The npm package cutekitten-test@1.0.1 contains malicious code that executes during installation. Its preinstall script sends the machine's hostname, OS username, and local time to a Discord webhook, potentially leaking sensitive environment information. The package has no functional code beyond this data exfiltration behavior.
The npm package calculator-preinstall-hook-demo version 1.1.2 contains malicious code that executes a preinstall script during installation. This script sends the machine's hostname and OS username to a Discord webhook, potentially leaking sensitive environment information. The package was published by the npm account bigdevin55 and is pulled in as a dependency by calculator-preinstall-chain-demo@1.1.2.
The npm package calculator-preinstall-chain-demo versions 1.1.1 and 1.1.2 is identified as malicious. It does not have its own install script but depends on calculator-preinstall-hook-demo@1.1.2, which runs a preinstall script that sends the machine's hostname and OS username to a Discord webhook. This behavior is considered malicious due to unauthorized data exfiltration.
The pystr-codec package on PyPI contains malicious code that executes on every Python startup. It runs obfuscated JavaScript via a Bun engine to exfiltrate credentials to a public GitHub repository, establish persistence, accept remote commands, spread using stolen credentials, and perform destructive actions if credentials become invalid. This malware is linked to the Miasma-family worm.
The npm package claims-ac1 version 1.0.0 is a malicious package that collects system information during installation without user consent. It uses dependencies fetched from GitHub tarballs that execute a preinstall script to send details such as Node.js version, home directory, working directory, platform, and architecture to a remote collector host. The package has no legitimate functionality and allows the attacker to change the collector host and code at any time without a new npm release. Machines with this package installed should be considered fully compromised.
The npm package @mamans2973/maman versions 1.0.0 through 1.0.3 contains malicious code that can fully compromise any computer on which it is installed or running. The compromise may allow an attacker to gain full control over the system, necessitating immediate rotation of all secrets and keys from a different, uncompromised machine. Removal of the package alone may not eliminate all malicious software introduced by it.
The doctreelstm package on PyPI contains malicious code that exfiltrates basic host information such as IP address and username upon installation or import. The package overrides the install command in setup.py to execute this malicious behavior. It serves no legitimate purpose beyond this data exfiltration.
The ms-client-portal npm package is a malicious dependency-confusion package containing no functional code but executing scripts that send sensitive environment information to an external server during installation. It was published with versions 1.0.0 and 10.0.0 on 2026-10-31. Installation of this package results in exposure of user name, hostname, and working directory to a remote attacker. Systems with this package installed should be considered fully compromised, and all secrets and keys must be rotated immediately from a different machine.
The multi-convert package on PyPI contains malicious code in specific versions of its dependency 'is-it-ai'. Version 0.1.4 of the dependency includes a trigger that fingerprints the environment and contacts a remote server to download and execute a remote executable. Other versions serve as cover to hide the malicious activity. This campaign is identified as having clear malicious intent, including downloading and executing remote code.
The md-to-slides package on PyPI contains malicious code hidden in a specific dependency (is-it-ai) in version 0.1.1. This malicious code fingerprints the environment and contacts a remote server to download and execute a remote executable if instructed. Other versions appear to be decoys to conceal the malicious version. This campaign is clearly malicious and targets users by embedding harmful actions within a library dependency.
The skills-analyzer package on PyPI contains malicious code in its dependency is-it-ai version 0.1.1. This malicious code fingerprints the environment and contacts a remote server, which may respond with a URL to download and execute further malicious payloads. Other versions of the package exist to obscure the presence of the malicious version. The campaign is identified as a targeted attack with clear malicious intent, including downloading and executing remote executables.
The is-it-ai package on PyPI contains malicious code in specific versions (0.1.0, 0.1.1, 0.1.3) that, when triggered, fingerprints the environment and contacts a remote server. If the server responds with a URL, the package downloads and executes a remote executable. This behavior is part of a targeted attack campaign involving intentional inclusion of malicious code in a dependency, designed to hide malicious actions behind legitimate package versions.
The local-commander-agent npm package version 0.3.52 contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected machine should be rotated immediately from a different, trusted computer. Removing the package alone does not guarantee removal of all malicious software, as the attacker may have gained full control of the system.
The npm package vas-tops2-reportingui contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected machine should be rotated immediately from a different, uncompromised device. Removing the package alone may not fully eliminate the malicious presence, as the attacker may have established persistent control.
The npm package vas-tops2-core-clients-search contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removal of the package alone may not fully eradicate the malicious presence, as the attacker may have established persistent control.
The npm package vas-tops2-core-client-cleanup-ui contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected computer should be rotated immediately from a different, uncompromised device. Removing the package alone does not guarantee removal of all malicious software introduced by it.
The npm package @tops2/digital-assistant-ui contains malicious code that compromises any computer on which it is installed or running. The presence of this package indicates a full system compromise, and all secrets and keys stored on the affected machine should be rotated immediately from a different, secure computer. Removing the package alone does not guarantee removal of all malicious software introduced by it.
The npm package vas-tops2-digital-assistant-ui contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected machine should be rotated immediately from a different, clean computer. Removal of the package alone may not fully eradicate the malicious presence, as the attacker may have established persistent control over the system.
The npm package vas-tops2-core-property-search contains malicious code that fully compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected machine should be rotated immediately from a different, uncompromised device. Removal of the package alone does not guarantee elimination of all malicious software introduced by this package.
The npm package vas-tops2-bidmatrix-ui contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected computer should be rotated immediately from a separate, uncompromised machine. Removing the package alone may not eliminate all malicious software introduced by its installation.