallet-file exfiltrators (kotanku, kotoraka, btcflx, btcflip); 2025-11-spellcheckers multi-stage RCE lands as pytablute; chaintest is a DPRK "Contagious Interview"-adjacent full-spectrum stealer.
PyPI
Affected packages11 packages · 20 versions
PyPIbigtime
0.1.0
PyPIbtcflip
0.1.0
PyPIbtcflx
0.1.0
PyPIchaintest
0.1.0
PyPIcubesat-upstream-driver
1.0.1
PyPIkotanku
0.1.0
PyPIkotoraka
0.1.0
PyPIneutrl-contracts
2.0.02.0.12.0.2
PyPIneutrl-core
2.0.02.0.12.0.2
PyPIplp-contract
2.0.02.0.12.0.2
PyPIpytablute
1.0.01.0.11.0.21.0.3
pypi-2026-08-10-ghsa-malware-sweepSource advisory
HighAdvisory sweep8 Aug 2026
47 packages tracked
GitHub Advisory npm CWE-506 sweep - 36-package 2026-08-08 batch (`sme-rko-finance-front-*` 30-package Tinkoff/T-Bank RKO SME dep-confusion cluster running WEL1DROPPER-style cross-platform Cloudflare-Workers dropper + `@coralxyz/anchor` Solana Anchor typosquat with PowerShell zip drop + `titan-exchange-shared-permissions@99.9.9` dep-confusion recon + `@rbx-ts/services` Roblox-TS typosquat catbox.moe RAT + `map-streak-kit` Linux implant with systemd persistence + `localization-fixer`/`modern-localization` jsonbin.io mutable-payload loader pair)
36 npm CWE-506 advisories 2026-08-08: 30-package sme-rko-finance-front-* Tinkoff/T-Bank RKO dep-confusion cluster (v35.8.1, WEL1DROPPER-style Cloudflare-Workers dropper) plus outliers @coralxyz/anchor Solana typosquat, titan-exchange-shared-permissions@99.9.9 recon, @rbx-ts/services, map-streak-kit Linux implant, and a localization-fixer+modern-localization jsonbin.io loader pair.
npm
Affected packages47 packages · 53 versions
npm@coralxyz/anchor
0.30.00.30.10.30.2
npm@rbx-ts/services
1.6.0
npmbnpl-blocks-desktop-bnpl-anchor-title
35.2.5
npmlocalization-fixer
1.0.01.0.11.1.01.1.1
npmmap-streak-kit
1.0.0
npmmodern-localization
1.1.11.2.1
npmsme-rko-finance-front-operations-domain
35.8.1
npmsme-rko-finance-front-operations-fee
35.8.1
npmsme-rko-finance-front-operations-feed-impl
35.8.1
npmsme-rko-finance-front-operations-feed-models
35.8.1
npmsme-rko-finance-front-operations-holding-domain
35.8.1
npmsme-rko-finance-front-operations-income
35.8.1
npmsme-rko-finance-front-operations-notifications-impl
35.8.1
npmsme-rko-finance-front-operations-notifications-models
35.8.1
npmsme-rko-finance-front-operations-other
35.8.1
npmsme-rko-finance-front-operations-overnight
35.8.1
npmsme-rko-finance-front-operations-pegasus
35.8.1
npmsme-rko-finance-front-operations-penalty
35.8.1
npmsme-rko-finance-front-operations-providers
35.8.1
npmsme-rko-finance-front-operations-shared
35.8.1
npmsme-rko-finance-front-operations-special-payments
35.8.1
npmsme-rko-finance-front-operations-tax
35.8.1
npmsme-rko-finance-front-operations-widget-domain
35.8.1
npmsme-rko-finance-front-operations-widget-impl
35.8.1
npmsme-rko-finance-front-operations-widget-models
35.8.1
npmsme-rko-finance-front-payment-registers-operations-domain
35.8.1
npmsme-rko-finance-front-payments-allowed-tariffs-filter
35.8.1
npmsme-rko-finance-front-payments-classic-payment-actions-operations-repeat-impl
35.8.1
npmsme-rko-finance-front-payments-classic-payment-actions-operations-repeat-models
35.8.1
npmsme-rko-finance-front-payments-currency-payment-actions-operations-repeat-impl
35.8.1
npmsme-rko-finance-front-payments-currency-payment-actions-operations-repeat-models
35.8.1
npmsme-rko-finance-front-payments-currency-payment-domain
35.8.1
npmsme-rko-finance-front-payments-domain
35.8.1
npmsme-rko-finance-front-payments-feed-adapter
35.8.1
npmsme-rko-finance-front-payments-feed-display-list
35.8.1
npmsme-rko-finance-front-payments-feed-display-list-impl
35.8.1
npmspecials-resources-server
35.8.1
npmstatist-browser-typed-client-eventea.projects.pwafamily
35.8.0
npmstatist-browser-typed-client-eventea.projects.pwahelp
35.8.0
npmstatist-browser-typed-client-eventea.projects.pwainsurance
0.0.1
npmstatist-browser-typed-client-eventea.projects.pwakasko
0.0.1
npmstatist-browser-typed-client-eventea.projects.tdeal
0.0.1
npmstatist-browser-typed-client-eventea.projects.tdevice
0.0.1
npmstreak-map-kit
1.0.0
npmsvelte-kit-cache
1.0.0
npmsvelte-streak-kit
1.0.0
npmtitan-exchange-shared-permissions
99.9.9
npm-2026-08-08-ghsa-malware-sweepSource advisory
HighAdvisory sweep8 Aug 2026
1 package tracked
GitHub Advisory PyPI CWE-506 sweep - 2026-08-08 batch (`riakcs` Basho Riak-CS Python client typosquat with setup.py install-time host reconnaissance)
GHSA published one PyPI CWE-506 advisory dated 2026-08-08: riakcs (v0.0.1 and v0.5.0) - a typosquat/naming-collision on Basho Riak-CS Python client. Overrides setup.py install to silently exfiltrate the installer host IP + username at install time. OpenSSF MAL-2026-13665, discovery credit kam193.
PyPI
Affected packages1 package · 2 versions
PyPIriakcs
0.0.10.5.0
pypi-2026-08-08-ghsa-malware-sweepSource advisory
HighAdvisory sweep7 Aug 2026
32 packages tracked
GitHub Advisory npm CWE-506 sweep - 33+ package 2026-08-07 batch (`remote-claude-daemon` full-desktop RAT via WebSocket relay + baileys-clone WhatsApp bot cluster + `@cats-cdf/*` OAST recon pair + `internallib_v514` internal LAN reverse-shell + `wormgpt-cli` LLM-branded RAT + `@united-airlines-org/atmos-design-system` dep-confusion + `@ks-video/kwai-player-web` telemetry beacon + `@avi892nash/aegis-grid-runner` Juspay-leaked internal RCE tool + `@junyoung-kim/reins` PTY-reverse-shell with systemd persistence + `noviembrenacional.com` WordPress-CSRF nuke pair + long tail)
GHSA published 33+ npm CWE-506 advisories dated 2026-08-07 spanning several clusters: remote-claude-daemon (Claude Code full-desktop RAT with screen + mic capture via WebSocket relay, 20 versions), a 4-package baileys-clone WhatsApp bot cluster (@prototypevip/baileys, diezyclutch-baileys, ynastore-baileys, and more), @cats-cdf/* OAST dep-confusion recon, internallib_v514 reverse-shell to hardcoded 10.0.70.90 (continuation of internallib_v<NNN> campaign), wormgpt-cli (LLM-branded RAT with clipboard theft), @united-airlines-org/atmos-design-system dep-confusion, @ks-video/kwai-player-web telemetry beacon, @avi892nash/aegis-grid-runner (leaked-internal-Juspay RCE tool), @junyoung-kim/reins (PTY reverse-shell with systemd persistence), and xxdxax+xdaxx (targeted WordPress CSRF/account-nuke against noviembrenacional.com).
npm
Affected packages32 packages · 73 versions
npm@avi892nash/aegis-grid-runner
0.3.00.3.10.3.20.3.3
npm@cats-cdf/authentication
2.17.13.1.1
npm@cats-cdf/browser-metrics-meter
2.0.03.1.1
npm@junyoung-kim/reins
0.1.60.1.7
npm@ks-video/kwai-player-web
9.1.09.1.19.1.2
npm@prototypevip/baileys
0.0.10.0.20.0.3
npm@united-airlines-org/atmos-design-system
40.0.040.1.041.0.0
npmcdf-tag-commander-helper
1.0.0
npmdiezyclutch-baileys
1.0.0
npmdpdgroup-css
1.0.0
npminternallib_v514
1.0.0
npmlib-frontsga
1.0.0
npmmerge-grid-stats
1.0.0
npmrdfxvela
1.0.0
npmrdfxvela-build
1.0.0
npmremote-claude-daemon
0.3.00.3.40.3.50.3.60.3.70.3.80.3.90.4.20.4.60.4.70.5.00.5.20.5.40.5.50.5.70.5.90.6.00.6.10.6.20.6.6
npmsqueez
1.0.0
npmstreak-map-cache
1.0.0
npmstretchshop
1.0.0
npmsupersig
1.0.0
npmtrimprompt
1.0.0
npmvelabuild
1.0.0
npmvite-plugin-cleaner
1.0.0
npmvite-svg-parse
1.0.0
npmvite-vue-path-map
1.0.0
npmweight2loss
1.0.0
npmwormgpt-cli
1.0.01.0.11.0.21.0.31.0.41.0.51.0.61.0.71.0.8
npmwos-library-ui
1.0.0
npmxdaxx
1.0.01.0.1
npmxxdxax
1.0.01.0.1
npmynastore-baileys
1.0.0
npmzyr-agent
1.0.0
npm-2026-08-07-ghsa-malware-sweepSource advisory
HighAdvisory sweep7 Aug 2026
10 packages tracked
GitHub Advisory PyPI CWE-506 sweep - 10-package 2026-08-07 batch (`2026-08-alphalend-layouts` Sui keystore-stealer pair with PTH persistence + `2026-08-flasq` typosquat wave: `pydanticc`+`flasq`+`idnna`+`fastapii`+`fast-hashes`+`speed-hashes` crypto-wallet stealers + `cdktn-provider-azurerm` cdktf HashiCorp jsii-chain typosquat + `atlas-internal` dep-confusion recon)
GHSA published 10 PyPI CWE-506 advisories dated 2026-08-07 across three clusters: 2026-08-alphalend-layouts Sui keystore-stealer pair with PTH file persistence (alphalend-layouts, alphalend-abi); 2026-08-flasq typosquat wave dropping crypto-wallet stealers (pydanticc, flasq, idnna, fastapii, fast-hashes, speed-hashes); and singletons cdktn-provider-azurerm (HashiCorp cdktf typosquat with jsii import-time chain) and atlas-internal (dep-confusion recon).
PyPI
Affected packages10 packages · 27 versions
PyPIalphalend-abi
1.0.01.0.11.1.0
PyPIalphalend-layouts
4.0.04.0.14.0.24.1.0
PyPIatlas-internal
1.8.1
PyPIcdktn-provider-azurerm
17.0.0
PyPIfast-hashes
0.1.0
PyPIfastapii
0.1.10.1.20.2.00.3.0
PyPIflasq
0.1.10.1.20.2.00.3.0
PyPIidnna
0.1.10.1.20.2.00.3.0
PyPIpydanticc
0.1.10.1.20.2.00.3.0
PyPIspeed-hashes
0.1.0
pypi-2026-08-07-ghsa-malware-sweepSource advisory
HighAdvisory sweep6 Aug 2026
58 packages tracked
GitHub Advisory npm CWE-506 sweep - 50+ package 2026-08-06 batch (Sui-blockchain `sui-migration-audit-*` + `move-bcs-codec` cluster, `@activepieces/piece-*` typosquat sweep, `@ccfly/setup-*` platform-binary quartet, `@addai/*` cluster, `claude-remote-agent` RAT, `diezyyasha-baileys` + `alipclutch-baileys` WhatsApp cluster, `@holocronlab/botruntime-runtime` bot-framework masquerade, `helmet-pro` + `agenttunnels` + `agenthub-multiagent-mcp` + `typst-resume-cli` misc)
GHSA published 50+ npm CWE-506 advisories dated 2026-08-06 spanning several clusters: Sui blockchain tooling (sui-migration-audit-cli, sui-graphql-client, sui-migration-audit-rules, move-bcs-codec), an @activepieces/piece-* typosquat sweep (piece-google-contacts, piece-google-bigquery, piece-google-forms, piece-base44), a @ccfly/setup-* platform-binary quartet (darwin-arm64, darwin-x64, linux-arm64, linux-x64), an @addai/* cluster (ainode, node, entity-runtime), claude-remote-agent RAT, WhatsApp diezyyasha-baileys + alipclutch-baileys sibling clones, @holocronlab/botruntime-runtime bot framework masquerade, and a long tail of enterprise-scope dep-confusion probes.
npm
Affected packages58 packages · 58 versions
npm@0l00000l/auth
1.0.0
npm@activepieces/piece-base44
1.0.0
npm@activepieces/piece-google-bigquery
1.0.0
npm@activepieces/piece-google-contacts
1.0.0
npm@activepieces/piece-google-forms
1.0.0
npm@addai/ainode
1.0.0
npm@addai/entity-runtime
1.0.0
npm@addai/node
1.0.0
npm@apicity/meta
1.0.0
npm@astralcore/aura-wb
1.0.0
npm@atom8n/inspector
1.0.0
npm@aubea/mars
1.0.0
npm@bananacool467/ui-tools
1.0.0
npm@ccfly/setup-darwin-arm64
1.0.0
npm@ccfly/setup-darwin-x64
1.0.0
npm@ccfly/setup-linux-arm64
1.0.0
npm@ccfly/setup-linux-x64
1.0.0
npm@chnayser/server
1.0.0
npm@holocronlab/botruntime-runtime
1.0.0
npm@innocarpe/deepseek-build
1.0.0
npm@leejungkiin/awkit
1.0.0
npm@love-moon/conductor-cli
1.0.0
npm@trackunit/iris-app-sdk-vite
1.0.0
npm@vanexalabs-ai/vanexa-agent
1.0.0
npm@xiaohhhh1/canvas-agent
1.0.0
npm9remote
1.0.0
npmagenthub-multiagent-mcp
1.0.0
npmagenttunnels
1.0.0
npmalipclutch-baileys
1.0.0
npmapp-api-sdk
1.0.0
npmbeautiful-ui-monitoring
1.0.0
npmbigops-tcrm-permissions
1.0.0
npmclaude-remote-agent
1.0.0
npmdevplatform-data-table
1.0.0
npmdevplatform-jscodeshift-utils
1.0.0
npmdevplatform-spa-plugin-error-boundary
1.0.0
npmdevplatform-vite-plugin-gle
1.0.0
npmdiezyyasha-baileys
1.0.0
npmezdiscordbots
1.0.0
npmfetchrtds
1.0.0
npmhelmet-pro
1.0.0
npmjagproject
1.0.0
npmmove-bcs-codec
1.0.0
npmnpm-dc-dev
1.1.1
npmstatist-browser-typed-client-sme.rko.tariffs.web
1.0.0
npmstatist-statist-core
1.0.0
npmstreak-cache-map
1.0.0
npmsui-graphql-client
1.0.0
npmsui-migration-audit-cli
1.0.0
npmsui-migration-audit-rules
1.0.0
npmsvelte-visual-map
1.0.0
npmtailwindcss-hide-scrollbar
1.0.0
npmtinkoff-boxy-desktop-two-panel-right-image
1.0.0
npmtinkoff-codeceptjs-storyshots-alpha
1.0.0
npmtsihealth-client
1.0.0
npmtui-react-tooltip
1.0.0
npmtypst-resume-cli
1.0.0
npmvitest-preview-pro-all
1.0.0
npm-2026-08-06-ghsa-malware-sweepSource advisory
HighAdvisory sweep6 Aug 2026
3 packages tracked
GitHub Advisory PyPI CWE-506 sweep - 3-package 2026-08-06 batch (`xAyOuB-XcTxTeaM` Garena Free Fire spam-cannon botnet + `uncrypt` browser infostealer + `decapod-common` pentest)
GHSA published 3 PyPI CWE-506 advisories dated 2026-08-06: xAyOuB-XcTxTeaM (Garena Free Fire spam-cannon opening a Flask server on 0.0.0.0:50019 with ~20 hardcoded account credentials for gaming-platform abuse), uncrypt (embedded-executable browser-data infostealer with sandbox detection, campaign 2026-08-uncrypt), and decapod-common (pentest host-recon under GENERIC-standard-pypi-install-pentest).
PyPI
Affected packages3 packages · 9 versions
PyPIdecapod-common
0.0.01.2.dev11.2.dev2
PyPIuncrypt
0.1.00.1.10.1.2
PyPIxAyOuB-XcTxTeaM
0.1.00.1.10.1.2
pypi-2026-08-06-ghsa-malware-sweepSource advisory
HighAdvisory sweep5 Aug 2026
42 packages tracked
GitHub Advisory npm CWE-506 sweep - 40+ package 2026-08-05 batch (massive Tinkoff Bank / dolyame BNPL / bnpl-blocks / tramvai / statist enterprise-scope dep-confusion burst, plus `clawtrl-wallet` crypto stealer + `sextant-cli-darwin-arm64` platform-binary + `@lizhao1/memorax-code-internal` + `@cliphijack/santaclaude` Claude-themed clipboard hijack + `llm-interceptor` + `multi-acct` + `kepler`)
GHSA published 40+ npm CWE-506 advisories dated 2026-08-05 dominated by a massive Tinkoff Bank (Russian bank) enterprise-scope dep-confusion burst: tinkoff-*, dolyame-boxy-* (Tinkoff BNPL), bnpl-blocks-atom-*, tramvai-* (Tinkoff's open-source framework), bigops-*, sme.rko.* internal namespaces. Also clawtrl-wallet (crypto wallet stealer), @cliphijack/santaclaude (Claude-themed clipboard hijack), sextant-cli-darwin-arm64, @lizhao1/memorax-code-internal, llm-interceptor, multi-acct, kepler, express-dever, svelte-mapped-metrics, streak-math-calc, streak-calc-metrics, svelte-mapping-core, eslint-plugin-vitest-ts, tailwindcss-scrollbar-hide, express-rate-controller, @stageflight-testbed/a, @workoscalif/sudoku, trapp-check-logs, sme-foundation-frame-manager.
npm
Affected packages42 packages · 42 versions
npm@cliphijack/santaclaude
1.0.0
npm@ikbal_fadilah_vanexa01/vanexa-agent
1.0.0
npm@lizhao1/memorax-code-internal
1.0.0
npm@stageflight-testbed/a
1.0.0
npm@workoscalif/sudoku
1.0.0
npmbigops-auth
1.0.0
npmbnpl-blocks-atom-bnpl-action-card
1.0.0
npmbnpl-blocks-atom-bnpl-badge
1.0.0
npmbnpl-blocks-atom-bnpl-dolyame-button
1.0.0
npmbnpl-blocks-atom-bnpl-dropdown
1.0.0
npmbnpl-blocks-atom-bnpl-email-form
1.0.0
npmbnpl-blocks-atom-bnpl-info-card
1.0.0
npmbnpl-blocks-atom-bnpl-integrations-breadcrumbs
1.0.0
npmbnpl-blocks-atom-bnpl-news-card
1.0.0
npmclawtrl-wallet
1.0.0
npmdolyame-boxy-desktop-bnpl-text-block
1.0.0
npmdolyame-boxy-fonts
1.0.0
npmdolyame-boxy-independent-bnpl-info-slider
1.0.0
npmdolyame-boxy-independent-bnpl-items
1.0.0
npmdolyame-boxy-independent-bnpl-partners
1.0.0
npmdolyame-boxy-independent-bnpl-picture-gallery
1.0.0
npmdolyame-boxy-independent-bnpl-search
1.0.0
npmeslint-plugin-vitest-ts
1.0.0
npmexpress-dever
1.0.0
npmexpress-rate-controller
1.0.0
npmkepler
1.0.0
npmllm-interceptor
1.0.0
npmmulti-acct
1.0.0
npmsextant-cli-darwin-arm64
1.0.0
npmsme-foundation-frame-manager
1.0.0
npmstreak-calc-metrics
1.0.0
npmstreak-math-calc
1.0.0
npmsvelte-mapped-metrics
1.0.0
npmsvelte-mapping-core
1.0.0
npmtailwindcss-scrollbar-hide
1.0.0
npmtinkoff-pfp-block-desktop-tabs
1.0.0
npmtinkoff-statist-browser-typed-client-itsa.candy.selfservicesupport.frontend.events
1.0.0
npmtinkoff-statist-browser-typed-client-sme.rko.origsmartphonepaytb.common.mobile.events
1.0.0
npmtinkoff-volna-zustate
1.0.0
npmtramvai-module-feature-toggle
1.0.0
npmtrapp-check-logs
1.0.0
npmvvvedernikov-test-another-test
1.0.0
npm-2026-08-05-ghsa-malware-sweepSource advisory
HighAdvisory sweep5 Aug 2026
4 packages tracked
GitHub Advisory PyPI CWE-506 sweep - 4-package 2026-08-05 batch (`2026-08-bip39-py` crypto-wallet infostealer campaign: `solana-sniper-bot` + `eth-account-wallet` + `mnemonic-py` + `defi-sdk-py`)
GHSA published 4 PyPI CWE-506 advisories dated 2026-08-05, all attributed to campaign 2026-08-bip39-py: solana-sniper-bot, eth-account-wallet, mnemonic-py, and defi-sdk-py. All four use setup.py install-command override to exfiltrate env vars, browser data, crypto wallet files, SSH keys, and configuration files. Cross-chain crypto-wallet targeting (Solana + Ethereum + generic mnemonic phrases + DeFi).
PyPI
Affected packages4 packages · 4 versions
PyPIdefi-sdk-py
2.5.1
PyPIeth-account-wallet
0.11.2
PyPImnemonic-py
0.21
PyPIsolana-sniper-bot
1.4.2
pypi-2026-08-05-ghsa-malware-sweepSource advisory
CriticalCompromise4 Aug 2026
443 packages tracked
keyv / cacheable family hijacked in Shai-Hulud "Here We Go Again" worm
On 2026-08-04 a compromised maintainer account pushed a preinstall credential stealer into the keyv / cacheable family and the worm spread via stolen npm tokens across ~2B monthly installs. Releases were cut from main, so npm signed them with valid provenance. Verified count as of the Wiz IOC feed: 443 npm packages across 2,235 versions; SafeDep's registry-backed telemetry puts the total at 1,684 versions across 420 names tied to nine orgs.
npm
Affected packages443 packages · 2235 versions
npm@adminide-stack/clock-tik-browser
12.0.24
npm@adminide-stack/yantra-mobile
12.0.33
npm@arv-bedrock/auth
1.1.71.1.8
npm@arv-bedrock/auth-admin
1.0.21.0.3
npm@arv-bedrock/auth-sso
1.6.11.6.2
npm@arv-bedrock/auth-sso-backend
1.7.11.7.2
npm@arv-bedrock/logger
1.7.11.7.2
npm@cacheable/memory
2.2.1
npm@cacheable/net
2.1.1
npm@cacheable/node-cache
3.1.2
npm@cacheable/utils
2.5.1
npm@deliveroo/determinator
0.2.1
npm@deliveroo/reevent
1.0.1
npm@hubsync/web-sdk-react
6.3.76.3.86.3.96.3.106.3.116.3.126.3.136.3.146.3.156.3.166.3.176.3.186.3.196.3.206.3.216.3.226.3.236.3.246.3.256.3.266.3.276.3.286.3.296.3.306.3.316.3.326.3.33
npm@nebula.js/cli
7.1.2
npm@nebula.js/cli-build
7.1.2
npm@nebula.js/cli-sense
7.1.2
npm@nebula.js/locale
0.6.2
npm@nebula.js/nucleus
0.5.1
npm@nebula.js/sn-action-button
2.3.1
npm@nebula.js/sn-animator
2.13.1
npm@nebula.js/sn-distributionplot
1.0.7
npm@nebula.js/sn-layout-container
4.4.1
npm@nebula.js/sn-line-chart
2.7.1
npm@nebula.js/sn-listbox
0.19.3
npm@nebula.js/sn-map
0.12.7
npm@nebula.js/sn-nav-menu
0.14.2
npm@nebula.js/sn-org-chart
1.7.1
npm@nebula.js/sn-shape
1.5.1
npm@nebula.js/sn-slider
0.20.1
npm@nebula.js/sn-tabbed-container
2.4.1
npm@nebula.js/snapshooter
0.6.1
npm@nebula.js/stardust
7.1.2
npm@nebula.js/test-utils
0.6.1
npm@nebula.js/theme
0.6.1
npm@onereach/authorizer-helper
0.0.110.0.120.0.13
npm@onereach/bandwidth-steps-voice-bxml
0.1.10.1.20.1.3
npm@onereach/billing-dto
27.2.127.2.227.2.3
npm@onereach/billing-shared
27.2.127.2.227.2.3
npm@onereach/cb-schema-translator
1.3.11.3.21.3.3
npm@onereach/channel-transformer
0.0.660.0.670.0.68
npm@onereach/channel-transformers
0.0.50.0.60.0.7
npm@onereach/ckeditor5-build-classic
30.0.130.0.230.0.3
npm@onereach/condition-builder
1.0.81.0.91.0.10
npm@onereach/content-builder
0.0.180.0.190.0.20
npm@onereach/content-builder-template-compiler
0.0.30.0.40.0.5
npm@onereach/expression-components
9.1.19.1.29.1.3
npm@onereach/font-icons
27.0.227.0.327.0.4
npm@onereach/get-version-data
3.1.23.1.33.1.4
npm@onereach/idw-apps
0.1.30.1.40.1.5
npm@onereach/idw-contracts
0.1.20.1.30.1.4
npm@onereach/idw-init-account-resources
1.0.11.0.21.0.3
npm@onereach/idw-sdk
0.1.20.1.30.1.4
npm@onereach/idw-ui-components
0.1.20.1.30.1.4
npm@onereach/lambda-invocation
1.2.11.2.21.2.3
npm@onereach/messengers-infobip-sdk
0.1.10.1.20.1.3
npm@onereach/or-browser
0.0.480.0.490.0.50
npm@onereach/or-browser-next
0.0.110.0.120.0.13
npm@onereach/or-content-builder-renderer
0.0.20.0.30.0.4
npm@onereach/or-file-uploader-next
0.0.80.0.90.0.10
npm@onereach/or-pro
1.13.11.13.21.13.3
npm@onereach/or-sdk-agent-cli
0.0.60.0.70.0.8
npm@onereach/orest-cli
2.4.12.4.22.4.3
npm@onereach/orest-input-cli
1.18.11.18.21.18.3
npm@onereach/orest-jest-presets
0.0.30.0.40.0.5
npm@onereach/orest-vue-demi-vue2
0.0.40.0.50.0.6
npm@onereach/orest-vue-demi-vue3
0.0.40.0.50.0.6
npm@onereach/orest-vue3
0.0.40.0.50.0.6
npm@onereach/phonenumber-interpreter
0.0.180.0.190.0.20
npm@onereach/pnpm-audit-junit
1.0.31.0.41.0.5
npm@onereach/postcss-scoped-selector
1.2.11.2.21.2.3
npm@onereach/regex-helper
0.5.160.5.170.5.18
npm@onereach/regular-expressions
0.5.230.5.240.5.25
npm@onereach/regular-expressions-test
0.0.40.0.50.0.6
npm@onereach/rwc-client
6.4.76.4.86.4.9
npm@onereach/salesforce-miaw-client
0.0.30.0.40.0.5
npm@onereach/si-a-button
0.0.30.0.40.0.5
npm@onereach/si-alert
0.4.110.4.120.4.13
npm@onereach/si-checkbox
0.6.50.6.60.6.7
npm@onereach/si-checkbox-group
0.3.50.3.60.3.7
npm@onereach/si-code
0.6.40.6.50.6.6
npm@onereach/si-collapsible-group
0.6.40.6.50.6.6
npm@onereach/si-copyable-text
0.4.110.4.120.4.13
npm@onereach/si-datepicker
0.4.50.4.60.4.7
npm@onereach/si-divider
0.4.110.4.120.4.13
npm@onereach/si-dropdown-advanced
0.4.50.4.60.4.7
npm@onereach/si-dropdown-simple
0.4.50.4.60.4.7
npm@onereach/si-header
0.4.110.4.120.4.130.4.14
npm@onereach/si-list
0.7.40.7.50.7.6
npm@onereach/si-merge-tag-input
0.4.50.4.60.4.7
npm@onereach/si-radio-group
0.3.50.3.60.3.7
npm@onereach/si-root
0.9.40.9.50.9.6
npm@onereach/si-select
0.1.30.1.40.1.5
npm@onereach/si-step-chooser
0.4.40.4.50.4.6
npm@onereach/si-switch
0.4.50.4.60.4.7
npm@onereach/si-text-message
0.4.50.4.60.4.7
npm@onereach/si-textinput
0.5.50.5.60.5.7
npm@onereach/si-validated-timestring-input
0.3.50.3.60.3.7
npm@onereach/slack-helpers
1.0.31.0.41.0.5
npm@onereach/ssml-editor
2.0.122.0.132.0.14
npm@onereach/step-components
0.1.370.1.380.1.39
npm@onereach/step-conversation
1.0.411.0.421.0.43
npm@onereach/step-run-snowflake-query
0.1.10.1.20.1.3
npm@onereach/step-voice
7.0.327.0.337.0.34
npm@onereach/styles
27.0.227.0.327.0.4
npm@onereach/time-interpreter
1.0.301.0.311.0.32
npm@onereach/ts-memoize
1.0.21.0.31.0.4
npm@onereach/types-contacts-api
9.0.89.0.99.0.10
npm@onereach/ui-components
27.0.227.0.327.0.4
npm@onereach/ui-components-common
27.0.227.0.327.0.4
npm@onereach/ui-components-vue2
27.0.227.0.327.0.4
npm@onereach/v-event-calendar
0.1.220.1.230.1.24
npm@onereach/webform
0.3.130.3.140.3.15
npm@or-sdk/account-settings
1.3.61.3.71.3.8
npm@or-sdk/accounts
2.3.52.3.62.3.7
npm@or-sdk/adapters
0.3.60.3.70.3.8
npm@or-sdk/agents
4.21.34.21.44.21.5
npm@or-sdk/api-tokens
1.4.21.4.31.4.4
npm@or-sdk/api-tokens-lambda
1.4.21.4.31.4.4
npm@or-sdk/apps
1.2.61.2.71.2.8
npm@or-sdk/auth
0.38.10.38.20.38.3
npm@or-sdk/authorizer
0.26.70.26.80.26.9
npm@or-sdk/base
0.44.40.44.50.44.6
npm@or-sdk/billing
27.2.127.2.227.2.3
npm@or-sdk/billing-internal
27.2.127.2.227.2.3
npm@or-sdk/bot-templates
2.2.52.2.62.2.7
npm@or-sdk/bots
1.7.11.7.21.7.3
npm@or-sdk/card-templates
2.2.52.2.62.2.7
npm@or-sdk/cards
1.2.51.2.61.2.7
npm@or-sdk/ccp
10.15.410.15.510.15.6
npm@or-sdk/chat
0.3.10.3.20.3.3
npm@or-sdk/contacts
4.7.54.7.64.7.7
npm@or-sdk/content-request
0.2.60.2.70.2.8
npm@or-sdk/data-hub
0.26.50.26.60.26.7
npm@or-sdk/data-hub-svc
2.3.52.3.62.3.7
npm@or-sdk/deployer
1.7.51.7.61.7.7
npm@or-sdk/deployments
2.1.52.1.62.1.7
npm@or-sdk/discovery
1.12.11.12.21.12.3
npm@or-sdk/druid
1.4.71.4.81.4.9
npm@or-sdk/event-manager
1.1.51.1.61.1.7
npm@or-sdk/files
3.11.63.11.73.11.8
npm@or-sdk/files-sync-node
0.1.80.1.90.1.10
npm@or-sdk/flow-templates
2.1.52.1.62.1.7
npm@or-sdk/flows
2.7.82.7.92.7.10
npm@or-sdk/graph
1.10.51.10.61.10.7
npm@or-sdk/hitl
0.41.10.41.20.41.3
npm@or-sdk/identifiers
0.27.60.27.70.27.8
npm@or-sdk/idw
9.0.49.0.59.0.6
npm@or-sdk/idw-public
1.6.61.6.71.6.8
npm@or-sdk/idw-skill
1.4.11.4.21.4.3
npm@or-sdk/invitations
1.4.81.4.91.4.10
npm@or-sdk/key-value-storage
0.28.60.28.70.28.8
npm@or-sdk/keys
1.2.61.2.71.2.8
npm@or-sdk/knowledge-models
0.25.50.25.60.25.7
npm@or-sdk/library
0.5.60.5.70.5.8
npm@or-sdk/library-categories
0.2.60.2.70.2.8
npm@or-sdk/library-source
0.4.50.4.60.4.7
npm@or-sdk/library-types-v1
9.0.19.0.29.0.3
npm@or-sdk/library-types-v2
9.0.19.0.29.0.3
npm@or-sdk/lookup
1.25.11.25.21.25.3
npm@or-sdk/markdowner
0.5.10.5.20.5.3
npm@or-sdk/mcp-tools
0.5.20.5.30.5.4
npm@or-sdk/notifications
1.7.51.7.61.7.7
npm@or-sdk/password
1.3.61.3.71.3.8
npm@or-sdk/payments
3.2.53.2.63.2.7
npm@or-sdk/permissions
2.8.12.8.22.8.3
npm@or-sdk/permissions-cli
1.4.11.4.21.4.3
npm@or-sdk/permissions-lambda
2.5.12.5.22.5.3
npm@or-sdk/pgsql
1.5.11.5.21.5.3
npm@or-sdk/providers
0.3.60.3.70.3.8
npm@or-sdk/qna
3.4.23.4.33.4.4
npm@or-sdk/queue-manager
1.4.61.4.71.4.8
npm@or-sdk/sdk-api
0.29.20.29.30.29.4
npm@or-sdk/settings
0.25.60.25.70.25.8
npm@or-sdk/sku-builder
2.5.12.5.22.5.3
npm@or-sdk/source
2.1.52.1.62.1.7
npm@or-sdk/source-api
1.1.11.1.21.1.3
npm@or-sdk/step-templates
2.2.52.2.62.2.7
npm@or-sdk/store
2.1.52.1.62.1.7
npm@or-sdk/tables
0.28.50.28.60.28.7
npm@or-sdk/tags
1.1.51.1.61.1.7
npm@or-sdk/tickets
1.9.51.9.61.9.7
npm@or-sdk/transcripts
1.2.51.2.61.2.7
npm@or-sdk/users
3.8.13.8.23.8.3
npm@or-sdk/view-templates
2.2.52.2.62.2.7
npm@or-sdk/views
3.1.53.1.63.1.7
npm@or-sdk/web-search
0.6.10.6.20.6.3
npm@ornikar/apollo-link-timeout
1.4.21.4.31.4.41.4.51.4.61.4.71.4.81.4.91.4.101.4.11
npm@ornikar/babel-preset-base
6.0.36.0.46.0.56.0.66.0.76.0.86.0.96.0.106.0.116.0.126.0.136.0.14
npm@ornikar/babel-preset-kitt-universal
8.0.38.0.48.0.58.0.68.0.78.0.88.0.98.0.108.0.118.0.12
npm@ornikar/babel-preset-react
6.1.46.1.56.1.66.1.76.1.86.1.96.1.106.1.116.1.126.1.136.1.14
npm@ornikar/browserslist-config
8.0.38.0.48.0.58.0.68.0.78.0.88.0.98.0.108.0.11
npm@ornikar/commitlint-config
8.3.28.3.38.3.48.3.58.3.68.3.78.3.88.3.98.3.108.3.118.3.12
npm@ornikar/eslint-config
24.0.124.0.224.0.324.0.424.0.524.0.624.0.724.0.824.0.924.0.1024.0.1124.0.12
npm@ornikar/eslint-config-babel
24.0.124.0.224.0.324.0.424.0.524.0.624.0.724.0.824.0.924.0.1024.0.1124.0.12
npm@ornikar/eslint-config-babel-use
13.2.113.2.213.2.313.2.413.2.513.2.613.2.713.2.813.2.913.2.1013.2.1113.2.12
npm@ornikar/eslint-config-formatjs
24.0.124.0.224.0.324.0.424.0.524.0.624.0.724.0.824.0.924.0.10
npm@ornikar/eslint-config-node
12.2.112.2.212.2.312.2.412.2.512.2.612.2.712.2.812.2.912.2.10
npm@ornikar/eslint-config-react
24.0.124.0.224.0.324.0.424.0.524.0.624.0.724.0.824.0.924.0.1024.0.11
npm@ornikar/eslint-config-typescript
24.0.124.0.224.0.324.0.424.0.524.0.624.0.724.0.824.0.924.0.10
npm@ornikar/eslint-config-typescript-nestjs
24.0.124.0.224.0.324.0.424.0.524.0.624.0.724.0.824.0.924.0.1024.0.11
npm@ornikar/eslint-config-typescript-react
24.0.124.0.224.0.324.0.424.0.524.0.624.0.724.0.824.0.924.0.1024.0.11
npm@ornikar/eslint-plugin-neverthrow
1.3.11.3.21.3.31.3.41.3.51.3.61.3.71.3.81.3.91.3.101.3.111.3.12
npm@ornikar/eslint-plugin-ornikar
24.0.124.0.224.0.324.0.424.0.524.0.624.0.724.0.824.0.924.0.1024.0.11
npm@ornikar/graphql-config
1.1.11.1.21.1.31.1.41.1.51.1.61.1.71.1.81.1.91.1.101.1.11
npm@ornikar/intl-config
10.0.210.0.310.0.410.0.510.0.610.0.710.0.810.0.910.0.10
npm@ornikar/jest-config
13.0.313.0.413.0.513.0.613.0.713.0.813.0.913.0.1013.0.1113.0.1213.0.13
npm@ornikar/jest-config-react
18.0.218.0.318.0.418.0.518.0.618.0.718.0.818.0.918.0.1018.0.11
npm@ornikar/jest-config-react-native
17.0.217.0.317.0.417.0.517.0.617.0.717.0.817.0.917.0.1017.0.1117.0.12
npm@ornikar/jest-config-react-native-web
12.0.312.0.412.0.512.0.612.0.712.0.812.0.912.0.1012.0.1112.0.1212.0.13
npm@ornikar/kitt2
1.0.11.0.21.0.31.0.41.0.51.0.61.0.71.0.81.0.91.0.101.0.11
npm@ornikar/lerna-config
11.0.111.0.211.0.311.0.411.0.511.0.611.0.711.0.811.0.911.0.1011.0.11
npm@ornikar/monorepo-config
14.3.214.3.314.3.414.3.514.3.614.3.714.3.814.3.914.3.1014.3.1114.3.1214.3.13
npm@ornikar/postcss-config
9.1.29.1.39.1.49.1.59.1.69.1.79.1.89.1.99.1.109.1.119.1.12
npm@ornikar/prettier-config
9.0.39.0.49.0.59.0.69.0.79.0.89.0.99.0.109.0.11
npm@ornikar/prismic-components
0.0.20.0.30.0.40.0.50.0.60.0.70.0.80.0.90.0.100.0.110.0.12
npm@ornikar/react-modern-calendar-datepicker
3.2.13.2.23.2.33.2.43.2.53.2.63.2.73.2.83.2.93.2.103.2.11
npm@ornikar/react-native-svg-transformer
1.0.61.0.71.0.81.0.91.0.101.0.111.0.121.0.13
npm@ornikar/renovate-config
9.0.29.0.39.0.49.0.59.0.69.0.79.0.89.0.99.0.109.0.119.0.129.0.13
npm@ornikar/repo-config
15.3.315.3.415.3.515.3.615.3.715.3.815.3.915.3.1015.3.1115.3.1215.3.13
npm@ornikar/repo-config-react
13.0.813.0.913.0.1013.0.1113.0.1213.0.1313.0.1413.0.1513.0.1613.0.1713.0.1813.0.19
npm@ornikar/repo-config-react-legacy-css
15.1.215.1.315.1.415.1.515.1.615.1.715.1.815.1.915.1.1015.1.1115.1.1215.1.13
npm@ornikar/rollup-config
11.1.211.1.311.1.411.1.511.1.611.1.711.1.811.1.911.1.1011.1.1111.1.1211.1.13
npm@ornikar/rollup-plugin-postcss
2.0.52.0.62.0.72.0.82.0.92.0.102.0.112.0.122.0.132.0.142.0.15
npm@ornikar/slate-react-fork
1.0.11.0.21.0.31.0.41.0.51.0.61.0.71.0.81.0.91.0.101.0.11
npm@ornikar/storybook-config
12.1.212.1.312.1.412.1.512.1.612.1.712.1.812.1.912.1.10
npm@ornikar/stylelint-config
14.0.314.0.414.0.514.0.614.0.714.0.814.0.914.0.1014.0.1114.0.1214.0.13
npm@ornikar/typed-css-modules-loader
0.8.20.8.30.8.40.8.50.8.60.8.70.8.80.8.90.8.100.8.110.8.12
npm@ornikar/webpack-config
12.0.212.0.312.0.412.0.512.0.612.0.712.0.812.0.912.0.1012.0.1112.0.12
npm@picsart/ai-sdk
3.32.2
npm@picsart/gen-ai
2.55.11
npm@qlik/api
2.14.2
npm@qlik/browserslist-config
3.0.2
npm@qlik/carbon-core
2.1.1
npm@qlik/carboncopy
1.1.6
npm@qlik/design-tokens
1.3.13
npm@qlik/dts-bundler
2.0.3
npm@qlik/embed-react
2.5.3
npm@qlik/embed-runtime
1.6.4
npm@qlik/embed-svelte
1.1.4
npm@qlik/embed-web-components
1.7.3
npm@qlik/eslint-config
2.0.20
npm@qlik/eslint-config-base
0.1.1
npm@qlik/eslint-config-react
0.1.1
npm@qlik/eslint-config-svelte
0.1.1
npm@qlik/eslint-config-vue
0.1.1
npm@qlik/nebula-table-utils
2.6.9
npm@qlik/oxfmt-config
0.1.6
npm@qlik/oxlint-config
0.7.2
npm@qlik/prettier-config
1.0.3
npm@qlik/react-native-simple-grid
1.5.5
npm@qlik/runtime-module-loader
1.5.1
npm@qlik/sdk
0.28.1
npm@qlik/sprout-design-docs
1.0.2
npm@qlik/sprout-gesture
0.0.13
npm@qlik/sprout-icons
0.12.3
npm@qlik/sprout-react
6.45.3
npm@qlik/sprout-react-table
0.16.7
npm@qlik/tsconfig
1.0.3
npm@servicetitan/acquisition-functions
5.22.15.22.25.22.35.22.45.22.55.22.65.22.7
npm@servicetitan/admin-layout
2.4.32.4.42.4.52.4.62.4.72.4.82.4.9
npm@servicetitan/admin-sql-table
1.0.141.0.151.0.161.0.171.0.181.0.191.0.20
npm@servicetitan/ajax-handlers
38.1.138.1.238.1.338.1.438.1.538.1.638.1.7
npm@servicetitan/anvil-css-utilities
14.5.414.5.514.5.614.5.714.5.814.5.914.5.10
npm@servicetitan/anvil-fonts
14.5.414.5.514.5.614.5.714.5.814.5.914.5.10
npm@servicetitan/anvil-icon
0.5.10.5.20.5.30.5.40.5.50.5.60.5.7
npm@servicetitan/anvil-icons
14.5.414.5.514.5.614.5.714.5.814.5.914.5.10
npm@servicetitan/anvil-react
0.11.30.11.40.11.50.11.60.11.70.11.80.11.9
npm@servicetitan/anvil-themes
14.5.414.5.514.5.614.5.714.5.814.5.914.5.10
npm@servicetitan/anvil-token
0.4.10.4.20.4.30.4.40.4.50.4.60.4.7
npm@servicetitan/anvil2
3.9.13.9.23.9.33.9.43.9.53.9.63.9.7
npm@servicetitan/anvil2-codemods
0.11.20.11.30.11.40.11.50.11.60.11.70.11.8
npm@servicetitan/anvil2-ext-atlas
4.0.24.0.34.0.44.0.54.0.64.0.74.0.8
npm@servicetitan/anvil2-ext-charts
0.2.40.2.50.2.60.2.70.2.80.2.90.2.10
npm@servicetitan/anvil2-ext-common
0.7.10.7.20.7.30.7.40.7.50.7.60.7.7
npm@servicetitan/anvil2-ext-mwv
0.0.50.0.60.0.70.0.80.0.90.0.100.0.11
npm@servicetitan/anvil2-illustrations
1.0.21.0.31.0.41.0.51.0.61.0.71.0.8
npm@servicetitan/anvil2-mcp
0.0.90.0.100.0.110.0.120.0.130.0.140.0.15
npm@servicetitan/assist-ui
2.1.12.1.22.1.32.1.42.1.52.1.62.1.7
npm@servicetitan/assist-utils
1.1.21.1.31.1.41.1.51.1.61.1.71.1.8
npm@servicetitan/carto-charts-core
0.0.20.0.30.0.40.0.50.0.60.0.70.0.8
npm@servicetitan/carto-charts-react
0.0.20.0.30.0.40.0.50.0.60.0.70.0.8
npm@servicetitan/carto-charts-rn
0.0.20.0.30.0.40.0.50.0.60.0.70.0.8
npm@servicetitan/carto-react-kit
0.8.40.8.50.8.60.8.70.8.80.8.90.8.10
npm@servicetitan/carto-rn-kit
0.0.100.0.110.0.120.0.130.0.140.0.150.0.16
npm@servicetitan/carto-tokens
0.3.10.3.20.3.30.3.40.3.50.3.60.3.7
npm@servicetitan/component-usage
28.5.128.5.228.5.328.5.428.5.528.5.628.5.7
npm@servicetitan/confirm
41.3.141.3.241.3.341.3.441.3.541.3.641.3.7
npm@servicetitan/confirm-navigation
41.3.141.3.241.3.341.3.441.3.541.3.641.3.7
npm@servicetitan/contentful
0.0.30.0.40.0.50.0.60.0.70.0.80.0.9
npm@servicetitan/contentful-proxy
1.1.121.1.131.1.141.1.151.1.161.1.171.1.18
npm@servicetitan/cp-api
1.115.11.115.21.115.31.115.41.115.51.115.61.115.7
npm@servicetitan/cp-mfe
1.115.11.115.21.115.31.115.41.115.51.115.61.115.7
npm@servicetitan/cp-mfe-dev
1.115.11.115.21.115.31.115.41.115.51.115.61.115.7
npm@servicetitan/cp-react-hooks
1.115.11.115.21.115.31.115.41.115.51.115.61.115.7
npm@servicetitan/cp-ui
1.115.11.115.21.115.31.115.41.115.51.115.61.115.7
npm@servicetitan/culture
41.3.141.3.241.3.341.3.441.3.541.3.641.3.7
npm@servicetitan/data-query
41.3.141.3.241.3.341.3.441.3.541.3.641.3.7
npm@servicetitan/datadog-rum
38.1.138.1.238.1.338.1.438.1.538.1.638.1.7
npm@servicetitan/datetime-utils
41.3.141.3.241.3.341.3.441.3.541.3.641.3.7
npm@servicetitan/design-system
14.5.414.5.514.5.614.5.714.5.814.5.914.5.10
npm@servicetitan/docs-anvil-uikit-contrib
41.3.141.3.241.3.341.3.441.3.541.3.641.3.7
npm@servicetitan/docs-uikit
38.1.138.1.238.1.338.1.438.1.538.1.638.1.7
npm@servicetitan/document-title
2.4.12.4.22.4.32.4.42.4.52.4.62.4.7
npm@servicetitan/dte-pdf-editor
1.76.11.76.21.76.31.76.41.76.51.76.61.76.7
npm@servicetitan/dte-unlayer
0.150.10.150.20.150.30.150.40.150.50.150.60.150.7
npm@servicetitan/eh-module-communication
0.2.10.2.20.2.30.2.40.2.50.2.60.2.7
npm@servicetitan/error-boundary
38.1.138.1.238.1.338.1.438.1.538.1.638.1.7
npm@servicetitan/eslint-config
38.1.138.1.238.1.338.1.438.1.538.1.638.1.7
npm@servicetitan/eslint-plugin
38.1.138.1.238.1.338.1.438.1.538.1.638.1.7
npm@servicetitan/eslint-plugin-decorators-declare
12.8.1512.8.1612.8.1712.8.1812.8.1912.8.2012.8.21
npm@servicetitan/eslint-plugin-folder-schema
38.1.138.1.238.1.338.1.438.1.538.1.638.1.7
npm@servicetitan/eslint-plugin-mobx-6
12.8.1512.8.1612.8.1712.8.1812.8.1912.8.20
npm@servicetitan/eslint-plugin-processors-stub
12.8.1512.8.1612.8.1712.8.1812.8.1912.8.2012.8.21
npm@servicetitan/examples
1.2.51.2.61.2.71.2.81.2.91.2.101.2.11
npm@servicetitan/feature-spotlight
3.9.13.9.23.9.33.9.43.9.53.9.63.9.7
npm@servicetitan/folder-lint
38.1.138.1.238.1.338.1.438.1.538.1.638.1.7
npm@servicetitan/forge
0.5.10.5.20.5.30.5.40.5.50.5.60.5.7
npm@servicetitan/form
41.3.141.3.241.3.341.3.441.3.541.3.641.3.7
npm@servicetitan/form-state
41.3.141.3.241.3.341.3.441.3.541.3.641.3.7
npm@servicetitan/grid
0.0.630.0.640.0.650.0.660.0.670.0.680.0.69
npm@servicetitan/hammer-icon
1.2.11.2.21.2.31.2.41.2.51.2.61.2.7
npm@servicetitan/hammer-react
1.42.21.42.31.42.41.42.51.42.61.42.71.42.8
npm@servicetitan/hammer-token
3.1.13.1.23.1.33.1.43.1.53.1.63.1.7
npm@servicetitan/hash-browser-router
38.1.138.1.238.1.338.1.438.1.538.1.638.1.7
npm@servicetitan/help-center
1.0.81.0.91.0.101.0.111.0.121.0.131.0.14
npm@servicetitan/html-sketchapp
4.2.84.2.94.2.104.2.114.2.124.2.134.2.14
npm@servicetitan/install
38.1.138.1.238.1.338.1.438.1.538.1.638.1.7
npm@servicetitan/intl
7.2.17.2.27.2.37.2.47.2.57.2.67.2.7
npm@servicetitan/json-render-react
0.4.60.4.70.4.80.4.90.4.100.4.110.4.12
npm@servicetitan/kendo-theme
0.0.270.0.280.0.290.0.300.0.310.0.320.0.33
npm@servicetitan/ko-bridge
38.1.138.1.238.1.338.1.438.1.538.1.638.1.7
npm@servicetitan/launchdarkly-service
38.1.138.1.238.1.338.1.438.1.538.1.638.1.7
npm@servicetitan/lazy-module
38.1.138.1.238.1.338.1.438.1.538.1.638.1.7
npm@servicetitan/ld-type-generator
0.2.10.2.20.2.30.2.40.2.50.2.60.2.7
npm@servicetitan/line-item-editor
1.5.11.5.21.5.31.5.41.5.51.5.61.5.7
npm@servicetitan/link-item
41.3.141.3.241.3.341.3.441.3.541.3.641.3.7
npm@servicetitan/log-service
38.1.138.1.238.1.338.1.438.1.538.1.638.1.7
npm@servicetitan/marketing-direct-mail-components
20.1.120.1.220.1.320.1.420.1.520.1.620.1.7
npm@servicetitan/marketing-email-components
20.2.320.2.420.2.520.2.620.2.720.2.820.2.9
npm@servicetitan/marketing-form
0.1.20.1.30.1.40.1.50.1.60.1.70.1.8
npm@servicetitan/marketing-global-route
1.14.11.14.21.14.31.14.41.14.51.14.61.14.7
npm@servicetitan/marketing-integration-widgets
1.0.401.0.411.0.421.0.431.0.441.0.451.0.46
npm@servicetitan/marketing-route
1.2.11.2.21.2.31.2.41.2.51.2.61.2.7
npm@servicetitan/marketing-ui
9.3.19.3.29.3.39.3.49.3.59.3.69.3.7
npm@servicetitan/marketing-widgets
1.0.11.0.21.0.31.0.41.0.51.0.61.0.7
npm@servicetitan/measure-sheet-data
2.6.12.6.22.6.32.6.42.6.52.6.62.6.7
npm@servicetitan/mfe-quick-actions
0.5.490.5.500.5.510.5.520.5.530.5.540.5.55
npm@servicetitan/micro-frontend
0.0.40.0.50.0.60.0.70.0.80.0.90.0.10
npm@servicetitan/microfront
0.0.20.0.30.0.40.0.50.0.60.0.70.0.8
npm@servicetitan/microfront-auth
0.0.50.0.60.0.70.0.80.0.90.0.100.0.11
npm@servicetitan/microfront-tests
0.0.110.0.120.0.130.0.140.0.150.0.160.0.17
npm@servicetitan/microfront-utils
1.4.11.4.21.4.31.4.41.4.51.4.61.4.7
npm@servicetitan/modularpayments-webfields
1.0.531.0.541.0.551.0.561.0.571.0.581.0.59
npm@servicetitan/moneyout-api-client
1.29.11.29.21.29.31.29.41.29.51.29.61.29.7
npm@servicetitan/mpa-components
2.5.12.5.22.5.32.5.42.5.52.5.62.5.7
npm@servicetitan/navigation
14.1.114.1.214.1.314.1.414.1.514.1.614.1.7
npm@servicetitan/notifications
41.3.141.3.241.3.341.3.441.3.541.3.641.3.7
npm@servicetitan/onboarding-ui
18.5.118.5.218.5.318.5.418.5.518.5.618.5.7
npm@servicetitan/quick-actions
1.15.21.15.31.15.41.15.51.15.61.15.71.15.8
npm@servicetitan/react-hooks
7.7.17.7.27.7.37.7.47.7.57.7.67.7.7
npm@servicetitan/react-ioc
38.1.138.1.238.1.338.1.438.1.538.1.638.1.7
npm@servicetitan/responsive
6.1.16.1.26.1.36.1.46.1.56.1.66.1.7
npm@servicetitan/restrict-imports
38.1.138.1.238.1.338.1.438.1.538.1.638.1.7
npm@servicetitan/schema-comparison
0.1.30.1.40.1.50.1.60.1.70.1.80.1.9
npm@servicetitan/skeleton
9.2.49.2.59.2.69.2.79.2.89.2.99.2.10
npm@servicetitan/standalone-core-feature-gates
1.11.41.11.51.11.61.11.71.11.81.11.91.11.10
npm@servicetitan/standalone-feature-flags
2.3.22.3.32.3.42.3.52.3.62.3.72.3.8
npm@servicetitan/standalone-root
1.11.31.11.41.11.51.11.61.11.71.11.81.11.9
npm@servicetitan/standalone-tm-api
1.1.11.1.21.1.31.1.41.1.51.1.61.1.7
npm@servicetitan/standalone-ui
2.2.42.2.52.2.62.2.72.2.82.2.92.2.10
npm@servicetitan/startup
38.1.138.1.238.1.338.1.438.1.538.1.638.1.7
npm@servicetitan/startup-jest
2.2.12.2.22.2.32.2.42.2.52.2.62.2.7
npm@servicetitan/startup-mfe-compat
0.5.10.5.20.5.30.5.40.5.50.5.60.5.7
npm@servicetitan/startup-utils
38.1.138.1.238.1.338.1.438.1.538.1.638.1.7
npm@servicetitan/stylelint-config
38.1.138.1.238.1.338.1.438.1.538.1.638.1.7
npm@servicetitan/suppress-warnings
38.1.138.1.238.1.338.1.438.1.538.1.638.1.7
npm@servicetitan/table
41.3.141.3.241.3.341.3.441.3.541.3.641.3.7
npm@servicetitan/tanstack-query-mobx
6.2.16.2.26.2.36.2.46.2.56.2.66.2.7
npm@servicetitan/temporal-lite
3.4.13.4.23.4.33.4.43.4.53.4.63.4.7
npm@servicetitan/testing-library
6.6.16.6.26.6.36.6.46.6.56.6.66.6.7
npm@servicetitan/thoughtspot-theme
1.7.11.7.21.7.31.7.41.7.51.7.61.7.7
npm@servicetitan/time-zones
3.8.13.8.23.8.33.8.43.8.53.8.63.8.7
npm@servicetitan/titan-chat-ui
7.1.37.1.47.1.57.1.67.1.77.1.87.1.9
npm@servicetitan/titan-chat-ui-anvil2
9.0.19.0.29.0.39.0.49.0.59.0.69.0.7
npm@servicetitan/titan-chat-ui-common
9.0.19.0.29.0.39.0.49.0.59.0.69.0.7
npm@servicetitan/titan-chat-ui-cypress
2.1.32.1.42.1.52.1.62.1.72.1.82.1.9
npm@servicetitan/titan-chatbot-api
9.0.19.0.29.0.39.0.49.0.59.0.69.0.7
npm@servicetitan/titan-chatbot-client
2.1.32.1.42.1.52.1.62.1.72.1.82.1.9
npm@servicetitan/titan-chatbot-ui
7.1.37.1.47.1.57.1.67.1.77.1.87.1.9
npm@servicetitan/titan-chatbot-ui-anvil2
9.0.19.0.29.0.39.0.49.0.59.0.69.0.7
npm@servicetitan/titan-chatbot-ui-cypress
9.0.19.0.29.0.39.0.49.0.59.0.69.0.7
npm@servicetitan/tokens
12.9.112.9.212.9.312.9.412.9.512.9.612.9.7
npm@servicetitan/toolbelt-shared-registry
1.14.11.14.21.14.31.14.41.14.51.14.61.14.7
npm@servicetitan/uikit-docs
22.11.122.11.222.11.322.11.422.11.522.11.622.11.7
npm@servicetitan/unit-tests
0.0.20.0.30.0.40.0.50.0.60.0.70.0.8
npm@servicetitan/va-mfe-loader
1.1.11.1.21.1.31.1.41.1.51.1.61.1.7
npm@servicetitan/web-components
38.1.138.1.238.1.338.1.438.1.538.1.638.1.7
npm@servicetitan/widget-platform
5.6.15.6.25.6.35.6.45.6.55.6.65.6.7
npm@servicetitan/widget-platform-monolith
5.6.15.6.25.6.35.6.45.6.55.6.65.6.7
npm@thiennq/docs-viewer
1.6.21.6.31.6.4
npm@umacloud/cli-darwin-arm64
1.0.74
npm@umacloud/cli-darwin-x64
1.0.74
npm@umacloud/cli-linux-arm64
1.0.74
npm@umacloud/cli-linux-musl-arm64
1.0.74
npm@umacloud/cli-linux-musl-x64
1.0.74
npm@umacloud/cli-linux-x64
1.0.74
npm@umacloud/cli-win32-x64
1.0.74
npm@umacloud/knowledge
1.0.74
npm@workbench-stack/core
3.9.8
npmbabel-plugin-linaria-css-to-undefined
0.3.10.3.20.3.30.3.40.3.50.3.60.3.70.3.80.3.90.3.100.3.110.3.120.3.130.3.140.3.150.3.160.3.17
npmcache-manager
7.2.10
npmcacheable
2.5.1
npmcacheable-request
13.0.20
npmconv-context-next
1.0.11.0.21.0.31.0.41.0.51.0.61.0.71.0.81.0.91.0.10
npmecto
5.0.1
npmeditable-contracts
0.0.120.0.130.0.140.0.150.0.160.0.170.0.180.0.190.0.200.0.210.0.220.0.230.0.240.0.250.0.260.0.27
npmeslint-plugin-folder-schema
1.0.61.0.71.0.81.0.91.0.101.0.111.0.121.0.131.0.141.0.151.0.161.0.171.0.181.0.191.0.201.0.21
npmexample-js-project
1.0.21.0.31.0.41.0.51.0.61.0.71.0.81.0.91.0.101.0.11
npmfile-entry-cache
11.1.6
npmflat-cache
6.1.24
npmfolder-lint
1.0.61.0.71.0.81.0.91.0.101.0.111.0.121.0.131.0.141.0.151.0.161.0.171.0.181.0.191.0.201.0.21
npmfrontend-orb
4.4.14.4.24.4.34.4.44.4.54.4.64.4.74.4.84.4.94.4.104.4.114.4.124.4.134.4.144.4.154.4.164.4.174.4.18
npmhamus.js
0.4.1
npmhttp-metrics-middleware
2.2.2
npmkeyv
6.0.0
npmnative-frontend-orb
1.1.41.1.51.1.61.1.71.1.81.1.91.1.101.1.111.1.121.1.131.1.141.1.151.1.161.1.171.1.181.1.19
npmpicasso-plugin-hammer
2.11.6
npmpicasso-plugin-q
2.11.6
npmpicasso.js
2.11.6
npmpob-test-package-in-monorepo
5.2.15.2.25.2.35.2.45.2.55.2.65.2.75.2.85.2.95.2.105.2.115.2.125.2.135.2.145.2.155.2.16
npmpob-test-typescript-package-in-monorepo
4.2.14.2.24.2.34.2.44.2.54.2.64.2.74.2.84.2.94.2.104.2.114.2.124.2.134.2.144.2.154.2.164.2.17
npmqlik-chart-modules
1.1.1
npmqlik-modifiers
0.10.1
npmqlik-object-conversion
0.17.2
npmrwc-client
0.29.100.29.110.29.120.29.130.29.140.29.150.29.160.29.170.29.180.29.19
npmserver-hemera-mongo
0.0.12
npmsn-listbox
0.3.3
npmtslint-folder-schema
1.0.61.0.71.0.81.0.91.0.101.0.111.0.121.0.131.0.141.0.151.0.161.0.171.0.181.0.191.0.201.0.21
npmumadev
1.0.74
npmverdaccio-okta-oauth
38.1.138.1.238.1.338.1.438.1.538.1.638.1.738.1.838.1.938.1.1038.1.1138.1.1238.1.1338.1.1438.1.1538.1.16
npmverdaccio-tarball-local-storage
38.1.138.1.238.1.338.1.438.1.538.1.638.1.738.1.838.1.938.1.1038.1.1138.1.1238.1.1338.1.1438.1.1538.1.16
npmworkbench-browser-server
0.0.2
npm-2026-08-04-shai-hulud-keyv-cacheableSource advisory
HighAdvisory sweep4 Aug 2026
1 package tracked
GitHub Advisory npm CWE-506 sweep - 1-package 2026-08-04 batch (`internallib_v688` third-day continuation of the `internallib_v<NNN>` sequential dep-confusion enumeration campaign)
GHSA published 1 npm CWE-506 advisory dated 2026-08-04: internallib_v688 (>= 0) - a third-day continuation of the internallib_v<NNN> sequential dep-confusion enumeration campaign that dropped internallib_v524 and internallib_v568 on 2026-08-03. The internallib_ prefix explicitly probes for internal-package name collisions on any org that publishes internallib_* internal libraries.
npm
Affected packages1 package · 1 version
npminternallib_v688
1.0.0
npm-2026-08-04-ghsa-malware-sweepSource advisory
HighAdvisory sweep4 Aug 2026
4 packages tracked
GitHub Advisory PyPI CWE-506 sweep - 4-package 2026-08-04 batch (Bitcoin hardware-wallet infostealer cluster `2026-08-coldcard-helpers` + `2026-08-psbt-utils`, plus 1 pentest kit)
GHSA published 4 PyPI CWE-506 advisories dated 2026-08-04: three Bitcoin hardware-wallet infostealers - coldcard-helpers, psbt-helpers, psbt-utils (Coldcard + PSBT Partially Signed Bitcoin Transaction targeting under campaigns 2026-08-coldcard-helpers / 2026-08-psbt-utils) - and a fourth pentest-flagged host-recon kit launchdarkly-ai-server-sdk.
PyPI
Affected packages4 packages · 15 versions
PyPIcoldcard-helpers
1.4.2
PyPIlaunchdarkly-ai-server-sdk
1.0.11.0.21.1.01.2.01.3.01.4.01.5.01.6.01.7.01.8.01.9.01.9.9
PyPIpsbt-helpers
1.0.0
PyPIpsbt-utils
1.0.0
pypi-2026-08-04-ghsa-malware-sweepSource advisory
HighAdvisory sweep3 Aug 2026
17 packages tracked
GitHub Advisory npm CWE-506 sweep - 18-package 2026-08-03 batch (`@types-beta/sdk@0.1.0-0.1.3` `@types`-namespace impersonation with Windows `nanocache.exe` WinHTTP-WebSocket RAT, 5-package `beaver-ui-*` component-library burst, `internallib_v524`/`v568` sequential dep-confusion continuation, `simple-date-formatter-new-1`/`-util-5` OpenSSF-PA C2 + command-execution pair, `tailwind-anim` Tailwind-ecosystem typosquat second-day companion, `@custombots/custombot@1.0.0` OpenSSF-PA malicious-command scoped RAT, and 5-package internal-tooling dep-confusion singleton burst)
GHSA published 18 npm CWE-506 advisories dated 2026-08-03. Most severe: @types-beta/sdk@0.1.0-0.1.3 - a @types-namespace impersonation embedding a Windows nanocache.exe WinHTTP WebSocket RAT. Batch also includes a 5-package beaver-ui-* dep-confusion burst, internallib_v524/v568 continuation, simple-date-formatter-* OpenSSF-PA C2+cmd pair, tailwind-anim, and 5 more.
npm
Affected packages17 packages · 20 versions
npm@custombots/custombot
1.0.0
npm@types-beta/sdk
0.1.00.1.10.1.20.1.3
npmaccounts-final-form
1.0.0
npmaccounts-loading-state
1.0.0
npmbeaver-ui-date-range-picker
1.0.0
npmbeaver-ui-grid
1.0.0
npmbeaver-ui-header
1.0.0
npmbeaver-ui-items-with-more
1.0.0
npmbeaver-ui-layout
1.0.0
npmbigops-chat-messages
1.0.0
npmfluid-type-ui
1.0.0
npminternallib_v524
1.0.0
npminternallib_v568
1.0.0
npmlifestyle-test-utils
1.0.0
npmsimple-date-formatter-new-1
1.0.0
npmsimple-date-formatter-util-5
1.0.0
npmtailwind-anim
1.0.0
npm-2026-08-03-ghsa-malware-sweepSource advisory
HighAdvisory sweep3 Aug 2026
1 package tracked
GitHub Advisory PyPI CWE-506 sweep - 1-package 2026-08-03 batch (`instalogin1234@0.0.1` Instagram credential-harvester with Discord exfil, campaign `2026-08-instalogin1234`)
GHSA published 1 PyPI CWE-506 advisory dated 2026-08-03: instalogin1234@0.0.1 - masquerades as an Instagram CLI tool, captures user login credentials, exfiltrates them to a Discord channel, and opens the legitimate Instagram website in the browser to hide the theft. Attributed to campaign 2026-08-instalogin1234 in the OpenSSF malicious-packages repository.
PyPI
Affected packages1 package · 1 version
PyPIinstalogin1234
0.0.1
pypi-2026-08-03-ghsa-malware-sweepSource advisory
HighAdvisory sweep2 Aug 2026
8 packages tracked
GitHub Advisory npm CWE-506 sweep - 8-package 2026-08-02 batch (`houzidawang806/807/808` sequential-namespace trio, `simple-date-formatter-util`/`-1`/`-2` date-util trio, `tailwindcss-anim` Tailwind-ecosystem typosquat, `list-issue-predecessor-dependencies-block@99.0.0` OpenSSF-PA C2-domain communicator with dep-confusion inflated pin)
GHSA published 8 npm CWE-506 advisories dated 2026-08-02 - a houzidawang806/807/808 sequential-namespace trio, a simple-date-formatter-util + -1 + -2 date-utility trio, tailwindcss-anim under the Tailwind CSS ecosystem name shape, and list-issue-predecessor-dependencies-block@99.0.0 flagged by OpenSSF Package Analysis for both malicious-domain communication AND malicious-command execution with the extreme-inflated dep-confusion pin (99.0.0).
npm
Affected packages8 packages · 8 versions
npmhouzidawang806
1.0.0
npmhouzidawang807
1.0.0
npmhouzidawang808
1.0.0
npmlist-issue-predecessor-dependencies-block
99.0.0
npmsimple-date-formatter-util
1.0.0
npmsimple-date-formatter-util-1
1.0.0
npmsimple-date-formatter-util-2
1.0.0
npmtailwindcss-anim
1.0.0
npm-2026-08-02-ghsa-malware-sweepSource advisory
HighAdvisory sweep2 Aug 2026
2 packages tracked
GitHub Advisory PyPI CWE-506 sweep - 2-package 2026-08-02 batch (`trongriden@0.0.1` Tron/TRX cryptocurrency private-key exfiltration under the long-running `2025-04-tronix` campaign, `wacve-utils@1.0.7` Linux + Android/Termux encrypted infostealer with Telegram exfil)
GHSA published 2 PyPI CWE-506 advisories dated 2026-08-02: trongriden@0.0.1 - Tron/TRX cryptocurrency private-key exfiltration marked as part of the long-running 2025-04-tronix campaign - and wacve-utils@1.0.7, an encrypted infostealer targeting Linux and Android execution under Termux with file system / browser / SMS collection routed to a Telegram channel and remote-script download for dynamic payload updates.
PyPI
Affected packages2 packages · 2 versions
PyPItrongriden
0.0.1
PyPIwacve-utils
1.0.7
pypi-2026-08-02-ghsa-malware-sweepSource advisory
HighAdvisory sweep1 Aug 2026
10 packages tracked
GitHub Advisory npm CWE-506 sweep - 10-package 2026-08-01 batch (`test-dev-*` 8-package sequential-namespace burst, `@moxfive-llc/common` scoped RAT, `pp-react-worldready` OpenSSF-PA C2 domain communicator)
GHSA published 10 npm CWE-506 advisories dated 2026-08-01 - an 8-package test-dev-* sequential-namespace burst (test-dev-boot, -host, -watch, -sync, -dispatch, -exec, -store, -link), a @moxfive-llc/common scoped RAT publish, and pp-react-worldready@1.0.0 flagged by OpenSSF Package Analysis for communicating with a domain associated with malicious activity.
npm
Affected packages10 packages · 10 versions
npm@moxfive-llc/common
1.0.0
npmpp-react-worldready
1.0.0
npmtest-dev-boot
1.0.0
npmtest-dev-dispatch
1.0.0
npmtest-dev-exec
1.0.0
npmtest-dev-host
1.0.0
npmtest-dev-link
1.0.0
npmtest-dev-store
1.0.0
npmtest-dev-sync
1.0.0
npmtest-dev-watch
1.0.0
npm-2026-08-01-ghsa-malware-sweepSource advisory
HighAdvisory sweep1 Aug 2026
7 packages tracked
GitHub Advisory PyPI CWE-506 sweep - 7-package 2026-08-01 batch (`asdk-plugin-*` 3-package dep-confusion trio at `0.0.1`/`9999.0.0`, `walmart-genai-trace` dep-confusion probe, `telerape` PTH-file reverse-shell, `nvtorch-oot-nightly`/`trtllm-subdir-test` NVIDIA-adjacent dep-confusion probe pair at `99999.0.0`/`99999.0.1`)
GHSA published 7 PyPI CWE-506 advisories 2026-08-01: asdk-plugin-alphagen/-legacy/-ai-platform (dep-confusion trio at 0.0.1 + 9999.0.0), walmart-genai-trace (Walmart internal GenAI namespace probe), telerape (PTH-file reverse-shell persistence), and nvtorch-oot-nightly + trtllm-subdir-test (NVIDIA-adjacent dep-confusion probe pair at 99999.0.0/99999.0.1 targeting torch-oot-nightly and TensorRT-LLM subdir internal namespaces).
PyPI
Affected packages7 packages · 15 versions
PyPIasdk-plugin-ai-platform
0.0.19999.0.0
PyPIasdk-plugin-alphagen
0.0.19999.0.0
PyPIasdk-plugin-legacy
0.0.19999.0.0
PyPInvtorch-oot-nightly
99999.0.099999.0.1
PyPItelerape
0.0.0.dev01.0.01.0.1
PyPItrtllm-subdir-test
99999.0.099999.0.1
PyPIwalmart-genai-trace
0.0.199.0.0
pypi-2026-08-01-ghsa-malware-sweepSource advisory
HighAdvisory sweep31 Jul 2026
92 packages tracked
GitHub Advisory npm CWE-506 sweep - 91-package 2026-07-30/07-31 batch (`@peptide-packets` biotech scope pair, socket.io/mongoose/passport typosquat burst, ethers.js/rlp/fs-extra impersonator kit, `nano-perf` postinstall daemon C2, late-07-31 MCP-namespace burst, `@0xlr` dep-confusion PoC scope, `@spending-behavior-ui`/`@finance-ui`/`@mplay-*`/`@sof-assistant-*` enterprise dep-confusion sweep, `rollup-plugin-polyfill-hold`/`-helper` pair, `paraglide-js@1.0.1` takeover-style drop)
GHSA published 91 npm CWE-506 advisories 2026-07-30–07-31: existing 25-pkg batch (@peptide-packets, socket.io/mongoose/passport typos, ethers/rlp/fs-extra, nano-perf C2) plus a late-07-31 66-pkg wave - MCP-namespace burst (13), @0xlr dep-confusion PoC scope (10), enterprise internal-scope dep-confusion sweep (15 scoped pkgs), broad unscoped typosquats (25), rollup-plugin-polyfill-hold/-helper pair, paraglide-js@1.0.1 takeover.
npm
Affected packages92 packages · 92 versions
npm@0xlr/clerk-auth
1.0.0
npm@0xlr/dep-confusion-poc
1.0.0
npm@0xlr/prisma-client-js
1.0.0
npm@0xlr/question-types
1.0.0
npm@0xlr/sentry-web
1.0.0
npm@0xlr/stripe-checkout-js
1.0.0
npm@0xlr/stripe-frontend
1.0.0
npm@0xlr/supabase-db
1.0.0
npm@0xlr/test-callback
1.0.0
npm@0xlr/vercel-analytics
1.0.0
npm@404c3s4r/lodash
1.0.0
npm@cr-invested-ui-components/chart
1.0.0
npm@dexwilt/node-fetch
2.7.3
npm@finance-ui/finance-view
1.0.0
npm@finance-ui/snackbar-ifpe
1.0.0
npm@fuji-web-components/maps
1.0.0
npm@global-theme/context
1.0.0
npm@meli-testing/jest-react
1.0.0
npm@mp-op-ss-front-lib/tracks
1.0.0
npm@mplay-core-lib/utilities
1.0.0
npm@mplay-frontend-ui/link
1.0.0
npm@nordic-dev/linting-tools
1.0.0
npm@one-chat/react
1.0.0
npm@peptide-packets/js-unimode
1.0.0
npm@peptide-packets/peptide-modify
1.0.0
npm@sof-assistant-fe-lib/vertical-faqs
1.0.0
npm@spending-behavior-ui/cashflow-widget
1.0.0
npm@spending-behavior-ui/widget-insights
1.0.0
npm@sudoughnym/enviro-demo
1.0.0
npm@sw-commons-components/message-upsell
1.0.0
npmadpanel-core
1.0.0
npmai-backup-script
1.0.0
npmallurectl
1.0.0
npmasdsafsadad
1.0.0
npmasdsafsafdasdsaasdasda
1.0.0
npmattio-discover
1.0.0
npmcapacitor-assets
1.0.0
npmchaos-mcp
1.0.0
npmcommunity-published
1.0.0
npmcreate-remotion
1.0.0
npmeth-bridge
1.0.0
npmethe.json
1.0.0
npmethers.json
1.0.0
npmethersss
1.0.0
npmfast-csv-helper
1.0.0
npmfrontend-regulations
1.0.0
npmfs-extra-master
1.0.0
npmfsextrra
1.0.0
npmgoldenflow-js
1.0.0
npmgtm-mcp-auth
1.0.0
npmhazmat-cfr
1.0.0
npmhit-mcp
1.0.0
npmiac-scanner
1.0.0
npminstall-native-host
1.0.0
npmiwomm-mcp
1.0.0
npmkelly-stake
1.0.0
npmkip-mcp-http
1.0.0
npmmaximumsats-mcp
1.0.0
npmmcp-server-boilerplate
1.0.0
npmmetrics-ui
1.0.0
npmmongostose
1.0.0
npmmoontose
1.0.0
npmnano-perf
2.2.0
npmnode-fs-extra-master
1.0.0
npmnotifications-broadcast
1.0.0
npmparaglide-js
1.0.1
npmpasssport1
1.0.0
npmpasstpor
1.0.0
npmpm-claude-skills-mcp
1.0.0
npmpolylabel-web-lib
1.0.0
npmpolyprompt
1.0.0
npmportway
1.0.0
npmprocess-status-widget
1.0.0
npmreact-hot-svg
1.0.0
npmredis-type-xyz
1.10.6
npmrefbase-mcp
1.0.0
npmrlp-master
1.0.0
npmrlp.git
1.0.0
npmrollup-plugin-polyfill-helper
1.0.0
npmrollup-plugin-polyfill-hold
1.0.0
npmrouterbase-mcp
1.0.0
npmsap-mcp-config
1.0.0
npmsap-mcp-facilitator
1.0.0
npmscketio
1.0.0
npmsmart-npv-mcp
1.0.0
npmsoccketio
1.0.0
npmsocketi
1.0.0
npmsocktio
1.0.0
npmsso-users-detection
1.0.0
npmvcse
1.0.0
npmvite-config-svg
1.0.0
npmvite-tsconfig-svg
1.0.0
npm-2026-07-31-ghsa-malware-sweepSource advisory
HighAdvisory sweep31 Jul 2026
14 packages tracked
GitHub Advisory PyPI CWE-506 sweep - 14-package 2026-07-30/07-31 batch (`ml-*-shared` env-var exfil, `ai-perf-toolkit` + `mcp-search-server` cryptominer pair, `phabricator-client@99.x` dep-confusion, plus late-07-31 `2026-07-cognikit` DPRK Contagious Interview cluster and `reguestsc` salatstealer)
GHSA published 14 PyPI CWE-506 advisories 2026-07-30–07-31: ml-*-shared env-var exfil kit (4 pkgs), ai-perf-toolkit + mcp-search-server cryptominer pair, phabricator-client@99.x dep-confusion, plus late-07-31 DPRK Contagious Interview 2026-07-cognikit cluster (aiprepkit, catalogai, cognikit, aiassistcore, aichannel, ailaunchkit) and reguestsc salatstealer typosquat.
PyPI
Affected packages14 packages · 24 versions
PyPIai-perf-toolkit
2.4.2
PyPIaiassistcore
0.1.2
PyPIaichannel
0.1.2
PyPIailaunchkit
0.1.2
PyPIaiprepkit
0.1.2
PyPIcatalogai
0.1.2
PyPIcognikit
0.1.2
PyPImcp-search-server
1.0.02.0.02.0.1
PyPIml-data-shared
12.0.116.0.1
PyPIml-fdbk-shared
1.0.02.3.1
PyPIml-nps-shared
6.0.38.2.3
PyPIml-shared
6.3.08.8.0
PyPIphabricator-client
99.0.099.0.199.0.299.0.399.0.4
PyPIreguestsc
2.34.2
pypi-2026-07-31-ghsa-malware-sweepSource advisory
HighAdvisory sweep30 Jul 2026
28 packages tracked
GitHub Advisory npm CWE-506 sweep - 28-package late 2026-07-29 backfill (`@ai-plus`/`@ai-agent-node` 5-pkg AI-agent SDK cluster, 5-pkg Polymarket / prediction-market impersonator kit, `@peptide-unit` scope pair, 6-pkg Alibaba-adjacent `lzd-*`/`uniapi-*`/`aone-cloud-cli`/`colder-cli`/`lwp-web-client`/`def-open-client` scope, `@zannstore/baileys` 17-version WhatsApp SDK typosquat, misc single-package RATs including `eslintcmd` ESLint typosquat)
GitHub Advisory Database published a further 28 npm CWE-506 advisories dated 2026-07-29 after the prior day's ingest - clusters: @ai-plus/@ai-agent-node 5-pkg AI-agent SDK scopes, 5-pkg Polymarket / prediction-market impersonator kit (polymarket-risk-manager, poly-kelly, ts-precision, ts-bn-proto, stake-math), @peptide-unit pair, 6-pkg Alibaba-adjacent scope, @zannstore/baileys 17-version WhatsApp SDK typosquat.
npm
Affected packages28 packages · 44 versions
npm@ai-agent-node/agent-node
1.0.0
npm@ai-agent-node/createnode
1.0.0
npm@ai-agent-node/nodesql
1.0.0
npm@ai-plus/de-agent
1.0.0
npm@ai-plus/de-agent-sdk
1.0.0
npm@finxsecdemo/utils
1.0.2
npm@omniwatch-wick/cli
1.0.0
npm@peptide-unit/js-unimode
1.0.0
npm@peptide-unit/peptide-modify
1.0.0
npm@zannstore/baileys
2.2.62.2.72.2.82.3.02.3.12.3.22.3.32.3.42.3.52.3.62.3.72.3.92.4.02.4.12.4.22.4.32.4.4
npmaone-cloud-cli
1.0.0
npmcolder-cli
1.0.0
npmdata-parser-utils
1.0.0
npmdef-open-client
1.0.0
npmeslintcmd
1.0.0
npmfeedback-ai-sdk
1.0.0
npmflight-compare-analyzer
1.0.0
npmlwp-web-client
1.0.0
npmlzd-unified-station-sdk
1.0.0
npmopen-worker-cli
1.0.0
npmpoly-kelly
1.0.0
npmpolymarket-risk-manager
1.0.0
npmstake-math
1.0.0
npmtest-skill-zip
1.0.0
npmts-bn-proto
1.0.0
npmts-precision
1.0.0
npmuniapi-bridge
1.0.0
npmzer0code
0.2.0
npm-2026-07-30-ghsa-malware-sweepSource advisory
HighAdvisory sweep29 Jul 2026
65 packages tracked
GitHub Advisory npm CWE-506 sweep - 60-package 2026-07-28 → 2026-07-29 backfill (9-package `@wagni_bot/*` Telegram credential-stealer scope, 6-package `2.1.6` postinstall SSH-key + file harvester cluster, 4-package `streak-*` Windows PE binary drop, 3-package `aone-*` embedded-malware trio, `xerohub-discord-voice` Discord-token stealer pair, generic-name C2 domain communicator kit, `@joyfill/*` prerelease pair, misc single-package RATs and typosquats)
GitHub Advisory Database published 6 new npm CWE-506 advisories on 2026-07-29 plus a ~55-package 2026-07-28 backfill. Clusters: @wagni_bot/* 9-pkg Telegram stealer, 2.1.6 SSH-key harvester (app-*-layer, api-*-sdk), streak-* Windows-PE dropper, aone-* all-versions, xerohub-discord-voice token stealer, generic-name C2 kit.
npm
Affected packages65 packages · 77 versions
npm@ai_/autoprefixers
1.2.0
npm@apexfnd/apex
1.0.01.0.1
npm@bowozzz/baileys
1.0.0
npm@crbrc/xbt
1.1.01.1.11.1.21.1.31.1.41.2.1
npm@joyfill/components
4.0.0-rc24-2773-beta.4
npm@joyfill/layouts
0.1.2-2773.beta.0
npm@mypwn/hawkeye
99.0.0
npm@wagni_bot/bsc
1.0.0
npm@wagni_bot/eth
1.0.0
npm@wagni_bot/hyperliquid
1.0.0
npm@wagni_bot/metamask
1.0.0
npm@wagni_bot/opensea
1.0.0
npm@wagni_bot/polygon
1.0.0
npm@wagni_bot/polymarket
1.0.0
npm@wagni_bot/wagni
1.0.0
npm@wagni_bot/web3
1.0.0
npm@yancyyu/agentcli
1.9.32
npmaone-kit
1.0.0
npmaone-kit-cli
1.0.0
npmaone-sandbox
1.0.0
npmapi-node-sdk
2.1.6
npmapi-rust-sdk
2.1.6
npmapp-sim-layer
2.1.6
npmapp-sima-layer
2.1.6
npmapp-soda-layer
2.1.6
npmapp-svm-layer
2.1.6
npmarray-node-utils
1.0.9
npmarray-sort-helper
1.0.0
npmbasic-vite
1.0.0
npmbianira-ui
1.27.0
npmblots
2.1.0
npmchain-analyze
1.0.2
npmchain-manager
1.0.0
npmcloud-config-fetcher
1.0.0
npmcolor-convert-helper
1.0.0
npmdate-sanitize-helper
1.0.0
npmethers-secure
1.0.0
npmfluid-type-ui
2.0.8
npmjobber-app-template-react
1.0.1
npmjson-schema-inspector
1.1.41.1.51.1.61.1.7
npmjson-to-table-util
1.0.0
npmkordyn
0.9.160.9.18
npmkorvica
1.0.0
npmlib-mtop
1.0.0
npmlib-streak-math
1.0.0
npmlocal-config-parser
1.0.0
npmnode-array-plus
1.0.9
npmnum-format-helper
1.0.0
npmparallely
10.0.3
npmpostcss-motion-utils
1.0.0
npmreact-puller
1.0.0
npmrollup-runtime-core-polyfills
0.0.1
npmsigchain-js
1.0.1
npmsimple-probe-utils
1.0.1
npmsmart-config-manager
1.0.0
npmstreak-core-lib
1.0.0
npmstreak-core-math
1.0.0
npmstreak-daily-lib
1.0.0
npmstring-format-kit
1.0.2
npmtext-line-parser
1.0.0
npmtidal-embed-player
1.0.1
npmtoll_free
1.0.1
npmtriage_bot_using_sdkv3
2.0.1
npmxerohub-discord-voice-v2
1.8.0
npmxerohub-discord-voice-v3
3.0.03.0.23.0.3
npm-2026-07-29-ghsa-malware-sweepSource advisory
HighAdvisory sweep28 Jul 2026
54 packages tracked
GitHub Advisory npm CWE-506 mega-sweep - 54-package sample from the 2026-07-27 → 2026-07-28 batch (8-package Ethereum-tooling `curl|bash` typosquat cluster, chalk / express / prettier / prisma / dotenv / chai-as-promised typosquat pairs, "helper/utils/tool/pack" credential+wallet-stealer family, 13-package dep-confusion cluster with `999.x` / `19999.x` / `99.99.99` version-inflation, Shai-Hulud-style preinstall Bun stealer resurgence, `@vaultflow/*` 2026-07-28 pair, `claude-code-base-action` Anthropic typosquat)
GitHub Advisory Database published a mega-batch of 250+ new npm CWE-506 malware advisories on 2026-07-27 (spanning 12+ paginated result pages), plus 2 more on 2026-07-28 (@vaultflow/create-flow, @vaultflow/update-flow). This module catalogues 54 non-@antv non-previously-tracked packages from the batch. Notable clusters: 8-package Ethereum-tooling curl|bash operator (web3-core-js, truffle-js, truffle-helper, solc-helper, hardhat-core, ethers-common, ethers-io, cdp-core), typosquat pairs (chalk-*, exxpress-*, prettier-lint-lenz, prisma-callback, env-threads), dep-confusion with inflated version numbers (999.x, 19999.x, 99.99.99), and Shai-Hulud-style preinstall Bun credential stealers on mcp-echarts, mcp-mermaid, ai-figure, gantt-for-react, amapcn, boring-avatars-vanilla, jest-canvas-mock, @cap-js/openapi.
npm
Affected packages54 packages · 125 versions
npm@apps-home-dashboard/events
11.9.011.9.1
npm@cap-js/openapi
1.4.1
npm@citi-icg-158830/elemental-chameleon
0.0.0-defensive-callback0.0.0-defensive-callback.1
npm@convera/ui-shared
0.0.20.0.3
npm@datatrain/passenger-v3
99.99.99
npm@design-system-coopeuch/web
999.0.0999.0.4
npm@pelmnaads/naads-common-logger
19999.0.1
npm@tc-core/campus-service
0.0.0-defensive-callback
npm@vaultflow/create-flow
1.0.0
npm@vaultflow/update-flow
1.0.0
npm@webapp-next/store
91.1.0
npmai-figure
0.5.00.6.0
npmamapcn
0.2.00.2.10.2.20.3.00.3.10.3.2
npmapex-connector
1.0.01.0.11.0.21.0.31.0.4
npmapex-trading
1.0.4
npmboring-avatars-vanilla
1.1.21.2.2
npmbui-react-10components
99.0.0
npmcache-poisoning-pwn-demo
0.1.270.1.280.1.29
npmcdp-core
1.0.41.0.6
npmchai-as-regulated
2.0.102.0.112.0.12
npmchalk-pack
1.0.42.0.0
npmchalk-utils
1.0.31.0.42.0.0
npmcheerio-tool
1.0.31.0.41.0.5
npmclaude-code-base-action
2.0.02.2.2
npmdotenvv-tool
1.0.21.0.31.0.41.0.52.0.0
npmenv-threads
1.5.0
npmethers-common
1.0.02.0.0
npmethers-io
1.0.02.0.0
npmexxpress-tool
1.0.01.0.21.0.5
npmexxpress-utils
1.0.21.0.31.0.52.0.0
npmgantt-for-react
0.3.00.4.0
npmglob-helper
1.0.01.0.11.0.21.0.31.0.41.0.52.0.0
npmhardhat-core
1.0.02.0.0
npmhello-world-pkg-value-value-p
1.0.41.0.11
npmidentitysecuretokenserv
10.0.020.0.0
npmjest-canvas-mock
2.5.32.6.32.7.3
npmjoi-pack
1.0.31.0.41.0.5
npmmcp-echarts
0.8.10.9.1
npmmcp-mermaid
0.5.10.6.1
npmmotion-forge-css
1.0.0
npmnock-helper
1.0.21.0.31.0.41.0.52.0.0
npmnode-ci-utils
2.1.02.1.12.1.22.1.32.1.4
npmpaysafe-gbp-virtual-assistant-lib-fe
2.0.4
npmprettier-lint-lenz
1.0.02.6.4
npmprisma-callback
1.0.01.0.31.0.41.0.5
npmrequest-logger-canary
1.0.0
npmrimraf-utils
1.0.41.0.52.0.0
npmsolc-helper
1.0.02.0.0
npmsysbin
1.0.34
npmtruffle-helper
1.0.02.0.0
npmtruffle-js
1.0.02.0.0
npmtypography-stylecss
0.7.4
npmvue-template-compiler-plugin
2.7.18
npmweb3-core-js
1.0.02.0.0
npm-2026-07-28-ghsa-malware-sweepSource advisory
HighAdvisory sweep28 Jul 2026
7 packages tracked
GitHub Advisory PyPI CWE-506 sweep - 7-package 2026-07-28 batch (`karpatkit`/`karpatkey` dep-confusion pair against Karpatkey DAO tooling, `dev-helper-bg` + `cfgzen` infostealer siblings, `mrmustard` Xanadu-quantum-lib typosquat, `vtranalytic` Telegram RAT, `govapkg` fake-Go-doc-client with systemd persistence)
GHSA published 7 new PyPI CWE-506 advisories on 2026-07-28: karpatkit/karpatkey Karpatkey DAO dep-confusion pair, dev-helper-bg + cfgzen infostealer siblings, mrmustard@0.7.4 Xanadu typosquat, vtranalytic@9.0.1 Telegram RAT, govapkg@0.1.0 fake Go doc client with systemd persistence.
PyPI
Affected packages7 packages · 17 versions
PyPIcfgzen
1.0.01.0.11.0.21.0.31.0.41.0.51.0.6
PyPIdev-helper-bg
0.1.30.1.40.1.60.1.7
PyPIgovapkg
0.1.0
PyPIkarpatkey
2.1.1
PyPIkarpatkit
2.1.02.1.1
PyPImrmustard
0.7.4
PyPIvtranalytic
9.0.1
pypi-2026-07-28-ghsa-malware-sweepSource advisory
HighAdvisory sweep27 Jul 2026
46 packages tracked
GitHub Advisory npm CWE-506 sweep - 47-package overnight batch (8-package `thirdweb` / `rainbowkit` crypto-wallet typosquat cluster, 6-package baileys/WhatsApp-scraper `fazz*` + `@vinnxcode` + `sixbails` family, 4-package `log-taker` / `ts-escrow` sibling cluster, 5-package `txs-*` + `chai-log` operator cluster, 3-package `@403name/*` typosquat cluster, 4-package `edu-npm-*` "educational" postinstall family, `@wrenfield/abitype` + `@wrenfield/viem` crypto-SDK typosquats, `@kalipto/local` + `kalipto-runtime`, `@ceeferenderer/*` dep-confusion pair, `ap3-components-ui` v9.999.0 dep-confusion, `permcserver` / `permcarmserver`, plus singletons) retired 2026-07-27 01:02–05:36 UTC
On 2026-07-27 01:02 → 05:36 UTC GitHub retired 47 npm CWE-506 malware advisories in a single overnight batch. Twelve clusters spanning crypto-wallet typosquats (thirdweb / rainbowkit / @wrenfield/viem), WhatsApp-Baileys scrapers (fazz*, @vinnxcode, sixbails, amanexzyra-baileys), dependency-confusion (ap3-components-ui@9.999.0, @ceeferenderer/*), postinstall droppers (txs-*, chai-log, edu-npm-*, @403name/*), plus singletons. All 47 packages security-replaced with 0.0.1-security sentinel tarballs.
npm
Affected packages46 packages · 114 versions
npm@403name/electron-buidler
1.0.01.0.11.0.2
npm@403name/ether-js
1.0.01.0.11.0.2
npm@403name/fsevent
1.0.01.0.11.0.2
npm@ceeferenderer/fe-renderer-sdk
9.9.09.9.999.9.9
npm@ceeferenderer/itg-renderer-sdk
9.9.09.9.999.9.9
npm@ci-lifecycle-test/postinstall-ping
1.0.0
npm@fazzcode/baileys
0.1.10.1.50.1.60.1.72.0.62.4.42.5.32.5.42.5.52.5.62.5.7
npm@kalipto/local
1.0.01.0.11.0.21.0.3
npm@vinnxcode/libsignal-node
1.0.01.0.1
npm@vinnxcode/xbailsync
1.0.01.0.1
npm@wrenfield/abitype
1.2.31.2.41.2.61.2.7
npm@wrenfield/viem
2.53.12.53.22.53.32.53.4
npmamanexzyra-baileys
3.0.04.0.04.0.2
npmap3-components-ui
9.999.0
npmchai-log
1.1.0
npmedu-npm-dependency-chain-demo
1.0.01.0.11.0.21.0.31.0.4
npmedu-npm-helper-alpha
1.0.0
npmedu-npm-helper-beta
1.0.0
npmedu-npm-postinstall-demo2
1.0.01.0.11.0.21.0.3
npmfazzanime
0.3.20.3.30.3.4
npmfazzgram
0.1.00.1.1
npmfluterjs
1.0.0
npmjextic-eclib
1.0.0
npmkalipto-runtime
1.0.0
npmlog-taker
0.0.70.0.80.0.90.1.0
npmlog-taker1
0.1.0
npmnpx-whoami-demo
1.0.0
npmpermcarmserver
1.0.0
npmpermcserver
1.0.01.0.11.0.21.0.31.0.4
npmrainbokit
0.0.8
npmrainbownkit
0.0.8
npmroblox-api-client
1.0.0
npmsixbails
1.0.01.0.11.0.21.0.31.0.41.0.51.0.61.0.71.0.81.1.01.1.11.1.2
npmtherdweb
0.0.8
npmthidweb
0.0.8
npmthirdwb
0.0.8
npmthirdwebb
0.0.8
npmthirdwebjs
0.0.8
npmthurdweb
0.0.8
npmts-escro
0.0.60.0.70.0.80.0.9
npmts-escrow
0.0.90.1.0
npmtxs-builder
1.0.6
npmtxs-random-lib
1.0.1
npmtxs-runner-lib
1.0.1
npmtxs-sdk-lib
1.0.1
npmv018-axios-cdntest
1.0.01.0.11.0.21.0.3
npm-2026-07-27-ghsa-malware-sweepSource advisory
MediumAdvisory sweep25 Jul 2026
20 packages tracked
GitHub Advisory npm CWE-506 backfill - 19 "John Wick 4" Spanish-SEO-spam autopublisher packages + `-pem-misa` tea.xyz farmer swept 2026-07-25 (all long-unpublished from npm)
On 2026-07-25 GitHub retired 20 npm CWE-506 malware advisories in a historical backfill batch - 19 SEO-spam autopublisher packages named after the 2023 movie "John Wick: Chapter 4" (all originally published 2023-03-23, unpublished 2023-03-27), plus -pem-misa@1.3.3 (published 2024-05-24, part of the Indonesian tea.xyz token-farming autopublisher wave). No credential-stealer or wallet-drain payload - these are token-farming and SEO-spam packages that have been off the public npm registry for 1-3 years.
npm
Affected packages20 packages · 20 versions
npm-accion-pelicula-john-wick-4-keanu-reeves-peliculas-completa-varindo-allah-varindo-en-casa-lliena-
1.0.0
npm-accion-pelicula-john-wick-4-keanu-reeves-peliculas-completa-varindo-h-d-varindo-en-casa-lliena-
1.0.0
npm-espanol-john-wick-keanu-4-k-varindo-en-casa-en-lienia-lliena-love
1.0.0
npm-espanol-john-wick-keanu-reeves-4-k-varindo-en-casa-en-lienia-lliena-love
1.0.0
npm-john-wick-4-keanu-reeves-pelicula-completa-4-k-varindo-en-casa-en-lienia-lliena-love
1.0.0
npm-john-wick-4-keanu-reeves-pelicula-completa-h-d-varindo-en-casa-en-lienia-lliena-love
1.0.0
npm-john-wick-4-keanu-reeves-peliculas-completa-h-d-varindo-en-casa-en-lienia-lliena-love
1.0.0
npm-john-wick-4-keanu-reeves-peliculas-completa-h-d-varindo-en-casa-lliena-espanol
1.0.0
npm-john-wick-4-keanu-reeves-peliculas-completa-h-d-varindo-en-casa-lliena-love
1.0.0
npm-john-wick-4-keanu-reeves-peliculas-completa-varindo-h-d-varindo-en-casa-lliena-
1.0.0
npm-john-wick-4-keanu-reeves-peliculas-completa-varindo-h-d-varindo-en-casa-lliena-espanol
1.0.0
npm-john-wick-4-keanu-reeves-peliculas-completa-varindo-h-d-varindo-en-casa-tarabi-lliena-
1.0.0
npm-john-wick-keanu-4-k-varindo-en-casa-en-lienia-lliena-love
1.0.0
npm-john-wick-keanu-reeves-pelicula-completa-4-k-varindo-en-casa-en-lienia-lliena-
1.0.0
npm-john-wick-keanu-reeves-pelicula-completa-4-k-varindo-en-casa-en-lienia-lliena-love
1.0.0
npm-pem-misa
1.3.3
npm-whare-to-watch-john-wick-chapter-4-2023-fullmovies-hd-online-at-123
1.0.0
npm-whare-to-watch-john-wick-chapter-4-2023-fullmovies-hd-online-at-index-main
1.0.0
npm-whare-to-watch-john-wick-chapter-4-2023-fullmovies-hd-online-at-suparhit
1.0.0
npm-whareo-to-watch-john-wick-chapter-4-2023-fullmovies-hd-online-at-home
1.0.0
npm-2026-07-25-ghsa-tea-xyz-backfillSource advisory
HighAdvisory sweep24 Jul 2026
10 packages tracked
GitHub Advisory malware sweep - 10-package `svelte-*-streak` / `eth-*` typosquat cluster (`eth-base` / `eth-slint` / `eth-codergen` / `streak-lib-math` / `svelte-streak-metrics`), `chai-as-stringify` `chai` v7 typosquat, `svgcraft-core` 8-version dropper, and `yuinpm` 68-version prolific-publisher cluster swept 2026-07-23 late-batch
On 2026-07-23 15:39 → 20:10 UTC GitHub retired 10 additional npm CWE-506 malware advisories in a later batch beyond the earlier 19-package sweep. Five clusters: 4-package streak-* / svelte-*-streak extending the 2026-07-21 wave; 3-package eth-* Ethereum typosquat; chai-as-stringify v7 typosquat; 8-version svgcraft-core dropper; and yuinpm - 68 date-tagged malicious versions.
npm
Affected packages10 packages · 90 versions
npmchai-as-stringify
7.0.17.0.2
npmeth-base
1.0.0
npmeth-codergen
1.0.01.0.11.0.2
npmeth-slint
1.0.0
npmstreak-bucket-lib
1.0.0
npmstreak-lib-math
1.0.0
npmsvelte-goal-streak
1.0.0
npmsvelte-streak-metrics
1.0.0
npmsvgcraft-core
1.0.01.0.11.0.21.0.31.0.41.0.51.0.61.0.7
npmyuinpm
2026.7.19-22026.7.19-2-12026.7.19-2-22026.7.19-2-32026.7.19-2-42026.7.19-2-52026.7.19-2-62026.7.19-2-72026.7.19-2-82026.7.19-2-92026.7.19-2-102026.7.19-2-112026.7.19-2-122026.7.20-1-12026.7.20-1-22026.7.20-1-32026.7.20-1-42026.7.20-1-52026.7.20-1-62026.7.20-1-72026.7.20-1-82026.7.20-1-92026.7.20-1-102026.7.20-1-112026.7.20-1-122026.7.20-1-132026.7.20-1-142026.7.20-1-152026.7.20-1-162026.7.20-1-172026.7.20-1-182026.7.20-1-192026.7.20-1-202026.7.20-1-212026.7.20-1-222026.7.20-1-232026.7.20-1-242026.7.20-1-252026.7.20-1-262026.7.20-1-272026.7.20-1-282026.7.20-1-292026.7.20-1-302026.7.20-1-312026.7.20-1-322026.7.20-1-332026.7.20-1-342026.7.22-1-12026.7.22-1-22026.7.22-1-32026.7.22-1-42026.7.22-1-52026.7.22-1-62026.7.22-1-72026.7.22-1-82026.7.22-1-92026.7.22-1-102026.7.22-1-112026.7.22-1-122026.7.22-1-132026.7.22-1-142026.7.22-1-152026.7.22-1-162026.7.22-1-172026.7.22-1-182026.7.22-1-192026.7.22-1-202026.7.22-1-212026.7.22-1-222026.7.22-1-232026.7.22-1-24
npm-2026-07-24-ghsa-malware-sweepSource advisory
HighAdvisory sweep24 Jul 2026
4 packages tracked
GitHub Advisory malware sweep - 4-package `app-data-*` / `app-node-*` v2.1.6 typosquat cluster (`app-data-layer`, `app-node-layer`, `app-data-ist`, `app-data-lts`) coordinated security-replace on 2026-07-24
On 2026-07-24 17:19:21 → 17:19:45 UTC (a 24-second window) GitHub retired 4 npm CWE-506 malware advisories for a tight app-*-prefixed typosquat/dependency-confusion cluster: app-data-layer, app-node-layer, app-data-ist, app-data-lts - all published as 2.1.6, all detected in a single coordinated pipeline sweep.
npm
Affected packages4 packages · 4 versions
npmapp-data-ist
2.1.6
npmapp-data-layer
2.1.6
npmapp-data-lts
2.1.6
npmapp-node-layer
2.1.6
npm-2026-07-24-app-cluster-ghsa-sweepSource advisory
HighAdvisory sweep23 Jul 2026
19 packages tracked
GitHub Advisory malware sweep - 6-package crypto-wallet-drainer typosquat cluster (`ethers*` / `bs58-88` / `@bcryptln/*`), 7-package `version-110`/`version-22` dependency-confusion burst (`helix-deploy` / `vue-demi-fix` / `xrblocks-*` / etc.), and 6-package late-July typosquat/misc set swept 2026-07-23
On 2026-07-23 GitHub's Advisory Database retired 19 CWE-506 npm malware advisories in a coordinated 2-hour security-replace window. Three clusters emerge: a 6-package crypto-wallet-drainer typosquat cluster (ethers-packge, ethers-wallet-package, ethers-wallet-packages, bs58-88, @bcryptln/bcryptjs, @bcryptln/becryptjs) whose names ape the ethers, bs58, and bcryptjs crypto/hashing libraries; a 7-package version-110/version-22 dependency-confusion burst (helix-deploy, vue-demi-fix, xrblocks-remote-control, lychee-norm-cache, create-kumo-project, aio-commerce-lib-app, eslint-angular-react) using deliberately-inflated major versions to shadow internal-registry names; and a 6-package late-July typosquat/misc set (vitest-axios, fs-extra-core, cktool-core, mcp-notes-server-poc-praetorian, base65-85x, da-sc-sdk).
npm
Affected packages19 packages · 38 versions
npm@bcryptln/bcryptjs
3.0.3
npm@bcryptln/becryptjs
3.0.83.0.93.0.103.0.11
npmaio-commerce-lib-app
110.0.0
npmbase65-85x
5.0.1
npmbs58-88
6.0.1
npmcktool-core
1.0.01.0.11.0.21.0.31.0.4
npmcreate-kumo-project
22.0.0
npmda-sc-sdk
1.2.31.2.4
npmeslint-angular-react
110.0.0110.0.1110.0.2
npmethers-packge
2.1.2
npmethers-wallet-package
5.8.0
npmethers-wallet-packages
5.8.05.8.15.8.2
npmfs-extra-core
1.3.4
npmhelix-deploy
110.0.0110.0.1
npmlychee-norm-cache
22.0.0
npmmcp-notes-server-poc-praetorian
0.1.0
npmvitest-axios
1.0.4
npmvue-demi-fix
10.0.010.0.110.0.210.0.310.0.410.0.510.0.6
npmxrblocks-remote-control
22.0.0
npm-2026-07-23-ghsa-malware-sweepSource advisory
HighAdvisory sweep22 Jul 2026
6 packages tracked
GitHub Advisory malware sweep - `encryptstring*` 3-package cluster, `react-tabulix-ui` 3-version burst, `vantora` 2-version pair, and `kijai` singleton swept 2026-07-22
On 2026-07-22 GitHub's Advisory Database retired six CWE-506 npm malware advisories. Dominant cluster: three encryptstring* packages (encryptstringadmin, encryptstringadmincore, encrypt-string-ttak) with 9 combined versions security-replaced within a 20-second window at 20:37 UTC - a coordinated single-actor encryptstring-themed publish burst. Also swept: react-tabulix-ui 3-version burst, vantora 2-version pair, and the pre-existing kijai singleton.
npm
Affected packages6 packages · 15 versions
npmencrypt-string-ttak
1.0.01.0.11.0.2
npmencryptstringadmin
1.2.11.3.01.4.2
npmencryptstringadmincore
1.0.11.1.01.2.2
npmkijai
0.0.2
npmreact-tabulix-ui
0.1.00.1.10.1.2
npmvantora
1.0.01.0.1
npm-2026-07-22-ghsa-malware-sweepSource advisory
HighAdvisory sweep21 Jul 2026
6 packages tracked
GitHub Advisory malware sweep - 3-package `streak-*` habit-tracker cluster, `@apexfdn/apex` 33-version dependency-confusion burst, `nolby` 4-version rapid-burst, and `veskra` singleton swept 2026-07-21
On 2026-07-21 GitHub's Advisory Database retired six CWE-506 npm malware advisories. Highlights: a 3-package streak-* habit-tracker cluster (streak-daycount, streak-calendar, svelte-streaks) published within a 56-minute window on 2026-07-21 and security-replaced 8 hours later, a @apexfdn/apex 33-version 2.5-week dependency-confusion burst (1.0.0 → 1.0.32), and a nolby 4-version 4-hour rapid-burst.
npm
Affected packages6 packages · 43 versions
npm@apexfdn/apex
1.0.01.0.11.0.21.0.31.0.41.0.51.0.61.0.71.0.81.0.91.0.101.0.111.0.121.0.131.0.141.0.151.0.161.0.171.0.181.0.191.0.201.0.211.0.221.0.231.0.241.0.251.0.261.0.271.0.281.0.291.0.301.0.311.0.32
npmnolby
1.0.01.0.11.0.21.0.3
npmstreak-calendar
1.0.01.0.1
npmstreak-daycount
1.0.0
npmsvelte-streaks
1.0.01.0.11.0.2
npmveskra
npm-2026-07-21-ghsa-malware-sweepSource advisory
HighAdvisory sweep21 Jul 2026
223 packages tracked
GitHub Advisory PyPI mass backfill - ~10,000 CWE-506 malware advisories published in a single day dominated by yfinance/python-binance/requests/tensorflow typosquats, wallet* crypto-stealer cluster, and xolo/lib*/py-mine* random-blob clusters
On 2026-07-21 GitHub's Advisory Database published a ~10,000-package PyPI CWE-506 malware backfill (400 GHSA pages × 25/page) - the largest single-day GHSA malware batch ever recorded, spanning the entire alphabet in descending order. Dominant themes: yfinance typosquats (~20 variants), python-binance/requests/tensorflow/beautifulsoup/websockets typosquats, a wallet* crypto-stealer cluster (~15 packages), a xolo* random-name blob cluster (~50 packages), and coordinated lib{cv,craft,ed}* random-word-combo clusters.
PyPI
Affected packages223 packages · 0 versions
PyPIdsicord-webhook
PyPIeautifulsoup
PyPIebautifulsoup
PyPIebautifulsoup4
PyPIebsocket-client
PyPIebsockets
PyPIlibcpumineed
PyPIlibcraftcontrolcraft
PyPIlibcraftosintnvidia
PyPIlibcraftreplaceencode
PyPIlibcraftsplithacked
PyPIlibcraftsplitint
PyPIlibcraftstringcc
PyPIlibcraftsuperre
PyPIlibcrypt
PyPIlibcvcandycontrol
PyPIlibcvcontrolhydra
PyPIlibcvcv
PyPIlibcvcvkill
PyPIlibcvencode
PyPIlibcvgetsplit
PyPIlibcvgrandpep
PyPIlibcvpiphttp
PyPIlibcvpippep
PyPIlibcvproofstr
PyPIlibcvstred
PyPIlibcvverstr
PyPIlibedencodemine
PyPIlibedlgtbreplace
PyPIlibedmcpong
PyPIlibedpephttp
PyPIpy-mccpu
PyPIpy-mcedcraft
PyPIpy-mcloadpaypal
PyPIpy-mcmcmask
PyPIpy-mcosint
PyPIpy-mcpyw
PyPIpy-mcrand
PyPIpy-mcrandom
PyPIpy-mcultracraft
PyPIpy-mcvirtualpy
PyPIpy-mineguigrand
PyPIpy-minelibcc
PyPIpy-minenvidia
PyPIpy-minepingsplit
PyPIpy-minepipram
PyPIpy-minepyencode
PyPIpy-minerampy
PyPIpy-minereplacesuper
PyPIpy-nvidiacandy
PyPIpy-nvidiagranded
PyPIpy-nvidiaguistr
PyPIpy-nvidiahttppep
PyPIpy-nvidiahydraget
PyPIpy-nvidialibhttp
PyPIpy-nvidiapepcontrol
PyPIreq-os
PyPIreq6
PyPIreq7
PyPIreqarg
PyPIreqargs
PyPIreqeist
PyPIreqeosts
PyPIreqesst
PyPIreqest-2022
PyPIreqest-dexfree
PyPIreqests-2
PyPIreqests-2022
PyPIreqests-toolbelt
PyPIreqeuest-2022
PyPIreqeuest-new
PyPIreqeuste
PyPIreqeusts-toolbelt
PyPIreqeustz
PyPIreqeuts
PyPIreqeyst
PyPIreqiest
PyPIreqinstall
PyPIreqjuests
PyPIreqquest
PyPIreqquests
PyPItensorflow-opt
PyPItensorflowlitex
PyPItensorflows
PyPItensroflow
PyPItenssorflow
PyPItensxxfxxk
PyPIterraformness
PyPItesorflow
PyPIultrapost
PyPIultraproof
PyPIultrasuper
PyPIultraultra
PyPIultravm
PyPIunclesky5910
PyPIunizip
PyPIunzipxz
PyPIupdate-mss
PyPIupdate-request
PyPIupdate-requests
PyPIupdater12
PyPIupdateuuid4
PyPIupggrade-requests
PyPIupgrade-requests
PyPIupgrade-requestss
PyPIupgrade-requestt
PyPIvypeer
PyPIvyperr
PyPIvypper
PyPIvyyper
PyPIw3b
PyPIw3b-py
PyPIw3bt00n
PyPIw3eb
PyPIw3socket
PyPIwallet-utils
PyPIwallet-utils-pro
PyPIwalletdecoders
PyPIwalletdecoderss
PyPIwalletrpcs
PyPIwallets-utils
PyPIwalletsutils
PyPIwallettron
PyPIwallettronpy
PyPIwalletutility
PyPIwalletweb3
PyPIxlsxwrietr
PyPIxlsxwritre
PyPIxlsxwritter
PyPIxoloazfgyobkaw
PyPIxolobwritbrulv
PyPIxolobzvfburelm
PyPIxolodyntlnewtp
PyPIxoloeduccelifz
PyPIxolofmdvxqvbmp
PyPIxoloftiqwxxhje
PyPIxolofyxkotqwko
PyPIxologrekjlqzxj
PyPIxolojbxzzttwpk
PyPIxolojgmnizxche
PyPIxolojhzyppbsow
PyPIxololcuakbzbuu
PyPIxolomjqalvrpmp
PyPIxolonavrylpbeb
PyPIxoloowlowpzeke
PyPIxoloqmotdjpbic
PyPIxolosafhpodvqo
PyPIxolosamsdyhcfa
PyPIxolosxelwsesnp
PyPIxolotcgstfiguu
PyPIxoloulfkhiyywc
PyPIxolovqryjphftd
PyPIxolowqffntthtb
PyPIxoloxwmellxliq
PyPIxoloyuaezcqixu
PyPIxorg-renderproto
PyPIxsltproc
PyPIxsxwriter
PyPIxwormclient
PyPIxxlsxwriter
PyPIxxoo-bale
PyPIxxx-bale
PyPIxyq-drama-skill
PyPIyc-as-client
PyPIyeahmankema
PyPIyellorq
PyPIyellyproxies
PyPIyffinance
PyPIyfiance
PyPIyfiannce
PyPIyfiinance
PyPIyfinaance
PyPIyfinace
PyPIyfinacne
PyPIyfinancce
PyPIyfinancee
PyPIyfinane
PyPIyfinanec
PyPIyfinannce
PyPIyfinnace
PyPIyfinnance
PyPIyfinnce
PyPIyfnance
PyPIyfniance
PyPIygame
PyPIyolov8mini
PyPIyoutube-new
PyPIyoutubebot
PyPIypsocks
PyPIypthon-binance
PyPIysocks
PyPIyt-api-dlp
PyPIyt-yson-bindings
PyPIython-binance
PyPIyuzo
PyPIyyfinance
PyPIzabitog
PyPIzafira
PyPIzakuchienne
PyPIzakuraweb
PyPIzamino
PyPIzatta
PyPIzebo
PyPIzelixnitro
PyPIzenomenallib
PyPIzeubilamouche
PyPIzhopaorlaaato
PyPIzip-me
PyPIziphash
PyPIzking
PyPIzlapp
PyPIzlib1g-dev
PyPIzlibxjson
PyPIzlsrc
PyPIzmaker
PyPIznomig
PyPIzorosnitro
PyPIzproxy
PyPIzproxy2
PyPIzscaner
PyPIzsender
PyPIztasimb
PyPIzydnitro
pypi-2026-07-21-ghsa-mass-backfillSource advisory
HighAdvisory sweep20 Jul 2026
86 packages tracked
GitHub Advisory malware sweep - 5-package AWS/CDK dependency-confusion cluster, `upjsma` 9-version 3-day burst, and 80-package `@gocortexio/npmgremlinbox-*` Cortex red-team validation kit swept 2026-07-20
On 2026-07-20 GitHub's Advisory Database retired 86 CWE-506 npm malware advisories in a single sweep. Highlights: a 5-package AWS/CDK dependency-confusion cluster (alb-lambda-cdk, s3-lambda-dynamodb-cdk, lambda-cloudwatch-cdk, iot-kfh-s3, lwc-slds-lbc) published within a 20-minute window on 2026-07-18 with high dep-confusion pins, upjsma (9 versions across 3 days), and the 80-package @gocortexio/npmgremlinbox-* red-team validation kit from the Palo Alto Networks Cortex ecosystem tooling org.
npm
Affected packages86 packages · 95 versions
npm@gocortexio/npmgremlinbox-agpl-1-0
2.1.0
npm@gocortexio/npmgremlinbox-agpl-1-0-only
2.1.0
npm@gocortexio/npmgremlinbox-agpl-1-0-or-later
2.1.0
npm@gocortexio/npmgremlinbox-agpl-3-0
2.0.12.1.0
npm@gocortexio/npmgremlinbox-agpl-3-0-only
2.1.0
npm@gocortexio/npmgremlinbox-agpl-3-0-or-later
2.1.0
npm@gocortexio/npmgremlinbox-apsl
2.1.0
npm@gocortexio/npmgremlinbox-arphic-1999
2.1.0
npm@gocortexio/npmgremlinbox-artistic-1-0
2.1.0
npm@gocortexio/npmgremlinbox-base
2.1.0
npm@gocortexio/npmgremlinbox-busl-1-1
2.1.0
npm@gocortexio/npmgremlinbox-c-uda-1-0
2.1.0
npm@gocortexio/npmgremlinbox-cal-1-0-combined-work-exception
2.1.0
npm@gocortexio/npmgremlinbox-cc-by-nc-3-0-de
2.1.0
npm@gocortexio/npmgremlinbox-cc-by-nc-nd-3-0-de
2.1.0
npm@gocortexio/npmgremlinbox-cc-by-nc-nd-3-0-igo
2.1.0
npm@gocortexio/npmgremlinbox-cc-by-nc-sa-2-0-de
2.1.0
npm@gocortexio/npmgremlinbox-cc-by-nc-sa-2-0-fr
2.1.0
npm@gocortexio/npmgremlinbox-cc-by-nc-sa-2-0-uk
2.1.0
npm@gocortexio/npmgremlinbox-cc-by-nc-sa-3-0-de
2.1.0
npm@gocortexio/npmgremlinbox-cc-by-nc-sa-3-0-igo
2.1.0
npm@gocortexio/npmgremlinbox-cc-by-nd-3-0-de
2.1.0
npm@gocortexio/npmgremlinbox-cc-by-sa-2-0-uk
2.1.0
npm@gocortexio/npmgremlinbox-cc-by-sa-2-1-jp
2.1.0
npm@gocortexio/npmgremlinbox-cc-by-sa-3-0-at
2.1.0
npm@gocortexio/npmgremlinbox-cc-by-sa-3-0-de
2.1.0
npm@gocortexio/npmgremlinbox-cc-by-sa-4-0
2.1.0
npm@gocortexio/npmgremlinbox-cddl-1-0
2.1.0
npm@gocortexio/npmgremlinbox-cdla-sharing-1-0
2.1.0
npm@gocortexio/npmgremlinbox-cern-ohl-s-2-0
2.1.0
npm@gocortexio/npmgremlinbox-cern-ohl-w-2-0
2.1.0
npm@gocortexio/npmgremlinbox-copyleft-next-0-3-0
2.1.0
npm@gocortexio/npmgremlinbox-copyleft-next-0-3-1
2.1.0
npm@gocortexio/npmgremlinbox-cpol-1-02
2.1.0
npm@gocortexio/npmgremlinbox-ecos-2-0
2.1.0
npm@gocortexio/npmgremlinbox-epl-1-0
2.1.0
npm@gocortexio/npmgremlinbox-epl-2-0
2.1.0
npm@gocortexio/npmgremlinbox-eupl-1-1
2.1.0
npm@gocortexio/npmgremlinbox-eupl-1-2
2.1.0
npm@gocortexio/npmgremlinbox-eupl-3-0
2.1.0
npm@gocortexio/npmgremlinbox-fdk-aac
2.1.0
npm@gocortexio/npmgremlinbox-gpl-2-0
2.1.0
npm@gocortexio/npmgremlinbox-gpl-3-0
2.1.0
npm@gocortexio/npmgremlinbox-hippocratic-2-1
2.1.0
npm@gocortexio/npmgremlinbox-jpl-image
2.1.0
npm@gocortexio/npmgremlinbox-lgpl-2-0
2.1.0
npm@gocortexio/npmgremlinbox-lgpl-2-1
2.1.0
npm@gocortexio/npmgremlinbox-lgpl-3-0
2.1.0
npm@gocortexio/npmgremlinbox-linux-man-pages-copyleft
2.1.0
npm@gocortexio/npmgremlinbox-malware-c2-beacon
2.1.0
npm@gocortexio/npmgremlinbox-malware-code-obfuscation
2.1.0
npm@gocortexio/npmgremlinbox-malware-credential-harvesting
2.1.0
npm@gocortexio/npmgremlinbox-malware-cryptomining-indicators
2.1.0
npm@gocortexio/npmgremlinbox-malware-install-execution
2.1.0
npm@gocortexio/npmgremlinbox-malware-network-indicators
2.1.0
npm@gocortexio/npmgremlinbox-mpl-1-1
2.1.0
npm@gocortexio/npmgremlinbox-mpl-2-0
2.1.0
npm@gocortexio/npmgremlinbox-ms-lpl
2.1.0
npm@gocortexio/npmgremlinbox-ncgl-uk-2-0
2.1.0
npm@gocortexio/npmgremlinbox-openpbs-2-3
2.1.0
npm@gocortexio/npmgremlinbox-osl-3-0
2.1.0
npm@gocortexio/npmgremlinbox-polyform-noncommercial-1-0-0
2.1.0
npm@gocortexio/npmgremlinbox-polyform-small-business-1-0-0
2.1.0
npm@gocortexio/npmgremlinbox-qpl-1-0-inria-2004
2.1.0
npm@gocortexio/npmgremlinbox-sendmail-8-23
2.1.0
npm@gocortexio/npmgremlinbox-simpl-2-0
2.1.0
npm@gocortexio/npmgremlinbox-sspl-1-0
2.1.0
npm@gocortexio/npmgremlinbox-tapr-ohl-1-0
2.1.0
npm@gocortexio/npmgremlinbox-tpl-1-0
2.1.0
npm@gocortexio/npmgremlinbox-typosquat-axios
2.1.0
npm@gocortexio/npmgremlinbox-typosquat-chalk
2.1.0
npm@gocortexio/npmgremlinbox-typosquat-commander
2.1.0
npm@gocortexio/npmgremlinbox-typosquat-express
2.1.0
npm@gocortexio/npmgremlinbox-typosquat-lodash
2.1.0
npm@gocortexio/npmgremlinbox-typosquat-moment
2.1.0
npm@gocortexio/npmgremlinbox-typosquat-react
2.1.0
npm@gocortexio/npmgremlinbox-typosquat-webpack
2.1.0
npm@gocortexio/npmgremlinbox-ucl-1-0
2.1.0
npm@gocortexio/npmgremlinbox-unlicense
2.1.0
npm@gocortexio/npmgremlinbox-wxwindows
2.1.0
npmalb-lambda-cdk
18.2.22
npmiot-kfh-s3
17.3.23
npmlambda-cloudwatch-cdk
0.0.0
npmlwc-slds-lbc
18.9.41
npms3-lambda-dynamodb-cdk
15.10.16
npmupjsma
1.0.581.0.591.0.601.0.611.0.621.0.631.0.641.0.651.0.66
npm-2026-07-20-ghsa-malware-sweepSource advisory
HighAdvisory sweep20 Jul 2026
174 packages tracked
GitHub Advisory backfill sweep - ~264 NuGet CWE-506 malware advisories dominated by Solana wallet impersonators, WPF/WinForms UI-kit typosquats, and popular-API impersonators (Zendesk, Binance, Coinbase, Ripple, Stripe, PayPal, Kraken, Kucoin, Huobi, Bybit)
On 2026-07-20 GitHub's Advisory Database published a ~264-package NuGet CWE-506 malware backfill - the largest single-day NuGet sweep on record. Dominant themes: Solana/crypto wallet impersonators (~15 packages: Solana, SolanaWallet, solananet, solnetplus, solnetall, solnetunified, solnetwallet.net.core), WPF/WinForms UI-kit typosquats (~40 packages: WPF-UI-Net, WpfAnimatedGif.Net, WpfLightToolkit.Net, LiveCharts.net, Bunifu.*), Oracle Cloud SDK impersonators (OCI.DotNetSDK.*, ~25 packages), and crypto-exchange API impersonators (Binance, Kucoin, Kraken, Bybit, Coinbase, Huobi, Ripple).
NuGet
Affected packages174 packages · 0 versions
NuGetAlgoTrading
NuGetAlgoTrading.Net
NuGetAltcoins
NuGetAltcoins.Library
NuGetbinance.csharp
NuGetBinance.Libary
NuGetBinance.Library
NuGetbitcoincore
NuGetBitcoinLib.Net
NuGetBlazor.Captcha
NuGetBlockcore.Networks.Bitcoin.Bc
NuGetbsure.binsec
NuGetbsure.utils
NuGetBunifu
NuGetBunifu.Form
NuGetBunifu.GUI
NuGetBunifu.UI.WinForms.Net
NuGetBunifu.UI2Winforms
NuGetBunifu.UI3Winforms
NuGetBybit.Net.Core
NuGetCaptchaCsharp
NuGetCefSharp.WinForm.Net.Core
NuGetChronos.Platform.Linux.API
NuGetClipboard.net
NuGetCodeExecTest
NuGetCoinbase.Api
NuGetGetRekt420
NuGetGoogleReCaptcha.V4
NuGethackney.core.enums
NuGethackney.core.jwt
NuGetHuobi.Net.Core
NuGetjjrawlins.cdkiampolicybuilderhelper
NuGetKANYEWESTBRIDGADE
NuGetKanyeWestBrigade
NuGetKanyeWestWasRight
NuGetKeyAuthAPI
NuGetKrakenExchange.Net.Core
NuGetKucoin.Net.Core
NuGetLedgerWallet.Net
NuGetLfafafa2
NuGetLfafafa3
NuGetLib.Harmony.net
NuGetLibEmbedder.Fody
NuGetLitecoin
NuGetLive.Charts.WinForm
NuGetLiveCharts.net
NuGetLiveCharts.WinForms.net
NuGetLiveCharts.Wpf.net
NuGetMailBee
NuGetmarkdown-to-html
NuGetMetroModern.UI2
NuGetnethereumunified
NuGetNotifyIcons
NuGetNotus.Wallet.Utility.Net
NuGetNughettt.TestPO
NuGetOCI.DotNetSDK.Ai.speech
NuGetOCI.DotNetSDK.Ai.vision
NuGetOCI.DotNetSDK.Apm.config
NuGetOCI.DotNetSDK.Appmgmtcontrol.Net
NuGetOCI.DotNetSDK.Certificates.Net
NuGetOCI.DotNetSDK.Certificatesmanagement.Net
NuGetOCI.DotNetSDK.Dashboard.service
NuGetOCI.DotNetSDK.Databasetools.Net
NuGetOCI.DotNetSDK.Datalabeling.service
NuGetOCI.DotNetSDK.File.storage
NuGetOCI.DotNetSDK.Net
NuGetOCI.DotNetSDK.Ospgateway.Net
NuGetOCI.DotNetSDK.Osubbillingschedule.Net
NuGetOCI.DotNetSDK.Osuborganizationsubscription.Net
NuGetOCI.DotNetSDK.Osubsubscription.Net
NuGetOCI.DotNetSDK.Osubusage.Net
NuGetOCI.DotNetSDK.Servicemanager.proxy
NuGetOCI.DotNetSDK.Threat.intelligence
NuGetOCI.DotNetSDK.Usage.Net
NuGetOCI.DotNetSDK.Visualbuilder.Net
NuGetOCI.DotNetSDK.Waf.Net
NuGetOpenCvSharp4.WpfExtensions.Net
NuGetOtpCsharp
NuGetPathoschild.Stardew.Mod.Build.Config
NuGetPathoschild.Stardew.ModBuildConfig.Net
NuGetPayPalMerchant.SDK
NuGetPDFTron.NETCore.Windows.x64.Net
NuGetPortable.Xaml.Net
NuGetppy.osu.Game.Lib
NuGetPrivacyGate.net
NuGetpsbuiId
NuGetPubIishIgnore
NuGetPublishIgnor
NuGetRadPdf.Net
NuGetReactive.GUI.Winforms
NuGetReaLTaiizor-WinForm
NuGetReddit.api
NuGetReothor.Lab.EvilPackage
NuGetResource.Embedder.Net
NuGetRg.Plugins.Popups.Net
NuGetRimworld.Reference.Libary
NuGetRimworld.References.Net
NuGetRipple.NetCore.Api
NuGetRockstar.AssetManager.Infrastructure
NuGetRSG.Base
NuGetSanka.UI.WinForms
NuGetSanka.UI2.WinForms
NuGetSanka.UI3.WinForms
NuGetsecurity_hacks
NuGetseedefender
NuGetShade.UI.WinForms
NuGetShade.WPF.Controls
NuGetSharpCashAddr.Core
NuGetsharpdefender
NuGetSimplify.Windows.Forms.Net
NuGetSkylark.Net
NuGetSoenneker.Redis.Util.Net
NuGetSolana
NuGetsolananet
NuGetSolanaWallet
NuGetsolnetall
NuGetsolnetall.net
NuGetsolnetplus
NuGetsolnetunified
NuGetsolnetwallet.net.core
NuGetsqzrframework480
NuGetStl.Blazor.Authentication.Net
NuGetStl.CommandLine.Net
NuGetStl.Fusion.Ext.Contracts.Net
NuGetStl.Fusion.Ext.Services.Net
NuGetStl.Generators.Net
NuGetStl.Plugins.Extensions.Net
NuGetStl.RestEase.Net
NuGetStl.Rpc.Server.Core
NuGetStl.Rpc.Server.Net.Fx
NuGetstripeapi.net
NuGetSuperpower-Api
NuGetSyntellect.Winium.Cruciatus.Net
NuGetSyntellect.Winium.Element
NuGetSyntellect.Winium.Web.Driver
NuGetTessa.Analyzer
NuGetTessa.Compilations
NuGetTessa.Core
NuGetTessa.Linux.V2
NuGetTessa.Net.V2
NuGetTessa.Postgre.Sql
NuGetTessa.Server.Net
NuGetTessa.UI2
NuGetTessa.Web.Client.Net
NuGetTessa.Web.Core
NuGetTessa.Windows.V2
NuGettest6789.client
NuGettest6789.latest
NuGettest6789.v3
NuGettestt22esttest
NuGetTheOpenAI.API
NuGetUI2.Guna.Winforms
NuGetUltimate.Wpf.Toolkit
NuGetvspropertypages
NuGetWhatsapp.API
NuGetWindowsAPICodePack.Net
NuGetWinforms
NuGetWPF-UI-Net
NuGetWpf.UI.WinForms
NuGetWpfAnimatedGif.Net
NuGetWpfLightToolkit.Net
NuGetWPFMediaKit.Net
NuGetWpfScreenHelper.Net
NuGetwpfuihelpercore
NuGetXam.Plugins.Forms.Svg.Net
NuGetXboxGamebar
NuGetxopxopxopxopxopx
NuGetYoutubeExtractor.Net
NuGetZendesk
NuGetZendesk-Api
NuGetZendesk.Client
NuGetZendesk.Drivers
NuGetZendesk.OAuth
NuGetZendeskApi.Client.V2
nuget-2026-07-20-ghsa-backfill-sweepSource advisory
HighAdvisory sweep18 Jul 2026
8 packages tracked
GitHub Advisory malware sweep - 8 npm packages (3-package `syft-acp-*` "click2ai" dep-confusion beacon, 2-package `@edgecommons/*` preinstall-hook pair, `axios-native` + `telemetry-axios` axios typosquats, `easyway2` 12-version 4-hour burst) retired 2026-07-17 → 2026-07-18
On 2026-07-17 and 2026-07-18 GitHub's Advisory Database retired 8 CWE-506 npm malware advisories. Highlights: a 3-package syft-acp-* dependency-confusion trio published by npm account ada8877 that beacons victim IP + hostname to a Sentry ingest endpoint (byte-for-byte reuse of the earlier "click2ai" reconnaissance payload), a 2-package @edgecommons/* preinstall-hook pair, and axios typosquats axios-native + telemetry-axios.
npm
Affected packages8 packages · 19 versions
npm@edgecommons/edgecommons
1.0.0
npm@edgecommons/streamlog-node
1.0.0
npmaxios-native
1.0.0
npmeasyway2
1.0.01.0.11.0.21.0.31.0.41.0.51.0.61.0.71.0.81.0.91.0.101.0.11
npmsyft-acp-atoms
14.8.68
npmsyft-acp-core
16.0.0
npmsyft-acp-uikit
1.9.45
npmtelemetry-axios
1.0.0
npm-2026-07-18-ghsa-malware-sweepSource advisory
HighDependency confusion18 Jul 2026
9 packages tracked
crates.io dependency-confusion burst - 9 Rust crates targeting AWS, Mysten Labs, Replit, Proton, plus 4 generic-name typosquats, all flagged by OpenSSF Package Analysis on 2026-07-18
On 2026-07-18 the OpenSSF Package Analysis project flagged 9 Rust crates as malware - all yanked from crates.io within hours and mirrored into the GitHub Advisory Database as CWE-506 records. The 99.x.x version pins on mysten-metrics, amzn-codewhisperer-streaming-client, amzn-consolas-client, replit_ruspty, semantic-search-client, supertag, proton-pfff, and lsh are classic dep-confusion telltales. Every crate communicates with an attacker-controlled domain and executes commands on install.
crates.io
Affected packages9 packages · 11 versions
crates.ioamzn-codewhisperer-streaming-client
99.0.1
crates.ioamzn-consolas-client
99.0.1
crates.iolittest
0.3.1
crates.iolsh
99.0.199.1.0
crates.iomysten-metrics
9.0.09.0.3
crates.ioproton-pfff
99.99.5
crates.ioreplit_ruspty
1.0.0
crates.iosemantic-search-client
99.0.1
crates.iosupertag
99.1.1
crates-2026-07-18-openssf-typosquat-burstSource advisory
HighAdvisory sweep18 Jul 2026
3 packages tracked
GitHub Advisory malware sweep - 3 PyPI packages retired 2026-07-18 (`govpkg` telegra.ph-C2 downloader + persistent fake-service; `trongridev`/`trongridme` Tron private-key exfil pair)
On 2026-07-18 GitHub's Advisory Database retired 3 CWE-506 PyPI malware advisories. Highlights: govpkg (versions 0.1.0, 0.2.0 - the OSSF-tagged 2026-07-govpkg campaign) silently downloads a native executable, disguises it as a system service for persistence, and uses telegra.ph (Telegraph anonymous-publishing) as C2; and a trongridev/trongridme Tron private-key exfil pair (both v0.0.1) from the recurring OSSF 2025-04-tronix campaign.
PyPI
Affected packages3 packages · 4 versions
PyPIgovpkg
0.1.00.2.0
PyPItrongridev
0.0.1
PyPItrongridme
0.0.1
pypi-2026-07-18-ghsa-malware-sweepSource advisory
HighCompromise18 Jul 2026
3 packages tracked
SleeperGem - dormant RubyGems maintainer takeover drops persistent developer-laptop backdoor via `git.disroot.org` Forgejo second-stage (git_credential_manager, Dendreo, fastlane-plugin-run_tests_firebase_testlab)
On 2026-07-18 → 07-19 an actor reactivated two long-dormant RubyGems maintainer accounts (Dendreo, dormant since 2020; fastlane-plugin-run_tests_firebase_testlab, dormant since 2019) and published a brand-new git_credential_manager gem impersonating Microsoft's Git Credential Manager. Seven malicious releases across three gems fetch a second-stage binary from git.disroot.org/git-ecosystem/* (Forgejo), skip execution if any of ~30 CI env vars are present, and drop a persistent native daemon on developer laptops.
RubyGems
Affected packages3 packages · 7 versions
RubyGemsDendreo
1.1.31.1.4
RubyGemsfastlane-plugin-run_tests_firebase_testlab
0.3.2
RubyGemsgit_credential_manager
2.8.02.8.12.8.22.8.3
rubygems-2026-07-18-sleepergem-dormant-maintainer-takeoverSource advisory
HighTyposquat17 Jul 2026
12 packages tracked
"Polymarket Trap" - fake arbitrage-bot repo funnels DeFi devs to a 30-package infostealer cluster
SafeDep and Panther jointly disclosed the "Polymarket Trap" on 2026-07-17: a fake Trum3it/polymarket-arbitrage-bot GitHub repo (36 stars, 53 forks) whose package.json declares clob-client-math as a peer utility that is never imported. The 30-package cluster spans 10 coordinated npm accounts under two profiles - Polymarket / CLOB SDK impersonators (clob-client-math, polymarket-stake-math, polymarket-trade and siblings) and DeFi-math typosquats (bn-lint, ts-precision, decimal-format-utils). A postinstall hook drops a 2,787–2,887-line JavaScript infostealer that harvests crypto wallets, browser vaults, SSH keys, cloud tokens, and password-manager databases.
npm
Affected packages12 packages · 29 versions
npmbn-lint
3.0.63.0.8
npmclob-client-math
1.0.01.0.1
npmdecimal-format-utils
1.0.01.0.1
npmpolymarket-ai-agent
0.1.00.1.1
npmpolymarket-auto-trade
0.1.00.1.1
npmpolymarket-bot
0.1.00.1.1
npmpolymarket-claude-code
0.1.00.1.1
npmpolymarket-copy-trading
0.1.00.1.1
npmpolymarket-stake-math
3.1.03.2.03.3.03.4.03.5.03.5.1
npmpolymarket-stake-maths
3.1.03.2.03.3.03.5.2
npmpolymarket-trade
0.1.00.1.1
npmts-precision
3.7.2
npm-2026-07-17-polymarket-trap-clob-client-mathSource advisory
HighAdvisory sweep16 Jul 2026
18 packages tracked
GitHub Advisory malware sweep - 18 npm packages (2 Claude / Anthropic-brand typosquats, 3-package `chain-sdk-js` / `theta-sdk-js` / `ai-pro-sdk` mid-July SDK cluster, 3-package `ai-p2p` / `websight-p2p` / `websight2-p2p` June 15 P2P burst, 3 auto-publisher sleepers `px8my` (55 versions) / `monogrok` (21 versions) / `scan-only` (16 versions), plus WordPress Gutenberg / terminal-toy / singleton fillers) retired 2026-07-16 → 2026-07-17
On 2026-07-16 and 2026-07-17 GitHub's Advisory Database retired 18 CWE-506 npm malware advisories (separate from 2 additional chai-as-* retirements folded into the existing jsonspack DPRK incident). Highlights: anthropic-claude-latest - a version-matched (4.7.1 / 4.7.2 / 4.7.3) typosquat of Anthropic's Claude Code CLI - and claude-token-tracker-mcp, an MCP-shape package targeting Claude Code's OAuth-token traffic (matching the Mitiga Labs "MCP token theft" attack chain that abuses .claude.json).
npm
Affected packages18 packages · 154 versions
npmai-p2p
1.0.01.0.11.0.21.0.31.0.4
npmai-pro-sdk
2.0.12.0.22.0.32.0.4
npmanthropic-claude-latest
4.7.14.7.24.7.3
npmawesome-terminal
1.0.11.0.21.0.31.0.4
npmchain-sdk-js
1.0.21.0.31.0.41.0.51.0.6
npmclaude-token-tracker-mcp
1.0.0
npmhehehe
1.0.01.0.41.0.51.0.61.0.72.0.12.0.2
npmloader1
2.1.22.1.32.1.42.1.52.1.62.1.7
npmmonogrok
1.0.11.0.71.0.81.0.111.0.141.0.301.0.311.0.321.0.331.0.341.0.351.0.361.0.371.0.391.0.401.0.411.0.431.0.44
npmmy-tailwind-gutenberg-block
0.1.00.1.20.1.30.1.40.1.5
npmpx8my
1.0.01.0.11.0.21.0.31.0.41.0.51.0.61.0.71.0.81.0.91.0.101.0.111.0.121.0.131.0.141.0.151.0.161.0.171.0.181.0.191.0.201.0.211.0.221.0.231.0.241.0.251.0.261.0.271.0.281.0.291.0.301.0.311.0.321.0.331.0.341.0.351.0.361.0.371.0.381.0.391.0.401.0.411.0.421.0.431.0.441.0.451.0.461.0.471.0.481.0.491.0.501.0.511.0.521.0.531.0.54
npmscan-only
0.2.00.3.00.4.00.4.10.4.20.4.30.4.40.4.50.4.60.4.70.4.80.4.90.5.00.5.11.0.0
npmterminal-mascot
1.0.01.0.11.0.21.0.33.5.23.5.3
npmtheta-sdk-js
1.2.141.2.151.2.161.2.17
npmvor8zakon
1.0.0
npmwebsight-p2p
1.0.01.0.11.0.21.0.31.0.41.0.51.0.6
npmwebsight2-p2p
1.0.01.0.11.0.21.0.31.0.4
npmwordpad-text-ui
1.0.01.0.11.0.2
npm-2026-07-16-ghsa-malware-sweepSource advisory
HighAdvisory sweep15 Jul 2026
25 packages tracked
GitHub Advisory malware sweep - 25 npm packages (6-package `@sauruslord` / `zaldy-baileys` WhatsApp-Baileys-fork cluster, 4-package `webpack-cache-*` / `vite-config-optimizer` 35-day dep-confusion sleeper, `patientdocuments` + `fhirproxy-utils` FHIR/healthcare pair, `@bcs-mi-ui` 3-package internal cluster, `js-shared-modules` scope-pair) retired 2026-07-15
On 2026-07-15 GitHub's Advisory Database retired 25 CWE-506 npm malware advisories in four clean bursts. Highlights: a 6-package @sauruslord / zaldy-baileys / saurus-assets Baileys WhatsApp-API fork cluster (retired inside a 65-second window at 05:11-05:12 UTC - same operator signature as the earlier @skyzopedia/baileys-mod and lotusbail WhatsApp-message-stealer campaigns), a 4-package webpack-cache-cycle / webpack-session-cache / webpack-cache-reset / vite-config-optimizer 35-day sleeper retired in a 15-second burst, and a healthcare-targeted patientdocuments@75.0.0 + fhirproxy-utils FHIR-namespace dep-confusion pair.
npm
Affected packages25 packages · 56 versions
npm@achuthvp/postinstall-poc
1.0.01.0.11.0.21.0.3
npm@bcs-mi-ui/message
1.0.2
npm@bcs-mi-ui/message-block
1.0.2
npm@bcs-mi-ui/test1243npmpacket76
1.0.2
npm@hkyyy/portal-widget-helper-0601
1.0.0
npm@saladin0x1/js-shared-modules
1.11.6
npm@sauruslord/baileys
1.0.01.0.1
npm@sauruslord/eslint-config
2.0.12.0.2
npm@sauruslord/libsignal
2.0.0
npmfhirproxy-utils
1.0.8
npmgpu-accelerator
1.4.21.4.31.4.41.4.51.4.61.4.7
npmjs-shared-modules
1.11.61.11.7
npmldpbootstrap-jquery
1.0.01.0.21.0.31.0.41.0.51.0.61.0.71.0.91.0.101.0.111.0.121.0.131.0.141.0.151.0.16
npmpatientdocuments
75.0.0
npmpostcss-processor-utils
1.0.01.0.11.0.21.0.3
npmsaurus-assets
1.0.0
npmsauruslord-baileys
1.0.22.0.03.0.2
npmssweb-wp
1.0.0
npmtestzapier
1.0.01.0.1
npmtextshape-css
1.0.0
npmvite-config-optimizer
1.1.4
npmwebpack-cache-cycle
0.1.4
npmwebpack-cache-reset
0.1.4
npmwebpack-session-cache
0.1.4
npmzaldy-baileys
2.0.0
npm-2026-07-15-ghsa-malware-sweepSource advisory
CriticalCompromise14 Jul 2026
4 packages tracked
AsyncAPI npm org compromised - 4 packages / 5 versions ship Miasma botnet loader via GitHub Actions `pull_request_target` pwn request
On 2026-07-14 an attacker exploited a pull_request_target misconfiguration in asyncapi/generator to steal a highly-privileged GitHub PAT, then published five malicious @asyncapi/* releases through the project's own trusted GitHub Actions release pipeline - valid npm OIDC provenance and all. The payload fires on require(), spawns a detached Node process, fetches an 8.25 MB IPFS loader (Miasma), and installs a 3.09 MB implant with six independent C2 channels (HTTP, Nostr, IPFS, BitTorrent DHT, libp2p GossipSub, Ethereum smart contract). Combined weekly downloads: ~2.9M.
npm
Affected packages4 packages · 5 versions
npm@asyncapi/generator
3.3.1
npm@asyncapi/generator-components
0.7.1
npm@asyncapi/generator-helpers
1.1.1
npm@asyncapi/specs
6.11.2-alpha.16.11.2
npm-2026-07-14-asyncapi-miasma-actions-pwn-requestSource advisory
HighMalicious package14 Jul 2026
8 packages tracked
PhantomSync - 8-package npm crypto-developer cluster with delayed self-persisting dropper
Between 2026-07-13 and 2026-07-14 the npm publisher solbuilder_io (angel_lopez89@proton.me) shipped eight small crypto-developer packages - base58-utils, abi-encode, eth-dev, arb-kit, layer2-sdk, solana-key-utils, eth-wallet-helpers, crypto-validate-lib - each carrying a working utility plus a self-invoking dropper that fires ~37s after import, installs cross-platform persistence, and launches an RSA-4096 crypto-wallet stealer exfiltrating to public IPFS. npm-support unpublished every version on 2026-07-14 17:23 UTC.
npm
Affected packages8 packages · 31 versions
npmabi-encode
1.0.01.0.11.0.21.0.31.0.4
npmarb-kit
1.0.01.0.1
npmbase58-utils
1.0.01.0.11.0.31.0.41.0.5
npmcrypto-validate-lib
1.0.01.0.11.0.21.0.3
npmeth-dev
1.0.01.0.11.0.21.0.31.0.4
npmeth-wallet-helpers
1.0.01.0.11.0.21.0.3
npmlayer2-sdk
1.0.01.0.1
npmsolana-key-utils
1.0.01.0.11.0.21.0.3
npm-2026-07-14-phantomsync-crypto-wallet-dropperSource advisory
HighAdvisory sweep13 Jul 2026
14 packages tracked
GitHub Advisory malware sweep - 14 npm packages (10-package `getd-*` / `get*` 40-day Spanish-enterprise sleeper cluster, `pure-folder-three` poisoned bump, `dotnet-runtime-base` fresh burst, `node-sysmetrics`, `@jplopezy/connectivity-test-do-not-install`) retired 2026-07-13
On 2026-07-13 GitHub's Advisory Database retired 14 CWE-506 npm malware advisories. The main event is a 10-package getd-* / get* Spanish-enterprise dep-confusion sleeper cluster (all 0.0.1 published in a 22-second burst 2026-06-03 13:48–13:49 UTC, dormant for 40 days, then retired in a 47-second take-down burst at 04:51–04:52 UTC). Also included: a maintainer-takeover-style poisoned bump on pure-folder-three@0.7.3, dotnet-runtime-base@{1.0.4,1.0.5} in a same-day fresh burst, node-sysmetrics@1.0.0, and @jplopezy/connectivity-test-do-not-install.
npm
Affected packages14 packages · 20 versions
npm@jplopezy/connectivity-test-do-not-install
0.0.0-test
npmdotnet-runtime-base
1.0.41.0.5
npmgetd-content-management
0.0.1
npmgetd-eslint-rules
0.0.1
npmgetd-handler-api
0.0.1
npmgetd-pantallas-cliente
0.0.1
npmgetd-transactional-web
0.0.1
npmgetd-typescript-eslint-rules
0.0.1
npmgetd-ui-library
0.0.1
npmgetd-web-corporativa
0.0.1
npmgethandler-api
0.0.1
npmgetui-library
0.0.1
npmnode-sysmetrics
1.0.01.0.1
npmpure-folder-three
0.5.00.6.00.7.00.7.10.7.3
npm-2026-07-13-ghsa-malware-sweepSource advisory
HighAdvisory sweep11 Jul 2026
11 packages tracked
GitHub Advisory malware sweep - 11 npm packages (Higher Logic / AT&T eBiz / Amtrav / babel-eslint dep-confusion continuation, `type-*` 3.3.7 micro-cluster, `authvaultx` + `auth-next-gen` auth-typosquat pair) taken down 2026-07-10 / 2026-07-11
On 2026-07-10 (late-day) and 2026-07-11 GitHub's Advisory Database retired 11 CWE-506 npm malware advisories that arrived after the earlier 2026-07-10 sweep. Highlights: enterprise dependency-confusion continuation (@higherlogic/ocfe, @att-ebiz/abs-components-bc, @amtrav/webservice, babel-eslint-parser-legacy - all 99.9.1 race pins staged 2026-07-07 08:25–08:31 UTC), a type-elint / type-plint / type-atob micro-cluster (all 3.3.7, published 2026-07-10 14:13–15:30 UTC), and an authvaultx + auth-next-gen auth-typosquat pair replaced 2026-07-11 00:06 UTC.
npm
Affected packages11 packages · 12 versions
npm@amtrav/webservice
99.9.1
npm@att-ebiz/abs-components-bc
99.9.9
npm@higherlogic/ocfe
99.9.1
npmauth-next-gen
1.7.11
npmauthvaultx
1.0.0
npmbabel-eslint-parser-legacy
99.9.1
npmpolipoli-pak
1.0.11.0.2
npmryan-pdf-js
1.0.0
npmtype-atob
3.3.7
npmtype-elint
3.3.7
npmtype-plint
3.3.7
npm-2026-07-11-ghsa-malware-sweepSource advisory
CriticalCompromise11 Jul 2026
1 package tracked
Official `jscrambler` npm package compromised - 5 malicious releases drop a cross-platform Rust infostealer (Chrome/Brave/Edge/Chromium profiles, Bitwarden vault, Steam sessions, cloud metadata, MetaMask/Phantom/Exodus wallets)
On 2026-07-11 15:12 UTC the official jscrambler npm package was hijacked via the jscrambler_ maintainer account. Five malicious releases (8.14.0, 8.16.0, 8.17.0, 8.18.0, 8.20.0) shipped a Rust infostealer that harvests Chromium browser profiles, the Bitwarden vault, Steam sessions, AWS/Azure/GCP credentials, and MetaMask/Phantom/Exodus wallet seeds.
npm
Affected packages1 package · 5 versions
npmjscrambler
8.14.08.16.08.17.08.18.08.20.0
npm-2026-07-11-jscrambler-rust-infostealerSource advisory
HighAdvisory sweep10 Jul 2026
25 packages tracked
GitHub Advisory malware sweep - 25 npm packages (Epic Games / Unreal Engine internal-scope dependency-confusion cluster, LuminaryCloud, Reddit Voyager, nodemon family) taken down 2026-07-09 / 2026-07-10
On 2026-07-09 and 2026-07-10 GitHub's Advisory Database retired 25 CWE-506 Embedded Malicious Code npm advisories. The main story is a coordinated dependency-confusion burst against internal enterprise namespaces - Epic Games / Unreal Engine build tooling (robomerge, unreal-horde-dashboard, ue-jenkins-buildkite, ue-automation-scripts, epic-internal-tools), LuminaryCloud (@luminarycloudinternal/*), Reddit-style Voyager UI (voyager-web, searchresults), plus workspace/microsite scopes - all replaced by npm Security within a 12-minute window on 2026-07-10 02:57–03:10 UTC. A smaller tail of nodemon-* / chai-redirection / paperclip-adapter-helpers typosquats and 2026-07-09 throwaways (none123s, tslint-conf) rounds out the sweep.
npm
Affected packages25 packages · 25 versions
npm@businessapp-microsites/apis
99.9.9
npm@kl-starfish/test-01
2.0.0
npm@luminarycloudinternal/frodo
99.9.9
npm@luminarycloudinternal/lcvis-st
99.9.9
npmchai-redirection
1.0.0
npmcrypto-promiser
1.0.0
npmcursed-ecto-d3ab00
1.0.0
npmepic-internal-tools
99.9.9
npmnodemon-gulp
1.0.0
npmnodemon-patch
1.0.0
npmnodemon-sudo
1.0.0
npmnodepack-daemon
1.0.0
npmnone123s
1.0.0
npmpaperclip-adapter-helpers
1.0.0
npmrobomerge
99.9.9
npmsearchresults
99.9.9
npmtslint-conf
1.0.0
npmtxs-builder-lib
1.0.0
npmue-automation-scripts
99.9.9
npmue-jenkins-buildkite
99.9.9
npmunreal-horde-dashboard
99.9.9
npmvoyager-web
99.9.9
npmvps-new-manager
1.0.0
npmworkspace-lint
99.9.9
npmworkspace-scripts
99.9.9
npm-2026-07-10-ghsa-malware-sweepSource advisory
HighAdvisory sweep8 Jul 2026
20 packages tracked
GitHub Advisory malware sweep - 20 npm packages (Claude-Code / Vue-CLI "clavue" typosquat cluster, `na-rony` throwaway sextet, tailwind-core, common-tg-service six-month sleeper) taken down 2026-07-08 / 2026-07-09
On 2026-07-08 and 2026-07-09 GitHub's Advisory Database retired ~20 CWE-506 Embedded Malicious Code npm advisories, continuing the July take-down cadence at ~20 packages/day. Two distinct clusters: a clavue / Claude-Code typosquat family (myclaude-code, clavue, clavuepro, calvuepro, clavue-agent-sdk) targeting Anthropic AI CLI developers; and a *`na-rony throwaway sextet** - six packages published by one operator between 2026-07-08 03:22–03:39 UTC. Plus a tailwind-core typosquat carrying a real 4.3.x version history and the six-month sleeper common-tg-service` with 547 versions.
npm
Affected packages20 packages · 254 versions
npm@calm2026/imux
1.9.11.10.01.10.21.10.31.10.41.11.0
npm@vite-ln/build-ts
5.15.105.17.0
npmams-ssk
1.0.01.0.11.0.21.0.31.0.41.0.51.0.61.0.71.0.81.0.91.0.111.0.121.0.131.0.141.0.151.0.161.0.171.0.181.0.191.0.201.0.211.0.221.0.231.0.241.0.251.0.261.0.271.0.281.0.291.0.311.0.33
npmcalvuepro
0.1.0
npmclavue
8.8.578.9.08.9.18.9.29.0.09.0.19.0.29.0.39.0.49.0.59.0.69.0.79.1.09.1.19.2.09.2.19.2.29.2.39.2.49.3.09.4.09.4.19.4.29.4.39.4.49.4.59.4.69.4.79.4.89.4.99.4.109.4.119.5.09.5.19.5.29.6.09.6.19.7.09.7.19.7.29.7.39.8.09.8.19.9.09.10.09.10.19.10.29.10.39.10.49.11.09.11.19.11.29.11.39.11.49.11.59.11.69.11.79.12.09.13.09.14.09.14.19.15.09.16.09.22.09.26.010.0.110.0.210.0.310.0.410.1.010.1.110.1.210.1.310.2.010.2.110.2.210.2.310.2.410.3.010.3.110.3.210.4.010.4.110.4.2
npmclavue-agent-sdk
0.2.20.2.30.2.40.2.50.2.60.2.70.2.80.2.90.3.00.3.10.4.00.5.00.6.00.6.10.7.00.7.10.7.20.7.30.7.40.8.00.9.01.0.11.0.21.0.31.0.41.0.51.0.62.0.02.2.0
npmclavuepro
1.0.0
npmcommon-tg-service
1.0.1011.1.991.2.1001.3.247
npmgas-log
1.1.01.1.1
npmkarem-dp
99.9.9
npmmci-sdk
1.2.81.2.91.2.101.2.111.2.121.2.13
npmmyclaude-code
8.8.88.8.98.8.118.8.128.8.138.8.148.8.168.8.178.8.188.8.198.8.208.8.218.8.228.8.238.8.248.8.258.8.268.8.278.8.288.8.308.8.318.8.328.8.338.8.348.8.358.8.378.8.388.8.398.8.408.8.418.8.428.8.43-beta.08.8.43-beta.18.8.43-beta.28.8.43-beta.38.8.43-beta.48.8.43-beta.58.8.43-beta.68.8.43-beta.78.8.43-beta.88.8.43-beta.98.8.43-beta.108.8.43-beta.118.8.448.8.458.8.468.8.478.8.488.8.498.8.508.8.518.8.528.8.538.8.548.8.558.8.568.8.57
npmna-rony
1.1.21.1.31.1.41.1.599.9.9
npmna-rony-test
99.9.9
npmna-rony-test-karem
1.0.0
npmnam-os-a-man
1.0.0
npmpromo-helper
1.0.01.0.31.0.41.0.51.0.61.0.71.0.81.0.91.0.101.0.111.0.121.0.131.0.141.0.151.0.16
npmrony-testing
99.9.9
npmtailwind-core
0.0.04.3.04.3.14.3.2
npmvite-json-pwa
1.1.11.1.2
npm-2026-07-08-ghsa-malware-sweepSource advisory
CriticalCompromise8 Jul 2026
17 packages tracked
@injectivelabs/sdk-ts + 16 sibling packages compromised - wallet-key stealer shipped via GitHub maintainer takeover
On 2026-07-08 20:59 UTC an attacker with a compromised maintainer GitHub account published @injectivelabs/sdk-ts@1.20.21 and pinned the same 1.20.21 version across 16 sibling @injectivelabs/* wallet + core packages. The malicious release hooked fromMnemonic and fromHex with a trackKeyDerivation telemetry stub that base64-encoded stolen mnemonics/private keys and POSTed them to testnet.archival.chain.grpc-web.injective.network. Injective Labs replaced with 1.20.23 about 49 minutes later; 310 downloads shipped in the window.
npm
Affected packages17 packages · 17 versions
npm@injectivelabs/exceptions
1.20.21
npm@injectivelabs/networks
1.20.21
npm@injectivelabs/sdk-ts
1.20.21
npm@injectivelabs/ts-types
1.20.21
npm@injectivelabs/utils
1.20.21
npm@injectivelabs/wallet-base
1.20.21
npm@injectivelabs/wallet-core
1.20.21
npm@injectivelabs/wallet-cosmos
1.20.21
npm@injectivelabs/wallet-cosmos-strategy
1.20.21
npm@injectivelabs/wallet-evm
1.20.21
npm@injectivelabs/wallet-ledger
1.20.21
npm@injectivelabs/wallet-magic
1.20.21
npm@injectivelabs/wallet-private-key
1.20.21
npm@injectivelabs/wallet-strategy
1.20.21
npm@injectivelabs/wallet-trezor
1.20.21
npm@injectivelabs/wallet-turnkey
1.20.21
npm@injectivelabs/wallet-wallet-connect
1.20.21
npm-2026-07-08-injectivelabs-sdk-ts-crypto-wallet-drainSource advisory
HighAdvisory sweep7 Jul 2026
62 packages tracked
GitHub Advisory malware sweep - ~65 npm packages (AI-SDK typosquat cluster, Solana base58/wallet drainers, SQLite scoped fakes, Nuxt/Chai continuation) taken down 2026-07-07 / 2026-07-08
On 2026-07-07 GitHub's Advisory Database retired ~65 CWE-506 Embedded Malicious Code npm advisories (plus a small 2-package 2026-07-08 tail), the second-largest single-day 2026 GHSA npm-malware sweep after 2026-07-06. Distinct clusters: an AI-SDK typosquat family (openai-agents-helpers, ollama-helpers, anthropic-toolkit, @langgraphjs/toolkit, ai-sdk-helpers, mcp-server-pg), Solana base58 wallet-drainer names, @sqlite-list/* / @sqlite-access/* throwaway scopes, Nuxt/Chai continuations, plus the whs4_* sextet.
npm
Affected packages62 packages · 212 versions
npm@43uh3ig43/telemetry-client
99.0.1
npm@apexcraft/nano-key
1.2.41.2.51.3.21.3.3
npm@aspect-security/argon2
1.0.01.0.1
npm@engagehub/core
99.0.0
npm@engagehub/test-claim
1.0.0
npm@langgraphjs/toolkit
1.2.13
npm@sqlite-access/nodesql
1.0.2
npm@sqlite-list/createsql
1.0.0
npm@sqlite-list/schema-generator
1.0.2
npm@sqlite-list/sql-creator
1.0.61.0.7
npmai-sdk-helpers
1.4.5
npmannotator-harvardx
9.0.2
npmanthropic-toolkit
1.3.1
npmbase58-cli
1.0.01.0.11.0.21.0.31.0.41.0.5
npmbase58-core
1.0.01.0.11.0.21.0.31.0.41.0.51.0.61.0.71.0.81.0.101.0.111.0.12
npmbrunomenozzi-test-pkg
1.0.0
npmchai-chain-dom
1.3.71.3.81.3.9
npmchai-sdk
1.4.71.4.8
npmchai-spycore
1.1.01.5.3
npmcrypto-base58
1.0.01.0.11.0.21.0.31.0.4
npmdebugcli
4.3.44.3.54.3.64.3.74.3.84.3.94.4.1
npmevm-typechain
0.5.4
npmexpress-deflect
1.3.11.6.91.6.101.6.12
npmexpress-firegate
1.3.51.4.01.4.51.4.61.5.11.5.51.6.11.6.31.6.51.6.71.6.81.6.9
npmgen-ai-opt-in
99.0.099.0.199.0.2
npmharmony-enablers-test-2026
1.0.0
npmhello244a
1.0.01.0.11.0.21.0.31.0.41.0.51.0.61.0.71.0.81.0.91.0.101.0.111.0.121.0.131.0.141.0.151.0.161.0.171.0.181.0.191.0.201.0.211.0.221.0.231.0.241.0.251.0.261.0.271.0.281.0.291.0.301.0.311.0.321.0.331.0.341.0.351.0.361.0.371.0.381.0.391.0.401.0.411.0.421.0.431.0.441.0.45
npmhook-augmenting-module
99.0.3
npmjsf-utils
0.3.11.3.1
npmload-nuxt
99.0.3
npmload-nuxt-dev
99.0.3
npmmcp-server-pg
0.1.00.1.10.1.20.1.30.2.00.2.10.3.00.3.10.4.00.5.00.6.00.7.00.8.00.9.01.0.01.0.11.1.01.1.11.2.01.2.11.2.2
npmnodemon-node
3.1.16
npmnonexistent-package
99.0.3
npmnotifier-utils
1.3.71.3.81.3.91.4.0
npmnuxt-fonts-devtools
99.0.3
npmollama-helpers
1.2.3
npmopenai-agents-helpers
1.3.3
npmpinokio-redis
1.0.127
npmpolytrade
2.4.1
npmrnx-align-deps
99.0.7
npmruntimedev-link
1.0.01.0.11.0.21.0.31.0.51.0.61.0.81.0.91.0.101.0.111.0.121.0.131.0.14
npmshopify-internel
99.0.1
npmsolana-address-codec
1.0.01.0.11.0.21.0.31.0.41.0.5
npmsome-theme
99.0.3
npmsyco1
1.0.31.0.41.0.5
npmsypoi1
1.0.01.0.11.0.2
npmtailwind-animator-scroll
1.7.0
npmtailwindcss-effector
1.7.0
npmts-await
3.1.8
npmtx-guard-snap
1.0.0
npmtypescript-base58
1.0.0
npmwarp-dependency
1.0.01.0.1
npmwhs4_nmp
1.0.01.0.1
npmwhs4_npm
1.0.0
npmwhs4_npm_test
1.0.01.0.11.0.21.0.3
npmwhs4_pnm
1.0.0
npmwsh4_npm
1.0.0
npmwsh4-nmp
1.0.0
npmzod-pino434
1.0.1271.0.128
npmzod-pino444
1.0.1281.0.1291.0.1301.0.131
npmzredis-typed
1.0.127
npm-2026-07-07-ghsa-malware-sweepSource advisory
CriticalTyposquat7 Jul 2026
10 packages tracked
Coordinated npm + PyPI campaign typosquats Paysafe / Skrill / Neteller payment SDKs, exfiltrates keys to AWS
Socket detected a coordinated cross-registry campaign on 2026-07-07 12:56 UTC: 13 npm and 4 PyPI packages impersonating the Paysafe / Skrill / Neteller payment SDKs, exposing plausible legitimate APIs but shipping a credential-theft module that harvests KEY / SECRET / TOKEN / PASS / AUTH / API env vars and Paysafe API keys and exfiltrates them to attacker-controlled AWS infrastructure. All npm versions unpublished ~2026-07-08 00:25 UTC.
npmPyPI
Affected packages12 packages · 39 versions
npmpaysafe-api
1.0.01.0.11.0.21.0.3
PyPIpaysafe-api
1.0.0
npmpaysafe-cards
1.0.01.0.11.0.21.0.3
npmpaysafe-checkout
1.0.01.0.11.0.21.0.3
npmpaysafe-js
1.0.01.0.11.0.21.0.3
npmpaysafe-node
1.0.01.0.11.0.21.0.3
npmpaysafe-payments
1.0.01.0.11.0.21.0.3
PyPIpaysafe-payments
1.0.0
PyPIpaysafe-sdk
1.0.0
npmpaysafe-vault
1.0.01.0.11.0.21.0.3
npmskrill-payments
1.0.01.0.11.0.21.0.3
npmskrill-sdk
1.0.01.0.11.0.21.0.3
multi-2026-07-07-paysafe-skrill-payment-sdk-typosquatSource advisory
HighAdvisory sweep6 Jul 2026
162 packages tracked
GitHub Advisory malware sweep - ~155 npm packages (logger/tailwind/eslint/bignumber typosquats, polymarket-onchain-* crypto-drainers) taken down 2026-07-06
On 2026-07-06 GitHub's Advisory Database published ~155 CWE-506 Embedded Malicious Code advisories against npm packages - the largest single-day 2026 GHSA npm-malware sweep to date. The batch clusters into six naming families: chalk/pino/winston/*-logger pretty-print typosquats, tailwindcss/vite typosquats, eslint / *-lint-* helper squats, bignumber.js / crypto-math typosquats, chai *-as-* matcher squats, and two polymarket-onchain-* crypto-drainer slugs continuing the June cluster. npm replaced every name with 0.0.1-security.
npm
Affected packages162 packages · 429 versions
npm@jaime9008/math-service
1.0.01.0.11.0.2
npmargonflux
2.0.1
npmawesome-cli-logger
1.0.01.2.0
npmbig-numer
5.0.5
npmbig-numerate
5.0.3
npmbig-numerator
5.0.35.0.6
npmbig256-ts
5.0.35.0.4
npmbigint.fs
5.0.55.0.6
npmbigint.os
5.0.55.0.65.0.75.0.8
npmbjs-biginteger
5.0.55.0.6
npmbjs-lint-builder
1.0.5
npmbjs-lint-builders
1.0.41.0.51.1.0
npmbn-eslint.js
8.0.5
npmbn-math
1.0.01.0.1
npmbootstrap-utils
4.5.05.1.1
npmbtd-smart
1.0.21.0.3
npmbubblestr
1.1.4
npmbytecore
5.3.1
npmchai-as-decrypted
4.2.8
npmchai-as-init
1.4.51.4.61.4.77.0.6
npmchai-as-polished
7.0.8
npmchai-dec
2.3.5
npmchai-guard
1.0.01.2.3
npmchain-await-test
1.3.5
npmchalk-logger-prettier
1.0.11.0.21.0.31.0.41.0.51.0.71.0.8
npmchalk-plus-ts
1.0.31.0.4
npmchalk-prettier
1.0.81.0.9
npmchalk-pro-logger
1.1.11.1.2
npmchalki-pretty
1.0.0
npmchalks-logger
1.0.91.1.01.1.11.1.21.1.3
npmcjs-biginteger
5.0.35.0.55.0.6
npmclassbreeze-utils
0.7.70.7.80.7.90.7.10
npmcolor-cli-log
2.0.02.1.0
npmcolor-logger-console
3.1.83.1.9
npmcompetion
1.8.11.8.21.8.31.8.4
npmcookie-ease
1.0.01.0.51.0.61.0.71.0.81.0.91.1.11.1.21.1.31.1.5
npmcustom-log-viewer
1.0.0
npmdb-query-log
1.0.11.0.2
npmdebug-glitzs
1.0.01.0.11.0.21.0.31.0.4
npmdevkit-scripts
1.0.01.0.3
npmdf-vision
0.0.11.1.701.1.711.1.721.1.731.1.741.1.751.1.761.1.771.1.781.1.79
npmdotenv-express
2.5.517.4.217.4.317.4.417.4.517.4.6
npmelevate-log
2.0.5
npmemojiprint-logger
1.1.05.6.2
npmemojiprint-prettier
1.0.9
npmenv-axios
1.3.6
npmenvironment-gate
7.3.57.3.6
npmes-lint-builders
1.0.01.0.31.0.41.0.5
npmes-lint-entry
1.0.0
npmeslint-helper
4.0.14.0.2
npmeslint-vite
1.0.01.0.11.0.2
npmeth-logger
4.3.204.3.21
npmeth-tick
7.4.177.4.18
npmether-bn.js
1.0.01.0.31.1.11.2.11.3.11.3.31.3.41.4.01.4.1
npmexpress-dotenv
1.3.5
npmexpress-guardrail
1.3.51.4.1
npmexpress-initial
12.1.712.1.812.1.912.1.10
npmexpress-session-js
1.0.01.19.0
npmfastnodemailer
8.0.28.0.38.0.4
npmgraphpilot
0.1.00.1.10.1.20.1.30.1.41.0.0
npmgrid-settings-align
14.1.114.1.2
npmhjs-biginteger
5.0.5
npmhjs-lint-builders
1.0.4
npmjs-crypto-promise
1.0.1
npmjs-unimode
1.1.11.1.21.1.31.1.41.1.51.1.61.1.71.1.81.1.91.1.10
npmjsontoken-extend
1.0.01.0.11.0.21.0.31.0.41.0.51.0.61.0.71.0.81.0.91.0.101.0.111.0.121.0.13
npmjsonupper
1.0.05.1.0
npmlint-builders
1.0.0
npmlint-builds
1.0.01.0.5
npmlint-nule
1.0.4
npmlint-nuler
1.0.4
npmlint-null
1.0.4
npmlinter-entry
1.0.0
npmlog-format-thread
1.0.01.0.1
npmlog-upgrade
7.1.0
npmlogger-beauty
1.0.11.0.21.0.31.1.02.1.1
npmmetrica-chain
2.4.5
npmmetrica-node
2.4.5
npmmjs-biginteger
5.0.55.0.6
npmmodulyn
1.0.1
npmmongoose-json-format
3.0.03.0.1
npmmongoose-lean-hooks
0.5.20.5.30.5.40.5.50.5.60.5.7
npmmotion-lib
2.3.5
npmnext-bignumber.js
1.0.0
npmnode-env-detector
1.0.01.0.1
npmnodepathbalance54
1.1.0
npmnormalize-path-seq
3.8.9
npmnpm-doc-dev
1.0.41.0.51.0.61.0.71.0.81.0.91.1.01.1.1
npmnpm-eslint-helper
1.0.1
npmolder_morgan
1.0.11.0.2
npmpeptideenv
16.6.116.6.216.6.316.6.416.6.516.6.6
npmpicocolor-logger
1.0.01.0.11.0.2
npmpino-formatter
1.1.121.1.13
npmpino-pretty-logs
1.0.71.0.81.1.02.0.0
npmpino-sdk-v2
9.9.0
npmpino-utils
1.3.61.4.0
npmpolymarket-onchain-plugin
2.1.32.1.42.1.5
npmpolymarket-onchain-sdk
1.0.21.0.31.0.4
npmprettier-logger
0.1.40.1.50.1.6
npmpretty-pino-logger
1.0.01.0.11.0.21.0.31.0.42.0.12.0.2
npmpretty-pino-loggers
1.0.1
npmrandom-string-64
1.0.01.0.1
npmreact-check-error
2.1.62.1.7
npmreact-native-template-my-starter
1.0.0
npmreact-next-dom
1.0.01.1.717.2.717.2.8
npmreact-svg-render
1.0.2
npmrenderctx
1.1.1
npmrequest-js-validator
1.0.21.0.31.0.4
npmrma-utils
1.0.1
npmrollup-plugin-polyfill-handler
1.0.01.0.1
npmrouter-kit
0.1.10.1.20.1.30.1.40.1.50.1.60.1.70.2.00.2.10.2.20.2.30.2.51.0.01.0.11.0.21.0.31.2.01.2.11.2.21.2.31.2.41.2.51.2.61.3.01.3.11.3.21.3.31.3.42.0.02.0.12.1.0
npmsafe-validate
1.0.11.0.21.0.31.0.4
npmsecure-box
1.0.11.0.2
npmset-proto-chain
1.0.3
npmsjs-biginteger
5.0.55.0.6
npmsjs-builder
1.0.41.0.5
npmsjs-builders
1.0.4
npmsjs-lint-build1
1.0.4
npmsleek-pretty
1.0.0
npmsol-sdk
2.3.18
npmst-biginteger
5.0.5
npmst-bigintr
5.0.55.0.6
npmstacknova
1.0.0
npmstyled-text-logger
1.3.1
npmsubsearch
1.0.21.0.3
npmsyncora
0.2.03.5.7
npmtailstyle-core
0.0.1
npmtailwind-fonttype-inter
2.3.2
npmtailwind-scroller
1.0.2
npmtailwind-typography-plus
2.1.0
npmtailwindcss-animatecss-latest
2.1.02.1.1
npmtailwindcss-fonttype-inter
2.3.12.3.2
npmtailwindcss-fonttypo-inter
2.3.2
npmtailwindcss-framer-motion
1.1.3
npmtailwindcss-svg-helper
1.17.91.18.0
npmtest-prettier
1.0.9
npmtheta-connector
1.0.0
npmtheta-kit
1.0.01.0.11.0.21.0.3
npmts-bigtn
1.3.11.3.2
npmts-build-optimize
1.1.51.1.61.2.01.2.11.2.2
npmts-eslint-helper
4.0.14.0.24.0.34.0.44.0.5
npmts-eslinter
1.0.0
npmts-lint-builders
1.0.5
npmts-lint-builds
1.0.5
npmts-relayer-pub
1.0.0
npmts-webplug
3.0.53.0.63.0.73.0.8
npmtsliverhome
1.0.01.1.11.1.21.1.31.1.41.1.5
npmtwcompose-utils
0.7.60.7.7
npmtxs-data
1.0.1
npmtypedecode
1.0.11.0.21.0.3
npmunique-id-64
1.0.0
npmvite-config-field
1.1.01.1.11.1.21.1.31.1.41.1.5
npmvite-plugin-compress-js
0.5.40.5.50.5.60.5.7
npmvite-plugin-svg-paths
1.1.51.1.61.1.71.1.81.1.9
npmweb-pool
2.3.5
npmwebpack-cache-clean
0.1.4
npmwebpack-patch
1.1.71.1.81.1.91.2.0
npmwime-zle
1.1.4
npmwindrule-utils
0.0.1
npmwinston-js-express
1.0.01.0.31.0.41.0.51.0.61.0.71.1.11.1.2
npmwinston-prism
1.0.1
npmxnder-sdk-js
0.1.0
npm-2026-07-06-ghsa-malware-sweepSource advisory
HighTyposquat4 Jul 2026
5 packages tracked
paperclip2 / vps-maintenance postinstall reverse shell to 185.112.147.174:7007
On 2026-07-04 the OX Research team disclosed npm packages - paperclip2, vps-maintenance, vps-maintenance-paperclip-adapter - published by user srm0rgan that hide a postinstall reverse shell to 185.112.147.174:7007 inside package.json. paperclip2 ships with no JavaScript files at all, defeating static scanners that only inspect .js. Two follow-on names - paperclip-host-utils and vps-adapter-core - landed 2026-07-07 and joined the same GHSA takedown.
npm
Affected packages5 packages · 14 versions
npmpaperclip-host-utils
1.0.01.0.21.0.31.0.41.0.51.0.61.0.7
npmpaperclip2
1.0.0
npmvps-adapter-core
1.0.01.0.11.0.2
npmvps-maintenance
0.1.0
npmvps-maintenance-paperclip-adapter
0.1.10.1.2
npm-2026-07-04-paperclip2-reverse-shellSource advisory
HighAdvisory sweep3 Jul 2026
14 packages tracked
GitHub Advisory malware sweep - 14 npm packages (TypeScript/API util family, SQL/node-cloud scoped cluster, `@lodash-en` typosquat) taken down 2026-07-03
On 2026-07-03 GitHub's Advisory Database dropped 14 CWE-506 Embedded Malicious Code advisories against npm packages, all retired inside a ~30-minute window (15:36–16:06 UTC). The sweep spans three distinct micro-clusters: an unscoped *-node-utils / *-api-* TypeScript/API-helper family (5 packages, 20+ versions), a SQL-and-cloud scoped cluster on personal namespaces (@sql-access/, @sqlite-node/, @sql-trigger/, @node-cloud/), and three miscellaneous typosquats including @lodash-en/lodash-en. npm replaced every name with 0.0.1-security.
npm
Affected packages14 packages · 73 versions
npm@antoncarlos1/nodelamp
1.0.01.0.1
npm@jacobtan/decode-sdk
1.0.0
npm@lodash-en/lodash-en
1.4.111.5.0
npm@node-cloud/create
1.0.01.0.11.0.21.0.31.0.41.0.51.0.6
npm@sql-access/nodesql
1.0.01.0.31.0.51.0.61.0.71.0.81.0.91.1.01.1.11.1.21.1.31.1.41.1.51.1.61.1.71.1.81.1.9
npm@sql-trigger/nodesql
1.0.01.0.11.0.2
npm@sqlite-node/createsql
1.0.11.0.21.0.31.0.41.0.51.0.61.0.71.0.81.0.91.1.01.1.11.1.21.1.31.1.41.1.51.1.7
npmalder_morrgan
1.0.01.0.1
npmapi-node-utils
2.2.4
npmapi-ts-utils
1.0.02.1.32.1.43.2.13.2.23.4.73.4.83.4.93.5.9
npmdecode-sdks
1.0.01.0.11.0.21.0.3
npmts-node-utils
8.0.18.0.48.0.6
npmtypescript-util-core
3.5.07.1.37.1.57.1.6
npmweb-api-node
1.3.21.3.3
npm-2026-07-03-ghsa-malware-sweepSource advisory
CriticalTyposquat3 Jul 2026
6 packages tracked
JFrog: Lazarus / OtterCookie `rollup-*-polyfill-core` npm campaign - 6 packages steal AI-coder credentials, browser data and crypto wallets
JFrog Security Research disclosed a 6-package DPRK / Contagious Interview npm campaign that mimics the legitimate rollup-plugin-polyfill-node project down to its metadata. First-stage packages carry a base64-encoded npm install that fetches an SVG-utility-shaped second stage; the second stage evaluates a payload pulled from JSONKeeper and steals credentials for AWS, Azure, Google Gemini, Anthropic Claude, Windsurf, Cursor, VS Code, SSH and Zsh, plus browser data and crypto wallets. Two of the first-stage packages are STILL live on npm as of 2026-07-04.
npm
Affected packages6 packages · 37 versions
npmquirky-token
1.0.01.0.11.0.2
npmreact-icon-svgs
1.0.01.0.11.0.22.15.3
npmrollup-packages-polyfill-core
0.0.00.5.00.12.30.13.00.13.10.13.20.13.30.13.40.13.50.13.60.13.70.13.8
npmrollup-plugin-polyfill-connect
1.0.11.0.21.0.3
npmrollup-runtime-polyfill-core
0.0.10.12.50.13.00.13.10.13.20.13.30.13.40.13.50.13.60.13.70.13.80.13.90.14.0
npmswift-parse-stream
1.0.01.0.2
npm-2026-07-03-jfrog-lazarus-rollup-polyfill-ottercookieSource advisory
HighAdvisory sweep2 Jul 2026
9 packages tracked
GitHub Advisory malware sweep - 9 npm packages (tailwind/animate typosquats, db-* cluster, `vitest-agent`) taken down 2026-07-02
On 2026-07-02 GitHub's Advisory Database dropped 9 CWE-506 Embedded Malicious Code advisories against npm packages published between 2026-05-24 and 2026-07-01. Three distinct micro-clusters were retired within minutes of each other: a Tailwind/animate typosquat trio (animatecss-postcss-plugin, tailwind-animates, tailwind-typography-stylecss), a db-* / cache-* fake-utility quartet, and the standalone vitest-agent Vitest typosquat plus one scoped React Native template. npm replaced every name with a 0.0.1-security holding tarball.
npm
Affected packages9 packages · 22 versions
npm@modhamanish/rn-mm-template
1.0.11.0.21.0.31.0.41.0.51.1.01.1.11.1.21.1.3
npmanimatecss-postcss-plugin
1.0.01.0.1
npmcache-section-helper
1.0.7
npmdb-connector-log
1.0.01.0.1
npmdb-convertor
1.0.5
npmdb-plog
1.0.01.0.1
npmtailwind-animates
1.0.1
npmtailwind-typography-stylecss
0.8.3
npmvitest-agent
1.0.01.0.51.0.6
npm-2026-07-02-ghsa-malware-sweepSource advisory
HighTyposquat1 Jul 2026
3 packages tracked
`clx-cookieparser` + `clx-cookie-signature` cookie-parser impersonators - DGA-driven RAT dropper cluster (GHSA dropped 2026-06-29, updated 2026-07-01)
clx-cookieparser (7 versions 1.4.4–1.5.1) and clx-cookie-signature@1.2.1 impersonate Express's cookie-parser / cookie-signature. Both hide a dropper that XOR-derives a C2 IP from key 0x496AAC7E, then fetches and evals startup.js - no install hook, execution fires on first API call. GHSA-jpg2-3r22-63v7 / GHSA-vwwm-x6xj-cfmf, refreshed 2026-07-01.
npm
Affected packages3 packages · 14 versions
npmclx-cookie-signature
1.2.1
npmclx-cookieparser
1.4.41.4.51.4.61.4.71.4.81.4.91.5.1
npmexpress-cookie-parser
1.4.71.4.81.4.91.4.101.4.111.4.12
npm-2026-07-01-clx-cookie-dga-dropperSource advisory
HighDependency confusion1 Jul 2026
8 packages tracked
`@marketfront` dependency-confusion Wave 4 - 25 npm packages batch-published at `7.0.0` reuse the "Internal package - Platform Engineering Team" lure
On 2026-07-01 22:59 UTC the npm account marketfront created the @marketfront scope and batch-published 25 e-commerce / marketing-frontend packages in a ~3-minute window, all at version 7.0.0. Every package carries a postinstall credential-file harvester (~20 secret files including ~/.ssh, ~/.aws/credentials, ~/.kube/config, ~/.npmrc, ~/.env) and the identical README lure "Internal package - Platform Engineering Team" - Wave 4 of the SafeDep-tracked oob.moika.tech operator lineage.
npm
Affected packages8 packages · 8 versions
npm@marketfront/bannerpopup
7.0.0
npm@marketfront/customdealsfeed
7.0.0
npm@marketfront/designsystemdevtool
7.0.0
npm@marketfront/fashiononboardingpopup
7.0.0
npm@marketfront/footer
7.0.0
npm@marketfront/header
7.0.0
npm@marketfront/livestreampreviewpopup
7.0.0
npm@marketfront/navbar
7.0.0
npm-2026-07-01-marketfront-dep-confusion-wave4Source advisory
HighMalicious package1 Jul 2026
4 packages tracked
ChocoPoC - trojanized CVE PoC repos deliver ChocoPoC RAT via malicious PyPI packages frint / skytext (Mapbox dataset dead-drop C2)
Joint Sekoia / YesWeHack disclosure on 2026-07-01: at least seven trojanized CVE proof-of-concept repositories on GitHub silently pull the malicious PyPI package frint, which depends on skytext. skytext ships a precompiled native extension (gradient.so / gradient.pyd) that deploys "ChocoPoC" - a Python RAT with shell/Python command execution, browser-credential theft, and Mapbox Dataset API dead-drop C2. Targets vulnerability researchers and pentesters cloning PoC repos. ~2,400 downloads of skytext before takedown.
PyPI
Affected packages4 packages · 0 versions
PyPIfrint
PyPIlogcrypt.cryptography
PyPIskytext
PyPIslogsec
pypi-2026-07-01-chocopoc-frint-skytextSource advisory
HighAdvisory sweep30 Jun 2026
18 packages tracked
GitHub Advisory malware sweep - 20+ npm packages (chai-as-*, brock-*, rebrandly-*, dep-confusion + typosquat batch) taken down 2026-06-30
On 2026-06-30 GitHub's Advisory Database dropped a coordinated batch of ~25 CWE-506 Embedded Malicious Code advisories against unrelated npm packages published between 2026-05-27 and 2026-06-30. The batch mixes at least four distinct sub-clusters: chai-as-persisted / chai-as-assured (Chai typosquats), brock-loader / brock-react-alerts (with a 9999.0.0 dep-confusion tag), the rebrandly-domains-* pair (both 9999.0.0), and a wider fan-out of standalone malicious names.
npm
Affected packages18 packages · 43 versions
npmagent-starter-pack
0.0.1
npmbrock-loader
1.9.9
npmbrock-react-alerts
1.99.999999.0.0
npmchai-as-assured
6.0.47.1.2
npmchai-as-persisted
4.2.86.1.9
npmconfluent-kafka-javascript
0.0.1
npmendpointmap
2.1.03.0.0
npmnbmolviz-js
0.0.1
npmpostcss-property-rollup
0.0.1
npmprocwire
1.3.02.0.0
npmquoting
0.1.0
npmrebrandly-domains-digger
9999.0.0
npmrebrandly-domains-search-client
9999.0.0
npmrs-biginteger
6.1.36.1.5
npmsetup-cicd
0.0.1
npmterminal-prettier
1.0.01.0.11.0.21.0.31.0.41.0.51.0.61.0.71.0.81.0.91.1.01.1.11.1.21.1.31.1.41.1.51.1.61.1.71.1.81.1.9
npmts-lint-builders-v2.1
2.1.0
npmts-linting-builder
2.1.2
npm-2026-06-30-ghsa-malware-sweepSource advisory
HighMalicious package30 Jun 2026
21 packages tracked
GHSA-flagged malware brands - 16 autotel-*, 4 awaitly-*, and `ai-sdk-ollama` packages (Nov 2025–Jun 2026) marked embedded-malicious-code on 2026-06-29/30
GitHub's Advisory Database dropped CWE-506 (Embedded Malicious Code) records on 2026-06-29 and 2026-06-30 against 21 npm "brand" packages built up over months: the entire autotel-* observability family (16 packages, 400+ versions), the awaitly promise-utility family (4 packages, ~180 versions), and the ai-sdk-ollama Vercel AI-SDK typosquat (55 versions). Every published version of every listed package is now classified as malware.
npm
Affected packages21 packages · 939 versions
npmai-sdk-ollama
0.1.00.2.00.3.00.4.00.5.00.5.10.5.20.5.30.5.40.5.50.6.00.6.10.6.20.7.00.8.00.8.10.9.00.10.00.10.10.11.00.12.00.13.00.13.11.0.01.0.11.0.21.1.01.1.12.0.02.0.12.1.02.2.02.2.13.0.03.0.13.1.03.1.13.2.03.3.03.4.03.5.03.6.03.7.03.7.13.8.03.8.13.8.23.8.33.8.43.8.53.8.63.8.73.8.84.0.04.0.0-beta.0
npmautotel-backends
2.0.12.1.02.2.02.2.12.2.22.2.32.2.42.2.52.2.62.3.02.3.12.4.02.4.12.5.02.5.12.6.02.7.02.7.12.7.22.8.02.8.12.8.22.8.32.8.42.9.02.9.12.10.02.11.02.11.12.11.22.11.32.11.42.12.02.12.12.12.22.12.32.12.42.12.52.12.62.12.72.12.82.12.92.12.102.12.132.12.142.12.152.12.162.12.172.12.182.12.192.12.202.12.212.12.222.12.232.12.242.12.252.12.262.12.272.12.282.12.292.12.302.12.312.12.322.12.332.12.342.12.352.12.36
npmautotel-cli
0.1.00.4.00.4.10.4.20.5.00.6.00.7.00.7.10.8.00.8.10.8.20.8.30.8.40.8.60.8.70.8.80.8.90.8.100.8.110.8.120.8.130.8.140.8.150.9.00.9.10.10.00.11.0
npmautotel-drizzle
0.0.10.0.20.0.30.0.40.0.50.0.60.0.70.0.80.0.90.0.100.0.110.0.140.0.150.0.160.0.170.0.180.0.190.0.200.0.210.0.220.0.230.0.240.0.250.0.260.0.270.0.280.0.290.0.300.0.310.0.320.0.330.0.340.0.350.0.360.0.37
npmautotel-eventcatalog
1.0.01.0.12.0.02.0.13.0.03.0.14.0.04.0.14.0.25.0.05.0.15.0.26.0.07.0.08.0.09.0.010.0.011.0.0
npmautotel-hono
0.1.00.1.10.1.20.2.00.3.00.3.10.3.20.3.30.3.40.4.00.4.10.4.20.4.30.4.40.4.50.4.60.4.70.4.80.4.90.4.100.4.130.4.140.4.150.4.160.4.170.4.180.4.190.4.200.4.210.4.220.4.230.4.240.4.250.4.260.4.270.4.280.4.290.4.300.4.310.4.320.4.330.4.340.4.350.4.36
npmautotel-mcp
0.1.10.1.20.1.30.1.40.1.70.1.80.1.90.1.100.1.110.1.120.1.130.1.140.1.150.1.162.0.02.0.13.0.03.0.14.0.04.0.15.0.05.0.16.0.06.0.17.0.07.0.18.0.08.0.19.0.09.0.110.0.010.0.111.0.011.0.113.0.013.0.114.0.014.0.115.0.015.0.115.0.216.0.016.0.117.0.017.0.117.0.218.0.018.0.119.0.019.0.120.0.020.0.121.0.021.1.021.1.122.0.022.0.123.0.023.0.124.0.024.0.125.0.025.0.126.0.026.0.126.0.227.0.027.0.128.0.028.0.128.0.228.0.329.0.029.0.1
npmautotel-mcp-instrumentation
29.0.029.0.129.0.230.0.030.0.330.0.430.0.531.0.031.0.132.0.032.0.133.0.033.0.133.0.234.0.034.0.134.0.235.0.036.0.037.0.038.0.039.0.040.0.0
npmautotel-mongoose
0.0.10.0.20.0.31.0.01.0.11.0.22.0.02.0.32.0.42.0.53.0.03.0.14.0.04.0.15.0.05.0.15.0.26.0.06.0.16.0.27.0.08.0.08.1.09.0.010.0.010.1.010.1.111.0.012.0.0
npmautotel-pact
0.2.00.2.10.2.21.0.01.0.11.0.21.0.31.0.42.0.03.0.04.0.05.0.06.0.07.0.07.0.17.0.2
npmautotel-playwright
0.1.00.2.00.2.10.3.00.4.00.4.10.4.20.4.30.4.40.4.50.4.60.4.70.4.80.4.90.4.100.4.110.4.120.4.130.4.140.4.150.4.160.4.190.4.200.4.210.4.220.4.230.4.240.4.250.4.260.4.270.4.280.4.290.4.300.4.310.4.320.4.330.4.340.4.350.4.360.4.370.4.380.4.390.4.400.4.410.4.42
npmautotel-plugins
0.4.00.5.00.6.00.6.10.6.20.6.30.6.40.6.50.6.60.7.00.7.10.8.00.8.10.9.00.9.10.10.00.11.00.11.10.11.20.12.00.12.10.13.00.14.00.14.10.15.00.15.10.16.00.17.00.18.00.18.10.18.20.18.30.19.00.19.10.19.20.19.30.19.40.19.50.19.60.19.70.19.80.19.90.19.100.19.130.19.140.19.150.19.160.19.170.19.180.19.190.19.200.19.210.19.220.19.230.19.240.19.250.19.260.19.270.19.280.19.290.19.300.19.310.19.320.19.330.19.340.19.350.19.36
npmautotel-sentry
0.1.00.1.10.1.20.2.00.3.00.4.00.4.10.4.20.4.30.5.00.5.10.5.20.5.30.5.40.5.50.5.60.5.70.5.80.5.100.5.110.5.120.5.130.5.140.5.150.5.160.5.17
npmautotel-subscribers
4.0.04.1.04.1.15.0.05.0.16.0.06.0.17.0.07.0.18.0.08.0.19.0.09.0.110.0.010.0.111.0.011.0.112.0.012.0.113.0.013.0.114.0.014.1.014.1.115.0.015.0.116.0.016.0.116.0.217.0.017.0.118.0.018.0.118.0.218.0.319.0.019.0.120.0.020.0.121.0.021.0.122.0.022.0.122.0.223.0.023.0.123.0.224.0.024.0.125.0.025.0.126.0.026.0.127.0.027.0.127.0.228.0.028.0.128.0.229.0.029.0.129.0.229.0.329.0.429.0.529.0.630.0.030.0.130.0.230.0.330.0.431.0.031.0.331.0.431.1.031.1.131.1.231.1.331.1.432.0.032.0.132.1.033.0.034.0.034.1.034.1.135.0.035.0.135.0.236.0.037.0.038.0.039.0.040.0.041.0.041.0.141.0.2
npmautotel-tanstack
1.1.01.2.01.2.11.4.01.4.11.4.21.5.01.5.11.6.01.7.01.7.11.7.21.8.01.8.11.8.21.8.31.8.41.9.01.9.11.10.01.11.01.12.01.12.11.12.21.12.31.13.01.13.11.13.21.13.31.13.41.13.51.13.61.13.71.13.81.13.91.13.101.13.111.13.141.13.151.13.161.13.171.13.181.13.191.13.201.13.211.13.221.13.231.13.241.13.251.13.261.13.271.13.281.13.291.13.301.13.311.13.321.13.331.13.341.13.351.13.361.13.371.13.38
npmautotel-vitest
0.1.00.2.00.3.00.3.10.3.20.3.30.3.40.3.50.4.00.4.10.4.20.4.30.4.40.4.50.4.60.4.70.4.80.4.90.4.100.4.130.4.140.4.150.4.160.4.170.4.180.4.190.4.200.4.210.4.220.4.230.4.240.4.250.4.260.4.270.4.280.4.290.4.300.4.310.4.320.4.330.4.340.4.350.4.36
npmautotel-web
1.1.01.2.01.4.01.4.11.5.01.6.01.6.11.7.01.7.11.8.01.9.01.10.01.10.11.11.01.11.11.11.21.11.51.11.61.12.01.12.11.12.21.12.31.12.41.12.5
npmawaitly
1.0.01.1.01.2.01.3.01.4.01.5.01.5.11.6.01.7.01.8.01.9.01.10.01.11.01.12.01.13.01.14.01.15.01.16.01.17.01.18.01.19.01.20.01.21.01.22.01.23.01.24.01.25.01.26.01.27.01.28.01.29.01.30.01.31.01.31.11.32.01.32.11.33.01.33.11.33.21.33.31.33.41.34.0
npmawaitly-analyze
0.10.10.11.00.12.00.12.10.12.20.13.00.14.00.14.10.15.00.16.00.17.00.18.00.19.00.20.00.21.00.22.00.22.10.23.00.23.10.23.20.23.40.24.00.24.10.24.20.24.30.25.00.25.11.0.01.1.01.1.12.0.02.0.13.0.03.0.14.0.04.0.15.0.05.0.16.0.06.0.17.0.07.0.18.0.08.0.1
npmawaitly-libsql
0.1.00.1.11.0.01.0.12.0.02.0.13.0.03.0.14.0.04.0.15.0.05.0.16.0.06.0.17.0.07.0.18.0.08.0.19.0.09.0.110.0.010.0.111.0.011.0.112.0.012.0.113.0.013.0.114.0.014.0.115.0.015.0.116.0.016.0.117.0.017.0.118.0.018.1.018.1.119.0.019.0.120.0.020.0.121.0.021.0.122.0.022.0.122.0.223.0.0
npmawaitly-mongo
0.1.00.1.11.0.01.0.12.0.02.0.13.0.03.0.14.0.04.0.15.0.05.0.16.0.06.0.17.0.07.0.18.0.08.0.19.0.09.1.09.1.110.0.010.0.111.0.011.0.112.0.012.0.113.0.013.0.114.0.014.0.115.0.015.0.116.0.016.0.117.0.017.0.118.0.018.0.119.0.019.1.019.1.120.0.020.0.121.0.021.0.122.0.022.0.123.0.023.0.123.0.224.0.0
npm-2026-06-30-autotel-awaitly-brand-takedownSource advisory
HighDependency confusion29 Jun 2026
10 packages tracked
Internal-scope dependency-confusion cluster (Deel, Webda, Citi, BSCom, TiVo, CSEO-HR, +) taken down 2026-06-29
Between 2026-04-27 and 2026-05-31, ten npm packages impersonating internal corporate scopes - Deel, Webda, Citi ICG, BSCom, TiVo, CSEO-HR, Concerns, Via City Tools, WM - were published at 99.9.1 to win dependency-confusion resolution against the matching private mirrors. npm support unpublished the whole batch on 2026-06-29 between 16:46 and 16:52 UTC and replaced them with 0.0.1-security holders; GHSA records dropped the same day.
npm
Affected packages10 packages · 10 versions
npm@bscom/styling
99.9.1
npm@citi-icg-171632/citicms-repo-component
99.9.1
npm@concerns/i18n
99.9.1
npm@cseo-hr/trpweb-shared
99.9.1
npm@deel-ui/animation
99.9.1
npm@webd-infra/query-designer-domain
99.9.1
npm@webda-infra-ui/static-images
99.9.1
npmtivo-codelib-a
99.9.1
npmvia-city-tools-m-particle
99.9.1
npmwm-mapper
99.9.1
npm-2026-06-29-internal-scope-dep-confusion-clusterSource advisory
HighMalicious package28 Jun 2026
3 packages tracked
`@thone33/core-utils` + `@thone33/analytics-injector` + `@thone33/react-helpers` - production-gated c2-stager loader fetched from a GitHub repo
On 2026-06-28 17:08–17:42 UTC the npm account thone33 (gptconta847@gmail.com) published three collaborating packages: @thone33/analytics-injector (1.0.0, 1.0.1) that fetches attacker JavaScript from raw.githubusercontent.com/Dennisfrr/c2-stager/main/the%20assessment.js and passes the response directly to eval; @thone33/core-utils (1.0.0–1.0.5) that depends on @thone33/analytics-injector: ^1.0.0 and conditionally activates it only when NODE_ENV === 'production'; and the newly-catalogued sibling @thone33/react-helpers (1.0.0–1.0.4, backfilled by GHSA on 2026-07-27, GHSA-vxmg-ff8j-2552). All three security-replaced on 2026-07-27 01:29–01:30 UTC.
npm
Affected packages3 packages · 13 versions
npm@thone33/analytics-injector
1.0.01.0.1
npm@thone33/core-utils
1.0.01.0.11.0.21.0.31.0.41.0.5
npm@thone33/react-helpers
1.0.01.0.11.0.21.0.31.0.4
npm-2026-06-28-thone33-c2-stager-clusterSource advisory
HighTyposquat27 Jun 2026
6 packages tracked
`chai-as-persisted` + `chai-as-assured` - jsonspack DPRK campaign restarts with chai-as-* typosquat install-time RCE dropper
On 2026-06-26 → 2026-06-28 the same DPRK-linked operator behind the March jsonspack npm campaign restarted with chai-as-persisted and chai-as-assured - typosquats of chai-as-promised that ship install-time RCE droppers. Four versions across the two packages were published with the same hello@jsonspack.com author bug URL, fetching attacker JavaScript from ipregionchecker.org via new Function.constructor on every npm install.
npm
Affected packages6 packages · 15 versions
npmchai-as-assured
7.1.26.0.4
npmchai-as-const
1.4.51.4.61.4.7
npmchai-as-persisted
4.2.86.1.9
npmchai-as-reddit
7.0.27.0.37.0.4
npmchai-as-thread
7.0.8
npmchai-leaf
1.4.51.4.61.4.71.4.8
npm-2026-06-27-chai-as-persisted-jsonspackSource advisory
HighTyposquat27 Jun 2026
2 packages tracked
`crossmint-wallets-sdk` + `@epsteinlovekids483/crossmint-wallets-sdk-pentest` - install-time wallet/credential exfil via Crossmint SDK impersonators
Between 2026-06-26 13:44 UTC and 2026-06-27 03:09 UTC the npm account epsteinlovekids483 published two impersonators of the legitimate @crossmint/wallets-sdk: a scoped @epsteinlovekids483/crossmint-wallets-sdk-pentest (8 rapid versions) that on require() exfiltrates AWS keys, SSH keys, npm tokens, gh auth token, and Solana keypairs to a 127.0.0.1:8052/exfil loopback C2; and the unscoped crossmint-wallets-sdk@1.0.0 that fires preinstall and install lifecycle scripts to capture host identifiers and POST them to an attacker-controlled endpoint. Both are flagged by CIRCL as MAL-2026-6522 and MAL-2026-6545.
npm
Affected packages2 packages · 9 versions
npm@epsteinlovekids483/crossmint-wallets-sdk-pentest
1.0.0-pentest1.0.1-pentest1.0.2-pentest1.0.5-pentest1.0.7-pentest1.0.9-pentest1.0.11-pentest1.0.11
npmcrossmint-wallets-sdk
1.0.0
npm-2026-06-27-crossmint-wallets-sdk-impersonatorSource advisory
CriticalTyposquat27 Jun 2026
3 packages tracked
`ts-einkle` + `ts-ankle` + `ts-einkle-slot` - crypto-wallet drainer / SSH backdoor / big.js typosquat cluster
Between 2026-06-26 and 2026-06-27 a single naming-cluster operator published three new malicious npm packages - ts-einkle (5 versions), ts-einkle-slot (5 versions), and ts-ankle (1 version). All three execute install-time payloads: ts-einkle is a full credential and crypto-wallet stealer exfiltrating to datasecure-service.vercel.app/api/v1; ts-ankle recursively walks the home directory for credential files and installs an SSH public key in ~/.ssh/authorized_keys; ts-einkle-slot typosquats big.js and shadow-loads node-slot on every require(). npm-support replaced all three with 0.0.1-security holders on 2026-06-29.
npm
Affected packages3 packages · 10 versions
npmts-ankle
1.1.0
npmts-einkle
1.0.91.1.01.1.21.1.3
npmts-einkle-slot
0.0.80.0.90.1.00.1.10.1.2
npm-2026-06-27-ts-einkle-ankle-wallet-clusterSource advisory
HighTyposquat27 Jun 2026
1 package tracked
`polymarket-clob-math` - Polymarket SDK impersonator with Vercel-hosted unsigned tarball loader
On 2026-06-27 17:20 UTC an operator published polymarket-clob-math@1.0.4 to npm - an impersonator of the legitimate @polymarket/clob-client math helper. A postinstall script fetches a JSON config from an unverified Vercel domain (PSM_PEER_URL), downloads and extracts an unpinned mutable tarball whose contents the operator can swap at will, and executes the resulting attacker JavaScript on the installer. Internal references (peer-math.js, syncSession) masquerade it as a benign dependency-sync mechanism. npm-support replaced 1.0.4 with a 0.0.1-security holder on 2026-06-29.
npm
Affected packages1 package · 1 version
npmpolymarket-clob-math
1.0.4
npm-2026-06-27-polymarket-clob-math-vercel-loaderSource advisory
HighTyposquat27 Jun 2026
2 packages tracked
`livekit-agents` (npm) + `skillspector` (PyPI) - coordinated multi-ecosystem typosquat exfiltrating to `livekit-agents.xyz`
Between 2026-06-27 and 2026-06-28 a single operator published a coordinated multi-ecosystem typosquat campaign exfiltrating to the lookalike domain livekit-agents.xyz. Unscoped livekit-agents on npm (10 versions, four of them flagged malicious) impersonates the LiveKit Agents SDK while beaconing host telemetry. The PyPI package skillspector (8 versions) - an unauthorized fork of a legitimate Nvidia project - exfiltrates every CLI argument to https://livekit-agents.xyz/skillspector-telemetry. The shared lookalike domain ties both packages to the same operator.
npmPyPI
Affected packages2 packages · 12 versions
npmlivekit-agents
0.3.00.3.10.3.20.3.4
PyPIskillspector
0.0.10.0.20.0.30.0.42.3.72.3.82.3.92.3.10
multi-2026-06-27-livekit-agents-skillspector-typosquatSource advisory
HighTyposquat26 Jun 2026
1 package tracked
`tw-style-utils` - SStar Agent cross-platform RAT delivered via Tailwind Typography typosquat
tw-style-utils masqueraded as a Tailwind CSS typography plugin (99% of its code copied from @tailwindcss/typography) while ~5KB of top-level IIFE downloader code installed SStar Agent, a Windows/macOS RAT with keyboard/clipboard hooks and exfiltration capability. Two versions (0.7.0, 0.7.1) were live on npm from 2026-05-26 17:19 UTC; npm yanked the package and replaced latest with a 0.0.1-security holder on 2026-06-26 05:17 UTC, and GitHub published GHSA-75cr-ggc5-8h7g the same day.
npm
Affected packages1 package · 2 versions
npmtw-style-utils
0.7.00.7.1
npm-2026-06-26-sstar-tw-style-utilsSource advisory
HighTyposquat26 Jun 2026
4 packages tracked
npm typosquat sweep - `pump-stream-logger`, `pump-laserstream-parser`, `pino-zod`, `rollup-plugin-polyfill-connect` yanked
On 2026-06-26 npm yanked four malicious typosquat packages within hours of each other - pump-stream-logger, pump-laserstream-parser, and pino-zod were taken down within a 10-second window at 05:10 UTC, and rollup-plugin-polyfill-connect followed at 12:16 UTC. All four are GHSA-classified as CWE-506 Embedded Malicious Code; the package names target the Helius Solana streaming SDK, the Pino logger family, the Zod validation library, and the rollup-plugin-polyfill-node Rollup plugin.
npm
Affected packages4 packages · 7 versions
npmpino-zod
1.0.1211.0.122
npmpump-laserstream-parser
2.0.0
npmpump-stream-logger
1.0.0
npmrollup-plugin-polyfill-connect
1.0.11.0.21.0.3
npm-2026-06-26-pump-pino-rollup-typosquat-sweepSource advisory
HighDependency confusion25 Jun 2026
1 package tracked
`@vpms/design-system` - internal-scope dependency-confusion with preinstall env-var exfil to Pipedream
On 2026-06-25 between 15:52 UTC and 17:14 UTC, an operator published four versions of @vpms/design-system (0.1.3, 1.0.0, 1.0.1, 1.1.2) as a dependency-confusion attack against the internal @vpms scope. The preinstall script iterates process.env and harvests every variable whose name contains SECRET, TOKEN, PASSWORD, KEY, or CREDENTIAL, along with hostname, username, and process details, then exfiltrates the payload to a hardcoded Pipedream webhook at eov0bmnid410yqf.m.pipedream.net. npm-support replaced all four versions with a 0.0.1-security holder on 2026-06-29.
npm
Affected packages1 package · 4 versions
npm@vpms/design-system
0.1.31.0.01.0.11.1.2
npm-2026-06-25-vpms-design-system-pipedreamSource advisory
CriticalCompromise24 Jun 2026
1 package tracked
codfish/semantic-release-action - 16 tags retargeted to Miasma imposter commit
On 2026-06-24 at 15:39:06 UTC an attacker force-pushed two imposter commits to codfish/semantic-release-action and repointed 16 tags - including the floating majors v2, v3, v4, v5 - to them. Any workflow pinned by tag pulls 781,580 bytes of obfuscated JavaScript that searches GitHub commit-search for the thebeautifulsnadsoftime Miasma dead-drop channel and eval()s any signed payload, exfiltrating GITHUB_TOKEN and NPM_TOKEN from release workflows.
GitHub Actions
Affected packages1 package · 14 versions
GitHub Actionscodfish/semantic-release-action
v2v2.2.1v3v3.0.0v3.1.0v3.2.0v3.3.0v3.4.0v3.5.0v4v4.0.0v4.0.1v5v5.0.0
github-actions-2026-06-24-codfish-semantic-release-action-hijackSource advisory
CriticalCompromise24 Jun 2026
2 packages tracked
Leo Platform / RStreams - czirker maintainer account hijacked, 20 npm packages backdoored in 3 seconds
On 2026-06-24 at 23:04:55 UTC an attacker used the compromised czirker npm maintainer account to publish malicious versions of 20 Leo Platform / RStreams packages in a sub-3-second automated burst. Each tarball ships a weaponised binding.gyp that hides a node-gyp command-substitution payload - the same "Phantom Gyp" hook used in the 2026-06-01 Miasma @redhat-cloud-services worm - running a Bun-runtime credential stealer (the Shai-Hulud "Hades" payload) that exfiltrates AWS/GCP/Azure/Kubernetes/Vault/npm/PyPI/GitHub/1Password secrets via the victim's own GitHub token.
npm
Affected packages2 packages · 2 versions
npmleo-logger
1.0.8
npmleo-sdk
6.0.19
npm-2026-06-24-leo-platform-miasma-hadesSource advisory
HighTyposquat22 Jun 2026
3 packages tracked
PostCSS lookalike npm typosquats deliver multi-stage Windows RAT (abdrizak / JFrog)
JFrog disclosed three malicious npm packages published by the abdrizak account that masquerade as postcss-selector-parser tooling. An AES-256-GCM-encrypted blob drops a PowerShell stager which fetches a Windows RAT from nvidiadriver[.]net, persists via the registry, and beacons over encrypted HTTP to 95.216.92.207:8080 to steal Chrome credentials and run remote-shell / file-transfer commands.
npm
Affected packages3 packages · 33 versions
npmaes-decode-runner-pro
1.0.11.0.21.0.31.0.41.0.51.0.61.0.71.0.81.0.91.0.101.0.11
npmpostcss-minify-selector
0.1.20.1.30.1.40.1.50.1.60.1.70.1.80.1.90.1.100.1.112.0.12.0.2
npmpostcss-minify-selector-parser
1.0.111.0.121.0.131.0.141.0.151.0.161.0.171.0.182.0.12.0.2
npm-2026-06-22-postcss-rat-typosquat-jfrogSource advisory
HighTyposquat18 Jun 2026
8 packages tracked
`parket-helper` / `ts-ecro` big.js typosquat dropper cluster
A cluster of npm typosquats impersonating big.js shipped verbatim copies of the legitimate library with a single added five-line require of parket-helper / parket-slot / new-solt - three otherwise-empty utility packages whose entire purpose is to execute attacker-controlled JavaScript at import time. GitHub and npm flagged the eight packages and replaced them with 0.0.1-security holders between 2026-06-18 and 2026-06-19.
npm
Affected packages8 packages · 16 versions
npmnew-ecro
0.0.60.0.70.0.9
npmnew-solt
0.0.70.0.80.0.9
npmparket-helper
0.0.15.8.1
npmparket-slot
0.0.6
npmts-big-ecro
0.1.03.8.1
npmts-ecro
0.0.50.0.6
npmts-ecro-helper
0.0.15.8.0
npmts-esys
0.0.5
npm-2026-06-18-parket-ecro-bigjs-typosquat-dropperSource advisory
CriticalMalicious package18 Jun 2026
3 packages tracked
`node-ci-utils` / `win-env-setup` / `macos-ci-utils` npm droppers deliver the NastyC2 Rust post-exploitation framework
Three npm packages - node-ci-utils@2.1.4, win-env-setup@3.0.5/3.0.6, and macos-ci-utils@1.0.0/1.0.1 - masqueraded as CI tooling while acting as cross-platform droppers for NastyC2, a previously undocumented Rust post-exploitation framework with 80+ commands comparable in scope to Cobalt Strike and Sliver. npm removed all three packages between 2026-06-01 and 2026-06-13; the public disclosure landed in The Hacker News ThreatsDay Bulletin on 2026-06-18.
npm
Affected packages3 packages · 5 versions
npmmacos-ci-utils
1.0.01.0.1
npmnode-ci-utils
2.1.4
npmwin-env-setup
3.0.53.0.6
npm-2026-06-18-nastyc2-rust-implant-droppersSource advisory
CriticalCompromise17 Jun 2026
17 packages tracked
Mastra AI npm scope takeover via `easy-day-js` typosquat dropper
On 2026-06-17 between ~01:12 and 02:36 UTC, the dormant ehindero contributor account - never revoked from the @mastra scope - was used to mass-publish ~144 trojanised @mastra/* releases plus mastra and create-mastra, each declaring a new easy-day-js dependency whose postinstall hook drops a cross-platform crypto-wallet stealer / RAT. Microsoft attributes the activity to Sapphire Sleet (BlueNoroff) with high confidence; combined exposure ~1.1M weekly downloads.
npm
Affected packages17 packages · 17 versions
npm@mastra/agent-browser
0.3.2
npm@mastra/auth
1.0.3
npm@mastra/core
1.42.1
npm@mastra/evals
1.3.1
npm@mastra/github-signals
0.1.2
npm@mastra/loggers
1.1.3
npm@mastra/mem0
0.1.14
npm@mastra/memory
1.20.4
npm@mastra/node-audio
0.1.8
npm@mastra/node-speaker
0.1.1
npm@mastra/rag
2.2.2
npm@mastra/react
1.0.1
npm@mastra/schema-compat
1.2.12
npm@mastra/voice-playai
0.12.2
npmcreate-mastra
1.13.1
npmeasy-day-js
1.11.22
npmmastra
1.13.1
npm-2026-06-17-mastra-easy-day-jsSource advisory
InfoMalicious package16 Jun 2026
1 package tracked
`shai_hulululud`: first documented anti-AI-scanner protestware npm package
Socket flagged shai_hulululud@1.0.48596 (~9.3 MB index.js, published 2026-06-16 by npm user ptchli_knldg) - protestware whose only purpose is to probe and disrupt AI-based malware scanners. The tarball is a single JS file containing millions of repeated comments with prompt-injection content, fake system-override instructions, and context-flooding tokens. Runtime is inert; the payload is the source code itself, weaponised against any LLM-based scanner that ingests it.
npm
Affected packages1 package · 1 version
npmshai_hulululud
1.0.48596
npm-2026-06-16-shai-hulululud-ai-scanner-protestwareSource advisory
CriticalTyposquat13 Jun 2026
11 packages tracked
Cyfirma multi-stage crypto-wallet campaign: moralis-sdk, ethers-jss, coinbase-wallet-utils, plus the `ethcompat` ethereum-C2 cluster
Cyfirma Research disclosed an 11-package npm campaign targeting Web3 / blockchain developers across three clusters: a YouTube-page-gated postinstall trojan in moralis-sdk (2.7M+ downloads from the legitimate package name), the ethers-jss / coinbase-wallet-utils private-key sweepers (both yanked 2026-06-10), three long-lived typosquats (ganach, solidty, stelar-sdk, live since 2024), and the ethcompat 5-pack (hardhat-deploy-utils, web3-deploy-helper, defi-sdk-core, ethers-compat, ethereum-dev-utils) that AES-256-GCM-encrypts stolen creds and embeds them in Ethereum transactions to an attacker wallet.
npm
Affected packages11 packages · 12 versions
npmcoinbase-wallet-utils
1.0.0
npmdefi-sdk-core
1.0.0
npmethereum-dev-utils
1.0.0
npmethers-compat
1.0.0
npmethers-jss
6.13.1
npmganach
7.9.2
npmhardhat-deploy-utils
1.0.0
npmmoralis-sdk
1.0.01.0.1
npmsolidty
0.0.1
npmstelar-sdk
12.3.0
npmweb3-deploy-helper
1.0.0
npm-2026-06-13-cyfirma-moralis-ethcompat-clusterSource advisory
CriticalTyposquat12 Jun 2026
7 packages tracked
Solana FakeFix: JFrog flags 25 npm + PyPI packages stealing Solana keypairs and dev secrets to Telegram
JFrog Security Research disclosed Solana FakeFix, a 25-package npm/PyPI campaign with two clusters: ~20 Solana typosquats / "stable-build" forks (solana-web3-stable, solana-rpc-client, …) promoted via GitHub issue spam by the PassWord1337 account, and a 5-package CMS-themed Windows loader cluster (cms-storehub, cms-helpgit, cms-github, to-cms, shopifyto-cms). All variants exfiltrate Solana keypairs, SSH keys, cloud creds, and .env secrets to a Telegram bot.
npm
Affected packages7 packages · 23 versions
npmcms-github
4.2.4
npmcms-helpgit
4.2.24.2.44.2.54.2.64.2.74.2.84.2.9
npmcms-storehub
1.2.71.2.81.2.91.3.01.3.11.3.21.3.31.3.41.3.51.3.6
npmshopifyto-cms
3.0.2
npmsolana-rpc-client
1.0.0
npmsolana-web3-stable
1.0.0
npmto-cms
1.0.01.0.1
multi-2026-06-12-solana-fakefix-jfrogSource advisory
CriticalCompromise11 Jun 2026
4 packages tracked
Atomic Arch: 400+ AUR packages hijacked to ship npm-delivered Rust stealer with eBPF rootkit
Sonatype-2026-003775 (2026-06-11) - attackers hijacked 400+ orphaned Arch User Repository packages and rewrote their PKGBUILDs to pull three malicious npm dependencies (atomic-lockfile@1.4.2, js-digest@4.2.2, lockfile-js@1.4.2). Each drops a Rust ELF credential stealer, loads an eBPF rootkit hiding processes/files/sockets when run as root, persists via systemd, and exfiltrates over Tor onion C2.
npm
Affected packages4 packages · 4 versions
npmatomic-lockfile
1.4.2
npmjs-digest
4.2.2
npmlockfile-js
1.4.2
npmnextfile-js
1.4.2
npm-2026-06-11-atomic-arch-aur-hijackSource advisory
CriticalCompromise9 Jun 2026
1 package tracked
dbmux maintainer-account takeover: four backdoored versions seeded across two release branches
Between 2026-06-04 and 2026-06-05 the dbmux npm maintainer account (bhagyamudgal) was hijacked and four backdoored releases were pushed across both the legacy 1.x and current 2.x branches: 1.0.5, 1.0.6, 2.2.4, 2.2.5. GHSA-62wx-5f55-w8g2 (published 2026-06-09) classifies all four as CWE-506 embedded malicious code: any host that installed or executed them should be treated as fully compromised. npm deprecated every malicious release; the clean latest is 2.2.3.
npm
Affected packages1 package · 4 versions
npmdbmux
1.0.51.0.62.2.42.2.5
npm-2026-06-09-dbmux-maintainer-takeoverSource advisory
HighTyposquat9 Jun 2026
4 packages tracked
SeedSweep: 10-package npm crypto-wallet drainer published by `aicrypto-xzggg`
On 2026-06-09 between 03:23 and 03:57 UTC the brand-new npm account aicrypto-xzggg (vipsyria88@gmail.com) shipped 10 Web3-flavoured packages - wallet-sdk-9, swap-sdk-87, defi-tools-39, farming-tools-12, and six others - each carrying an identical postinstall payload that reads wallet keystores, seed-phrase files, SSH keys, and .env files across six chains and exfiltrates them to Telegram bot id 8227918239. npm unpublished every release ~8 hours later. Disclosed by Xygeni as the SeedSweep campaign.
npm
Affected packages4 packages · 4 versions
npmdefi-tools-39
4.26.29
npmfarming-tools-12
4.68.54
npmswap-sdk-87
4.63.78
npmwallet-sdk-9
3.7.73
npm-2026-06-09-seedsweep-aicrypto-xzgggSource advisory
CriticalCompromise5 Jun 2026
34 packages tracked
Hades / Shai-Hulud PyPI wave: bioinformatics, MCP typosquats, and the .pth + Bun startup payload
Between 2026-06-05 and 2026-06-08 the Shai-Hulud / Miasma operator hopped to PyPI as "Hades", trojanising ~33 packages across the nanguage bioinformatics cluster (StepSecurity: 19 quarantined projects), monarch-initiative phenotype tooling, and MCP/Flask typosquats. Each ships a *-setup.pth startup hook → Bun credential stealer with cross-platform memory scraping.
PyPI
Affected packages34 packages · 56 versions
PyPIbramin
0.0.20.0.30.0.4
PyPIcmd2func
0.2.20.2.3
PyPIcoolbox
0.4.10.4.2
PyPIdynamo-release
1.5.4
PyPIembiggen
0.11.97
PyPIensmallen
0.8.101
PyPIexecutor-engine
0.3.40.3.5
PyPIexecutor-http
0.1.30.1.4
PyPIfuncdesc
0.2.20.2.3
PyPIgpsea
0.9.14
PyPIlangchain-core-mcp
1.4.21.4.3
PyPImagique
0.6.80.6.9
PyPImagique-ai
0.4.40.4.5
PyPImflux-streamlit
0.0.30.0.4
PyPImrbios
0.1.10.1.2
PyPInapari-ufish
0.0.20.0.3
PyPInhmpy
0.0.1
PyPInucbox
0.1.20.1.3
PyPIokite
0.0.70.0.8
PyPIopenai-mcp
2.41.12.41.2
PyPIpantheon-agents
0.6.10.6.2
PyPIpantheon-toolsets
0.5.50.5.6
PyPIphenopacket-store-toolkit
0.1.7
PyPIppkt2synergy
0.1.1
PyPIpyphetools
0.9.120
PyPIray-mcp-server
0.2.1
PyPIrlask
0.0.1
PyPIrsquests
0.0.1
PyPIspateo-release
1.1.2
PyPIsynago
0.1.10.1.2
PyPItiktoken-mcp
0.13.10.13.2
PyPItlask
0.0.1
PyPIufish
0.1.20.1.3
PyPIuprobe
0.1.30.1.4
pypi-2026-06-05-hades-shai-hulud-pypi-waveSource advisory
CriticalCompromise4 Jun 2026
4 packages tracked
IronWorm: Rust-built npm worm with eBPF rootkit and Tor C2 hits 36+ Arweave/WeaveDB packages
JFrog disclosed on 2026-06-04 that a single compromised npm account (asteroiddao, tied to Arweave/WeaveDB maintainer ocrybit) was used to push malicious versions of 36+ packages carrying IronWorm - a Rust ELF infostealer that loads an eBPF rootkit, exfiltrates over Tor, harvests Exodus crypto wallets, and republishes itself via stolen npm OIDC trust.
npm
Affected packages4 packages · 4 versions
npmarnext
0.1.5
npmatomic-notes
0.5.3
npmroidjs
0.1.7
npmweavedb-lite
0.1.1
npm-2026-06-04-ironworm-arweave-weavedbSource advisory
CriticalCompromise3 Jun 2026
26 packages tracked
Phantom Gyp Miasma worm hits @vapi-ai/server-sdk and the jagreehal portfolio via binding.gyp
Between 23:30 UTC on 2026-06-03 and ~01:30 UTC on 2026-06-04 the Miasma worm published a malicious 157-byte binding.gyp payload through 57 npm packages and 286+ versions, starting at @vapi-ai/server-sdk (~408k weekly downloads) and cascading across the jagreehal maintainer's autotel-*, awaitly-*, ai-sdk-*, executable-stories-*, node-env-resolver-*, and wrangler-deploy portfolio. GitHub Advisories backfilled the full affected-version set across the autotel-* family and the wider awaitly-* portfolio on 2026-06-29 / 2026-06-30 (16 new autotel-* GHSAs plus expanded awaitly / awaitly-mongo / awaitly-libsql / awaitly-analyze ranges).
npm
Affected packages26 packages · 167 versions
npm@vapi-ai/server-sdk
0.11.10.11.21.2.11.2.2
npmai-sdk-ollama
0.13.11.1.12.2.13.8.5
npmautotel-backends
2.12.26
npmautotel-cli
0.8.14
npmautotel-drizzle
0.0.27
npmautotel-eventcatalog
1.0.12.0.13.0.14.0.25.0.1
npmautotel-hono
0.4.26
npmautotel-mcp
0.1.142.0.13.0.14.0.15.0.16.0.17.0.18.0.19.0.110.0.111.0.113.0.114.0.115.0.216.0.117.0.218.0.119.0.120.0.121.1.122.0.123.0.124.0.125.0.126.0.227.0.128.0.329.0.1
npmautotel-mcp-instrumentation
29.0.230.0.531.0.132.0.133.0.234.0.1
npmautotel-mongoose
0.0.31.0.22.0.53.0.14.0.15.0.26.0.1
npmautotel-pact
0.2.21.0.3
npmautotel-playwright
0.4.32
npmautotel-plugins
0.19.26
npmautotel-sentry
0.5.13
npmautotel-subscribers
4.1.15.0.16.0.17.0.18.0.19.0.110.0.111.0.112.0.113.0.114.1.115.0.116.0.217.0.118.0.319.0.120.0.121.0.122.0.223.0.224.0.125.0.126.0.127.0.228.0.229.0.630.0.431.1.4
npmautotel-tanstack
1.13.27
npmautotel-vitest
0.4.26
npmautotel-web
1.12.2
npmawaitly
1.33.3
npmawaitly-analyze
0.24.21.1.12.0.13.0.14.0.15.0.16.0.17.0.18.0.1
npmawaitly-libsql
0.1.11.0.12.0.13.0.14.0.15.0.16.0.17.0.18.0.19.0.110.0.111.0.112.0.113.0.114.0.115.0.116.0.117.0.118.1.119.0.120.0.121.0.122.0.1
npmawaitly-mongo
0.1.11.0.12.0.13.0.14.0.15.0.16.0.17.0.18.0.19.1.110.0.111.0.112.0.113.0.114.0.115.0.116.0.117.0.118.0.119.1.120.0.121.0.122.0.123.0.1
npmawaitly-postgres
0.1.11.0.12.0.13.0.24.0.15.0.16.0.17.0.18.0.19.0.110.0.111.0.112.0.1
npmawaitly-visualizer
1.0.1
npmnode-env-resolver
6.5.1
npmwrangler-deploy
1.5.5
npm-2026-06-03-phantom-gyp-vapi-jagreehalSource advisory
HighTyposquat3 Jun 2026
2 packages tracked
@sentry-internals / @sentry-browser-sdk profiling-node typosquat via forged Sentry events
On 2026-06-03 Nutrient (PSPDFKit) caught a novel two-stage attack: an attacker submitted forged Sentry events through a public browser DSN, displaying "remediation" runbook text that instructed responders (and AI agents) to run npx @sentry-internals/profiling-node --diagnose. The typosquat - and its sibling @sentry-browser-sdk/profiling-node (v1.0.0–1.0.5) - exfiltrated env, working-directory, and dev-context data to advisory-tracker.com before npm replaced both with 0.0.1-security holders.
npm
Affected packages2 packages · 7 versions
npm@sentry-browser-sdk/profiling-node
1.0.01.0.11.0.21.0.31.0.41.0.5
npm@sentry-internals/profiling-node
1.0.0
npm-2026-06-03-sentry-profiling-typosquatSource advisory
HighCompromise2 Jun 2026
1 package tracked
codexui-android exfiltrates OpenAI Codex refresh tokens for ~7 weeks before Aikido disclosure
Aikido disclosed on 2026-06-02 that every codexui-android npm version from 0.1.82 (2026-04-13) through 0.1.125 silently exfiltrates the user's OpenAI Codex auth.json - access, refresh, and ID tokens - to sentry.anyclaw[.]store/startlog. The malicious code never appeared in the package's GitHub repository, and a companion Android app (50k+ installs) ships the same stealer.
npm
Affected packages1 package · 41 versions
npmcodexui-android
0.1.820.1.830.1.850.1.880.1.890.1.900.1.910.1.920.1.930.1.940.1.950.1.960.1.970.1.980.1.990.1.1000.1.1010.1.1020.1.1030.1.1040.1.1050.1.1060.1.1070.1.1080.1.1090.1.1100.1.1110.1.1120.1.1130.1.1140.1.1150.1.1160.1.1170.1.1180.1.1190.1.1200.1.1210.1.1220.1.1230.1.1240.1.125
npm-2026-06-02-codexui-android-openclawSource advisory
CriticalCompromise1 Jun 2026
32 packages tracked
Miasma: @redhat-cloud-services Mini Shai-Hulud worm compromises 32 npm packages in 72 seconds
On 2026-06-01 an attacker published malicious versions of 32 @redhat-cloud-services/* npm packages in a 72-second window. The "Miasma" payload - a reskinned Mini Shai-Hulud worm - drops a preinstall script that runs a Bun-loaded credential stealer, harvests AWS/GCP/Azure/Kubernetes/Vault/GitHub/npm tokens, and exfiltrates to attacker-controlled GitHub repos tagged Miasma: The Spreading Blight.
npm
Affected packages32 packages · 95 versions
npm@redhat-cloud-services/chrome
2.3.12.3.22.3.4
npm@redhat-cloud-services/compliance-client
4.0.34.0.44.0.6
npm@redhat-cloud-services/config-manager-client
5.0.45.0.55.0.7
npm@redhat-cloud-services/entitlements-client
4.0.114.0.124.0.14
npm@redhat-cloud-services/eslint-config-redhat-cloud-services
3.2.13.2.23.2.4
npm@redhat-cloud-services/frontend-components
7.7.27.7.37.7.5
npm@redhat-cloud-services/frontend-components-advisor-components
3.8.23.8.43.8.6
npm@redhat-cloud-services/frontend-components-config
6.11.36.11.46.11.6
npm@redhat-cloud-services/frontend-components-config-utilities
4.11.24.11.34.11.5
npm@redhat-cloud-services/frontend-components-notifications
6.9.26.9.36.9.5
npm@redhat-cloud-services/frontend-components-remediations
4.9.24.9.34.9.5
npm@redhat-cloud-services/frontend-components-testing
1.2.11.2.21.2.4
npm@redhat-cloud-services/frontend-components-translations
4.4.14.4.24.4.4
npm@redhat-cloud-services/frontend-components-utilities
7.4.17.4.27.4.4
npm@redhat-cloud-services/hcc-feo-mcp
0.3.10.3.20.3.4
npm@redhat-cloud-services/hcc-kessel-mcp
0.3.10.3.20.3.4
npm@redhat-cloud-services/hcc-pf-mcp
0.6.10.6.20.6.4
npm@redhat-cloud-services/host-inventory-client
5.0.35.0.45.0.6
npm@redhat-cloud-services/insights-client
4.0.44.0.54.0.7
npm@redhat-cloud-services/integrations-client
6.0.46.0.56.0.7
npm@redhat-cloud-services/javascript-clients-shared
2.0.82.0.92.0.11
npm@redhat-cloud-services/notifications-client
6.1.46.1.56.1.7
npm@redhat-cloud-services/patch-client
4.0.44.0.54.0.7
npm@redhat-cloud-services/quickstarts-client
4.0.114.0.124.0.14
npm@redhat-cloud-services/rbac-client
9.0.39.0.49.0.6
npm@redhat-cloud-services/remediations-client
4.0.44.0.54.0.7
npm@redhat-cloud-services/rule-components
4.7.24.7.34.7.5
npm@redhat-cloud-services/sources-client
3.0.103.0.113.0.13
npm@redhat-cloud-services/topological-inventory-client
3.0.103.0.113.0.13
npm@redhat-cloud-services/tsc-transform-imports
1.2.21.2.41.2.6
npm@redhat-cloud-services/types
3.6.13.6.23.6.4
npm@redhat-cloud-services/vulnerabilities-client
2.1.92.1.11
npm-2026-06-01-miasma-redhat-cloud-servicesSource advisory
HighDependency confusion28 May 2026
45 packages tracked
oob.moika.tech dependency-confusion campaign across nine npm scopes (mr.4nd3r50n / ce-rwb / t-in-one)
Between 2026-05-28 18:47 UTC and 2026-05-29 09:02 UTC a single operator using the npm aliases mr.4nd3r50n, ce-rwb, and t-in-one pushed dependency-confusion packages across nine corporate-looking scopes (@cloudplatform-single-spa, @t-in-one, @ce-rwb, @wb-track, @data-science, @payments-widget, @travel-autotests, @capibar.chat, @sber-ecom-core). Postinstall stagers exfiltrate process.env to oob.moika[.]tech with a shared X-Secret header.
npm
Affected packages45 packages · 47 versions
npm@capibar.chat/ui-kit
99.0.799.5.7
npm@ce-rwb/ce-tools-editor-admin
3.5.22
npm@ce-rwb/ce-tools-editor-core
3.5.22
npm@ce-rwb/ce-tools-editor-render
3.5.22
npm@cloudplatform-single-spa/administration
100.100.100
npm@cloudplatform-single-spa/arenadata-db
100.100.100
npm@cloudplatform-single-spa/base-static-page
100.100.100
npm@cloudplatform-single-spa/business-solutions
100.100.100
npm@cloudplatform-single-spa/cloud-dns
100.100.100
npm@cloudplatform-single-spa/cnapp-ui
100.100.100
npm@cloudplatform-single-spa/cp-api-gw
100.100.100
npm@cloudplatform-single-spa/datagrid
100.100.100
npm@cloudplatform-single-spa/dataplatform
100.100.100
npm@cloudplatform-single-spa/dataplatform-metastore
100.100.100
npm@cloudplatform-single-spa/dataplatform-trino
100.100.100
npm@cloudplatform-single-spa/employees
100.100.100
npm@cloudplatform-single-spa/enterprise
100.100.100
npm@cloudplatform-single-spa/floating-ips
100.100.100
npm@cloudplatform-single-spa/logaas
100.100.100
npm@cloudplatform-single-spa/marketplace-gigachat
100.100.100
npm@cloudplatform-single-spa/ml-ai-agents-agent
100.100.100
npm@cloudplatform-single-spa/ml-ai-agents-agent-system
100.100.100
npm@cloudplatform-single-spa/monitoring
100.100.100
npm@cloudplatform-single-spa/security-groups
100.100.100
npm@cloudplatform-single-spa/ssh-keys
100.100.100
npm@cloudplatform-single-spa/support
100.100.100
npm@cloudplatform-single-spa/svp-baas
100.100.100
npm@cloudplatform-single-spa/svp-interfaces
100.100.100
npm@cloudplatform-single-spa/svp-s3-storage
100.100.100
npm@cloudplatform-single-spa/vpn
100.100.100
npm@data-science/llm
3.5.22
npm@payments-widget/payments-widget-sdk
3.5.22
npm@sber-ecom-core/sberpay-widget
99.0.799.5.8
npm@t-in-one/add_app_middleware_token
5.7.1
npm@t-in-one/add_application
5.7.1
npm@t-in-one/add_application_service_token
5.7.1
npm@t-in-one/add_application_tid
5.7.1
npm@t-in-one/application_id_storage_key_token
5.7.1
npm@t-in-one/form_product_token
5.7.1
npm@t-in-one/get_application_hid
5.7.1
npm@t-in-one/only_difference_payload
5.7.1
npm@t-in-one/prefill_bundle_data_token
5.7.1
npm@t-in-one/prefill_credit_data_token
5.7.1
npm@travel-autotests/npm-proto
3.5.22
npm@wb-track/shared-front
3.5.22
npm-2026-05-28-moika-dependency-confusionSource advisory
HighTyposquat28 May 2026
14 packages tracked
vpmdhaj OpenSearch / ElasticSearch / DevOps typosquat burst (14 npm packages, Bun stager → cloud + CI/CD secret theft)
Microsoft Threat Intelligence flagged 14 typosquat npm packages published on 2026-05-28 by a single new maintainer alias vpmdhaj (a39155771@gmail.com) in a ~4-hour window. Install-time stager pulls a ~195KB Bun-compiled credential harvester from aab.sportsontheweb[.]net/x.php (X-Supply: 1 header) and exfiltrates AWS, HashiCorp Vault, GitHub Actions and npm publish tokens.
npm
Affected packages14 packages · 41 versions
npm@vpmdhaj/devops-tools
1.0.7267
npm@vpmdhaj/elastic-helper
1.0.7269
npm@vpmdhaj/opensearch-setup
1.0.7267
npm@vpmdhaj/search-setup
1.0.7268
npmapp-config-utility
1.0.92001.0.9300
npmelastic-opensearch-helper
1.0.72651.0.91031.0.91041.0.91051.0.91061.0.91071.0.9108
npmenv-config-manager
2.1.9201
npmopensearch-config-utility
1.0.72651.0.91041.0.91051.0.9106
npmopensearch-security-scanner
1.0.81.0.91.0.10
npmopensearch-setup
1.0.90001.0.91001.0.91011.0.91021.0.9103
npmopensearch-setup-tool
1.0.72651.0.91061.0.91071.0.9108
npmsearch-cluster-setup
1.0.72651.0.91021.0.91031.0.9104
npmsearch-engine-setup
1.0.72651.0.91051.0.91061.0.91071.0.9108
npmvpmdhaj-opensearch-setup
1.0.91011.0.9102
npm-2026-05-28-vpmdhaj-opensearch-typosquatsSource advisory
HighMalicious package26 May 2026
1 package tracked
mouse5212-super-formatter: AI-generated npm infostealer targets Claude AI /mnt/user-data
On 2026-05-26 a fresh npm publisher pushed five versions of mouse5212-super-formatter (1.0.0–1.0.4) that exfiltrate files from Claude AI's /mnt/user-data directory to an attacker GitHub repo via a hard-coded PAT. Disclosed by OX Security on 2026-05-27 ("Malware-Slop"); ~676 downloads before npm unpublished all versions.
npm
Affected packages1 package · 5 versions
npmmouse5212-super-formatter
1.0.01.0.11.0.21.0.31.0.4
npm-2026-05-26-mouse5212-claude-ai-exfilSource advisory
CriticalCompromise22 May 2026
4 packages tracked
Laravel-Lang Composer packages - every git tag retargeted to a malicious fork commit
On 2026-05-22 an attacker with push access to the laravel-lang GitHub org retargeted every git tag in laravel-lang/lang, http-statuses, actions, and attributes to malicious fork commits. composer require/update then pulls a src/helpers.php backdoor, autoloaded on every PHP request, that exfiltrates cloud and CI/CD secrets to flipboxstudio.info.
Packagist
Affected packages4 packages · 0 versions
Packagistlaravel-lang/actions
Packagistlaravel-lang/attributes
Packagistlaravel-lang/http-statuses
Packagistlaravel-lang/lang
packagist-2026-05-22-laravel-lang-tag-hijackSource advisory
CriticalMalicious package22 May 2026
34 packages tracked
TrapDoor / AuditorTrap crypto-stealer campaign across npm, PyPI and crates.io
Starting 2026-05-22 the TrapDoor / AuditorTrap campaign pushed 34+ malicious packages (384+ versions) across npm, PyPI and crates.io posing as crypto/DeFi/AI dev tools and fake "security guild" branding. Payloads steal SSH keys, cloud credentials and Solana/Sui/Aptos wallets, and hide zero-width-Unicode prompt injection in CLAUDE.md/.cursorrules to trick Claude Code and Cursor into running the stealer.
crates.ionpmPyPI
Affected packages34 packages · 404 versions
npmasync-pipeline-builder
1.0.01.0.11.0.31.0.41.0.51.0.61.0.81.0.91.0.101.0.111.0.121.0.131.0.141.1.01.2.01.3.01.4.01.5.01.5.1
npmbuild-scripts-utils
1.0.01.0.11.0.21.0.31.0.41.0.51.0.61.0.81.0.91.0.101.0.111.0.121.0.131.0.141.1.01.2.01.3.01.4.01.5.01.5.1
npmchain-key-validator
0.2.10.2.20.2.30.2.41.2.01.2.11.2.21.2.31.3.01.3.11.3.21.3.31.3.41.3.51.3.61.3.71.3.81.3.94.0.0
npmcrypto-credential-scanner
2.0.02.0.12.0.22.0.33.0.03.0.13.0.23.0.33.1.03.1.13.1.23.1.33.1.43.1.53.1.63.1.73.1.83.1.94.0.0
PyPIcryptowallet-safety
PyPIdata-pipeline-check
0.1.1
npmdefi-env-auditor
0.3.00.3.10.3.20.3.31.3.01.3.11.3.21.3.31.4.01.4.11.4.21.4.31.4.41.4.51.4.61.4.71.4.81.4.94.0.0
PyPIdefi-risk-scanner
0.1.0
npmdefi-threat-scanner
2.1.02.1.12.1.22.1.33.1.03.1.13.1.23.1.33.2.03.2.13.2.23.2.33.2.43.2.53.2.63.2.73.2.84.0.0
npmdeployment-key-auditor
0.7.10.7.20.7.30.7.41.7.01.7.11.7.21.7.31.8.01.8.11.8.21.8.31.8.41.8.51.8.61.8.71.8.81.8.94.0.0
npmdev-env-bootstrapper
1.0.01.0.11.0.21.0.31.0.41.0.51.0.61.0.71.0.81.0.91.0.101.0.111.0.121.0.131.0.141.1.01.2.01.3.01.4.01.5.01.5.2
PyPIenv-loader-cli
0.1.1
PyPIeth-security-auditor
0.1.0
npmeth-wallet-sentinel
1.0.71.0.81.0.91.0.102.0.02.0.12.0.22.0.32.1.02.1.12.1.22.1.32.1.42.1.52.1.62.1.72.1.82.1.94.0.0
PyPIgit-config-sync
0.1.1
npmllm-context-compressor
1.0.01.0.11.0.31.0.41.0.51.0.61.0.71.0.81.0.91.0.101.0.111.0.121.0.131.0.141.1.01.2.01.3.01.4.01.5.01.5.1
npmmnemonic-safety-check
0.5.00.5.10.5.20.5.31.5.01.5.11.5.21.5.31.6.01.6.11.6.21.6.31.6.41.6.51.6.61.6.71.6.81.6.94.0.0
npmmodel-switch-router
1.0.01.0.11.0.31.0.41.0.51.0.61.0.81.0.91.0.101.0.111.0.121.0.131.0.141.1.01.2.01.3.01.4.01.5.01.5.1
crates.iomove-analyzer-build
crates.iomove-compiler-tools
crates.iomove-project-builder
npmnode-setup-helpers
1.0.01.0.11.0.21.0.31.0.41.0.51.0.61.0.81.0.91.0.101.0.111.0.121.0.131.0.141.1.01.2.01.3.01.4.01.5.01.5.1
npmproject-init-tools
1.0.01.0.11.0.21.0.31.0.41.0.51.0.61.0.81.0.91.0.101.0.111.0.121.0.131.0.141.1.01.2.01.3.01.4.01.5.01.5.1
npmprompt-engineering-toolkit
1.0.01.0.11.0.31.0.41.0.51.0.61.0.71.0.81.0.91.0.101.0.111.0.121.0.131.0.141.1.01.2.01.3.01.4.01.5.01.5.1
PyPIsolidity-build-guard
npmsolidity-deploy-guard
0.4.20.4.30.4.40.4.51.4.01.4.11.4.21.4.31.5.01.5.11.5.21.5.31.5.41.5.51.5.61.5.71.5.84.0.0
crates.iosui-framework-helpers
crates.iosui-move-build-helper
crates.iosui-sdk-build-utils
npmtoken-usage-tracker
1.0.01.0.11.0.31.0.41.0.51.0.61.0.81.0.91.0.101.0.111.0.121.0.131.0.141.1.01.2.01.3.01.4.01.5.01.5.1
npmwallet-backup-verifier
1.0.01.0.11.0.21.0.31.0.41.0.51.0.61.0.71.0.81.0.91.0.101.0.114.0.0
npmwallet-security-checker
1.0.11.0.21.0.31.0.42.0.02.0.12.0.22.0.32.1.02.1.12.1.22.1.32.1.42.1.52.1.62.1.72.1.84.0.0
npmweb3-secrets-detector
1.2.31.2.41.2.51.2.61.2.72.2.02.2.12.2.22.2.32.3.02.3.12.3.22.3.32.3.42.3.52.3.62.3.72.3.82.3.94.0.0
npmworkspace-config-loader
1.0.01.0.11.0.21.0.31.0.41.0.51.0.61.0.81.0.91.0.101.0.111.0.121.0.131.0.141.1.01.2.01.3.01.4.01.5.01.5.1
multi-2026-05-22-trapdoor-crypto-stealerSource advisory
HighCompromise22 May 2026
8 packages tracked
Packagist cross-ecosystem postinstall attack - 8 Composer packages drop Linux `gvfsd-network` binary
Socket disclosed on 2026-05-23 a coordinated campaign that planted a malicious postinstall hook in the package.json (NOT composer.json) of eight Packagist Composer packages - including devdojo/wave, devdojo/genesis, and katanaui/katana. The hook curls a Linux binary gvfsd-network from github.com/parikhpreyash4/systemd-network-helper-aa5c751f, writes it to /tmp/.sshd, and runs it backgrounded. Socket flagged the same payload in 700+ public GitHub repos.
Packagist
Affected packages8 packages · 0 versions
Packagistbaskarcm/tzi-chat-ui
Packagistcrosiersource/crosierlib-base
Packagistdevdojo/genesis
Packagistdevdojo/wave
Packagistelitedevsquad/sidecar-laravel
Packagistkatanaui/katana
Packagistmoritz-sauer-13/silverstripe-cms-theme
Packagistr2luna/brain
packagist-2026-05-22-cross-ecosystem-postinstall-binarySource advisory
HighCompromise21 May 2026
1 package tracked
@common-stack/generate-plugin hijacked - PolinRider-linked RAT in two alpha releases
Sonatype disclosed on 2026-05-21 that two alpha releases of @common-stack/generate-plugin (9.0.2-alpha.21, 9.0.2-alpha.22, published ~2026-05-20–21) ship an install-time stager that pulls a second-stage RAT. Tradecraft overlaps the DPRK-linked PolinRider / Contagious Interview cluster. Package draws ~1,100 weekly downloads as a Node.js plugin scaffolding helper, so any developer machine that ran it during local install should be treated as compromised.
npm
Affected packages1 package · 2 versions
npm@common-stack/generate-plugin
9.0.2-alpha.219.0.2-alpha.22
npm-2026-05-21-common-stack-generate-plugin-polinriderSource advisory
CriticalCompromise19 May 2026
298 packages tracked
@antv maintainer takeover (atool) - Mini Shai-Hulud burst across ~300 packages
On 2026-05-19 the compromised npm publisher atool (Alibaba / AntV co-maintainer) pushed an automated burst of 639 malicious versions across 323 unique packages - the entire @antv visualization suite plus widely-used unscoped libraries including echarts-for-react, size-sensor, and timeago.js (>15M combined monthly downloads). Each release adds a preinstall: bun run index.js hook running the Mini Shai-Hulud credential-stealer. Attributed to TeamPCP.
npm
Affected packages298 packages · 599 versions
npm@antv/a8
0.1.10.2.1
npm@antv/adjust
0.3.50.4.5
npm@antv/algorithm
0.2.260.3.26
npm@antv/async-hook
2.3.92.4.9
npm@antv/attr
0.4.50.5.5
npm@antv/ava
3.5.13.6.1
npm@antv/ava-react
3.4.23.5.2
npm@antv/awards
0.1.90.2.9
npm@antv/calendar-heatmap
1.2.21.3.2
npm@antv/chart-linter
1.2.61.3.6
npm@antv/chart-node-g6
0.1.40.2.4
npm@antv/chart-visualization-skills
0.2.30.3.3
npm@antv/ckb
2.1.42.2.4
npm@antv/color-schema
0.3.30.4.3
npm@antv/color-util
2.1.62.2.6
npm@antv/component
2.2.112.3.11
npm@antv/coord
0.5.70.6.7
npm@antv/d3-color
1.1.01.2.0
npm@antv/d3-interpolate
1.1.31.2.3
npm@antv/data-samples
1.1.11.2.1
npm@antv/data-set
0.12.80.13.8
npm@antv/data-wizard
2.1.42.2.4
npm@antv/dipper-component
0.1.40.2.4
npm@antv/dipper-hooks
0.3.10.4.1
npm@antv/dipper-map
1.1.101.2.10
npm@antv/dom-util
2.1.42.2.4
npm@antv/dumi-theme-antv
0.9.40.10.4
npm@antv/dw-analyzer
1.2.51.3.5
npm@antv/dw-random
1.2.71.3.7
npm@antv/dw-transform
1.2.71.3.7
npm@antv/dw-util
1.2.41.3.4
npm@antv/event-emitter
0.2.30.3.3
npm@antv/expr
1.1.21.2.2
npm@antv/f-charts
0.1.00.2.0
npm@antv/f-engine
1.11.01.12.0
npm@antv/f-lottie
1.11.01.12.0
npm@antv/f-my
1.11.01.12.0
npm@antv/f-react
1.11.01.12.0
npm@antv/f-test-utils
1.1.91.2.9
npm@antv/f-vue
1.11.01.12.0
npm@antv/f-wx
1.11.01.12.0
npm@antv/f2
5.15.05.16.0
npm@antv/f2-algorithm
5.8.05.9.0
npm@antv/f2-canvas
1.1.51.2.5
npm@antv/f2-context
0.1.10.2.1
npm@antv/f2-graphic
0.1.160.2.16
npm@antv/f2-my
4.1.524.2.52
npm@antv/f2-react
5.15.05.16.0
npm@antv/f2-site
4.1.424.2.42
npm@antv/f2-vue
4.1.334.2.33
npm@antv/f2-wordcloud
5.15.05.16.0
npm@antv/f2-wx
4.1.514.2.51
npm@antv/f6
0.1.190.2.19
npm@antv/f6-alipay
0.1.70.2.7
npm@antv/f6-core
0.1.20.2.2
npm@antv/f6-element
0.1.10.2.1
npm@antv/f6-hammerjs
0.1.20.2.2
npm@antv/f6-plugin
1.1.61.2.6
npm@antv/f6-ui
1.1.31.2.3
npm@antv/f6-wx
0.1.70.2.7
npm@antv/g
6.4.16.5.1
npm@antv/g-base
0.6.160.7.16
npm@antv/g-camera-api
2.1.452.2.45
npm@antv/g-canvas
2.3.02.4.0
npm@antv/g-canvaskit
1.2.11.3.1
npm@antv/g-compat
1.1.111.2.11
npm@antv/g-components
2.1.422.2.42
npm@antv/g-css-layout-api
1.1.381.2.38
npm@antv/g-css-typed-om-api
1.1.381.2.38
npm@antv/g-device-api
1.7.131.8.13
npm@antv/g-dom-mutation-observer-api
2.1.422.2.42
npm@antv/g-gesture
3.1.423.2.42
npm@antv/g-image-exporter
1.1.421.2.42
npm@antv/g-layout-blocklike
1.8.491.9.49
npm@antv/g-lite
2.8.02.9.0
npm@antv/g-lottie-player
1.2.11.3.1
npm@antv/g-math
3.2.03.3.0
npm@antv/g-mobile
1.2.51.3.5
npm@antv/g-mobile-canvas
1.2.11.3.1
npm@antv/g-mobile-canvas-element
1.1.421.2.42
npm@antv/g-mobile-svg
1.2.11.3.1
npm@antv/g-mobile-webgl
1.2.11.3.1
npm@antv/g-pattern
2.1.422.2.42
npm@antv/g-perf
1.1.01.2.0
npm@antv/g-plugin-3d
2.2.12.3.1
npm@antv/g-plugin-a11y
1.5.11.6.1
npm@antv/g-plugin-annotation
1.3.01.4.0
npm@antv/g-plugin-box2d
2.2.12.3.1
npm@antv/g-plugin-canvas-path-generator
2.2.262.3.26
npm@antv/g-plugin-canvas-picker
2.4.12.5.1
npm@antv/g-plugin-canvas-renderer
2.6.12.7.1
npm@antv/g-plugin-canvaskit-renderer
2.4.12.5.1
npm@antv/g-plugin-control
2.2.12.3.1
npm@antv/g-plugin-css-select
2.2.12.3.1
npm@antv/g-plugin-device-renderer
2.7.12.8.1
npm@antv/g-plugin-dom-interaction
2.2.312.3.31
npm@antv/g-plugin-dragndrop
2.2.12.3.1
npm@antv/g-plugin-gesture
2.2.12.3.1
npm@antv/g-plugin-gpgpu
1.10.201.11.20
npm@antv/g-plugin-html-renderer
2.4.12.5.1
npm@antv/g-plugin-image-loader
2.4.12.5.1
npm@antv/g-plugin-matterjs
2.2.12.3.1
npm@antv/g-plugin-mobile-interaction
1.1.421.2.42
npm@antv/g-plugin-physx
2.2.12.3.1
npm@antv/g-plugin-rough-canvas-renderer
2.2.12.3.1
npm@antv/g-plugin-rough-svg-renderer
2.2.12.3.1
npm@antv/g-plugin-svg-picker
2.1.462.2.46
npm@antv/g-plugin-svg-renderer
2.5.12.6.1
npm@antv/g-plugin-webgl-device
1.10.171.11.17
npm@antv/g-plugin-webgl-renderer
1.1.261.2.26
npm@antv/g-plugin-webgpu-device
1.10.171.11.17
npm@antv/g-plugin-yoga
2.4.12.5.1
npm@antv/g-plugin-zdog-canvas-renderer
2.2.12.3.1
npm@antv/g-plugin-zdog-svg-renderer
2.2.12.3.1
npm@antv/g-shader-components
2.1.02.2.0
npm@antv/g-svg
2.2.12.3.1
npm@antv/g-web-animations-api
2.2.322.3.32
npm@antv/g-web-components
2.2.12.3.1
npm@antv/g-webgl
2.2.12.3.1
npm@antv/g-webgl-compute
0.1.10.2.1
npm@antv/g-webgpu
2.2.12.3.1
npm@antv/g-webgpu-compiler
0.8.20.9.2
npm@antv/g-webgpu-core
0.8.20.9.2
npm@antv/g-webgpu-engine
0.8.20.9.2
npm@antv/g-webgpu-raytracer
0.6.10.7.1
npm@antv/g-webgpu-unitchart
0.6.10.7.1
npm@antv/g2
5.5.85.6.8
npm@antv/g2-brush
0.1.20.2.2
npm@antv/g2-extension-3d
0.3.00.4.0
npm@antv/g2-extension-ava
0.3.00.4.0
npm@antv/g2-extension-plot
0.3.20.4.2
npm@antv/g2-plugin-slider
2.2.12.3.1
npm@antv/g2-ssr
0.3.00.4.0
npm@antv/g2plot
2.5.352.6.35
npm@antv/g2plot-schemas
1.3.21.4.2
npm@antv/g6
5.2.15.3.1
npm@antv/g6-alipay
0.1.10.2.1
npm@antv/g6-cli
0.1.40.2.4
npm@antv/g6-core
0.9.240.10.24
npm@antv/g6-editor
1.3.01.4.0
npm@antv/g6-element
0.9.250.10.25
npm@antv/g6-extension-3d
0.2.230.3.23
npm@antv/g6-extension-react
0.3.70.4.7
npm@antv/g6-mobile
0.2.20.3.2
npm@antv/g6-pc
0.9.250.10.25
npm@antv/g6-plugin
0.9.250.10.25
npm@antv/g6-plugin-map-view
0.1.40.2.4
npm@antv/g6-plugins
1.1.91.2.9
npm@antv/g6-react-node
1.5.81.6.8
npm@antv/g6-ssr
0.2.10.3.1
npm@antv/g6-wx
0.1.10.2.1
npm@antv/gatsby-theme
0.2.00.3.0
npm@antv/geo-coord
1.1.81.2.8
npm@antv/gi-assets-advance
2.6.222.7.22
npm@antv/gi-assets-algorithm
2.4.192.5.19
npm@antv/gi-assets-basic
2.5.402.6.40
npm@antv/gi-assets-galaxybase
1.3.151.4.15
npm@antv/gi-assets-graphscope
2.2.152.3.15
npm@antv/gi-assets-hugegraph
1.2.151.3.15
npm@antv/gi-assets-janusgraph
1.2.151.3.15
npm@antv/gi-assets-neo4j
2.2.152.3.15
npm@antv/gi-assets-scene
2.3.212.4.21
npm@antv/gi-assets-tugraph
2.2.152.3.15
npm@antv/gi-assets-tugraph-analytics
0.3.150.4.15
npm@antv/gi-assets-xlab
0.2.300.3.30
npm@antv/gi-cli
1.3.111.4.11
npm@antv/gi-common-components
1.4.161.5.16
npm@antv/gi-mock-data
1.1.51.2.5
npm@antv/gi-public-data
1.1.11.2.1
npm@antv/gi-sdk
3.1.03.2.0
npm@antv/gi-sdk-app
1.3.101.4.10
npm@antv/gi-theme-antd
0.7.110.8.11
npm@antv/github-config-cli
0.2.00.3.0
npm@antv/gl-matrix
2.8.12.9.1
npm@antv/gpt-vis
1.1.01.2.0
npm@antv/gpt-vis-ssr
0.4.70.5.7
npm@antv/graphin
3.1.53.2.5
npm@antv/graphin-components
2.5.12.6.1
npm@antv/graphin-graphscope
1.1.51.2.5
npm@antv/graphin-icons
1.1.01.2.0
npm@antv/graphlib
2.1.42.2.4
npm@antv/hierarchy
0.8.10.9.1
npm@antv/infographic
0.3.190.4.19
npm@antv/interaction
0.2.50.3.5
npm@antv/istanbul
0.1.00.2.0
npm@antv/knowledge
1.2.41.3.4
npm@antv/l7
2.26.102.27.10
npm@antv/l7-component
2.26.102.27.10
npm@antv/l7-composite-layers
0.18.10.19.1
npm@antv/l7-core
2.26.102.27.10
npm@antv/l7-district
2.4.122.5.12
npm@antv/l7-draw
3.2.53.3.5
npm@antv/l7-editor
1.2.131.3.13
npm@antv/l7-extension-g-layer
1.1.01.2.0
npm@antv/l7-layers
2.26.102.27.10
npm@antv/l7-leaflet
1.1.21.2.2
npm@antv/l7-map
2.26.102.27.10
npm@antv/l7-mapkit
0.6.00.7.0
npm@antv/l7-maps
2.26.102.27.10
npm@antv/l7-mini
2.21.82.22.8
npm@antv/l7-pass
1.1.01.2.0
npm@antv/l7-react
2.5.32.6.3
npm@antv/l7-renderer
2.26.102.27.10
npm@antv/l7-scene
2.26.102.27.10
npm@antv/l7-source
2.26.102.27.10
npm@antv/l7-three
2.26.102.27.10
npm@antv/l7-utils
2.26.102.27.10
npm@antv/l7plot
0.6.110.7.11
npm@antv/l7plot-component
0.1.110.2.11
npm@antv/larkmap
1.6.11.7.1
npm@antv/layout-gpu
1.2.71.3.7
npm@antv/layout-wasm
1.5.21.6.2
npm@antv/li-aiearth-assets
0.5.70.6.7
npm@antv/li-analysis-assets
1.10.11.11.1
npm@antv/li-core-assets
1.4.71.5.7
npm@antv/li-editor
1.7.11.8.1
npm@antv/li-p2
1.9.21.10.2
npm@antv/li-sam-assets
0.2.40.3.4
npm@antv/li-sdk
1.6.11.7.1
npm@antv/lite-insight
2.2.12.3.1
npm@antv/matrix-util
3.1.43.2.4
npm@antv/mcp-server-antv
0.2.80.3.8
npm@antv/mcp-server-chart
0.10.100.11.10
npm@antv/my-f2
2.2.72.3.7
npm@antv/my-f2-pc
0.2.10.3.1
npm@antv/narrative-text-editor
0.3.200.4.20
npm@antv/narrative-text-schema
0.4.70.5.7
npm@antv/narrative-text-vis
0.4.160.5.16
npm@antv/path-util
3.1.13.2.1
npm@antv/react-g
2.2.12.3.1
npm@antv/s2
2.8.12.9.1
npm@antv/s2-react
2.4.12.5.1
npm@antv/s2-react-components
2.2.22.3.2
npm@antv/s2-ssr
0.2.10.3.1
npm@antv/s2-vue
2.3.02.4.0
npm@antv/sam
0.3.00.4.0
npm@antv/scale
0.6.20.7.2
npm@antv/semantic-release-pnpm
1.1.41.2.4
npm@antv/smart-color
0.3.10.4.1
npm@antv/stat
0.1.20.2.2
npm@antv/t8
0.4.00.5.0
npm@antv/thumbnails
2.1.02.2.0
npm@antv/thumbnails-component
2.1.02.2.0
npm@antv/torch
1.1.61.2.6
npm@antv/translator
1.1.11.2.1
npm@antv/util
3.4.113.5.11
npm@antv/vendor
1.1.111.2.11
npm@antv/vis-predict-engine
0.2.10.3.1
npm@antv/webgpu-graph
1.1.01.2.0
npm@antv/word-scale-chart
0.4.40.5.4
npm@antv/wx-f2
2.2.12.3.1
npm@antv/x6
3.2.73.3.7
npm@antv/x6-angular-shape
3.1.13.2.1
npm@antv/x6-components
0.11.70.12.7
npm@antv/x6-react
0.2.260.3.26
npm@antv/x6-react-shape
3.1.13.2.1
npm@antv/x6-vector
1.5.21.6.2
npm@antv/x6-vue-shape
3.1.23.2.2
npm@antv/x6-vue3-shape
1.1.01.2.0
npm@antv/xflow
2.2.132.3.13
npm@antv/xflow-diff
1.1.01.2.0
npm@lint-md/cli
2.1.02.2.0
npm@lint-md/core
2.1.02.2.0
npm@lint-md/parser
0.1.140.2.14
npmai-figure
0.5.00.6.0
npmamapcn
0.2.20.3.2
npmast-plugin
0.1.70.2.7
npmbabel-plugin-version
0.3.30.4.3
npmboring-avatars-vanilla
1.1.21.2.2
npmbyte-parser
1.1.01.2.0
npmcanvas-nest.js
2.1.42.2.4
npmecharts-for-react
3.0.73.1.73.2.7
npmfilesize.js
2.1.02.2.0
npmfixed-round
1.1.21.2.2
npmgantt-for-react
0.3.00.4.0
npmjest-canvas-mock
2.5.32.6.32.7.3
npmjest-date-mock
1.0.111.1.111.2.11
npmjest-electron
0.2.120.3.12
npmjest-expect
0.1.10.2.1
npmjest-less-loader
0.3.00.4.0
npmjest-random-mock
1.1.01.2.0
npmjest-url-loader
0.2.00.3.0
npmlimit-size
0.2.40.3.4
npmlint-md
0.3.00.4.0
npmlint-md-cli
0.2.20.3.2
npmmcp-echarts
0.8.10.9.1
npmmcp-mermaid
0.5.10.6.1
npmmiz
1.1.11.2.1
npmonfire.js
2.1.12.2.1
npmreact-adsense
0.2.00.3.0
npmrelationship.js
1.3.91.4.9
npmribbon.js
1.1.2
npmsize-sensor
1.0.41.1.41.2.4
npmslice.js
1.2.11.3.1
npmtimeago-react
3.1.73.2.7
npmtimeago.js
4.1.24.2.2
npmword-width
1.1.11.2.1
npmxmorse
1.1.01.2.0
npm-2026-05-19-antv-mini-shai-huludSource advisory
CriticalCompromise19 May 2026
1 package tracked
Microsoft `durabletask` PyPI compromised - TeamPCP Mini Shai-Hulud stage-2 dropper
Three malicious versions of durabletask - Microsoft's Python SDK for Azure Durable Functions (~417K monthly downloads) - were uploaded directly to PyPI inside a 35-minute window on 2026-05-19. None correspond to any git tag or CI run; the attacker bypassed Microsoft's pipeline with a stolen PyPI API token. Stage-2 is the full Mini Shai-Hulud credential-stealer with dedicated cloud-secret collectors. Attributed to TeamPCP. Last clean release: 1.4.0.
PyPI
Affected packages1 package · 3 versions
PyPIdurabletask
1.4.11.4.21.4.3
pypi-2026-05-19-durabletask-teampcpSource advisory
CriticalCompromise19 May 2026
2 packages tracked
actions-cool/issues-helper + maintain-one-comment - every tag retargeted to TeamPCP imposter commit
On 2026-05-19 an attacker with push access to the actions-cool GitHub org force-moved every tag in actions-cool/issues-helper (53 tags, including the floating v1 / v2) and actions-cool/maintain-one-comment (15 tags) to a single imposter commit. Any workflow pinned to a tag - not a full commit SHA - pulled the imposter dist/index.js, which dumps Runner.Worker memory to exfiltrate GitHub Actions secrets. Shares C2 (t.m-kosche.com) with the same-day @antv and durabletask waves; attributed to TeamPCP.
GitHub Actions
Affected packages2 packages · 0 versions
GitHub Actionsactions-cool/issues-helper
GitHub Actionsactions-cool/maintain-one-comment
github-actions-2026-05-19-actions-cool-tag-hijackSource advisory
HighTyposquat19 May 2026
1 package tracked
shopsprint/decimal Go typosquat ships a DNS-TXT command-and-control backdoor
Socket disclosed a long-running Go typosquat of github.com/shopspring/decimal published as github.com/shopsprint/decimal (single-letter swap, t for g). The typosquat was registered 2017-11-08 and was weaponised on 2023-08-19 in v1.3.3, which adds a malicious init() that polls a free-dynamic-DNS subdomain for TXT-record commands every five minutes and executes the response via os/exec. Dwell time before disclosure: ~33 months.
Go
Affected packages1 package · 1 version
Gogithub.com/shopsprint/decimal
v1.3.3
go-2026-05-19-shopsprint-decimal-dns-backdoorSource advisory
CriticalCompromise18 May 2026
1 package tracked
Nx Console (nrwl.angular-console) 18.95.0 hijacked via TanStack-stolen GitHub creds
A malicious Nx Console v18.95.0 (publisher nrwl, ~2.2M installs across VS Code, Cursor, and JetBrains) shipped to both the VS Code Marketplace and Open VSX on 2026-05-18, live for ~18–36 minutes. Every workspace open fetched a 498KB Mini Shai-Hulud stage-2 dropper from an orphan commit in nrwl/nx. Nx telemetry estimates ~6,000 users received the build. Root cause: the May 11 TanStack compromise leaked one Nx Console maintainer's GitHub CLI credentials. Tracked as GHSA-c9j4-9m59-847w / CVE-2026-48027.
Open VSX
Affected packages1 package · 1 version
Open VSXnrwl.angular-console
18.95.0
openvsx-2026-05-18-nx-console-nrwl-angular-consoleSource advisory
CriticalCompromise18 May 2026
10 packages tracked
Megalodon: automated CI/CD workflow injection backdoors 5,561 GitHub repos, propagates to @tiledesk/tiledesk-server on npm
On 2026-05-18 an automated campaign nicknamed Megalodon pushed 5,718 commits to 5,561 public GitHub repos in six hours, injecting GitHub Actions workflows that exfiltrate CI secrets to 216.126.225.129:8443. The legitimate Tiledesk maintainer then released @tiledesk/tiledesk-server 2.18.6–2.18.12 from the poisoned source - propagating the backdoor to every downstream npm install.
GitHub Actionsnpm
Affected packages10 packages · 7 versions
npm@tiledesk/tiledesk-server
2.18.62.18.72.18.82.18.92.18.102.18.112.18.12
GitHub Actionstiledesk/tiledesk-ai
GitHub Actionstiledesk/tiledesk-campaign-dashboard
GitHub Actionstiledesk/tiledesk-community-app
GitHub Actionstiledesk/tiledesk-dashboard
GitHub Actionstiledesk/tiledesk-docker-proxy
GitHub Actionstiledesk/tiledesk-helpcenter-template
GitHub Actionstiledesk/tiledesk-llm
GitHub Actionstiledesk/tiledesk-server
GitHub Actionstiledesk/tiledesk-telegram-connector
multi-2026-05-18-megalodon-tiledeskSource advisory
HighTyposquat16 May 2026
4 packages tracked
Leaked Shai-Hulud + Phantom Bot copycats from npm user deadcode09284814
Three days after TeamPCP open-sourced the Shai-Hulud worm code (2026-05-13), npm publisher deadcode09284814 pushed four malicious packages on 2026-05-16: @deadcode09284814/axios-util, axois-utils, chalk-tempalte, and color-style-utils. chalk-tempalte is the first documented in-the-wild Shai-Hulud clone - a near-verbatim copy of the leaked source with a swapped C2. Tradecraft is well below TeamPCP standard; this is the first copycat wave riding the leak.
npm
Affected packages4 packages · 21 versions
npm@deadcode09284814/axios-util
1.0.01.0.1
npmaxois-utils
1.0.41.0.51.0.61.0.71.0.81.0.9
npmchalk-tempalte
1.0.141.0.151.0.161.0.171.0.191.0.20
npmcolor-style-utils
1.0.31.0.41.0.51.0.61.0.71.0.81.0.9
npm-2026-05-16-shai-hulud-leak-copycats-deadcodeSource advisory
CriticalCompromise14 May 2026
1 package tracked
node-ipc dormant-maintainer takeover via expired email domain
On 2026-05-14 three malicious node-ipc releases (9.1.6, 9.2.3, 12.0.1) were published from a dormant maintainer account atiertant. The attacker re-registered the expired atlantis-software.net domain on 2026-05-07 and used npm's password-reset flow to seize publish rights. The payload fires on every require("node-ipc") (no lifecycle hook) and exfiltrates 90+ credential categories via DNS TXT queries. 12.0.1 was tagged latest, so any unpinned install during the ~60-second window pulled the backdoor. ~822K weekly downloads.
npm
Affected packages1 package · 3 versions
npmnode-ipc
9.1.69.2.312.0.1
npm-2026-05-14-node-ipc-dormant-takeoverSource advisory
CriticalCompromise11 May 2026
177 packages tracked
TanStack + @uipath mini-Shai-Hulud compromise
On 2026-05-11 between 19:20 and 19:26 UTC, TeamPCP pushed malicious versions across @tanstack/*, @uipath/*, @mistralai/*, and many smaller scopes by chaining pull_request_target, GitHub Actions cache poisoning, and runtime OIDC-token extraction from a runner. Same Mini Shai-Hulud credential-stealer as the April SAP campaign. Final tally: 177 packages, 403 versions, >518M cumulative downloads. OpenAI confirmed two compromised employee devices and rotated platform code-signing certificates.
npmPyPI
Affected packages179 packages · 413 versions
npm@beproduct/nestjs-auth
0.1.20.1.30.1.40.1.50.1.60.1.70.1.80.1.90.1.100.1.110.1.120.1.130.1.140.1.150.1.160.1.170.1.180.1.19
npm@cap-js/db-service
2.10.1
npm@cap-js/postgres
2.2.2
npm@cap-js/sqlite
2.2.2
npm@dirigible-ai/sdk
0.6.20.6.3
npm@draftauth/client
0.2.10.2.2
npm@draftauth/core
0.13.10.13.2
npm@draftlab/auth
0.24.10.24.2
npm@draftlab/auth-router
0.5.10.5.2
npm@draftlab/db
0.16.10.16.2
npm@mesadev/rest
0.28.3
npm@mesadev/saguaro
0.4.22
npm@mesadev/sdk
0.28.3
npm@mistralai/mistralai
2.2.22.2.32.2.4
npm@mistralai/mistralai-azure
1.7.11.7.21.7.3
npm@mistralai/mistralai-gcp
1.7.11.7.21.7.3
npm@ml-toolkit-ts/preprocessing
1.0.21.0.3
npm@ml-toolkit-ts/xgboost
1.0.31.0.4
npm@opensearch-project/opensearch
3.5.33.6.23.7.03.8.0
npm@squawk/airport-data
0.7.40.7.50.7.60.7.70.7.8
npm@squawk/airports
0.6.20.6.30.6.40.6.50.6.6
npm@squawk/airspace
0.8.10.8.20.8.30.8.40.8.5
npm@squawk/airspace-data
0.5.30.5.40.5.50.5.60.5.7
npm@squawk/airway-data
0.5.40.5.50.5.60.5.70.5.8
npm@squawk/airways
0.4.20.4.30.4.40.4.50.4.6
npm@squawk/fix-data
0.6.40.6.50.6.60.6.70.6.8
npm@squawk/fixes
0.3.20.3.30.3.40.3.50.3.6
npm@squawk/flight-math
0.5.40.5.50.5.60.5.70.5.8
npm@squawk/flightplan
0.5.20.5.30.5.40.5.50.5.6
npm@squawk/geo
0.4.40.4.50.4.60.4.70.4.8
npm@squawk/icao-registry
0.5.20.5.30.5.40.5.50.5.6
npm@squawk/icao-registry-data
0.8.40.8.50.8.60.8.70.8.8
npm@squawk/mcp
0.9.10.9.20.9.30.9.40.9.5
npm@squawk/navaid-data
0.6.40.6.50.6.60.6.70.6.8
npm@squawk/navaids
0.4.20.4.30.4.40.4.50.4.6
npm@squawk/notams
0.3.60.3.70.3.80.3.90.3.10
npm@squawk/procedure-data
0.7.30.7.40.7.50.7.60.7.7
npm@squawk/procedures
0.5.20.5.30.5.40.5.50.5.6
npm@squawk/types
0.8.10.8.20.8.30.8.40.8.5
npm@squawk/units
0.4.30.4.40.4.50.4.60.4.7
npm@squawk/weather
0.5.60.5.70.5.80.5.90.5.10
npm@supersurkhet/cli
0.0.20.0.30.0.40.0.50.0.60.0.7
npm@supersurkhet/sdk
0.0.20.0.30.0.40.0.50.0.60.0.7
npm@tallyui/components
1.0.11.0.21.0.3
npm@tallyui/connector-medusa
1.0.11.0.21.0.3
npm@tallyui/connector-shopify
1.0.11.0.21.0.3
npm@tallyui/connector-vendure
1.0.11.0.21.0.3
npm@tallyui/connector-woocommerce
1.0.11.0.21.0.3
npm@tallyui/core
0.2.10.2.20.2.3
npm@tallyui/database
1.0.11.0.21.0.3
npm@tallyui/pos
0.1.10.1.20.1.3
npm@tallyui/storage-sqlite
0.2.10.2.20.2.3
npm@tallyui/theme
0.2.10.2.20.2.3
npm@tanstack/arktype-adapter
1.166.121.166.15
npm@tanstack/eslint-plugin-router
1.161.91.161.12
npm@tanstack/eslint-plugin-start
0.0.40.0.7
npm@tanstack/history
1.161.91.161.12
npm@tanstack/nitro-v2-vite-plugin
1.154.121.154.15
npm@tanstack/react-router
1.169.51.169.8
npm@tanstack/react-router-devtools
1.166.161.166.19
npm@tanstack/react-router-ssr-query
1.166.151.166.18
npm@tanstack/react-start
1.167.681.167.71
npm@tanstack/react-start-client
1.166.511.166.54
npm@tanstack/react-start-rsc
0.0.470.0.50
npm@tanstack/react-start-server
1.166.551.166.58
npm@tanstack/router-cli
1.166.461.166.49
npm@tanstack/router-core
1.169.51.169.8
npm@tanstack/router-devtools
1.166.161.166.19
npm@tanstack/router-devtools-core
1.167.61.167.9
npm@tanstack/router-generator
1.166.451.166.48
npm@tanstack/router-plugin
1.167.381.167.41
npm@tanstack/router-ssr-query-core
1.168.31.168.6
npm@tanstack/router-utils
1.161.111.161.14
npm@tanstack/router-vite-plugin
1.166.531.166.56
npm@tanstack/solid-router
1.169.51.169.8
npm@tanstack/solid-router-devtools
1.166.161.166.19
npm@tanstack/solid-router-ssr-query
1.166.151.166.18
npm@tanstack/solid-start
1.167.651.167.68
npm@tanstack/solid-start-client
1.166.501.166.53
npm@tanstack/solid-start-server
1.166.541.166.57
npm@tanstack/start-client-core
1.168.51.168.8
npm@tanstack/start-fn-stubs
1.161.91.161.12
npm@tanstack/start-plugin-core
1.169.231.169.26
npm@tanstack/start-server-core
1.167.331.167.36
npm@tanstack/start-static-server-functions
1.166.441.166.47
npm@tanstack/start-storage-context
1.166.381.166.41
npm@tanstack/valibot-adapter
1.166.121.166.15
npm@tanstack/virtual-file-routes
1.161.101.161.13
npm@tanstack/vue-router
1.169.51.169.8
npm@tanstack/vue-router-devtools
1.166.161.166.19
npm@tanstack/vue-router-ssr-query
1.166.151.166.18
npm@tanstack/vue-start
1.167.611.167.64
npm@tanstack/vue-start-client
1.166.461.166.49
npm@tanstack/vue-start-server
1.166.501.166.53
npm@tanstack/zod-adapter
1.166.121.166.15
npm@taskflow-corp/cli
0.1.240.1.250.1.260.1.270.1.280.1.29
npm@tolka/cli
1.0.21.0.31.0.41.0.51.0.6
npm@uipath/access-policy-sdk
0.3.1
npm@uipath/access-policy-tool
0.3.1
npm@uipath/admin-tool
0.1.1
npm@uipath/agent-sdk
1.0.2
npm@uipath/agent-tool
1.0.1
npm@uipath/agent.sdk
0.0.18
npm@uipath/aops-policy-tool
0.3.1
npm@uipath/ap-chat
1.5.7
npm@uipath/api-workflow-tool
1.0.1
npm@uipath/apollo-core
5.9.2
npm@uipath/apollo-react
4.24.5
npm@uipath/apollo-wind
2.16.2
npm@uipath/auth
1.0.1
npm@uipath/case-tool
1.0.1
npm@uipath/cli
1.0.1
npm@uipath/codedagent-tool
1.0.1
npm@uipath/codedagents-tool
0.1.12
npm@uipath/codedapp-tool
1.0.1
npm@uipath/common
1.0.1
npm@uipath/context-grounding-tool
0.1.1
npm@uipath/data-fabric-tool
1.0.2
npm@uipath/docsai-tool
1.0.1
npm@uipath/filesystem
1.0.1
npm@uipath/flow-tool
1.0.2
npm@uipath/functions-tool
1.0.1
npm@uipath/gov-tool
0.3.1
npm@uipath/identity-tool
0.1.1
npm@uipath/insights-sdk
1.0.1
npm@uipath/insights-tool
1.0.1
npm@uipath/integrationservice-sdk
1.0.2
npm@uipath/integrationservice-tool
1.0.2
npm@uipath/llmgw-tool
1.0.1
npm@uipath/maestro-sdk
1.0.1
npm@uipath/maestro-tool
1.0.1
npm@uipath/orchestrator-tool
1.0.1
npm@uipath/packager-tool-apiworkflow
0.0.19
npm@uipath/packager-tool-bpmn
0.0.9
npm@uipath/packager-tool-case
0.0.9
npm@uipath/packager-tool-connector
0.0.19
npm@uipath/packager-tool-flow
0.0.19
npm@uipath/packager-tool-functions
0.1.1
npm@uipath/packager-tool-webapp
1.0.6
npm@uipath/packager-tool-workflowcompiler
0.0.16
npm@uipath/packager-tool-workflowcompiler-browser
0.0.34
npm@uipath/platform-tool
1.0.1
npm@uipath/project-packager
1.1.16
npm@uipath/resource-tool
1.0.1
npm@uipath/resourcecatalog-tool
0.1.1
npm@uipath/resources-tool
0.1.11
npm@uipath/robot
1.3.4
npm@uipath/rpa-legacy-tool
1.0.1
npm@uipath/rpa-tool
0.9.5
npm@uipath/solution-packager
0.0.35
npm@uipath/solution-tool
1.0.1
npm@uipath/solutionpackager-sdk
1.0.11
npm@uipath/solutionpackager-tool-core
0.0.34
npm@uipath/tasks-tool
1.0.1
npm@uipath/telemetry
0.0.7
npm@uipath/test-manager-tool
1.0.2
npm@uipath/tool-workflowcompiler
0.0.12
npm@uipath/traces-tool
1.0.1
npm@uipath/ui-widgets-multi-file-upload
1.0.1
npm@uipath/uipath-python-bridge
1.0.1
npm@uipath/vertical-solutions-tool
1.0.1
npm@uipath/vss
0.1.6
npm@uipath/widget.sdk
1.2.3
npmagentwork-cli
0.1.40.1.5
npmcmux-agent-mcp
0.1.30.1.40.1.50.1.60.1.70.1.8
npmcross-stitch
1.1.31.1.41.1.51.1.61.1.7
npmgit-branch-selector
1.3.31.3.41.3.51.3.61.3.7
npmgit-git-git
1.0.81.0.91.0.101.0.111.0.12
npmguardrails-ai
0.10.1
PyPIguardrails-ai
0.10.1
npmintercom-client
7.0.4
npmmbt
1.2.48
npmmistralai
2.4.6
PyPImistralai
2.4.6
npmml-toolkit-ts
1.0.41.0.5
npmnextmove-mcp
0.1.30.1.40.1.50.1.60.1.7
npmsafe-action
0.8.30.8.4
npmts-dna
3.0.13.0.23.0.33.0.43.0.5
npmwot-api
0.8.10.8.20.8.30.8.4
npm-2026-05-shai-hulud-tanstackSource advisory
MediumMalicious package11 May 2026
Feed-only · no version-specific detection
RubyGems account-creation flood + GemStuffer data dead-drops force signup suspension
From 2026-05-11–12 an actor abused a RubyGems account-creation flaw to spin up thousands of bot accounts and upload tens of thousands of gems - 500+ confirmed malicious and yanked. Most were empty placeholders or GemStuffer data dead-drops that scraped U.K. council ModernGov portals and re-published the data as .gem archives. RubyGems paused new sign-ups; resolved 2026-05-16.
rubygems-2026-05-11-gemstuffer-floodSource advisory
HighTyposquat8 May 2026
3 packages tracked
OceanLotus-attributed ZiChatBot PyPI droppers: uuid32-utils, colorinal, termncolor with Zulip-API C2
Kaspersky GReAT (2026-05-08) re-attributed three PyPI wheels uploaded by an attacker between 2025-07-16 and 2025-07-22 - uuid32-utils, colorinal, and termncolor - to the Vietnam-aligned OceanLotus (APT32) group. The droppers fetch a Windows DLL or Linux .so, persist via Run-key or crontab, and load ZiChatBot, a Python backdoor that uses public Zulip REST APIs as its C2 channel to blend with normal developer traffic.
PyPI
Affected packages3 packages · 7 versions
PyPIcolorinal
1.0.0
PyPItermncolor
1.0.0
PyPIuuid32-utils
1.0.01.0.11.0.21.0.31.0.4
pypi-2026-05-08-oceanlotus-zichatbot-zulip-c2Source advisory
HighTyposquat5 May 2026
1 package tracked
Sicoob.Sdk NuGet impersonator exfiltrates Brazilian banking PFX certificates and passwords via Sentry telemetry abuse
Sicoob.Sdk 2.0.0–2.0.4 (published to NuGet between 2026-05-05 and 2026-05-06 by an account also named sicoob) posed as the official C# SDK for Brazilian credit cooperative Sicoob. When a developer constructed SicoobClient with a client ID, PFX path and PFX password, the embedded Sicoob.Sdk.dll base64-encoded the PFX file and POSTed it together with the client ID and plaintext PFX password to an attacker-controlled Sentry endpoint. NuGet blocked the package after Socket disclosure on 2026-05-29.
NuGet
Affected packages1 package · 5 versions
NuGetSicoob.Sdk
2.0.02.0.12.0.22.0.32.0.4
nuget-2026-05-05-sicoob-sdk-banking-impersonatorSource advisory
HighMalicious package1 May 2026
16 packages tracked
BufferZoneCorp sleeper attack on RubyGems + Go modules
Socket disclosed a coordinated sleeper-package campaign attributed to the GitHub org BufferZoneCorp (and RubyGems user knot-theory). Initially-clean Ruby gems and Go modules were updated to malicious versions. The Ruby side harvests env vars, SSH keys, AWS secrets, .npmrc, .netrc, GitHub CLI config, and RubyGems credentials; the Go side tampers with GitHub Actions workflows, injects fake executables, and adds SSH persistence via authorized_keys. First confirmed 2026 RubyGems + Go module supply-chain campaign.
GoRubyGems
Affected packages16 packages · 0 versions
Gogithub.com/BufferZoneCorp/config-loader
Gogithub.com/BufferZoneCorp/go-envconfig
Gogithub.com/BufferZoneCorp/go-metrics-sdk
Gogithub.com/BufferZoneCorp/go-retryablehttp
Gogithub.com/BufferZoneCorp/go-stdlib-ext
Gogithub.com/BufferZoneCorp/go-weather-sdk
Gogithub.com/BufferZoneCorp/grpc-client
Gogithub.com/BufferZoneCorp/log-core
Gogithub.com/BufferZoneCorp/net-helper
RubyGemsknot-activesupport-logger
RubyGemsknot-date-utils-rb
RubyGemsknot-devise-jwt-helper
RubyGemsknot-rack-session-store
RubyGemsknot-rails-assets-pipeline
RubyGemsknot-rspec-formatter-json
RubyGemsknot-simple-formatter
multi-2026-05-01-bufferzonecorp-rubygems-goSource advisory
CriticalCompromise30 Apr 2026
3 packages tracked
PyTorch Lightning + intercom-client + intercom-php coordinated push
Mini Shai-Hulud wave 2: coordinated April 30 release of lightning 2.6.2/2.6.3 (PyPI), intercom-client 7.0.4/7.0.5 (npm), and intercom/intercom-php 5.0.2 (Packagist) carrying the same Bun-based credential stealer used in the SAP/@cap-js wave. ~11.7MB router_runtime.js fires preinstall on npm; a .pth file fires at every Python import on PyPI. Worm propagation via stolen GitHub PATs labelled "OhNoWhatsGoingOnWithGitHub:".
npmPackagistPyPI
Affected packages3 packages · 5 versions
npmintercom-client
7.0.47.0.5
Packagistintercom/intercom-php
5.0.2
PyPIlightning
2.6.22.6.3
multi-2026-04-30-mini-shai-hulud-wave2Source advisory
HighMalicious package29 Apr 2026
10 packages tracked
DPRK "PromptMink" campaign uses AI agents to insert @validate-sdk/v2 dependency
ReversingLabs traced a DPRK Famous Chollima / UNC1069 campaign that began with @hash-validator/v2 in Sept 2025 and evolved through Feb 28, 2026 to insert @validate-sdk/v2 as the malicious dependency of benign-looking "bait" SDKs aimed at AI coding agents. One AI-authored commit pulled @solana-launchpad/sdk into a crypto trading repo. Phase 4 in March 2026 used Rust NAPI modules and 85MB Node SEA bundles to exfiltrate full source trees. 300+ malicious package versions across 60+ unique packages observed.
npmPyPI
Affected packages10 packages · 36 versions
npm@hash-validator/v2
npm@meme-sdk/trade
1.0.01.0.1
npm@pumpfun-ipfs/sdk
npm@solana-ipfs/sdk
npm@solana-launchpad/sdk
npm@solmasterv3/solana-metadata-sdk
npm@validate-ethereum-address/core
1.0.31.0.41.0.51.0.6
npm@validate-sdk/v2
1.22.111.22.121.22.131.22.141.22.151.22.161.22.171.22.181.22.191.22.201.22.211.22.221.22.231.22.241.22.251.22.261.22.271.22.281.22.291.22.301.22.31
npm@validator-sdk/pubkey
1.0.01.0.21.0.31.0.41.0.51.0.61.0.71.0.8
PyPIscraper-npm
1.0.4
multi-2026-04-29-promptmink-validate-sdkSource advisory
CriticalCompromise29 Apr 2026
4 packages tracked
SAP / @cap-js mini-Shai-Hulud campaign
Mini-Shai-Hulud-style attack against SAP-related npm packages on 2026-04-29 09:55–12:14 UTC. Preinstall setup.mjs downloads the Bun runtime, runs an obfuscated execution.js that exfils GitHub/npm tokens, AWS/Azure/GCP secrets, Kubernetes tokens, and browser passwords via the GitHub GraphQL API. Includes a Russian-locale guardrail and persistence via .claude/ and .vscode/ poisoning.
npm
Affected packages4 packages · 4 versions
npm@cap-js/db-service
2.10.1
npm@cap-js/postgres
2.2.2
npm@cap-js/sqlite
2.2.2
npmmbt
1.2.48
npm-2026-04-sap-cap-jsSource advisory
CriticalCompromise24 Apr 2026
2 packages tracked
elementary-data PyPI package backdoored via GitHub Actions injection
An attacker (account realtungtungtungsahur) exploited a script-injection flaw in the elementary-data release workflow via PR comment, then used the workflow token to forge release commit b1e4b1f3 and trigger the legitimate publishing pipeline. PyPI elementary-data 0.23.3 and ghcr.io/elementary-data/elementary 0.23.3 + latest shipped a ~245 KB obfuscated payload in elementary.pth. Clean 0.23.4 published April 25.
DockerPyPI
Affected packages2 packages · 3 versions
PyPIelementary-data
0.23.3
Dockerghcr.io/elementary-data/elementary
0.23.3latest
pypi-2026-04-24-elementary-dataSource advisory
HighMalicious package23 Apr 2026
1 package tracked
js-logger-pack npm worm uses Hugging Face datasets as malware CDN + exfil store
JFrog found 27 malicious versions of js-logger-pack (1.1.0-1.1.27) abusing the Hugging Face repo Lordplay/system-releases to fetch cross-platform binaries (Windows/macOS x64/macOS ARM64/Linux) and upload stolen data to private datasets. The malware adds keylogging, clipboard capture, browser-session and Telegram Desktop theft, plus an operator command channel.
npm
Affected packages1 package · 28 versions
npmjs-logger-pack
1.1.01.1.11.1.21.1.31.1.41.1.51.1.61.1.71.1.81.1.91.1.101.1.111.1.121.1.131.1.141.1.151.1.161.1.171.1.181.1.191.1.201.1.211.1.221.1.231.1.241.1.251.1.261.1.27
npm-2026-04-23-js-logger-pack-huggingfaceSource advisory
CriticalCompromise22 Apr 2026
1 package tracked
Xinference PyPI package backdoored on import
JFrog flagged three consecutive xinference releases (2.6.0-2.6.2) on PyPI carrying a TeamPCP-style payload embedded in xinference/__init__.py that fires on import. The malware base64-encodes a stage-1 wrapper containing the comment # hacked by teampcp, then spawns a detached subprocess that bundles harvested data into love.tar.gz and POSTs it with a custom X-QT-SR: 14 header. TeamPCP publicly denied involvement, claiming a copycat. 600,000+ downloads of malicious wheels.
PyPI
Affected packages1 package · 3 versions
PyPIxinference
2.6.02.6.12.6.2
pypi-2026-04-22-xinference-teampcpSource advisory
CriticalCompromise22 Apr 2026
3 packages tracked
Checkmarx KICS Docker images + Open VSX extensions compromised (TeamPCP)
Docker and Socket jointly disclosed a multi-stage compromise of Checkmarx KICS Docker images and Checkmarx VS Code / Open VSX extensions. Trojanised extensions silently install an MCP addon executed via Bun, while the Docker images include a modified KICS binary that encrypts scan output and exfiltrates it. TeamPCP claimed responsibility.
DockerOpen VSX
Affected packages3 packages · 11 versions
Open VSXcheckmarx.ast-results
2.63.02.66.0
Open VSXcheckmarx.cx-dev-assist
1.17.01.19.0
Dockercheckmarx/kics
2.1.202.1.20-debian2.1.212.1.21-debianalpinedebianlatest
multi-2026-04-22-checkmarx-kics-vsx-dockerSource advisory
CriticalCompromise22 Apr 2026
1 package tracked
@bitwarden/cli 2026.4.0 hijacked via Checkmarx GitHub Actions breach
TeamPCP pushed a malicious @bitwarden/cli@2026.4.0 to npm between 17:57 and 19:30 ET on April 22, exploiting Bitwarden's use of the breached checkmarx/ast-github-action. bw_setup.js fetched Bun 1.3.13 from GitHub and ran a payload that targeted SSH, Git, npm, AWS/GCP/Azure, GitHub Actions secrets, and AI/MCP configs (.claude.json, .kiro/settings/mcp.json), exfiltrating via audit.checkmarx.cx. Live ~90 minutes; Bitwarden confirmed no end-user vault data was accessed.
npm
Affected packages1 package · 1 version
npm@bitwarden/cli
2026.4.0
npm-2026-04-22-bitwarden-cli-teampcpSource advisory
CriticalCompromise21 Apr 2026
6 packages tracked
CanisterSprawl: self-propagating npm worm hits pgserve + Namastex packages
Socket and StepSecurity disclosed CanisterSprawl, a self-propagating npm worm that compromised at least 16 versions across Namastex Labs and related publishers from 21 April 2026. The postinstall hook harvests 38 env vars and filesystem secrets, encrypts via AES-256-CBC + RSA-4096, and exfiltrates to an Internet Computer Protocol canister. Stolen npm tokens are reused to publish further malicious versions. Tradecraft matches the earlier TeamPCP CanisterWorm campaign.
npm
Affected packages6 packages · 16 versions
npm@automagik/genie
4.260421.334.260421.344.260421.354.260421.364.260421.374.260421.384.260421.39
npm@fairwords/loopback-connector-es
1.4.31.4.4
npm@fairwords/websocket
1.0.381.0.39
npm@openwebconcept/design-tokens
1.0.3
npm@openwebconcept/theme-owc
1.0.3
npmpgserve
1.1.111.1.121.1.13
npm-2026-04-21-canisterworm-pgserve-namastexSource advisory
HighTyposquat15 Apr 2026
36 packages tracked
36 fake Strapi plugins on npm deploy persistent implants
Four sock-puppet npm accounts (umarbek1233, kekylf12, tikeqemif26, umar_bektembiev1) uploaded 36 packages over a ~13-hour window impersonating Strapi CMS plugins. Payload evolution moved through 8 variants targeting Redis RCE with cron injection, Docker container escapes, PostgreSQL exploitation on hosts named prod-strapi, Python reverse shells on port 4444, and SSH-key backdoors.
npm
Affected packages36 packages · 0 versions
npmstrapi-plugin-advanced-uuid
npmstrapi-plugin-api
npmstrapi-plugin-blurhash
npmstrapi-plugin-cms-tools
npmstrapi-plugin-config
npmstrapi-plugin-content-sync
npmstrapi-plugin-core
npmstrapi-plugin-cron
npmstrapi-plugin-database
npmstrapi-plugin-debug-tools
npmstrapi-plugin-events
npmstrapi-plugin-finseven
npmstrapi-plugin-form
npmstrapi-plugin-guardarian-ext
npmstrapi-plugin-health
npmstrapi-plugin-health-check
npmstrapi-plugin-hextest
npmstrapi-plugin-hooks
npmstrapi-plugin-locale
npmstrapi-plugin-logger
npmstrapi-plugin-monitor
npmstrapi-plugin-nordica
npmstrapi-plugin-nordica-api
npmstrapi-plugin-nordica-cms
npmstrapi-plugin-nordica-deep
npmstrapi-plugin-nordica-lite
npmstrapi-plugin-nordica-recon
npmstrapi-plugin-nordica-stage
npmstrapi-plugin-nordica-sync
npmstrapi-plugin-nordica-tools
npmstrapi-plugin-nordica-vhost
npmstrapi-plugin-notify
npmstrapi-plugin-seed
npmstrapi-plugin-server
npmstrapi-plugin-sitemap-gen
npmstrapi-plugin-sync
npm-2026-04-15-strapi-pluginsSource advisory
HighMalicious package15 Apr 2026
1 package tracked
@kindo/selfbot npm package delivers XWorm RAT via 5-stage Astral Warfare chain
JFrog identified @kindo/selfbot (XRAY-964727), a video-game-themed Discord selfbot npm package. A 5-stage chain (JS downloader → 250KB obfuscated batch → PowerShell process injection → XOR-decoded shellcode → XWormClient .NET RAT) installed itself against explorer.exe with AMSI/ETW evasion.
npm
Affected packages1 package · 5 versions
npm@kindo/selfbot
1.0.01.0.11.0.21.0.31.0.4
npm-2026-04-15-kindo-selfbot-xwormSource advisory
HighTyposquat14 Apr 2026
5 packages tracked
5 NuGet packages impersonate Chinese .NET UI libraries with infostealer payload
NuGet publisher bmrxntfj shipped five packages on 14 April 2026 within ~13 seconds, grafting a .NET Reactor-protected infostealer onto decompiled legitimate libraries. Across 219 total versions they accumulated ~65k downloads, targeting browser creds, crypto wallets, and SSH keys on Windows .NET dev hosts.
NuGet
Affected packages5 packages · 5 versions
NuGetIR.DantUI
2.1.55
NuGetIR.Infrastructure.Core
2.1.55
NuGetIR.Infrastructure.DataService.Core
2.1.55
NuGetIR.iplus32
2.1.55
NuGetIR.OscarUI
2.1.55
nuget-2026-04-14-chinese-ui-impersonatorsSource advisory
HighTyposquat7 Apr 2026
14 packages tracked
DPRK Contagious Interview campaign expands across 5 ecosystems
Socket disclosed a fresh wave of DPRK Contagious Interview / FAMOUS CHOLLIMA packages spanning npm, PyPI, Go modules, crates.io, and Packagist. They impersonate logging / license developer tooling and act as staged loaders for credential stealers and RATs across Windows, macOS and Linux. The Windows variant deploys a keylogger and AnyDesk for hands-on access.
crates.ioGonpmPackagistPyPI
Affected packages14 packages · 6 versions
PyPIapachelicense
0.1a1
npmdebug-fmt
npmdebug-glitz
npmdev-log-core
1.0.5
PyPIfluxhttp
Gogithub.com/aokisasakidev/mit-license-pkg
1.0.2
Gogithub.com/golangorg/formstash
1.0.5
Packagistgolangorg/logkit
PyPIlicense-utils-kit
0.1rc3
npmlogger-base
npmlogkitx
crates.iologtrace
1.0.2
PyPIlogutilkit
npmpino-debugger
multi-2026-04-07-contagious-interview-5-ecosystemsSource advisory
MediumMalicious package5 Apr 2026
1 package tracked
hermes-px PyPI "privacy" AI proxy steals prompts via stolen university infra
JFrog detected hermes-px, masquerading as a privacy-preserving AI proxy. It routed requests through Tor to a stolen Tunisian university API and bundled a 246K-character Anthropic Claude system prompt rebranded as "AXIOM-1". It simultaneously exfiltrated all prompts/responses unencrypted to a Supabase endpoint, bypassing Tor and exposing user IPs.
PyPI
Affected packages1 package · 0 versions
PyPIhermes-px
pypi-2026-04-05-hermes-pxSource advisory
CriticalCompromise31 Mar 2026
4 packages tracked
Axios npm compromise (North Korea-nexus RAT)
Lead-maintainer account compromised via social engineering. Two malicious axios releases pulled in plain-crypto-js, whose postinstall fetched a cross-platform RAT from sfrclak[.]com:8000. Microsoft + Google attribute to Sapphire Sleet / UNC1069 (North Korea-nexus). Live for ~3 hours; ~100M weekly downloads in scope.
npm
Affected packages4 packages · 8 versions
npm@qqbrowser/openclaw-qbot
0.0.130
npm@shadanai/openclaw
2026.3.28-22026.3.28-32026.3.31-12026.3.31-2
npmaxios
1.14.10.30.4
npmplain-crypto-js
4.2.1
npm-2026-03-axiosSource advisory
HighTyposquat31 Mar 2026
1 package tracked
LofyGang returns with undicy-http typosquat delivering dual-payload RAT
JFrog tied undicy-http@2.0.0 (a typosquat of undici) to the Brazil-based LofyGang group last seen in 2022. The package pairs a Node.js WebSocket RAT with a native chromelevator.exe binary that uses direct syscalls for process hollowing, then injects browser credential stealers targeting 50+ browsers and 90+ wallet extensions.
npm
Affected packages1 package · 1 version
npmundicy-http
2.0.0
npm-2026-03-31-undicy-lofygangSource advisory
CriticalCompromise27 Mar 2026
1 package tracked
Telnyx Python SDK hides credential stealer in WAV-file steganography
TeamPCP published malicious telnyx 4.87.1 and 4.87.2 to PyPI on 27 March 2026 (~670k monthly downloads). Trojanised _client.py downloads steganographic payloads disguised as .wav files over plaintext HTTP, extracts the credential stealer, and persists. Windows variant drops msbuild.exe to the Startup folder; Linux variant uses a user-level systemd service. AES-256-CBC + RSA-4096 envelope for exfil.
PyPI
Affected packages1 package · 2 versions
PyPItelnyx
4.87.14.87.2
pypi-2026-03-27-telnyx-teampcpSource advisory
CriticalCompromise24 Mar 2026
1 package tracked
LiteLLM PyPI backdoored as TeamPCP cascade reaches Python
TeamPCP used credentials harvested from the Trivy compromise to publish trojanised litellm 1.82.7 and 1.82.8 to PyPI on 24 March 2026 (~10:39 and 10:52 UTC). Malicious wheels drop a litellm_init.pth file in site-packages, executing a credential stealer at every Python interpreter start. PyPI quarantined the packages ~40 minutes after publication. Attackers later claimed ~500,000 credentials from this single compromise. LiteLLM averages ~3M daily downloads and ships in ~36% of cloud environments.
PyPI
Affected packages1 package · 2 versions
PyPIlitellm
1.82.71.82.8
pypi-2026-03-24-litellm-teampcpSource advisory
HighTyposquat24 Mar 2026
5 packages tracked
5 npm typosquats target Solana + Ethereum dev libraries, exfil keys to Telegram
npm publisher galedonovan shipped five typosquats of legitimate crypto libraries. Each transparently intercepts private keys passed through normal API calls (Base58 decoding for Solana, Wallet construction for Ethereum), exfiltrates them to a hardcoded Telegram bot, then returns the expected result so functionality looks normal.
npm
Affected packages5 packages · 4 versions
npmbase_xd
npmbase-x-64
0.0.6
npmbs58-basic
6.0.1
npmethersproject-wallet
5.8.1
npmraydium-bs58
1.9.7
npm-2026-03-24-solana-ethereum-typosquatsSource advisory
HighCompromise23 Mar 2026
2 packages tracked
Checkmarx KICS GitHub Actions trojanised by TeamPCP
Between 12:58 and 16:50 UTC on 23 March 2026, TeamPCP hijacked 35 tags in the Checkmarx ast-github-action and kics-github-action repos to push a credential stealer, leveraging tokens stolen from the Trivy compromise. CI/CD pipelines using either Action during the window executed the stealer before the legitimate scan.
GitHub Actions
Affected packages2 packages · 0 versions
GitHub Actionscheckmarx/ast-github-action
GitHub Actionscheckmarx/kics-github-action
github-actions-2026-03-23-checkmarx-kicsSource advisory
CriticalCompromise20 Mar 2026
29 packages tracked
CanisterWorm: @emilgroup and @teale.io npm publisher compromise (29+ packages)
An attacker compromised the @emilgroup and @teale.io npm namespaces, replacing 58 package-versions with a Python backdoor that polls an Internet Computer Protocol (ICP) canister for follow-on payloads. The implant persists via user-level systemd and includes worm-style republishing via deploy.js. Wiz later linked the tradecraft to TeamPCP; Socket declined firm attribution.
npm
Affected packages29 packages · 58 versions
npm@emilgroup/account-sdk
1.41.11.41.2
npm@emilgroup/account-sdk-node
1.40.11.40.2
npm@emilgroup/accounting-sdk-node
1.26.11.26.2
npm@emilgroup/api-documentation
1.19.11.19.2
npm@emilgroup/auth-sdk
1.25.11.25.2
npm@emilgroup/auth-sdk-node
1.21.11.21.2
npm@emilgroup/billing-sdk
1.56.11.56.2
npm@emilgroup/billing-sdk-node
1.57.11.57.2
npm@emilgroup/claim-sdk
1.41.11.41.2
npm@emilgroup/claim-sdk-node
1.39.11.39.2
npm@emilgroup/customer-sdk
1.54.11.54.2
npm@emilgroup/customer-sdk-node
1.55.11.55.2
npm@emilgroup/document-sdk
1.45.11.45.2
npm@emilgroup/document-sdk-node
1.43.11.43.2
npm@emilgroup/gdv-sdk
2.6.12.6.2
npm@emilgroup/insurance-sdk
1.97.11.97.2
npm@emilgroup/insurance-sdk-node
1.95.11.95.2
npm@emilgroup/notification-sdk-node
1.4.11.4.2
npm@emilgroup/partner-portal-sdk-node
1.1.11.1.2
npm@emilgroup/partner-sdk-node
1.19.11.19.2
npm@emilgroup/payment-sdk
1.15.11.15.2
npm@emilgroup/payment-sdk-node
1.23.11.23.2
npm@emilgroup/process-manager-sdk-node
1.13.11.13.2
npm@emilgroup/public-api-sdk
1.33.11.33.2
npm@emilgroup/public-api-sdk-node
1.35.11.35.2
npm@emilgroup/tenant-sdk
1.34.11.34.2
npm@emilgroup/tenant-sdk-node
1.33.11.33.2
npm@emilgroup/translation-sdk-node
1.1.11.1.2
npm@teale.io/eslint-config
1.8.91.8.10
npm-2026-03-20-canisterworm-emilgroup-tealeSource advisory
CriticalCompromise19 Mar 2026
3 packages tracked
Trivy GitHub Action + Docker images compromised - start of TeamPCP cascade
Aqua Security's Trivy scanner was compromised on 19 March 2026 by the threat actor self-identifying as TeamPCP. The attacker force-pushed 76 of 77 tags in aquasecurity/trivy-action (only @0.35.0 survived) and all 7 tags in aquasecurity/setup-trivy to malicious commits, then published trojanised Trivy binary 0.69.4 + Docker images 0.69.5/0.69.6/latest. A stolen Argon-DevOps-Mgt service-account token seeded the downstream LiteLLM, Telnyx, Bitwarden CLI, and Checkmarx compromises.
DockerGitHub Actions
Affected packages3 packages · 4 versions
Dockeraquasec/trivy
0.69.40.69.50.69.6latest
GitHub Actionsaquasecurity/setup-trivy
GitHub Actionsaquasecurity/trivy-action
github-actions-2026-03-19-trivy-teampcp-cascadeSource advisory
HighCompromise18 Mar 2026
2 packages tracked
GlassWorm sleeper extensions activate on Open VSX
Roughly 40 malicious VS Code extensions surfaced March 14-18, 2026: 20+ new extensions, ~20 previously dormant sleepers activated, plus 11 extensionPack droppers. The campaign hosts VSIX payloads on attacker-controlled GitHub releases to evade registry takedowns. Publishing accounts: laura6909, martina0094, chiara585, francesca898.
Open VSX
Affected packages2 packages · 3 versions
Open VSX96-studio.json-formatter
0.0.20.0.4
Open VSXlauracode.wrap-selected-code
0.0.2
openvsx-2026-03-18-glassworm-sleeperSource advisory
HighCompromise13 Mar 2026
Feed-only · no version-specific detection
GlassWorm: 72+ Open VSX extensions weaponised via transitive loaders
Socket linked at least 72 additional malicious Open VSX extensions to the GlassWorm campaign. Newer variants use extensionPack / extensionDependencies fields to transitively pull GlassWorm loaders rather than embedding malware directly. Obfuscation rotated to RC4 + base64 with keys delivered in HTTP response headers.
openvsx-2026-03-13-glassworm-transitiveSource advisory
MediumMalicious package12 Mar 2026
6 packages tracked
6 malicious Packagist OphimCMS themes ship trojanised jQuery and FUNNULL redirects
Six Composer packages from the ophimcms organisation posed as OphimCMS themes containing trojanised jQuery. The payload exfiltrates URLs, injects ads, and redirects mobile traffic via OFAC-sanctioned FUNNULL infrastructure. Combined ~2,750 installs.
Packagist
Affected packages6 packages · 6 versions
Packagistophimcms/theme-dy
1.0.0
Packagistophimcms/theme-legend
1.0.0
Packagistophimcms/theme-motchill
1.0.0
Packagistophimcms/theme-mtyy
1.0.0
Packagistophimcms/theme-pcc
1.2.2
Packagistophimcms/theme-rrdyw
1.0.0
packagist-2026-03-12-ophimcms-themesSource advisory
MediumTyposquat28 Feb 2026
5 packages tracked
5 malicious Rust crates pose as time utilities to exfiltrate .env files
Five crates published between late February and early March 2026 posed as local time utilities while exfiltrating .env files via curl to a lookalike domain timeapis.io (typosquatting timeapi.io). All packages were 0.1.0 and yanked within hours. Account aliases: gehakax777, dictorudin.
crates.io
Affected packages5 packages · 5 versions
crates.iochrono_anchor
0.1.0
crates.iodnp3times
0.1.0
crates.iotime_calibrator
0.1.0
crates.iotime_calibrators
0.1.0
crates.iotime-sync
0.1.0
crates-2026-02-28-time-utility-typosquatsSource advisory
HighTyposquat27 Feb 2026
26 packages tracked
StegaBin: 26 npm typosquats use Pastebin steganography to deliver Contagious Interview RAT
Socket disclosed 26 typosquatted npm packages tied to North Korea's Contagious Interview / FAMOUS CHOLLIMA cluster. The loader decodes steganographically-encoded Pastebin URLs to resolve C2 hosted across 31 Vercel deployments, then retrieves a 9-module infostealer and RAT toolkit.
npm
Affected packages26 packages · 26 versions
npmargonist
0.41.0
npmbcryptance
6.5.2
npmbee-quarl
2.1.2
npmbubble-core
6.26.2
npmcorstoken
2.14.7
npmdaytonjs
1.11.20
npmether-lint
5.9.4
npmexpressjs-lint
5.3.2
npmfastify-lint
5.8.0
npmformmiderable
3.5.7
npmhapi-lint
19.1.2
npmiosysredis
5.13.2
npmjslint-config
10.22.2
npmjsnwebapptoken
8.40.2
npmkafkajs-lint
2.21.3
npmloadash-lint
4.17.24
npmmqttoken
5.40.2
npmprism-lint
7.4.2
npmpromanage
6.0.21
npmsequelization
6.40.2
npmtyporiem
0.4.17
npmundicy-lint
7.23.1
npmuuindex
13.1.0
npmvitetest-lint
4.1.21
npmwindowston
3.19.2
npmzoddle
4.4.2
npm-2026-02-27-stegabin-contagious-interviewSource advisory
CriticalTyposquat20 Feb 2026
19 packages tracked
SANDWORM_MODE: 19 npm typosquats with self-spreading worm + AI toolchain poisoning
Socket disclosed a Shai-Hulud-style self-propagating worm spread across at least 19 typosquatted npm packages from accounts official334 and javaorg. It harvests CI secrets and crypto keys, propagates via stolen npm/GitHub tokens, and injects prompt-injection logic into MCP servers used by AI coding assistants.
npm
Affected packages19 packages · 19 versions
npmclaud-code
0.2.1
npmcloude
0.3.0
npmcloude-code
0.2.1
npmcrypto-locale
1.0.0
npmcrypto-reader-info
1.0.0
npmdetect-cache
1.0.0
npmformat-defaults
1.0.0
npmhardhta
1.0.0
npmlocale-loader-pro
1.0.0
npmnaniod
1.0.0
npmnode-native-bridge
1.0.0
npmopencraw
2026.2.17
npmparse-compat
1.0.0
npmrimarf
1.0.0
npmscan-store
1.0.0
npmsecp256
1.0.0
npmsuport-color
1.0.1
npmveim
2.46.2
npmyarsg
18.0.1
npm-2026-02-20-sandworm-modeSource advisory
HighCompromise17 Feb 2026
1 package tracked
cline npm package hijacked via "Clinejection" prompt-injection chain
An attacker abused an unsanitised AI issue-triage GitHub Actions workflow on the Cline repo to poison the release pipeline cache and steal the npm publish token. They published cline@2.3.0 with a postinstall script that globally installed the second-stage package openclaw. ~90k weekly downloads; live for ~8 hours before Cline rotated the token and shipped 2.4.0.
npm
Affected packages1 package · 1 version
npmcline
2.3.0
npm-2026-02-17-cline-clinejectionSource advisory
HighMalicious package11 Feb 2026
32 packages tracked
Lazarus "graphalgo" fake-recruiter campaign (npm + PyPI + Go)
ReversingLabs attributed an ongoing fake-recruiter campaign (active since May 2025, reported Feb 2026) to North Korea's Lazarus Group (overlapping Jade Sleet / UNC4899). Crypto, JavaScript, and Python developers are lured via LinkedIn/Reddit/Facebook into interview "coding tasks" that pull a token-protected RAT loader from npm and PyPI. ~192 malicious packages attributed in total; bigmathutils alone passed 10,000 downloads.
GonpmPyPI
Affected packages32 packages · 44 versions
npmbigmathex
npmbigmathix
npmbigmathlib
npmbigmathutils
1.0.01.1.0
npmbignumberx
npmbignumex
npmbignumx
PyPIbigpyx
Gogocommunity.io/orderedbtree
Gogogets.dev/btreex
npmgraphalgo
2.2.5-pre2.2.62.2.72.2.82.2.92.2.102.2.11
PyPIgraphalgo-py
3.5.1rc0.dev03.5.23.5.33.5.53.5.6
npmgraphchain
PyPIgraphdict
PyPIgraphex
3.5.73.5.83.5.93.5.10
npmgraphflowx
npmgraphflux
npmgraphhub
npmgraphkitx
npmgraphlibcore
2.2.62.2.72.2.82.2.92.2.102.2.11
PyPIgraphlibx
npmgraphnet
npmgraphnetworkx
2.1.62.1.72.1.82.1.92.1.102.1.11
PyPIgraphnode
npmgraphorbit
npmgraphorithm
2.2.62.2.72.2.82.2.9
npmgraphrix
npmgraphstruct
2.2.62.2.72.2.8
PyPIgraphsync
npmnetstruct
2.1.62.1.8
npmterminal-kleur
npmterminalcolor256
2.0.22.0.32.1.02.2.02.2.6
multi-2026-02-11-lazarus-graphalgoSource advisory
MediumTyposquat5 Feb 2026
3 packages tracked
Polymarket SDK typosquats on crates.io
Three crates impersonating polymarket-client-sdk were published between 5 and 19 February 2026 and exfiltrated local credential files. The malicious crates were yanked and publisher accounts disabled. Combined downloads stayed under 100, but targeting was high-value (Polymarket / Web3 developers).
crates.io
Affected packages3 packages · 0 versions
crates.iopolymarket-client-sdks
crates.iopolymarket-clients-sdk
crates.iopolymarkets-client-sdk
crates-2026-02-05-polymarket-typosquatsSource advisory
CriticalCompromise27 Jan 2026
2 packages tracked
dYdX v4-client npm + PyPI compromise (wallet stealer + RAT)
Maintainer credentials for the dYdX decentralized exchange were compromised; malicious versions of the official v4 client were pushed to npm and PyPI in a coordinated release. The npm payload exfiltrates wallet seed phrases through a malicious createRegistry() function. The PyPI variant additionally drops a Python RAT executed on import.
npmPyPI
Affected packages2 packages · 6 versions
npm@dydxprotocol/v4-client-js
1.0.311.15.21.22.13.4.1
PyPIdydx-v4-client
1.1.5.post11.1.5post1
multi-2026-01-27-dydx-compromiseSource advisory
HighTyposquat17 Jan 2026
1 package tracked
sympy-dev PyPI typosquat delivering XMRig cryptominer
A PyPI typosquat of SymPy was published by the account "Nanit" across four versions on Jan 17, 2026. It fetches a remote JSON config, downloads an ELF, and executes it from a memfd to evade disk-based detection. The payload is XMRig mining Monero on infected developer workstations.
PyPI
Affected packages1 package · 4 versions
PyPIsympy-dev
1.2.31.2.41.2.51.2.6
pypi-2026-01-17-sympy-dev-minerSource advisory
CriticalCompromise15 Sept 2025
197 packages tracked
Original Shai-Hulud npm worm
First successful self-propagating worm in the npm ecosystem. Downstream of the August 2025 s1ngularity/Nx GitHub-token theft. The postinstall hook ran TruffleHog to harvest secrets, opened public GitHub repos named "Shai-Hulud" to publish them, force-converted private repos to public with a "-migration" suffix, and used stolen npm tokens to publish malicious versions of any package the maintainer could access. ~180 unique packages compromised across 300+ versions, including CrowdStrike's own scope (@crowdstrike/*).
npm
Affected packages197 packages · 509 versions
npm@ahmedhfarag/ngx-perfect-scrollbar
20.0.20
npm@ahmedhfarag/ngx-virtual-scroller
4.0.4
npm@art-ws/common
2.0.28
npm@art-ws/config-eslint
2.0.42.0.5
npm@art-ws/config-ts
2.0.72.0.8
npm@art-ws/db-context
2.0.24
npm@art-ws/di
2.0.282.0.32
npm@art-ws/di-node
2.0.13
npm@art-ws/eslint
1.0.51.0.6
npm@art-ws/fastify-http-server
2.0.242.0.27
npm@art-ws/http-server
2.0.212.0.25
npm@art-ws/openapi
0.1.90.1.12
npm@art-ws/package-base
1.0.51.0.6
npm@art-ws/prettier
1.0.51.0.6
npm@art-ws/slf
2.0.152.0.22
npm@art-ws/ssl-info
1.0.91.0.10
npm@art-ws/web-app
1.0.31.0.4
npm@basic-ui-components-stc/basic-ui-components
1.0.5
npm@crowdstrike/commitlint
8.1.18.1.2
npm@crowdstrike/falcon-shoelace
0.4.10.4.2
npm@crowdstrike/foundry-js
0.19.10.19.2
npm@crowdstrike/glide-core
0.34.20.34.3
npm@crowdstrike/logscale-dashboard
1.205.11.205.2
npm@crowdstrike/logscale-file-editor
1.205.11.205.2
npm@crowdstrike/logscale-parser-edit
1.205.11.205.2
npm@crowdstrike/logscale-search
1.205.11.205.2
npm@crowdstrike/tailwind-toucan-base
5.0.15.0.2
npm@ctrl/deluge
7.2.17.2.2
npm@ctrl/golang-template
1.4.21.4.3
npm@ctrl/magnet-link
4.0.34.0.4
npm@ctrl/ngx-codemirror
7.0.17.0.2
npm@ctrl/ngx-csv
6.0.16.0.2
npm@ctrl/ngx-emoji-mart
9.2.19.2.2
npm@ctrl/ngx-rightclick
4.0.14.0.2
npm@ctrl/qbittorrent
9.7.19.7.2
npm@ctrl/react-adsense
2.0.12.0.2
npm@ctrl/shared-torrent
6.3.16.3.2
npm@ctrl/tinycolor
4.1.14.1.2
npm@ctrl/torrent-file
4.1.14.1.2
npm@ctrl/transmission
7.3.1
npm@ctrl/ts-base32
4.0.14.0.2
npm@hestjs/core
0.2.1
npm@hestjs/cqrs
0.1.6
npm@hestjs/demo
0.1.2
npm@hestjs/eslint-config
0.1.2
npm@hestjs/logger
0.1.6
npm@hestjs/scalar
0.1.7
npm@hestjs/validation
0.1.6
npm@nativescript-community/arraybuffers
1.1.61.1.71.1.8
npm@nativescript-community/gesturehandler
2.0.35
npm@nativescript-community/perms
3.0.53.0.63.0.73.0.83.0.9
npm@nativescript-community/sentry
4.6.43
npm@nativescript-community/sqlite
3.5.23.5.33.5.43.5.5
npm@nativescript-community/text
1.6.91.6.101.6.111.6.121.6.13
npm@nativescript-community/typeorm
0.2.300.2.310.2.320.2.33
npm@nativescript-community/ui-collectionview
6.0.6
npm@nativescript-community/ui-document-picker
1.1.271.1.2813.0.32
npm@nativescript-community/ui-drawer
0.1.30
npm@nativescript-community/ui-image
4.5.6
npm@nativescript-community/ui-label
1.3.351.3.361.3.37
npm@nativescript-community/ui-material-bottom-navigation
7.2.727.2.737.2.747.2.75
npm@nativescript-community/ui-material-bottomsheet
7.2.72
npm@nativescript-community/ui-material-core
7.2.727.2.737.2.747.2.757.2.76
npm@nativescript-community/ui-material-core-tabs
7.2.727.2.737.2.747.2.757.2.76
npm@nativescript-community/ui-material-ripple
7.2.727.2.737.2.747.2.75
npm@nativescript-community/ui-material-tabs
7.2.727.2.737.2.747.2.75
npm@nativescript-community/ui-pager
14.1.3614.1.3714.1.38
npm@nativescript-community/ui-pulltorefresh
2.5.42.5.52.5.62.5.7
npm@nexe/config-manager
0.1.1
npm@nexe/eslint-config
0.1.1
npm@nexe/logger
0.1.3
npm@nstudio/angular
20.0.420.0.520.0.6
npm@nstudio/focus
20.0.420.0.520.0.6
npm@nstudio/nativescript-checkbox
2.0.62.0.72.0.82.0.9
npm@nstudio/nativescript-loading-indicator
5.0.15.0.25.0.35.0.4
npm@nstudio/ui-collectionview
5.1.115.1.125.1.135.1.14
npm@nstudio/web
20.0.4
npm@nstudio/web-angular
20.0.4
npm@nstudio/xplat
20.0.520.0.620.0.7
npm@nstudio/xplat-utils
20.0.520.0.620.0.7
npm@operato/board
9.0.369.0.379.0.389.0.399.0.409.0.419.0.429.0.439.0.449.0.459.0.46
npm@operato/data-grist
9.0.299.0.359.0.369.0.37
npm@operato/graphql
9.0.229.0.359.0.369.0.379.0.389.0.399.0.409.0.419.0.429.0.439.0.449.0.459.0.46
npm@operato/headroom
9.0.29.0.359.0.369.0.37
npm@operato/help
9.0.359.0.369.0.379.0.389.0.399.0.409.0.419.0.429.0.439.0.449.0.459.0.46
npm@operato/i18n
9.0.359.0.369.0.37
npm@operato/input
9.0.279.0.359.0.369.0.379.0.389.0.399.0.409.0.419.0.429.0.439.0.449.0.459.0.469.0.479.0.48
npm@operato/layout
9.0.359.0.369.0.37
npm@operato/popup
9.0.229.0.359.0.369.0.379.0.389.0.399.0.409.0.419.0.429.0.439.0.449.0.459.0.469.0.49
npm@operato/pull-to-refresh
9.0.369.0.379.0.389.0.399.0.409.0.419.0.42
npm@operato/shell
9.0.229.0.359.0.369.0.379.0.389.0.39
npm@operato/styles
9.0.29.0.359.0.369.0.37
npm@operato/utils
9.0.229.0.359.0.369.0.379.0.389.0.399.0.409.0.419.0.429.0.439.0.449.0.459.0.469.0.49
npm@teselagen/bio-parsers
0.4.290.4.30
npm@teselagen/bounce-loader
0.3.160.3.17
npm@teselagen/file-utils
0.3.210.3.22
npm@teselagen/liquibase-tools
0.4.1
npm@teselagen/ove
0.7.390.7.40
npm@teselagen/range-utils
0.3.140.3.15
npm@teselagen/react-list
0.8.190.8.20
npm@teselagen/react-table
6.10.196.10.206.10.216.10.22
npm@teselagen/sequence-utils
0.3.330.3.34
npm@teselagen/ui
0.9.90.9.10
npm@thangved/callback-window
1.1.4
npm@things-factory/attachment-base
9.0.429.0.439.0.449.0.459.0.469.0.479.0.489.0.499.0.509.0.519.0.529.0.539.0.549.0.55
npm@things-factory/auth-base
9.0.429.0.439.0.449.0.45
npm@things-factory/email-base
9.0.429.0.439.0.449.0.459.0.469.0.479.0.489.0.499.0.509.0.519.0.529.0.539.0.549.0.559.0.569.0.579.0.589.0.59
npm@things-factory/env
9.0.429.0.439.0.449.0.45
npm@things-factory/integration-base
9.0.429.0.439.0.449.0.45
npm@things-factory/integration-marketplace
9.0.429.0.439.0.449.0.45
npm@things-factory/shell
9.0.429.0.439.0.449.0.45
npm@tnf-dev/api
1.0.8
npm@tnf-dev/core
1.0.8
npm@tnf-dev/js
1.0.8
npm@tnf-dev/mui
1.0.8
npm@tnf-dev/react
1.0.8
npm@ui-ux-gang/devextreme-angular-rpk
24.1.7
npm@yoobic/design-system
6.5.17
npm@yoobic/jpeg-camera-es6
1.0.13
npm@yoobic/yobi
8.7.53
npmairchief
0.3.1
npmairpilot
0.8.8
npmangulartics2
14.1.114.1.2
npmbrowser-webdriver-downloader
3.0.8
npmcapacitor-notificationhandler
0.0.20.0.3
npmcapacitor-plugin-healthapp
0.0.20.0.3
npmcapacitor-plugin-ihealth
1.1.81.1.9
npmcapacitor-plugin-vonage
1.0.21.0.3
npmcapacitorandroidpermissions
0.0.40.0.5
npmconfig-cordova
0.8.5
npmcordova-plugin-voxeet2
1.0.24
npmcordova-voxeet
1.0.32
npmcreate-hest-app
0.1.9
npmdb-evo
1.1.41.1.5
npmdevextreme-angular-rpk
21.2.8
npmdevextreme-rpk
21.2.8
npmember-browser-services
5.0.25.0.3
npmember-headless-form
1.1.21.1.3
npmember-headless-form-yup
1.0.1
npmember-headless-table
2.1.52.1.6
npmember-url-hash-polyfill
1.0.121.0.13
npmember-velcro
2.2.12.2.2
npmencounter-playground
0.0.20.0.30.0.40.0.5
npmeslint-config-crowdstrike
11.0.211.0.3
npmeslint-config-crowdstrike-node
4.0.34.0.4
npmeslint-config-teselagen
6.1.76.1.8
npmglobalize-rpk
1.7.4
npmgraphql-sequelize-teselagen
5.3.85.3.9
npmhtml-to-base64-image
1.0.2
npmjson-rules-engine-simplified
0.2.10.2.30.2.4
npmjumpgate
0.0.2
npmkoa2-swagger-ui
5.11.15.11.2
npmmcfly-semantic-release
1.3.1
npmmcp-knowledge-base
0.0.2
npmmcp-knowledge-graph
1.2.1
npmmobioffice-cli
1.0.3
npmmonorepo-next
13.0.113.0.2
npmmstate-angular
0.4.4
npmmstate-cli
0.4.7
npmmstate-dev-react
1.1.1
npmmstate-react
1.6.5
npmng2-file-upload
7.0.27.0.38.0.18.0.28.0.39.0.1
npmngx-bootstrap
18.1.419.0.319.0.420.0.320.0.420.0.520.0.6
npmngx-color
10.0.110.0.2
npmngx-toastr
19.0.119.0.2
npmngx-trend
8.0.1
npmngx-ws
1.1.51.1.6
npmoradm-to-gql
35.0.1435.0.15
npmoradm-to-sqlz
1.1.21.1.4
npmove-auto-annotate
0.0.90.0.10
npmpm2-gelf-json
1.0.41.0.5
npmprintjs-rpk
1.6.1
npmreact-complaint-image
0.0.320.0.340.0.35
npmreact-jsonschema-form-conditionals
0.3.180.3.200.3.21
npmreact-jsonschema-form-extras
1.0.31.0.4
npmreact-jsonschema-rxnt-extras
0.4.80.4.9
npmremark-preset-lint-crowdstrike
4.0.14.0.2
npmrxnt-authentication
0.0.30.0.40.0.50.0.6
npmrxnt-healthchecks-nestjs
1.0.21.0.31.0.41.0.5
npmrxnt-kue
1.0.41.0.51.0.61.0.7
npmswc-plugin-component-annotate
1.9.11.9.2
npmtbssnch
1.0.2
npmteselagen-interval-tree
1.1.2
npmtg-client-query-builder
2.14.42.14.5
npmtg-redbird
1.3.11.3.2
npmtg-seq-gen
1.0.91.0.10
npmthangved-react-grid
1.0.3
npmts-gaussian
3.0.53.0.6
npmts-imports
1.0.11.0.2
npmtvi-cli
0.1.5
npmve-bamreader
0.2.60.2.7
npmve-editor
1.0.11.0.2
npmverror-extra
6.0.1
npmvoip-callkit
1.0.21.0.3
npmwdio-web-reporter
0.1.3
npmyargs-help-output
5.0.3
npmyoo-styles
6.0.326
npm-2025-09-shai-hulud-originalSource advisory

Sources cited per card. We only list package versions named by the original advisory; we don't infer compromises. Missing something? Send it in.