The npm package @ifasn/ms-doc-mcp, advertised as a Markdown toolkit, contains malicious code that probes the Alibaba Cloud instance metadata service to harvest temporary IAM credentials and other sensitive instance metadata. This harvested data is output to stdout and a local file, potentially exposing credentials beyond the local host. The behavior is unrelated to the package's declared functionality and poses a risk of credential leakage.
The w002yardprobe RubyGem contains malicious code that executes during YARD documentation generation. It runs a script that collects host identifiers and exfiltrates them to a third-party URL. The script also modifies files in the build environment and leaves sentinel files indicating its activity. The malicious behavior triggers when documentation is generated, affecting developer workstations, CI runners, or documentation hosting services that process the gem's docs.
The brida-frida-hooks RubyGem version 1.0.1 contains malicious code that executes automatically during installation. This code collects sensitive system information including user identity, directory paths, hostname, and contents of critical system files, then exfiltrates this data over an encrypted connection to a hardcoded external server. This behavior is unrelated to the gem's stated purpose and occurs without user consent.
The yzx-npm package versions 1.0.0 and 1.0.1 contain malicious code that can fully compromise any computer on which it is installed or running. This compromise includes potential unauthorized access to all secrets and keys stored on the affected system. Removal of the package alone may not eliminate all malicious components, as the attacker may have established persistent control.
The npm package 'mocha-ui-themes' contains malicious code that can fully compromise any computer on which it is installed or running. The compromise may allow an attacker to gain full control over the system, potentially exposing all stored secrets and keys. Immediate removal of the package is advised, but due to the severity of the compromise, simply removing the package may not eliminate all malicious software. Secrets and keys should be rotated from a different, trusted machine.
The tailwind-form-core npm package contains malicious code that compromises any computer on which it is installed or running. The presence of this package indicates a full system compromise, requiring immediate rotation of all secrets and keys from a different, uncompromised machine. Simply removing the package does not guarantee removal of all malicious software introduced by it.
The npm package react-contact-forms contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected computer should be rotated immediately from a different, trusted machine. Removing the package alone does not guarantee removal of all malicious software introduced by it.
The tailwind-input-kit npm package contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, uncompromised machine. Removing the package alone does not guarantee removal of all malicious software introduced by it.
The npm package 'jito-bundle-tip-7' contains malicious code that fully compromises any computer on which it is installed or running. The compromise includes potential unauthorized access to all secrets and keys stored on the affected system. Immediate removal of the package is recommended, but due to the extent of the compromise, complete remediation may require rotating all secrets and keys from a separate, uncompromised machine.
The jito-bundle-solana npm package contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected computer should be rotated immediately from a different, trusted machine. Removal of the package alone does not guarantee elimination of all malicious software introduced by it.
The npm package 'jito-bundle-jito-tip7' contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, secure computer. Removal of the package alone does not guarantee elimination of all malicious software introduced by its installation.
The npm package @touchkey0111/jito-bundle contains malicious code that compromises any computer on which it is installed or running. Installation of this package can lead to full system compromise, including unauthorized access to secrets and keys stored on the affected machine. Removal of the package alone does not guarantee elimination of all malicious software introduced by it, and immediate rotation of all secrets and keys from a different, uncompromised computer is strongly advised.
The jito-bundle-jitotip npm package contains malicious code that can fully compromise any computer on which it is installed or running. This compromise includes potential unauthorized access to all secrets and keys stored on the affected system. Immediate removal of the package is recommended, but due to the extent of the compromise, full remediation may require rotating all secrets and keys from a separate, uncompromised device.
The npm package 'arbkit' contains malicious code that fully compromises any computer on which it is installed or running. This compromise includes potential unauthorized access to all secrets and keys stored on the affected system. Immediate removal of the package is recommended, but due to the extent of the compromise, complete remediation cannot be guaranteed by removal alone.
The PyPI package 'ln9qw38745g' versions 0.1.0 and 0.1.1 contain embedded malicious code. This package overrides the installation process to execute malware, specifically a remote access trojan (RAT), during setup. It is linked to a prior package that switched from benign to malicious executables after a few releases.
The PyPI package 'protecteda' version 0.1.0 contains embedded malicious code that acts as an infostealer when executed as a module. This malware is part of a campaign identified as 2026-11-protecteda with clear malicious intent to steal information.
The npm package 'txnforge' contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removal of the package alone does not guarantee full remediation, as the attacker may have established persistent control over the system.
The npm package 'print-hello-world-test-temp' contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected computer should be rotated immediately from a separate, uncompromised device. Removing the package alone does not guarantee removal of all malicious software introduced by it.
The zyto package on PyPI versions 0.2.0 through 0.2.3 contains malicious code that executes during installation by overriding the install command in setup.py. This behavior is intended to prepare for embedding a Remote Access Trojan (RAT), indicating clear malicious intent. The package has been flagged by some antivirus vendors as malicious and is part of a broader campaign identified as 2026-11-filipt.
The hijuko-pilara package on PyPI is identified as malicious software that uses fake HTTP-downloaded dependencies to track downloads. It serves no legitimate purpose beyond this tracking activity and is associated with dependency confusion tactics. The package is considered low-harm and likely related to pentesting or research activities.