The npm package 'vibes-plug' version 4.5.0 contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, secure computer. Removing the package alone does not guarantee removal of all malicious software, as the attacker may have gained full control over the system.
The npm package dsh-moss-console version 3.3.0 contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a separate, trusted machine. Removal of the package alone does not guarantee elimination of all malicious software introduced by it.
The luna-baileys npm package contains malicious code that can fully compromise any computer on which it is installed or running. This compromise may allow an attacker to gain full control over the affected system. Immediate rotation of all secrets and keys stored on the compromised computer is strongly advised. Simply removing the package does not guarantee removal of all malicious software introduced by it.
The npm package 'paidwithtab' version 3.0.0 contains malicious code that fully compromises any computer on which it is installed or running. This compromise includes potential unauthorized access to all secrets and keys stored on the affected system. Immediate removal of the package is advised, but full remediation may require rotating all secrets and keys from a different, uncompromised computer due to the risk of persistent malicious software.
The npm package @atedone/workspace-context contains malicious code that executes upon import. It writes shell integration files to the user's home configuration directory and spawns a detached interactive zsh shell with a persistent hook that executes a script on every prompt. The package fetches remote content over unencrypted HTTP from a hardcoded IP address, injecting attacker-controlled data into the user's shell prompt, enabling remote code execution via prompt expansion. The code uses obfuscation techniques to hide its use of child process spawning and network fetching APIs. This behavior is unrelated to the package's stated purpose and represents a severe security risk.
The scdn-jquery npm package version 0.1.6 contains obfuscated malicious code in the file libs/18.2.0.js. This code loads a remote script that inserts an invisible iframe to deliver iOS-specific exploit code based on the visitor's device version. The malicious loader executes in the browser when the script is served, masquerading as jQuery. There is no evidence of malicious code execution during npm installation.
The npm package @corexium/xbails version 0.0.7 imports a third-party package '@bellaxchuu/libsignal-node' using a mutable '@latest' tag without version pinning or integrity checks. This allows the maintainer of the aliased fork to execute arbitrary code at module load time, including within cryptographic session handling.
The @ifasn/mmd-doc-mcp npm package contains malicious code that probes cloud instance metadata service endpoints for AWS, GCP, Azure, and Alibaba clouds. It collects HTTP status codes from these endpoints to identify the cloud provider and presence of attached IAM/RAM roles, then sends this data in plaintext to a hardcoded external server. The package falsely advertises itself as a markdown table-of-contents server, but performs unauthorized reconnaissance of cloud credentials metadata services.
The npm package @ifasn/md-doc-mcp contains malicious code that, upon import or startup, probes cloud instance metadata services from AWS, GCP, Azure, and Alibaba Cloud. It exfiltrates the collected metadata via plaintext HTTP requests to a hardcoded external IP address and its nip.io alias. This behavior is unrelated to the package's declared markdown toolkit functionality and is disguised by misleading source code comments. The exfiltration of cloud environment details enables third-party reconnaissance for potential follow-on attacks targeting cloud credentials or instances.
The npm package @ifasn/mmdd-doc-mcp, which claims to be a Markdown TOC/stats/table MCP server, contains malicious code that, upon startup, performs unauthorized access to Alibaba Cloud ECS instance metadata service (IMDSv2). It retrieves temporary security credentials and sensitive host files such as /etc/shadow, /etc/passwd, SSH private keys, environment files, and Kubernetes service account tokens, writing this data to local files. This behavior is unrelated to the package's stated functionality and constitutes unauthorized credential and sensitive data harvesting.
The @ifasn/mdd-doc-mcp npm package contains malicious code that, upon loading, attempts to steal Alibaba Cloud ECS instance role credentials by querying the instance metadata service and extracting security tokens. It disguises this activity as benign diagnostics. Additionally, it downloads and executes a dependency from an untrusted HTTP source without integrity checks, enabling arbitrary code execution during installation. This behavior is unexpected given the package's declared purpose as a Markdown documentation tool.
The npm package service-roles-registry version 99.0.2 contains malicious code that executes a preinstall script. This script collects host identifiers such as hostname, user info, current working directory, and package metadata, then sends this data to a hardcoded external endpoint without user consent. The package appears to be a dependency confusion lure designed to override an internal package of the same name.
A vulnerability in DBHub's MySQL and MariaDB connectors allows bypass of read-only SQL validation due to incorrect handling of single-line comments. The DBHub SQL parser treats any "--" as a comment start regardless of the following character, whereas MySQL and MariaDB require whitespace or control characters after "--" to start a comment. This mismatch enables execution of arbitrary write and DDL statements in read-only mode, such as DROP TABLE. The issue affects DBHub versions prior to 0.22.6 and is fixed in 0.22.6.
A vulnerability in @sd-jwt/decode version 0.19.0 and earlier allows tampered disclosures in SD-JWT presentations to be silently dropped instead of causing rejection. This leads to a reduced claim set being accepted without error, enabling a malicious holder or an on-path attacker to omit claims without detection. The issue violates RFC 9901 requirements for disclosure validation and can cause relying parties to make incorrect authorization decisions if they default to allow when claims are missing.
The npm package 'bfvkjmeikpwhqxc' contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, clean computer. Removal of the package alone does not guarantee elimination of all malicious software introduced by its installation.
The 'internal-renderers' npm package contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removal of the package alone may not fully eradicate the malicious presence, as the attacker may have established persistent control.
The npm package 'pandafortunerush' contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, uncompromised machine. Removal of the package alone may not eliminate all malicious software introduced by its installation, as full control of the computer may have been granted to an attacker.
The npm package @levvicode/eslint-config contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected computer should be rotated immediately from a different, clean machine. Removing the package alone does not guarantee removal of all malicious software introduced by it.
The npm package 'justinofficial' contains malicious code that fully compromises any computer on which it is installed or running. The compromise includes potential unauthorized access to all secrets and keys stored on the affected system. Removal of the package does not guarantee elimination of all malicious software introduced by it.
The npm package @maulenv/baileys contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted computer. Removing the package alone does not guarantee removal of all malicious software introduced by it.