The npm package @utilitycraft/tailwindcss-motion-atelier contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, uncompromised machine. Removal of the package alone does not guarantee elimination of all malicious software introduced by it.
The atlassian-wallboard-plugin1 npm package contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected machine should be rotated immediately from a different, uncompromised device. Removal of the package alone may not fully eliminate the malicious presence, as the attacker may have established persistent control.
The persona-ai-sdk package version 1.0.0 on npm contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected computer should be rotated immediately from a different, uncompromised machine. Removing the package does not guarantee full remediation, as the attacker may have established persistent control over the system.
The RubyGems package 'intercom-react-native-example-e2e-tests' version 1.0.1 has been identified as malicious by the OpenSSF Package Analysis project. The package is flagged because it communicates with a domain associated with malicious activity. No further technical details or exploit information are provided.
The RubyGems package 'shoaib-unity' version 1.0.1 has been identified as malicious by the OpenSSF Package Analysis project. The package is flagged because it communicates with a domain associated with malicious activity. No CVSS score or detailed technical exploit information is provided.
The npm package 'contracts-upgradeable' is a malicious package impersonating '@openzeppelin/contracts-upgradeable'. It contains no functional code but executes a preinstall script that sends the machine's hostname, OS username, and local time to a Discord webhook, potentially leaking sensitive environment information. The package was published on 2026-11-02 by the npm account 'bigdevin55', which also published another package with the same malicious behavior. Another account 'cutekitten05' used the same webhook in packages published the day before.
The npm package '@an1mshnpmb9c84920/pipeprobe-obf-m19n5' version 1.0.0 contains malicious code that executes during its 'prepare' lifecycle script. This script runs 'node index.js', which dynamically reconstructs a hostname and performs a DNS lookup to an external domain controlled by the attacker. This behavior confirms code execution on the installer's machine and is concealed by assembling the hostname from string fragments at runtime, evading static detection. The package offers no legitimate functionality related to this DNS callback, indicating malicious intent.
The npm package @axo_cuy/baileys version 1.0.0 declares a hard dependency on an off-registry GitHub repository (github:tenka-san/libsignal-node) without version pinning or integrity checks. This allows the third-party repository owner to change the code at any time, potentially introducing malicious code during installation. The dependency bypasses npm registry review and dependency pinning, increasing the risk of supply chain compromise.
The @bil-rgb/baileys npm package versions 1.0.0 and 1.0.1 declare a dependency on a libsignal library hosted in a personal GitHub repository without specifying a commit SHA, tag, or integrity check. This allows the dependency to resolve to the latest code at the repository's HEAD during installation, enabling arbitrary code execution controlled by the repository owner at install time. The package itself is a fork of Baileys, but the critical risk arises from the uncontrolled external dependency resolution.
The npm package 'dsh-screenshot-native' version 1.0.0 contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, uncompromised device. Removal of the package alone does not guarantee elimination of all malicious software introduced by the package.
The npm package wallet-adapter-base (version 1.0.0) is a malicious package that contains no functional code but executes a preinstall script during installation. This script sends the machine's hostname, OS username, and local time to a Discord webhook, potentially leaking sensitive environment information. The package was published by the npm user cutekitten05, who has published other packages with similar malicious scripts.
The npm package bigbob22-test@1.0.0 contains malicious code in its preinstall script that collects and sends the machine's hostname, OS username, and local time to a Discord webhook. The package itself has no functional code and an empty README. The same malicious script was used by the npm account cutekitten05 in multiple other packages published on the same date.
The 'atlassian-wallboard-plugin' npm package version 10.0.0 has been identified as malicious by the OpenSSF Package Analysis project. It is flagged because it communicates with a domain linked to malicious activity and executes commands associated with malicious behavior. There is no CVSS score or detailed impact description available.
The RubyGems package 'macs-shoaibs-pro17' version 90002.1 has been identified as malicious by the OpenSSF Package Analysis project. The package is considered malicious due to its communication with a domain linked to malicious activity. No CVSS score or detailed technical impact information is provided.
The npm package @axon-web/icons version 99.0.0 is a malicious package that performs unauthorized data exfiltration upon loading. It constructs an identifier from the host's OS hostname and environment username, then leaks this information via DNS requests to an attacker-controlled domain. Additionally, it scans environment variables for names containing sensitive keywords related to credentials and outputs these key names, indicating reconnaissance activity. The package contains no legitimate icon content and appears to be a dependency confusion or typosquatting attack.
The hs-framework npm package declares a dependency on a tarball hosted at an external HTTPS URL rather than a versioned registry package. This tarball can be changed at any time by whoever controls the storage bucket, allowing arbitrary code execution during npm install via lifecycle scripts. The package itself is a minimal stub, with the dependency URL being the main attack surface. This setup enables supply chain compromise through dynamic, unpinned, and unverified code fetched during installation.
The privacypass-py package on PyPI masquerades as a Privacy Pass client library but contains no cryptographic functionality. Instead, it performs data exfiltration by collecting sensitive environment variables, system information, and process details, then sending this data to a hardcoded external IP address over unencrypted HTTP. This malicious behavior occurs both during package installation and on module import, bypassing typical build isolation protections.
The npm package @goparrot-dashboard/app version 0.0.2 contains malicious code that executes automatically during installation. It collects host identifiers such as hostname, current user, and working directory, then sends this information to an attacker-controlled callback server via DNS and HTTPS requests. This data exfiltration occurs without user interaction, effectively leaking identifying information about the installer's machine.
The npm package axelarjs-sdk@1.0.1 is a malicious package that contains no functional code but executes a preinstall script during installation. This script sends the machine's hostname, OS username, and local time to a Discord webhook, potentially leaking sensitive environment information to an attacker-controlled endpoint.
The npm package 'sol-wallet-adapter' versions 1.0.0, 1.0.1, and 1.0.7 are malicious. These versions contain no functional code but execute a preinstall script that sends the machine's hostname, OS username, and local time to a Discord webhook, potentially leaking sensitive environment information. The package was published by suspicious accounts and communicates with a domain linked to malicious activity.