The npm package 'imgdecode' versions 1.0.0 through 1.0.3 contains malicious code disguised as a native image buffer decoder. It includes a packed and obfuscated Windows PE binary that executes native code immediately upon module load on Windows x64 hosts. The package's JavaScript interface does not match its advertised API, indicating it is a facade for delivering malicious payloads. Any system with this package installed should be considered fully compromised, and all secrets and keys on that system should be rotated from a separate, clean device.
@liauto/darwin-x64 version 0.1.1-b3 is a malicious npm package containing harmful code. Installation of this package can lead to full system compromise. It is recommended to remove the package and rotate all secrets and keys from a separate, uncompromised device.
The npm package @pkgship/frpc-darwin-amd64 version 0.71.1 contains malicious code. This package ships a prebuilt binary for the darwin-amd64 platform. Although no install-time scripts, network callbacks, credential reads, or obfuscated code were identified in the shipped contents, the package is considered fully compromising to any system where it is installed or running. Immediate removal of the package and rotation of all secrets and keys from a different, uncompromised computer is strongly advised.
The opencode-skills-collection npm package contains multiple utility scripts that perform network operations such as curl, ping, GET, and POST requests. These scripts do not automatically execute during installation and do not contain hardcoded attacker command and control servers or environment scraping. However, the package is flagged as malicious by GHSA malware sources, indicating that any system with this package installed should be considered fully compromised, and all secrets and keys should be rotated. Removal of the package alone may not eliminate all malicious software.
The npm package 'agentic-awesome-skills' contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected computer should be rotated immediately from a different, uncompromised machine. Removing the package alone does not guarantee removal of all malicious software introduced by it.
The toml-node library version prior to 5.0.1 contains a prototype pollution vulnerability due to ambiguous key path encoding and insufficient ownership checks during TOML parsing. This allows a specially crafted TOML document to write properties onto Object.prototype, affecting all objects in the process. The vulnerability arises from a combination of ambiguous path rendering, guard clearing by table-array headers, and unchecked descent into objects such as Date instances. This can lead to widespread pollution of object prototypes, potentially enabling privilege escalation or denial of service.
A memory-related vulnerability in an upstream library used by Next.js for Image Optimization can lead to unauthenticated remote code execution (RCE) when processing SVG files on glibc-based Linux systems. This affects Next.js versions from 10.0.0 up to but excluding 15.5.28, and from 16.0.0 up to but excluding 16.4.1. The vulnerability is critical and can be mitigated by upgrading the 'sharp' library to version 0.35.5 or later, which is included in patched Next.js releases.
CVE-2026-94482 is a high-severity vulnerability in the Next.js React framework affecting versions from 13.0.0 up to but not including 15.5.28 and from 16.0.0 up to but not including 16.4.1. Crafted requests targeting App Router applications with at least one Server Action can cause excessive CPU consumption, leading to blocking of further request processing in the same process. Applications using the Pages Router or App Router without Server Actions are not affected. The issue is fixed in versions 15.5.28 and 16.4.1.
The net-codec-testmetest npm package version 1.0.1 contains malicious code that abuses the node-gyp build process to execute an obfuscated payload during installation. This payload decrypts and decompresses an embedded binary, which is then executed under the Bun runtime. The package serves as a dropper with no legitimate functionality, designed to stealthily execute arbitrary code on the host system.
The npm package 'log-rotate-testmetest' version 1.0.1 contains malicious code embedded in its binding.gyp file that triggers execution of an obfuscated payload during installation. This payload uses multiple layers of obfuscation including ROT cipher, AES-128-GCM decryption, and brotli decompression, ultimately executing attacker-controlled code via the Bun runtime. The package declares Bun as a runtime dependency to route execution through an alternate runtime rather than Node.js. There is no legitimate native build rationale for this behavior, indicating deliberate malicious intent.
The npm package 'formatting-subtitles' version 1.0.2 contains malicious code in its preinstall script. The script masquerades as JavaScript but is executed by the shell, which runs attacker-controlled commands. During installation, it fetches and executes arbitrary code from a mutable GitHub Gist and sends installation metadata to an attacker-controlled webhook. This behavior allows remote code execution and data leakage during npm install.
The npm package @conduitops/logview-archive version 1.0.1 contains malicious code that executes during installation. Its postinstall script runs install.js, which installs another package from a concealed, non-public HTTP registry controlled by an attacker. This allows arbitrary code execution on the installer's system at install time. The package deliberately obfuscates the malicious registry URL using base64 and XOR encoding to hide the attacker's endpoint.
The npm package simplewave version 0.0.2 contains malicious code that executes a postinstall script during installation. This script performs an HTTP GET request to a subdomain of oast.fun, embedding the installer's hostname in the request, thereby exfiltrating the host identifier to a third-party server without user consent. The package's main file is a trivial stub with no legitimate functionality, indicating the primary purpose is data exfiltration.
The npm package @worrisome/aaaa contains malicious code that impersonates a Cloudflare Turnstile security check page. When loaded in a browser via an npm CDN, it fetches and decrypts a destination URL and redirects the browser to a runtime-chosen URL. The package does not execute code during installation or require/import in Node.js, so the threat targets end-user browsers loading the HTML through CDNs, not developers or build systems. Computers with this package installed or running should be considered fully compromised, and all stored secrets and keys should be rotated immediately.
CVE-2026-114139 is a critical vulnerability in the Sentry-Javascript SDK's webpack integration for @sentry/nextjs. Versions from 9.36.0 up to but not including 9.47.2, 10.0.0-alpha.0 up to 10.75.2, and 11.0.0-alpha.0 up to 11.0.0-rc.1 are affected. The issue arises when the configured tunnelRoute causes the webpack integration to skip application middleware for request paths under that route, allowing unauthenticated requests to reach protected routes if they collide with the tunnel path or a root dynamic segment. This can lead to unauthorized access when middleware is the sole authorization mechanism. The vulnerability is fixed in versions 9.47.2, 10.75.2, and 11.0.0-rc.1.
The npm packages pixel-map-testmetest versions 0.0.1 and 0.0.2 contain malicious code that executes at install time via a node-gyp binding.gyp script. This script runs an obfuscated loader that decrypts and decompresses an encrypted payload, then executes it using the Bun runtime. The package masquerades as a benign placeholder but actually delivers a credential stealer payload. The malicious behavior is hidden through multi-layer obfuscation and use of an alternate runtime, making static analysis difficult.
The npm package test-brotli-testmetest version 1.0.0 contains malicious code that executes during installation. Its install script triggers a node-gyp rebuild that runs an obfuscated JavaScript loader (index.js). This loader decrypts and executes a Brotli-compressed payload, effectively running attacker-controlled code at install time without user visibility. The package was published by the npm account testnewtestme2 on 2026-10-21.
The npm package test-brotli2-testmetest version 1.0.0 contains malicious code that executes during installation. Its install script triggers node-gyp to run an obfuscated JavaScript loader (index.js) that decrypts and executes a Brotli-compressed payload. This payload acts as a credential stealer. The package was published by the npm account testnewtestme2 on 2026-10-21.
CVE-2026-114129 is an inefficient algorithmic complexity vulnerability in the FlexAssembler component of the stream-json package. The issue arises because the FlexAssembler uses a string or RegExp filter that triggers a costly path join operation on every container start, with no limit on JSON nesting depth. This results in quadratic CPU consumption relative to the nesting depth, allowing an attacker to stall the Node.js event loop with a crafted deeply nested JSON input. The vulnerability causes an availability impact by blocking the event loop, but does not affect confidentiality or integrity. The issue is fixed in stream-json version 3.7.0.
log-sink-testmetest version 1.0.1 is a malicious npm package that executes a concealed credential stealer during installation. It abuses the node-gyp build process by embedding a binding.gyp file that triggers execution of an encrypted payload without any native source code. The payload is heavily obfuscated and decrypts an AES-128-GCM encrypted blob, which is then executed either directly in Node.js or via the Bun runtime to evade detection. The package was published on 2026-10-21 by the npm account 'testnewtestme2'. Version 1.0.0 is clean and unaffected.