Malware feed · 4956 entries

Live malware feed

Every package we can confirm as malicious lands here — those our own scanners caught, and those we cross-referenced from the OSV public malicious-packages database. This feed is what our clnpm gate, HostAtlas, and BlockForge products query in real time.

4,956

total confirmed

4956 of 4956 entries

npm lumen-pages-community @9.9.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @dropout-ai/runtime @0.2.12

npm moidevy @1.0.0

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm kelly-sizing @0.1.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

pypi scrambleeer @0.1.1

npm @postman-cse/okta-aio-linux-arm64 @0.11.3

pypi boto4 @1.0.2

behavior.typosquat.near-popular-name — Package name 'boto4' is one edit from popular package 'boto3' — possible typosqua…

npm tailwind-animate-css-plugin @4.0.3

npm @postman-cse/okta-aio-linux-arm64 @0.11.2

npm @postman-cse/okta-aio-linux-arm64 @0.11.1

npm @postman-cse/okta-aio-linux-arm64 @0.11.0

npm @next-fonts/font @1.0.1

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm @postman-cse/okta-aio-linux-arm64 @0.10.9

npm @postman-cse/okta-aio-linux-arm64 @0.10.8

npm @postman-cse/okta-aio-linux-arm64 @0.10.7

npm @postman-cse/okta-aio-linux-arm64 @0.10.6

npm @postman-cse/okta-aio-linux-arm64 @0.10.5

npm @postman-cse/okta-aio-linux-arm64 @0.10.4

npm @gfe/lx-watcher @1.5.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (install) executes a bundled script that itse…

npm @postman-cse/okta-aio-linux-arm64 @0.10.3

npm @postman-cse/okta-aio-linux-arm64 @0.10.2

npm @postman-cse/okta-aio-linux-arm64 @0.10.1

npm @postman-cse/okta-aio-linux-arm64 @0.10.0

npm @postman-cse/okta-aio-linux-arm64 @0.9.1

npm mc-reg @1.0.5

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm mc-reg @1.0.2

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm lakk-analytics @9.9.0

npm create-react-app-text @1.0.0

npm create-react-app-ux @1.0.0

npm create-react-app-ui @1.0.0

pypi reqcrypts @0.1.3

behavior.pystatic.decode-and-exec — Source decodes a payload (base64/hex/zlib) and exec/eval's it in the same file — dro…

crates aronenao @0.3.19

crates arone @0.1.2

crates arone @0.1.3

crates aovine @0.1.0

crates arone @0.1.6

behavior.ruststatic.process-command — Source spawns an external process via Command::new — notable inside a build script

crates aovine @0.1.4

behavior.ruststatic.process-command — Source spawns an external process via Command::new — notable inside a build script

crates proc-macro1 @1.0.106

behavior.ruststatic.process-command — Source spawns an external process via Command::new — notable inside a build script…

pypi reqcrypts @0.1.1

behavior.pystatic.decode-and-exec — Source decodes a payload (base64/hex/zlib) and exec/eval's it in the same file — dro…

pypi reqcrypts @0.1.2

behavior.pystatic.decode-and-exec — Source decodes a payload (base64/hex/zlib) and exec/eval's it in the same file — dro…

npm chai-as-soul @2.3.6

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-r…

crates internment @0.8.7

crates append-only-vec @0.1.9

crates proc-macro1 @1.0.107

behavior.ruststatic.download-and-exec — Source fetches a remote resource and spawns a process — build-time dropper behav…

npm postcss-selector-minify @1.0.0

crates arrayref @0.3.10

npm @pablo_clueless/printr @0.1.6

crates aronenao @0.3.13

crates aronenao @0.3.15

crates aronenao @0.3.10

npm cig-data-patcher @3.6.0-alpha.1

npm cig-data-patcher @99.91.1

npm @pablo_clueless/printr @0.1.8

npm test-flow-entire7 @1.0.0

behavior.manifest.non-registry-dependency — Dependency 'batch-sender-script-kernel' is pulled from a non-registry source…

npm test-flow-1 @1.0.2

behavior.manifest.non-registry-dependency — Dependency 'schema-format-memo-index' is pulled from a non-registry source (…

crates aronenao @0.3.16

npm frenchworldcupwin @2.0.5

behavior.manifest.non-registry-dependency — Dependency 'client-marker-packet-cluster' is pulled from a non-registry sour…

npm test-flow-entire6 @1.0.0

behavior.manifest.non-registry-dependency — Dependency 'bundle-token-region-resolve' is pulled from a non-registry sourc…

npm @pablo_clueless/printr @0.1.7

npm vite-common-utils @1.0.0

npm vite-common-utils @1.0.2

crates aronenao @0.3.17

npm vite-common-utils @1.0.1

npm jest-test-plugin-utils @1.0.3

npm fetch-webjs-script @1.0.0

npm nms-dashboard-js @9.9.0

npm mc-reg @1.0.7

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm mc-reg @1.0.6

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

crates tinymember @0.12.2

npm base65-33x @5.0.2

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm bs58-77 @6.0.1

npm neverthrow-core @1.1.2

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm base65-77x @5.0.2

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm bs58-15 @6.0.1

npm base65-15x @5.0.2

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm twapfetch @1.1.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm upshift-finance @1.0.0

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm upshift-config @0.5.14

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm augustdigital-sdk @8.20.1

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm @ledgerhq/connect-kit @1.1.12

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm polymarket-stake-mathss @3.5.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm node_cryptography @1.0.0

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency behavior.static.obfu…

npm @polymarkets/clob-client-v2 @1.0.6

behavior.manifest.non-registry-dependency — Dependency 'inquirer' is pulled from a non-registry source (url) — can deliv…

npm @devmikets/hyperliquid-sdk @1.9.6

behavior.manifest.non-registry-dependency — Dependency 'inquirer' is pulled from a non-registry source (url) — can deliv…

npm @reducers/projects @99.9.1

behavior.manifest.non-registry-dependency — Dependency 'ltidisafe' is pulled from a non-registry source (url) — can deli…

npm @helloflex/widget-next-sdk @11.11.13

npm @helloflex/widget-next-sdk @11.11.12

npm @helloflex/widget-next-sdk @11.11.11

npm forge-gas-diff @1.0.1

npm @dgxeon13/libsignal-node @1.0.0

npm @cloudsop/hmoment @9.9.9

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm @cloudsop/hmoment @9.9.0

npm hardhat-cap @2.21.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-r…

npm sextant-cli-linux-arm64 @0.0.1-rc39

npm sextant-cli-linux-amd64 @0.0.1-rc39

npm sextant-cli-darwin-arm64 @0.0.1-rc39

npm sextant-cli-darwin-amd64 @0.0.1-rc39

npm yakuza0 @2.23.40

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm diezyclutch-baileys @8.6.78

behavior.manifest.non-registry-dependency — Dependency '@adiwajshing/eslint-config' is pulled from a non-registry source…

npm dpdgroup-css @2.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm stretchshop @0.7.5

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency

npm sw-pluginer @1.2.0

npm @activepieces/piece-google-bigquery @0.0.6

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.hidden-fe…

npm @activepieces/piece-google-forms @0.5.7

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.hidden-fe…

npm @activepieces/piece-google-contacts @0.4.8

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.hidden-fe…

npm llm-interceptor @0.4.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm alipclutch-baileys @8.6.77

behavior.manifest.non-registry-dependency — Dependency '@adiwajshing/eslint-config' is pulled from a non-registry source…

npm ezdiscordbots @1.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm big-tss @5.0.5

npm npm-dc-dev @1.1.1

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm clawtrl-wallet @1.5.1

npm bigops-statements-timeline @35.2.4

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm bigops-shared-ui @35.1.2

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm bigops-rx-post-message @35.1.5

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm bigops-products-timeline @35.8.9

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm bigops-products-savings-accounts @35.3.7

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm bigops-offers @35.6.8

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm bigops-legacy-utils @35.2.6

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm dolyame-ui-editor @35.6.6

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm dolyame-boxy-mobile-bnpl-card-panel @35.3.4

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm dolyame-boxy-desktop-bnpl-card-panel @35.6.3

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm devplatform-test-pvm-is-odd @35.3.9

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm devplatform-spa-tokens @35.3.1

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm devplatform-spa-testing @35.8.6

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm devplatform-spa-plugin-s3-module-loader @35.8.2

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm devplatform-spa-plugin-cobrowsing @35.4.4

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm devplatform-spa-devtools @35.2.6

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm devplatform-spa @35.1.4

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm devplatform-sdk @35.6.1

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm devplatform-s3-client @35.9.5

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm devplatform-rest-resources-v1 @35.2.3

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm devplatform-nx-ts @35.1.3

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm devplatform-hooks @35.2.1

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm devplatform-api-clients @35.6.8

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm delivery-ci-notify @35.2.5

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm ded-ps-ded-ps-core @35.9.1

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm cobrowsing-exception-filter @35.8.3

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm claims-is-mobile-layout @35.4.3

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm claims-auth-domain @35.5.4

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm checkout-test-component @35.9.8

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm checkout-public-tokens @35.4.9

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm checkout-desktop-total @35.6.1

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm checkout-desktop-accounts @35.7.4

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm bpm-foundation-testing @35.4.3

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm bpm-foundation-renovate @35.2.8

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm bpm-foundation-feedback @35.8.8

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm boxy-test-block-fixture @35.5.5

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm boxy-temper @35.1.5

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm boxy-service @35.6.4

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm boxy-mif-tokens @35.7.1

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm boxy-maker-sticky @35.9.7

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm boxy-maker-readiness @35.3.4

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm boxy-maker @35.4.8

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm boxy-demo-tokens @35.2.7

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm boxy-constants @35.2.7

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm bnpl-molecule-mobile-bnpl-onboarding @35.7.8

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm bnpl-blocks-mobile-bnpl-header @35.2.8

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm bnpl-blocks-mobile-bnpl-floating-button @35.3.6

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm bnpl-blocks-mobile-bnpl-faq @35.5.3

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm bnpl-blocks-mobile-bnpl-card-gallery @35.4.3

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm bnpl-blocks-independent-bnpl-origination @35.6.3

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm bnpl-blocks-independent-bnpl-main-banner @35.4.4

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm bnpl-blocks-desktop-bnpl-title @35.7.9

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm bnpl-blocks-desktop-bnpl-separator @35.5.8

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm bnpl-blocks-desktop-bnpl-info-slider @35.1.3

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm bnpl-blocks-component-story-name @35.2.7

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm bnpl-blocks-atom-desktop-bnpl-highlighted-text @35.2.3

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm bnpl-blocks-atom-container @35.7.4

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm bnpl-blocks-atom-bnpl-search-input @35.9.7

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm bnpl-blocks-atom-bnpl-product-card @35.6.4

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm bnpl-blocks-atom-bnpl-notification @35.3.8

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm bnpl-blocks-atom-bnpl-no-index-link @35.1.2

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm bigops-watchdog-angular @35.4.8

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm bigops-utils @35.4.8

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm bigops-umf-statist @35.3.1

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm bigops-timers @35.9.5

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm bigops-timeline @35.4.9

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm ynastore-baileys @1.0.21

behavior.manifest.non-registry-dependency — Dependency '@adiwajshing/eslint-config' is pulled from a non-registry source…

npm vite-vue-path-map @1.0.2

behavior.static.long-base64 — Source contains a long base64 string literal — possible embedded payload

npm @ccfly/setup-darwin-arm64 @0.1.20

npm streak-calc-math @1.0.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm de-morgan @2.1.3

behavior.manifest.non-registry-dependency — Dependency 'de-morgan' is pulled from a non-registry source (insecure-url) —…

pypi httpz-requests @1.8.0

behavior.pystatic.subprocess-dynamic — Source spawns a subprocess with shell=True or a non-literal command

pypi telebot-pro @2.3.8

behavior.pystatic.recon-beacon — Source collects host/user fingerprint and makes an outbound call — recon beacon

pypi joule-btp-extension @0.1.6

behavior.pystatic.os-system — Source runs a shell command via os.system() behavior.pystatic.recon-beacon — Source collec…

pypi joule-btp-extension @0.1.4

behavior.pystatic.os-system — Source runs a shell command via os.system() behavior.pystatic.recon-beacon — Source collec…

pypi joule-btp-extension @0.1.1

behavior.pystatic.os-system — Source runs a shell command via os.system() behavior.pystatic.recon-beacon — Source collec…

pypi joule-btp-extension @0.1.3

behavior.pystatic.os-system — Source runs a shell command via os.system() behavior.pystatic.recon-beacon — Source collec…

pypi dlmm-sdk @1.0.0

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm webpack-cdn-fetcher @1.0.1

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm uphold-sdk-javascript-extensions @99.9.10

behavior.manifest.non-registry-dependency — Dependency 'base-package' is pulled from a non-registry source (insecure-url…

npm uphold-sdk-javascript-extensions @99.9.9

pypi neutrl-core @2.0.2

behavior.pystatic.recon-beacon — Source collects host/user fingerprint and makes an outbound call — recon beacon behavio…

pypi neutrl-contracts @2.0.2

pypi plp-contract @2.0.2

pypi infogram-bot @1.8.0

behavior.pystatic.subprocess-dynamic — Source spawns a subprocess with shell=True or a non-literal command

npm tracking-service-config @90.0.0

behavior.manifest.non-registry-dependency — Dependency 'base-package' is pulled from a non-registry source (insecure-url…

npm tombac-chronos @9.9.9

npm tombac-chronos @9.9.0

pypi neutrl-core @2.0.1

behavior.pystatic.recon-beacon — Source collects host/user fingerprint and makes an outbound call — recon beacon behavio…

pypi neutrl-contracts @2.0.1

pypi plp-contract @2.0.1

npm oc-navbar-module-client @9.9.10

npm oc-navbar-module-client @9.9.0

npm oc-ccp-module-client @9.9.10

npm oc-ccp-module-client @9.9.0

npm oc-aa-module-client @9.9.10

npm oc-aa-module-client @9.9.0

npm npmamzs @1.1.2

mosaic.assembled-command — Assembled string (template, 3 fragments) reconstructs to "bash -c \"\"" — command; fed to a d…

npm npmamzs @1.1.1

mosaic.assembled-command — Assembled string (template, 3 fragments) reconstructs to "bash -c \"\"" — command; fed to a d…

npm npmamzs @1.1.0

mosaic.assembled-command — Assembled string (template, 3 fragments) reconstructs to "bash -c \"\"" — command; fed to a d…

npm npmamzs @1.1.4

mosaic.assembled-command — Assembled string (template, 3 fragments) reconstructs to "bash -c \"\"" — command; fed to a d…

npm npmamzs @1.1.3

mosaic.assembled-command — Assembled string (template, 3 fragments) reconstructs to "bash -c \"\"" — command; fed to a d…

pypi infogram-bot @1.7.0

behavior.pystatic.subprocess-dynamic — Source spawns a subprocess with shell=True or a non-literal command

pypi chaintest @0.1.0

behavior.pystatic.credential-store-access — Source references a crypto-wallet or browser credential store — stealer patt…

npm internal-lib-vulnerable @99.9.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm ftapi-core @99.9.9

npm ftapi-core @9.9.9

npm ftapi-core @9.9.0

pypi infogram-bot @1.6.0

behavior.pystatic.subprocess-dynamic — Source spawns a subprocess with shell=True or a non-literal command

pypi infogram-bot @1.6.1

behavior.pystatic.subprocess-dynamic — Source spawns a subprocess with shell=True or a non-literal command

npm dinotech-auth-utils @10.0.5

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: prei…

npm dinotech-auth-utils @10.0.0

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: prei…

npm dinotech-auth-utils @99.9.9

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: prei…

npm dinotech-auth-utils @10.1.1

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: prei…

npm dinotech-auth-utils @10.1.0

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: prei…

npm dinotech-auth-utils @10.0.8

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: prei…

npm dinotech-auth-utils @10.0.6

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: prei…

pypi infogram-bot @1.4.0

behavior.pystatic.subprocess-dynamic — Source spawns a subprocess with shell=True or a non-literal command

npm @vyzensockets/baileys @0.3.2

behavior.manifest.non-registry-dependency — Dependency '@adiwajshing/eslint-config' is pulled from a non-registry source…

pypi btcflip @0.1.0

mosaic.assembled-deobfuscated-code — Assembled Python string (decode, 1 fragments) reconstructs to "/home/{}/Monero" — d…

pypi btcflx @0.1.0

mosaic.assembled-deobfuscated-code — Assembled Python string (decode, 1 fragments) reconstructs to "/home/{}/Monero" — d…

pypi kotoraka @0.1.0

mosaic.assembled-deobfuscated-code — Assembled Python string (decode, 1 fragments) reconstructs to "/home/{}/Monero" — d…

pypi infogram-bot @1.3.0

behavior.pystatic.subprocess-dynamic — Source spawns a subprocess with shell=True or a non-literal command

pypi infogram-bot @1.0.0

behavior.pystatic.subprocess-dynamic — Source spawns a subprocess with shell=True or a non-literal command

pypi riakcs @0.0.1

pypi cubesat-upstream-driver @1.0.1

npm thepackagethatworks_ @1.0.1

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm thepackagethatworks_ @1.0.0

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm thepackagethatworks_ @1.0.2

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm saps_secplayground_npm_ai @1.0.0

behavior.static.exfil-outbound-upload — Source issues a PUT/POST request reading local files, with a sensitive source or…

npm saps_secplayground_npm_ai @1.0.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm saps_secplayground_npm_ai @1.0.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm saps_secplayground_npm_ai @1.0.3

behavior.static.exfil-outbound-upload — Source issues a PUT/POST request reading local files, with a sensitive source or…

npm saps_secplayground_npm_ai @1.0.2

behavior.static.exfil-outbound-upload — Source issues a PUT/POST request reading local files, with a sensitive source or…

npm saps_secplayground_npm_ai @1.0.1

behavior.static.exfil-outbound-upload — Source issues a PUT/POST request reading local files, with a sensitive source or…

npm rtms-manager @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm rtms-manager-dev @1.4.0

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: prei…

npm rtms-manager-dev @1.3.0

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: prei…

npm rimo-env-validator @1.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm rimo-env-validator @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm pocbitbarrontest @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

pypi atlas-internal @1.8.1

behavior.pystatic.recon-beacon — Source collects host/user fingerprint and makes an outbound call — recon beacon behavio…

npm nolimitcity @1.0.0

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: prei…

npm heft-storybook-v6-react-tutorial-storykit @1000.0.16

npm heft-storybook-v6-react-tutorial-storykit @1000.0.13

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: prei…

pypi speed-hashes @0.1.0

behavior.pystatic.decode-and-exec — Source decodes a payload (base64/hex/zlib) and exec/eval's it in the same file — dro…

npm google-logging-utils-internal @1.1.4

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm google-logging-utils-internal @9.9.9

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm google-logging-utils-internal @1.1.3

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm alphazone @1.0.0

npm alphazone @1.0.1

npm ak-mal-test-poc @1.0.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

pypi idnna @0.3.0

behavior.pystatic.decode-and-exec — Source decodes a payload (base64/hex/zlib) and exec/eval's it in the same file — dro…

pypi flasq @0.3.0

behavior.pystatic.decode-and-exec — Source decodes a payload (base64/hex/zlib) and exec/eval's it in the same file — dro…

pypi fastapii @0.3.0

behavior.pystatic.decode-and-exec — Source decodes a payload (base64/hex/zlib) and exec/eval's it in the same file — dro…

pypi pydanticc @0.3.0

behavior.pystatic.decode-and-exec — Source decodes a payload (base64/hex/zlib) and exec/eval's it in the same file — dro…

pypi pydanticc @0.1.2

behavior.pystatic.decode-and-exec — Source decodes a payload (base64/hex/zlib) and exec/eval's it in the same file — dro…

pypi fastapii @0.1.2

behavior.pystatic.decode-and-exec — Source decodes a payload (base64/hex/zlib) and exec/eval's it in the same file — dro…

pypi flasq @0.1.2

behavior.pystatic.decode-and-exec — Source decodes a payload (base64/hex/zlib) and exec/eval's it in the same file — dro…

pypi idnna @0.1.2

behavior.pystatic.decode-and-exec — Source decodes a payload (base64/hex/zlib) and exec/eval's it in the same file — dro…

pypi pydanticc @0.2.0

behavior.pystatic.decode-and-exec — Source decodes a payload (base64/hex/zlib) and exec/eval's it in the same file — dro…

pypi fastapii @0.2.0

behavior.pystatic.decode-and-exec — Source decodes a payload (base64/hex/zlib) and exec/eval's it in the same file — dro…

pypi flasq @0.2.0

behavior.pystatic.decode-and-exec — Source decodes a payload (base64/hex/zlib) and exec/eval's it in the same file — dro…

pypi idnna @0.2.0

behavior.pystatic.decode-and-exec — Source decodes a payload (base64/hex/zlib) and exec/eval's it in the same file — dro…

pypi idnna @0.1.1

behavior.pystatic.decode-and-exec — Source decodes a payload (base64/hex/zlib) and exec/eval's it in the same file — dro…

pypi flasq @0.1.1

behavior.pystatic.decode-and-exec — Source decodes a payload (base64/hex/zlib) and exec/eval's it in the same file — dro…

pypi fastapii @0.1.1

behavior.pystatic.decode-and-exec — Source decodes a payload (base64/hex/zlib) and exec/eval's it in the same file — dro…

pypi pydanticc @0.1.1

behavior.pystatic.decode-and-exec — Source decodes a payload (base64/hex/zlib) and exec/eval's it in the same file — dro…

npm @veertly/web-app @99.9.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @veertly/web-app @100.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @veertly/web-app @100.0.0

npm @telekom-wfa/auth-core @99.9.12

npm @idanefraim/my-ui-kit @0.1.0

behavior.static.suspicious-host — Source references a C2 / exfil host (Telegram bot API, ngrok, webhook.site, requestbin…

npm @idanefraim/my-ui-kit @0.1.1

pypi alphalend-layouts @4.0.2

behavior.pystatic.setup-cmdclass-override — setup.py overrides an install/build command via cmdclass — runs custom code …

pypi decapod-common @0.0.0

pypi uncrypt @0.1.2

pypi uncrypt @0.1.0

npm new-native-tools-linux-x64-gnu @3.1.43

npm sextant-cli-linux-amd64 @0.0.1-rc34

npm sextant-cli-darwin-arm64 @0.0.1-rc34

npm sextant-cli-darwin-amd64 @0.0.1-rc34

npm ach-detail @99.0.1

npm @vanexalabs-ai/vanexa-agent @1.3.51

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.decode-ex…

npm @nebula.js/cli-serve @7.1.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onescience/onecode @1.14.50-202608041828

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm sextant-cli-linux-arm64 @0.0.1-rc33

npm sextant-cli-linux-amd64 @0.0.1-rc33

npm sextant-cli-darwin-arm64 @0.0.1-rc33

npm sextant-cli-darwin-amd64 @0.0.1-rc33

npm @keyv/redis @6.0.0

npm @keyv/valkey @6.0.0

npm @keyv/sqlite @6.0.0

npm @keyv/postgres @6.0.0

npm @keyv/mysql @6.0.0

npm @keyv/mongo @6.0.0

npm @keyv/bigmap @6.0.0

npm @keyv/memcache @6.0.0

npm @keyv/etcd @6.0.0

npm @keyv/dynamo @6.0.0

npm @keyv/cloudflare-kv @6.0.0

npm @keyv/encrypt-web @6.0.0

npm @keyv/encrypt-node @6.0.0

npm @keyv/compress-lz4 @6.0.0

npm @keyv/compress-gzip @6.0.0

npm @keyv/compress-brotli @6.0.0

npm @keyv/serialize-superjson @6.0.0

npm @keyv/serialize-msgpackr @6.0.0

npm @keyv/test-suite @6.0.0

npm sextant-cli-linux-arm64 @0.0.1-rc32

npm sextant-cli-linux-amd64 @0.0.1-rc32

npm sextant-cli-darwin-arm64 @0.0.1-rc32

npm sextant-cli-darwin-amd64 @0.0.1-rc32

npm @depup/memfs @4.67.0-depup.0

npm exnesss @0.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

pypi psbt-utils @1.0.0

behavior.pystatic.exec-eval — Source calls exec()/eval() — dynamic code execution

npm unitel4 @1.0.0

npm new-native-tools-linux-x64-gnu @3.1.42

npm autotel-terminal @34.0.1

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm velabuild @1.0.3

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.local-bin…

npm sextant-cli-linux-arm64 @0.0.1-rc31

npm sextant-cli-darwin-arm64 @0.0.1-rc31

npm sextant-cli-darwin-amd64 @0.0.1-rc31

npm cors-version @1.0.4

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm aitable-workflow-server @9.9.9

behavior.static.high-entropy — File has high Shannon entropy — likely obfuscated / packed / encrypted payload

npm velabuild @1.0.2

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.long-base…

npm bgzxcuite2 @1.0.0

npm @activepieces/piece-google-bigquery @0.0.5

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.hidden-fe…

npm @activepieces/piece-google-contacts @0.4.7

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.hidden-fe…

npm @activepieces/piece-google-forms @0.5.6

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.hidden-fe…

npm @yeaft/webchat-agent @1.0.341

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

npm @activepieces/piece-base44 @0.1.7

pypi launchdarkly-ai-server-sdk @1.0.1

npm @onescience/onecode @1.14.50-202608041416

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm @astralcore/aura-wb @1.0.0

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

npm sextant-cli-linux-arm64 @0.0.1-rc30

npm sextant-cli-linux-amd64 @0.0.1-rc30

npm sextant-cli-darwin-arm64 @0.0.1-rc30

npm sextant-cli-darwin-amd64 @0.0.1-rc30

npm cvvkshuelwiu @1.0.0

npm tailwind-anime @1.1.1

npm @ai-support-agent/cli @0.4.0

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm internallib_v688 @1.0.3

npm @yeaft/webchat-agent @1.0.338

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

pypi coldcard-helpers @1.4.2

behavior.pystatic.credential-store-access — Source references a crypto-wallet or browser credential store — stealer patt…

npm @onescience/onecode @1.14.50-202608041043

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm @zzzgenesis00/etherjs @6.15.0

npm discord-vibegrations-api-natives @1.0.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm discord-vibegrations-api-helpers @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @depup/aws-sdk__credential-provider-process @3.972.66-depup.0

npm @yeaft/webchat-agent @1.0.337

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm easydsbots @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @nolimit-agent/win32-x64 @1.0.131

npm nolimit-agent @1.0.342

npm @yeaft/webchat-agent @1.0.336

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

npm sextant-cli-linux-arm64 @0.0.1-rc29

npm sextant-cli-linux-amd64 @0.0.1-rc29

npm sextant-cli-darwin-arm64 @0.0.1-rc29

npm sextant-cli-darwin-amd64 @0.0.1-rc29

npm velabuild @1.0.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.long-base…

npm stellarfixer @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @activepieces/piece-google-forms @0.5.5

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.hidden-fe…

npm @agenthub-ai/agent @0.10.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.high-entr…

npm @yeaft/webchat-agent @1.0.334

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

npm @agent-link/agent @0.1.323

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

npm simple-date-formatter-util-5 @1.0.0

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm 9remote @2.2.6

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

npm @magda/semantic-indexer-sdk @6.1.2

npm sextant-cli-linux-arm64 @0.0.1-rc19

npm sextant-cli-linux-amd64 @0.0.1-rc19

npm sextant-cli-darwin-arm64 @0.0.1-rc19

npm sextant-cli-darwin-amd64 @0.0.1-rc19

npm @onescience/onecode @1.14.50-202608031812

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm fluid-type-ui @2.0.9

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm @agenthub-ai/agent @0.9.5

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

npm noxleys @1.1.5

npm nihzvdeowx5 @1.0.0

npm vczxijghsvizu4 @1.0.0

npm @lizhao1/memorax-code-internal @0.1.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm cvbniydplwe3 @1.0.0

npm rdfxvela @6.2.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.long-base…

npm hlksdcixycvf @1.0.0

npm @onescience/onecode @1.14.50-202608031514

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm xhjckswqivb @1.0.0

npm sextant-relay-darwin-arm64 @0.0.1-rc1

npm beaver-ui-layout @34.2.3

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm beaver-ui-items-with-more @34.1.2

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm beaver-ui-icon-lock @34.8.3

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm beaver-ui-hooks @34.4.2

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm beaver-ui-header @34.6.3

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm beaver-ui-grid @34.6.4

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm beaver-ui-form-object @34.7.5

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm @decido/backend-core @4.1.19

npm beaver-ui-form-modal @34.6.3

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm accounts-loading-state @34.7.7

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm beaver-ui-form @34.9.1

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm beaver-ui-date-range-picker @34.5.9

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm accounts-final-form @34.2.5

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm @agent-link/agent @0.1.322

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

npm @decido/backend-core @4.1.12

npm @nolimit-agent/win32-x64 @1.0.129

npm sw-pluginer @1.1.0

npm sextant-cli-linux-arm64 @0.0.1-rc10

npm sextant-cli-darwin-arm64 @0.0.1-rc10

npm sextant-cli-darwin-amd64 @0.0.1-rc10

npm nolimit-agent @1.0.341

npm @nolimit-agent/win32-x64 @1.0.128

npm dc-renewals-layout2 @9999.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm sc-font-icons @9999.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm store-locator-widget @9999.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm jquery.ui.core @9999.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm jquery.ui.tabs @9999.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm sc-payment-utils @9999.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm sc-geeksquad-core @9999.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm widget-forge @9999.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm dust-helpers @9999.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm break-after @9999.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm application_base @9999.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm editor_application @9999.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm remote_session_elements @9999.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm appsignal @9999.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm beaver-ui-breadcrumbs @33.1.6

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm accounts-limits @33.6.6

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm accounts-forms @33.2.6

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm accounts-ddos-shield @33.3.8

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm accounts-constants @33.1.7

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm accounts-card-design-picker @33.5.1

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm accounts-appointment @33.2.6

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm aasp-tent-aasp-tent-core @33.4.6

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm a.poltoradnev-package-c @33.9.5

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm a.poltoradnev-package-b @33.9.1

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm sw-pluginer @1.0.1

npm @ikbal_fadilah_vanexa01/vanexa-agent @1.3.45

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.decode-ex…

npm autotel-terminal @34.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm list-issue-predecessor-dependencies-block @99.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (install) executes a bundled script that itse…

npm stellarfix @1.0.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm retracfix @1.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm sextant-cli-linux-amd64 @0.0.1-rc9

npm sextant-cli-darwin-arm64 @0.0.1-rc9

npm sextant-cli-darwin-amd64 @0.0.1-rc9

npm retracfix @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

pypi instalogin1234 @0.0.1

behavior.pystatic.os-system — Source runs a shell command via os.system()

npm rdfxvela @6.1.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.long-base…

npm sextant-cli-linux-arm64 @0.0.1-rc8

npm sextant-cli-darwin-arm64 @0.0.1-rc8

npm sextant-cli-darwin-amd64 @0.0.1-rc8

npm stellarfix @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm ezfnfix @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm sextant-cli-linux-arm64 @0.0.1-rc7

npm sextant-cli-linux-amd64 @0.0.1-rc7

npm sextant-cli-darwin-arm64 @0.0.1-rc7

npm sextant-cli-darwin-amd64 @0.0.1-rc7

npm @agenthub-ai/agent @0.9.4

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.high-entr…

npm @catamania/front-components @1.0.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm simple-date-formatter-util-2 @1.0.0

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm @decido/backend-core @4.1.1

npm simple-date-formatter-util-1 @1.0.0

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm simple-date-formatter-util @1.0.0

npm tailwind-anim @1.2.4

npm tailwind-anim @1.2.3

npm tailwind-anim @1.2.1

npm tailwind-anim @1.2.0

npm tailwind-anim @1.1.1

npm tailwindcss-anim @1.3.3

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm tailwindcss-anim @1.2.1

npm tailwindcss-hide-scrollbar @0.0.1

npm @custombots/custombot @2.0.1

behavior.scripts.sudo-prompt — Lifecycle script invokes sudo — unexpected privilege request during install (hook: postin…

npm bnpl-blocks-desktop-bnpl-documents @20.7.2

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm vvvedernikov-test-another-test @20.2.6

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm specials-mvno-client @20.9.8

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm saas-f-lego-landings @20.7.5

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-statist-web-typed-client-test.golden.retriever @20.4.4

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-statist-browser-typed-client-sme.rko.origsmartphonepaytb.common.mobile.events @20.2.5

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tramvai-module-feature-toggle @20.5.3

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm pfp-integration-mobile-heading @20.7.1

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm bpm-foundation-feature-flags @20.4.2

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm @custombots/custombot @2.0.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm sso-tramvai-lib-roles @20.8.3

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm boxy-fixture-allure @20.8.1

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-statist-browser-typed-client-mb.product.restrictions.arrestments @20.8.3

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-fb-app-frame-page-height-dippy @20.8.4

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-volna-zustate @20.9.2

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-statist-browser-typed-client-itsa.candy.selfservicesupport.frontend.events @20.1.8

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm trapp-check-logs @20.1.9

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm eventea-diag @20.5.3

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-statist-browser-typed-client-automlplatform.nlppl.classica @20.4.1

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm pfp-block-mobile-steps @20.9.3

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-component-limits @20.4.9

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm statist-browser-typed-client-eventea.projects.pfpacquiring @20.5.8

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm twork-data-services-sme-agent-company-relation @20.5.3

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-fb-fieldset-car-reference-kasko @20.7.7

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-pfp-block-desktop-tabs @20.5.3

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm statist-browser-typed-client-rubliq.platform.keycloak @20.2.5

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm sme-foundation-frame-manager @20.7.8

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-test-app-child-app @20.3.8

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm pfp-forms-mobile-sme-group-tiles @20.3.6

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm cardsmobile-collection @20.4.6

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm statist-browser-typed-client-sme.rko.tariffs.web @20.3.8

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-statist-browser-typed-client-sme.compliance.web.events @20.4.4

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-pfp-block-mobile-advert-footer @20.3.3

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm pfp-forms-sme-sitebuilder @20.2.1

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm statist-browser-typed-client-social.shorts.editor @20.7.1

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm statist-browser-typed-client-itsa.digitalinterview.events @20.8.2

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-statist-browser-typed-client-art.apps.reporegistry @20.9.7

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm pfp-forms-insurance-health @20.2.2

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm fry-page-maker-types @20.6.4

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm statist-browser-typed-client-investing.product.loginandauthorization @20.7.3

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm travel-core-typings-reducers @20.7.8

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm pfp-block-mobile-past-meetup-list @20.5.1

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-statist-browser-typed-client-sme.users.origination.web @20.6.2

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-pwa-confac-types @20.7.7

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm statist-browser-typed-client-mb.product.mclaccount @20.2.6

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-statist-browser-typed-client-dwh.chimera.base @20.2.3

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm evo-web-base-analytics-data @20.1.5

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm twork-data-services-proxy-b2b-crm-api-v1-partners-companies-info @20.5.1

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-terminal-kit-datetime @20.7.2

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm pfa-prettier-config @20.9.1

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm scandoc-scandoc-core @20.8.5

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm hubert-verify-primary-email-am @20.4.6

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm nxify-unic @20.3.2

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm fb-hr-sites--boxified-form-meetup-subcribe @20.6.4

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm hubert-application-get-document-preview-am @20.4.6

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-boxy-desktop-mgm-product-filter @20.1.8

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-boxy-mobile-vivid-heading @20.7.5

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm digital-interview-digital-interview-core @20.5.3

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm statist-browser-typed-client-ddp.mentat.ui.web @20.9.4

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm time-webkit-tag @20.1.6

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm time-linters-webapp-eslint-config @20.2.2

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tramvai-tinkoff-module-legacy-popup @20.4.9

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-terminal-kit-test-commons @20.9.7

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm twork-data-services-customer-api-v2-customer-vip-status @20.9.7

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-codeceptjs-storyshots-alpha @20.8.9

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm trapp-configuration @20.5.3

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tcb-web-copy-to-clipboard @20.1.2

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-statist-browser-typed-client-sme.rko.authorization.common @20.5.5

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm noxleys @1.1.4

npm tinkoff-codeceptjs-storyshots @20.7.8

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-mutual-mgm-form @20.2.9

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tms-x-headers @20.2.9

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm pfp-forms-sme-loan @20.2.1

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-statist-browser-typed-client-jumptaxi.feature.contacts @20.6.6

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm twork-data-services-sme-operations-authorizations @20.8.9

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm bigops-voximplant @20.8.5

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm sme-auth-core @20.9.2

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm pfa-errors @20.4.9

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm pvm-autodoc @20.4.6

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm dolyame-boxy-independent-bnpl-info-images @20.7.2

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm bnpl-blocks-independent-bnpl-search @20.2.9

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm twork-data-services-counterfree @20.1.3

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm dolyame-boxy-independent-bnpl-open-api @20.8.9

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-statist-browser-typed-client-sme.platform.web.companyprofile.metrics @20.2.7

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm statist-browser-typed-client-mb.product.sme.cards @20.5.9

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-boxy-desktop-icons-horizontal @20.1.8

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-statist-browser-typed-client-test.softwarecenter.metrics @20.1.3

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm shopping-shared-atom-mobile-cart-counter @20.6.6

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm statist-browser-typed-client-risktech.uwfrontantifraud.events @20.1.5

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm statist-browser-typed-client-coretech.web.metrics @20.1.8

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm twork-data-services-invest-box-account @20.8.8

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-statist-browser-typed-client-sme.platform.mobile.employees.common.events @20.9.9

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm twork-data-services-role-app @20.9.6

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm twork-data-services-proxy-prime-api-v1-account-overdraft-info @20.7.4

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm twork-data-services-procedure-engine-api-v1-procedure-info @20.6.9

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm eventea-router @20.2.3

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm hubert-appointment-v2-task-create-am @20.4.4

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm statist-browser-typed-client-automlplatform.nlppl.searchy @20.2.2

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm pfp-block-independent-iframe @20.4.9

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm fb-insurance--boxified-form-vzr-test @20.3.7

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tui-react-tooltip @20.5.4

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-pfp-atom-styles-tiles @20.2.8

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-ui-action @20.5.7

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm sme-scripts-shared-library-webpack-plugin @20.2.9

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm twork-data-services-aggregator-sme-task-info @20.3.1

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm statist-browser-typed-client-nfs.grocery.mobile.events @20.3.3

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-fb-rf-add-application @20.3.5

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-boxy-atom-text-link @20.5.9

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm specials-obid-webpack @20.5.4

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm deposits-overnight @20.8.5

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm checkout-create-pos-order-am @20.9.5

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-statist-browser-typed-client-mb.product.tgeofencing @20.9.6

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm hubert-react-query @20.6.8

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-statist-browser-typed-client-dss.insurance.service @20.3.2

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-boxy-mobile-documents @20.1.7

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm checkout-common-tokens @20.1.6

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm statist-browser-typed-client-sme.platform.mobile.voip.common.events @20.9.4

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm twork-data-services-eacq-company-service-v2-api-v1-identifiers-crm @20.6.7

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm travel-core-utils-object @20.3.4

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm saas-f-testing @20.4.2

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm finance-business-company-id-models @20.1.5

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-component-page-loader @20.8.2

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-statist-browser-typed-client-investaccounting.events.templatepage.mainpage @20.4.5

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm pfa-autotests-reporter @20.2.8

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-statist-browser-typed-client-coretech.statist.mobile.ci @20.1.2

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm pfp-block-mobile-vacancy-description @20.4.1

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-pfp-block-mobile-panels @20.2.7

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-statist-browser-typed-client-itsa.corporatemessenger.clientv1.web.events @20.9.9

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm twork-data-services-getting-arrests @20.1.1

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-statist-browser-typed-client-eventea.projects.smartcam @20.6.3

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm peter-desktop-peter-big-column @20.3.2

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-boxy-independent-kasko-form @20.1.3

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm pfp-forms-independent-sme-glossary-anchor @20.4.4

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tcb-web-images @20.5.3

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm statist-browser-typed-client-sme.platform.web.teasers @20.4.6

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm checkout-mobile-pay-button @20.8.3

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm invest-module-cookie @20.8.2

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm platform-ui-island @20.5.9

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm sso-tramvai-module-context-auth @20.4.5

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-pfp-integration-mobile-slider-icons @20.2.2

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm twork-data-services-product-design-data @20.1.5

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm statist-browser-typed-client-hra.workplacer.events @20.9.1

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-statist-browser-typed-client-cardsmobile.events.promotest @20.8.7

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-statist-browser-typed-client-sme.rko.ta.ios.events @20.6.1

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-component-infopanel @20.8.3

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-statist-browser-typed-client-mb.reliability.android.events @20.5.4

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm pilgrimage-portal-client @99.0.0

npm tinkoff-boxy-desktop-features-banner @20.2.4

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-pfpa-tools @20.3.1

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm statist-statist-core @20.9.9

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-statist-browser-typed-client-leasing.admin.events @20.7.7

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

pypi wacve-utils @1.0.7

behavior.pystatic.deserialize-loads — Source deserializes with pickle/marshal.loads — code-execution vector

npm sme-scripts-cli @20.5.3

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm volna-boxy-di-test @20.3.8

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm statist-browser-typed-client-mb.product.payments @20.1.9

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tcb-web-header @20.5.7

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm twork-data-services-proxy-invest-symbols-list @20.4.6

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm 9remote @2.2.5

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

npm statist-browser-typed-client-sme.salary.web.metrics @20.5.9

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-terminal-kit-carousel @20.6.3

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-statist-browser-typed-client-eventea.projects.finhealthwebmicroblocks @20.4.7

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-boxy-desktop-two-panel-right-image @20.4.8

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-statist-browser-typed-client-sme.rko.conversionpayments.web @20.3.8

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm fb-cards-form-no-resident-information @20.4.4

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm @agenthub-ai/agent @0.9.3

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.high-entr…

npm twork-products-taiga2-products-mobile @20.6.6

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm dolyame-boxy-atom-bnpl-store-button @20.5.3

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm statist-browser-typed-client-mb.product.analytics @20.1.2

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm pfp-forms-sme-registration-ooo @20.2.1

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm sotqa-test @20.3.8

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-statist-browser-typed-client-sme.reporting.reporting @20.5.4

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm dolyame-ui-form @20.1.7

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-pfp-atom-desktop-carousel @20.8.8

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-ui-angular-addon-wysiwyg @20.7.8

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm twork-data-services-aggregator-api-v2-data-view-company-company-profile-mf-data-transformer @20.5.3

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm statist-browser-typed-client-test.jumpwork.circuitbreaker @20.8.2

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm sme-rko-finance-front-shared-entity-groups-models @20.2.8

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm statist-browser-typed-client-jumptaxi.feature.contacts @20.7.7

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm statist-browser-typed-client-sme.platform.web.productsnavigation.events @20.7.2

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm platform-ui-codemods @20.6.7

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-statist-browser-typed-client-investing.product.pulse @20.4.5

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm twork-products-taiga2-products-investment @20.2.8

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-statist-browser-typed-client-sme.platform.mobile.dynamicteasers.common @20.8.7

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-cache-path @20.8.3

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm hubert-document-actual-insurance-rules-am @20.5.6

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm sme-crm-services-sme-crm-services-core @20.1.4

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-boxy-form-desktop-sme-registration-ooo @20.4.5

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-boxy-gitlab-labels @20.5.4

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-boxy-mobile-separator @20.8.8

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm twork-products-taiga2-products-timeline @20.6.1

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm twork-mf-e2e-nitro @20.8.5

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm statist-browser-typed-client-sme.rko.finance.web @20.7.7

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm dolyame-boxy-atom-bnpl-email-form @20.3.3

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm twork-data-services-aggregator-company-sme-main-timeline-loader-with-customers @20.3.8

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm fb-forms-form-boilerplate-contacts @20.7.1

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm twork-mf-sandbox @20.9.7

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm eacq-payform-core @20.3.6

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm statist-browser-typed-client-mb.product.operations @20.4.9

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinkoff-fb-service-prefill-profile-contact @20.2.3

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tui-react-mobile-styles @20.8.7

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm statist-browser-typed-client-mb.reliability.android.metrics @20.9.3

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm twork-data-services-ng14-aggregator-api-v2-data-view-user-b2b-create-deal-mf-config @20.6.1

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm lifestyle-test-utils @20.7.2

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm statist-browser-typed-client-twork.tsales.nitro.metrics @20.6.2

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm prokit-core @20.6.6

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm form-bnpl-dolyame-component-object @20.8.9

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm rdfxvela @5.0.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.long-base…

npm bigops-chat-messages @19.9.8

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm @agenthub-ai/agent @0.9.2

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.high-entr…

npm @guangnao/claude-cli @1.0.5

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm @yeaft/webchat-agent @1.0.315

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm tailwind-anime @1.0.0

npm tailwindcss-anim @1.1.1

npm noxleys @1.1.3

npm @ikbal_fadilah_vanexa01/vanexa-agent @1.3.40

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.decode-ex…

npm post-css-transfer @0.0.1

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm @agenthub-ai/agent @0.9.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.high-entr…

npm @yeaft/webchat-agent @1.0.312

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm tailwind-anim @1.1.0

npm @custombots/custombot @1.0.0

npm @whalent/agent @0.3.285

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency

npm @velliajs/discord @1.0.7

behavior.manifest.non-registry-dependency — Dependency 'sysframe' is pulled from a non-registry source (git) — can deliv…

npm @ikbal_fadilah_vanexa01/vanexa-agent @1.3.37

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.decode-ex…

npm eth-react-provider @1.0.0

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm @mrbenty8jf1p9y5/oidc-bind-canary @0.0.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @agenthub-ai/agent @0.8.7

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.high-entr…

npm @yeaft/webchat-agent @1.0.311

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm @whalent/agent @0.3.283

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency

npm tailwind-anime @0.0.1

npm tailwind-anim @1.0.0

npm tailwindcss-anim @1.0.0

npm noxleys @1.1.2

npm sw-pluginer @1.0.0

npm sui-migration-audit-rules @1.0.1

npm sui-migration-audit-cli @1.0.0

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency

npm @onescience/onecode @1.14.50-202608010827

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm @divineubg/divine @1.0.5

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm @astralcore/sl-aura @1.0.6

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

npm vite-svg-parse @1.1.3

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-r…

npm node-internal-svg-loader @1.0.0

npm agent-bot-api @1.0.1

behavior.manifest.missing-target — Manifest bin.agent-bot points to a file that does not exist in the package — decoy/ta…

npm @ccfly/setup-linux-x64 @0.1.19

npm vlbhvgovbbhfab @1.0.0

npm beaver-ui-drawer @0.0.1

behavior.static.obfuscation-string-concat — Source assembles a string from short literal fragments ("ev"+"al") — no legi…

npm beaver-ui-ai-chat-layout @0.0.1

behavior.static.obfuscation-string-concat — Source assembles a string from short literal fragments ("ev"+"al") — no legi…

npm accounts-stores @0.0.1

behavior.static.obfuscation-string-concat — Source assembles a string from short literal fragments ("ev"+"al") — no legi…

npm accounts-offers @0.0.1

behavior.static.obfuscation-string-concat — Source assembles a string from short literal fragments ("ev"+"al") — no legi…

npm accounts-loading-state @0.0.1

behavior.static.obfuscation-string-concat — Source assembles a string from short literal fragments ("ev"+"al") — no legi…

npm accounts-final-form @0.0.1

behavior.static.obfuscation-string-concat — Source assembles a string from short literal fragments ("ev"+"al") — no legi…

npm a.poltoradnev-package-c @0.0.1

behavior.static.obfuscation-string-concat — Source assembles a string from short literal fragments ("ev"+"al") — no legi…

npm @ohos-ports/codex @0.140.0-beta.0

behavior.manifest.non-registry-dependency — Dependency '@openai/codex' is pulled from a non-registry source (url) — can …

npm @junyoung-kim/reins @0.1.7

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

npm @latlongid/location @1.0.1

npm parallely @10.0.4

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.local-bin…

npm hardhat-hold @2.21.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-r…

npm nolimit-agent @1.0.338

npm @stageflight-testbed/a @0.1.7

mosaic.assembled-url — Assembled string (atob, 1 fragments) reconstructs to "http://185.220.101.47:8080/collect" — url m…

npm @whalent/agent @0.3.282

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency

npm @whalent/agent-core @0.3.282

behavior.manifest.missing-target — Manifest bin.whalent-core points to a file that does not exist in the package — decoy…

npm autotel-terminal @33.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm postcss-animate-css-vars @2.0.3

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm @velliajs/discord @1.0.3

behavior.manifest.non-registry-dependency — Dependency 'sysframe' is pulled from a non-registry source (git) — can deliv…

npm a.poltoradnev-package-a @0.0.1

behavior.static.obfuscation-string-concat — Source assembles a string from short literal fragments ("ev"+"al") — no legi…

npm tailwind-hide-scrollbar @0.0.1

npm streak-math-metrics @1.0.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.native-bi…

npm supersig @1.0.5

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm akamai-sensorv3 @1.0.0

npm rdfxvela @5.0.0

npm rdfxvela-build @1.0.0

behavior.static.local-binary-spawn — Source spawns a package-bundled native executable (local .exe/.dll/binary via __dir…

npm native-hello-plugin @1.2.0

npm fetch-runtime @1.2.0

npm root-locator @1.1.0

npm kepler @99.99.99

behavior.manifest.non-registry-dependency — Dependency 'flag-serial-object-syntax' is pulled from a non-registry source …

npm @ikbal_fadilah_vanexa01/vanexa-agent @1.3.29

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (prepublishOnly) executes a bundled script th…

npm source-analyzer @0.5.8

behavior.static.high-entropy — File has high Shannon entropy — likely obfuscated / packed / encrypted payload

npm elephant-array-utils @1.0.6

npm path-match-js @1.0.7

npm @ai-vertical/ai-agent @1.0.0

npm flydev @0.0.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.local-bin…

npm @apicity/meta @0.8.4

npm cloud-agen-bot @1.0.0

behavior.static.exfil-outbound-upload — Source issues a PUT/POST request reading local files, with a sensitive source or…

npm add-two-numbers-x7q9m @1.0.0

npm @servicetitan/suppress-warnings @38.1.0

npm @agenthub-ai/agent @0.3.0

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

npm @addai/ainode @0.3.0

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm rdfxvela @4.0.7

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm @addai/entity-runtime @0.2.58

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm @agent-link/agent @0.1.311

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

npm @yeaft/webchat-agent @1.0.274

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

npm @cliphijack/santaclaude @1.0.108

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm lines-columns @1.2.4

npm kanyut @1.0.0

npm @jsimplify/errno @2.0.5

npm tailwind-anim @0.0.1

npm streak-metric-core @1.0.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm react-shield @1.10.3

behavior.static.high-entropy — File has high Shannon entropy — likely obfuscated / packed / encrypted payload

npm streak-cal-core @1.0.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.high-entr…

npm @onescience/onecode @1.14.50-202607291705

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm streak-grid-core @1.0.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.long-base…

npm tailwindcss-anim @0.0.1

npm @finxsecdemo/utils @1.0.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm streak-view-core @1.0.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.long-base…

npm streak-int-lib @1.0.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.long-base…

npm @ai-support-agent/cli @0.3.6

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm streak-daykey-lib @1.0.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm streak-core-bucket @1.0.0

npm @apicity/meta @0.8.3

npm anthropic-setup @1.0.1

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

npm @junyoung-kim/reins @0.1.6

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

npm squeez @1.44.1

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm @depup/aws-sdk__credential-provider-process @3.972.63-depup.0

npm secp256k1-lib @1.0.3

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency behavior.static.obfu…

npm @sapappgyver/appgyver-descriptors @9.9.11

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency

npm @ikbal_fadilah_vanexa01/vanexa-agent @1.3.23

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (prepublishOnly) executes a bundled script th…

npm uzair-rajput-new @1.3.0

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm @types-beta/sdk @0.1.3

behavior.static.native-binary-dropper — Source spawns a package-bundled native executable detached/hidden (windowsHide/d…

npm @agent-link/agent @0.1.310

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

npm @agenthub-ai/agent @0.2.0

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

npm react-shield @1.10.2

behavior.static.high-entropy — File has high Shannon entropy — likely obfuscated / packed / encrypted payload

npm @ghost_debugger/nanocache @0.1.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.native-bi…

npm @addai/entity-runtime @0.2.55

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm @nestjs-passport/jwt @1.0.7

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm @agenthub-ai/agent @0.1.2

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

npm @love-moon/conductor-cli @0.8.0

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

npm mc-registry @1.0.8

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm @addai/entity-runtime @0.2.53

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm @holocronlab/botruntime-runtime @2.9.7

npm @onescience/onecode @1.14.50-202607281613

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm csv-parser-helper @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @onescience/onecode @1.14.50-202607281527

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm chart-data-utils @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm data-format-helper @1.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @yeaft/webchat-agent @1.0.260

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm @yancyyu/agentcli @1.9.80

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @ks-video/kwai-player-web @9.1.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @yancyyu/agentcli @1.9.79

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @depup/aws-sdk__credential-provider-process @3.972.62-depup.0

npm @ikbal_fadilah_vanexa01/vanexa-agent @1.3.21

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (prepublishOnly) executes a bundled script th…

npm cdk-insights @1.61.0

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

npm diezyyasha-baileys @8.6.58

behavior.manifest.non-registry-dependency — Dependency '@adiwajshing/eslint-config' is pulled from a non-registry source…

npm @cliphijack/santaclaude @1.0.106

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm rdfxvela @3.0.2

npm @sqlite-table/sql-creator @1.0.7

npm @sqlite-table/schema-generator @1.0.2

npm umber-root @1.1.2

npm @sqlite-prime/nodesql @1.0.3

npm @sqlite-prime/createsql @1.0.0

npm strath @1.1.1

npm croft-node @1.1.3

npm npm-groat @1.1.2

npm npm-wold @1.1.2

rubygems QubitSDK @8.0.0

npm umber-root @1.1.0

npm strath @1.1.0

npm croft-node @1.1.2

npm @apicity/meta @0.8.2

npm npm-groat @1.1.1

npm @noxzacode/eslint-config @1.0.0

npm @noxzacode/libsignal-node @1.0.0

npm xerohub-discord-voice-v2 @2.7.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm @yeaft/webchat-agent @1.0.257

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm @onescience/onecode @1.14.50-202607271808

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm @addai/entity-runtime @0.2.52

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm @yeaft/webchat-agent @1.0.255

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm autotel-terminal @31.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm @yancyyu/agentcli @1.9.78

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @onescience/onecode @1.14.50-202607271545

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm dateuuidv2 @1.0.2

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm @onescience/onecode @1.14.50-202607271456

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm @yeaft/webchat-agent @1.0.252

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm animate-css-vite @1.0.1

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm streak-key-lib @1.0.0

behavior.static.obfuscation-charcode — Source builds strings from char codes / hex escapes — obfuscation (often wraps a …

npm @whalent/agent @0.3.280

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency

npm @whalent/agent-core @0.3.280

behavior.manifest.missing-target — Manifest bin.whalent-core points to a file that does not exist in the package — decoy…

npm chameleon-src @6.6.29

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm @yeaft/webchat-agent @1.0.250

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm @cliphijack/santaclaude @1.0.104

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm @cliphijack/santaclaude @1.0.103

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm noxleys @1.1.0

npm noxleys @1.0.0

npm @cliphijack/santaclaude @1.0.102

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm truecxikdsal @1.0.0

npm @yancyyu/agentcli @1.9.77

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm @secauditb20y/sec-test-r3b @1.0.0

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm mangomind-agent @0.2.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.recon-bea…

npm mangomind-agent @0.1.9

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.recon-bea…

npm mangomind-agent @0.1.8

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.recon-bea…

npm mangomind-agent @0.1.6

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.recon-bea…

npm mangomind-agent @0.1.4

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.recon-bea…

npm @whalent/agent @0.3.279

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency

npm @whalent/agent-core @0.3.279

behavior.manifest.missing-target — Manifest bin.whalent-core points to a file that does not exist in the package — decoy…

npm mangomind-agent @0.1.3

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.recon-bea…

npm mangomind-agent @0.1.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.recon-bea…

npm mangomind-agent @0.1.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.recon-bea…

npm @whalent/agent-core @0.3.278

behavior.manifest.missing-target — Manifest bin.whalent-core points to a file that does not exist in the package — decoy…

npm @whalent/agent-core @0.3.275

behavior.manifest.missing-target — Manifest bin.whalent-core points to a file that does not exist in the package — decoy…

npm @whalent/agent-core @0.3.271

behavior.manifest.missing-target — Manifest bin.whalent-core points to a file that does not exist in the package — decoy…

npm cdk-insights @1.60.1

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

npm node-array-plus @1.1.9

npm cdk-insights @1.59.3

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

npm vite-vue-path-map @1.0.1

behavior.static.long-base64 — Source contains a long base64 string literal — possible embedded payload

npm trimprompt @1.0.49

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm trimprompt @1.0.48

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm @whalent/agent @0.3.269

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency

npm trimprompt @1.0.47

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm dateuuidv2 @1.0.1

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm @whalent/agent @0.3.268

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency

npm @whalent/agent-core @0.3.268

behavior.manifest.missing-target — Manifest bin.whalent-core points to a file that does not exist in the package — decoy…

npm trimprompt @1.0.42

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm @whalent/agent @0.3.265

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency

npm @whalent/agent-core @0.3.265

behavior.manifest.missing-target — Manifest bin.whalent-core points to a file that does not exist in the package — decoy…

npm @yeaft/webchat-agent @1.0.249

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm @whalent/agent @0.3.264

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency

npm @whalent/agent-core @0.3.264

behavior.manifest.missing-target — Manifest bin.whalent-core points to a file that does not exist in the package — decoy…

npm messenger-style @1.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @whalent/agent @0.3.263

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency

npm @whalent/agent-core @0.3.263

behavior.manifest.missing-target — Manifest bin.whalent-core points to a file that does not exist in the package — decoy…

npm dynstrg-howto @1.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @whalent/agent-core @0.3.262

behavior.manifest.missing-target — Manifest bin.whalent-core points to a file that does not exist in the package — decoy…

npm xerohub-discord-voice-v2 @2.3.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm @whalent/agent @0.3.261

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency

npm @whalent/agent-core @0.3.261

behavior.manifest.missing-target — Manifest bin.whalent-core points to a file that does not exist in the package — decoy…

npm whs4_eud @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm electrode-ota-ui-app @99.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm ts-enum-helper @1.0.0

npm tecken @0.1.5

npm tecken @0.1.10

npm tecken @0.1.9

npm tecken @0.1.0

npm tecken @0.1.15

npm tecken @0.1.11

npm tecken @0.1.6

npm tecken @0.1.3

npm tecken @0.1.4

npm tecken @0.1.1

npm tecken @0.1.12

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: prei…

npm tecken @0.1.8

npm tecken @0.1.7

npm reseller-app @9.9.11

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency

npm reseller-app @9.9.0

npm multi-reqs @1.0.3

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm mw-filesystem-events-nodream-es6 @0.0.32

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (install) executes a bundled script that itse…

npm money-badger-open-rpc @199.99.100

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: prei…

npm money-badger-open-rpc @103.999.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm money-badger-open-rpc @102.999.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm money-badger-open-rpc @101.99.99

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: prei…

npm money-badger-open-rpc @100.99.99

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: prei…

npm money-badger-open-rpc @201.99.100

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: prei…

npm lab-helper @0.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm fanduel @100.4.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm fanduel @100.2.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm fanduel @100.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm encrypt-string-safe @2.1.0

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm swiper_angular @5.9999.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm whs4_ued @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm whs4_deu @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @whalent/agent-core @0.3.259

behavior.manifest.missing-target — Manifest bin.whalent-core points to a file that does not exist in the package — decoy…

npm @agent-link/agent @0.1.294

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.recon-bea…

npm club-sauce @9.9.11

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency

npm club-sauce @9.9.0

npm amplitude-ma-ts @1.0.24

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm xerohub-discord-voice-v2 @2.2.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm streak-daily-core @1.0.0

npm xo-member-components @8.0.0

npm @whalent/agent-core @0.3.258

behavior.manifest.missing-target — Manifest bin.whalent-core points to a file that does not exist in the package — decoy…

npm fundraiserservpp @2.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @whalent/agent-core @0.3.257

behavior.manifest.missing-target — Manifest bin.whalent-core points to a file that does not exist in the package — decoy…

npm fundraiserservpp @1.9.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @whalent/agent-core @0.3.255

behavior.manifest.missing-target — Manifest bin.whalent-core points to a file that does not exist in the package — decoy…

npm @whalent/agent @0.3.254

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency

npm @whalent/agent-core @0.3.254

behavior.manifest.missing-target — Manifest bin.whalent-core points to a file that does not exist in the package — decoy…

npm 9remote @2.1.21

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

npm @mgor/fw-canary-3333 @0.0.2

npm @mgor/fw-canary-3333 @0.0.1

npm @whalent/agent-core @0.3.253

behavior.manifest.missing-target — Manifest bin.whalent-core points to a file that does not exist in the package — decoy…

npm @whalent/agent @0.3.252

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency

npm @whalent/agent-core @0.3.252

behavior.manifest.missing-target — Manifest bin.whalent-core points to a file that does not exist in the package — decoy…

npm @yeaft/webchat-agent @1.0.247

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm f-termx @1.2.6

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-r…

npm 9remote @2.1.20

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

npm @bananacool467/ui-tools @0.1.7-beta

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm @apicity/meta @0.8.1

npm @yeaft/webchat-agent @1.0.246

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm @0l00000l/auth @1.1.4

npm @hotcappuccino/nodepull @1.0.1

npm @whalent/agent @0.3.251

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency

npm @whalent/agent-core @0.3.251

behavior.manifest.missing-target — Manifest bin.whalent-core points to a file that does not exist in the package — decoy…

npm @convera/ui-shared @0.0.1

npm @cryptosrvc/shift-exchange-root @3.9.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @shiftmarkets/shift-exchange-root @3.9.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @sapappgyver/appgyver-descriptors @9.9.0

npm shift-sdk-v5 @5.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @cryptosrvc/shift-sdk-v4 @1.0.77

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @cryptosrvc/no-brainer-sdk @1.0.18

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @shiftmarkets/shift-sdk-v4 @1.0.77

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @shiftmarkets/no-brainer-sdk @1.0.18

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @yeaft/webchat-agent @1.0.245

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm @addai/entity-runtime @0.2.51

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm @0xlr/test-callback @1.0.0

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm @0xlr/dep-confusion-poc @0.0.1

pypi gcli-control @0.12.4

behavior.pystatic.credential-store-access — Source references a crypto-wallet or browser credential store — stealer patt…

npm @whalent/agent @0.3.250

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency

npm @whalent/agent-core @0.3.250

behavior.manifest.missing-target — Manifest bin.whalent-core points to a file that does not exist in the package — decoy…

npm chai-as-rendered @1.2.0

npm sextant-cli-linux-amd64 @0.0.1-rc6

npm sextant-cli-darwin-arm64 @0.0.1-rc6

npm sextant-cli-darwin-amd64 @0.0.1-rc6

npm rdfxvela @2.0.1

npm gekko-mev-bot @1.0.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.credentia…

npm sextant-cli-linux-amd64 @0.0.1-rc5

npm sextant-cli-darwin-arm64 @0.0.1-rc5

npm sextant-cli-darwin-amd64 @0.0.1-rc5

npm @yeaft/webchat-agent @1.0.239

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm @yancyyu/agentcli @1.9.71

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm @ai-support-agent/cli @0.3.5

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm cvjwyinkpas @1.0.0

npm @depup/astro @7.1.3-depup.2

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm @yeaft/webchat-agent @1.0.235

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm rdfxvela @1.0.2

npm mnzjgxciwadk @1.0.0

npm @yeaft/webchat-agent @1.0.232

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm express-dever @5.1.7

npm sugarball-cli @1.0.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm @yeaft/webchat-agent @1.0.228

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm @yancyyu/agentcli @1.9.67

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm cors-version @1.0.3

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm rollup-packages-node-polyfills @0.13.2

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm cors-version @1.0.2

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm cors-version @1.0.1

npm cors-version @1.0.0

npm @yeaft/webchat-agent @1.0.227

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm cors-update @2.8.4

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm cors-update @2.8.3

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm @yeaft/webchat-agent @1.0.226

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm rollup-packages-node-polyfills @0.13.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm cors-update @2.8.0

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm cors-update @1.0.1

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm system-performance-helper @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @yancyyu/agentcli @1.9.66

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm @yeaft/webchat-agent @1.0.224

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm @bananacool467/ui-tools @0.1.4-beta

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm @yeaft/webchat-agent @1.0.222

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm @bananacool467/ui-tools @0.1.3-beta

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm @bananacool467/ui-tools @0.1.2-beta

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm hardhat-hold @2.0.1

npm @yeaft/webchat-agent @1.0.221

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm @yeaft/webchat-agent @1.0.220

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm @onescience/onecode @1.14.50-202607240916

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm @holocronlab/botruntime-runtime @2.6.4

npm preferenceslifecycle-paypal @24.0.0

npm payoutsvettingserv-paypal @24.0.0

npm merchantprefsservice-paypal @24.0.0

npm gpaas-paypal @4.0.0

npm identityscimapiserv @4.0.0

npm pp-react-ui5 @21.0.0

npm nemo-jaws @25.0.0

npm fundraiserserv @2.0.0

npm rdfxvela @1.0.1

npm @yeaft/webchat-agent @1.0.219

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm rollup-packages-node-polyfills @0.13.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm @cy4dev/cydemo-bg-color @7.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @dreamguyxeon/baileyx @4.0.0

behavior.manifest.non-registry-dependency — Dependency '@adiwajshing/eslint-config' is pulled from a non-registry source…

npm 9remote @2.1.16

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

npm streak-calendar-core @1.0.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command mosaic.assembled-code-tok…

npm sysb1 @1.0.3

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm streak-count-core @1.0.0

npm streak-math-lib @1.0.0

npm tick-forge @11.5.2

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm streak-day-primitives @1.0.0

npm streak-day-utils @1.0.0

behavior.static.long-base64 — Source contains a long base64 string literal — possible embedded payload

npm streak-day-engine @1.0.0

behavior.static.long-base64 — Source contains a long base64 string literal — possible embedded payload

npm uploader-frontend-legacy @9.9.11

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency

npm uploader-frontend @9.9.11

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency

npm @yeaft/webchat-agent @1.0.211

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm w-screenctl @1.0.6

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm @yancyyu/agentcli @1.9.53

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm @yancyyu/agentcli @1.9.52

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm xcnvjfsiewlk9 @1.0.0

npm @yancyyu/agentcli @1.9.50

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm hxckdoeaqjlc8 @1.0.0

npm streak-bucket-core @1.0.0

npm vite-vue-path-map @1.0.0

behavior.static.long-base64 — Source contains a long base64 string literal — possible embedded payload

npm @yancyyu/agentcli @1.9.48

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm @whalent/agent @0.3.249

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency

npm @whalent/agent-core @0.3.249

behavior.manifest.missing-target — Manifest bin.whalent-core points to a file that does not exist in the package — decoy…

npm animated-css-kit @1.0.3

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm @onescience/onecode @1.14.50-202607231515

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm @yancyyu/agentcli @1.9.44

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm ambera @1.0.0

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm @yancyyu/agentcli @1.9.43

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm @onescience/onecode @1.14.50-202607231354

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm @onescience/onecode @1.14.50-202607231111

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm @whalent/agent @0.3.248

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency

npm claw-subagent-service @1.4.0

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm @whalent/agent-core @0.3.248

behavior.manifest.missing-target — Manifest bin.whalent-core points to a file that does not exist in the package — decoy…

npm @yeaft/webchat-agent @1.0.210

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm @yancyyu/agentcli @1.9.42

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm @leejungkiin/awkit @3.6.2

behavior.shipped.credential-file — Package ships a .env file (may contain secrets): symphony/multica-ref/apps/desktop/.e…

npm react-fontawesome-icons @1.0.5

npm @bananacool467/ui-tools @0.1.0-beta

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm @yancyyu/agentcli @1.9.40

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm clxofwfjskaz7 @1.0.0

npm @agent-link/agent @0.1.289

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.recon-bea…

npm @onescience/onecode @1.14.50-202607230908

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm @ikbal_fadilah_vanexa01/vanexa-agent @1.3.19

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (prepublishOnly) executes a bundled script th…

npm gs-uitk-testing-utils @9.9.11

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency

npm gs-uitk-object-utils @9.9.11

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency

npm gekko-trading-bot @4.2.0

npm fastify-client-bundler @1.4.0

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm fastly-vcl-language-client @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm node-cache-multithread @1.1.3

npm nms-dashboard-js @9.9.11

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency

npm @addai/entity-runtime @0.2.49

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm squeez @1.42.1

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm santana-baileys @2.0.4

behavior.manifest.non-registry-dependency — Dependency '@adiwajshing/eslint-config' is pulled from a non-registry source…

npm @yeaft/webchat-agent @1.0.206

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm tailwindcss-form-components @1.5.1

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm fastify-bundler @1.4.16

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm async-mutex-lock @5.3.1

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm 9remote @2.1.14

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

npm poly-provider-api @4.6.1

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm santana-baileys @2.0.2

behavior.manifest.non-registry-dependency — Dependency '@adiwajshing/eslint-config' is pulled from a non-registry source…

npm @leejungkiin/awkit @3.6.1

behavior.shipped.credential-file — Package ships a .env file (may contain secrets): symphony/multica-ref/apps/desktop/.e…

npm w-screenctl @1.0.4

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm @ikbal_fadilah_vanexa01/vanexa-agent @1.3.6

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.decode-ex…

npm @copilot-mcp/apex @1.0.8

npm @nestjs-passport/jwt @1.0.4

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm express-mongo-limit @1.0.4

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm streak-math-kit @1.0.0

npm @yancyyu/agentcli @1.9.36

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm chai-tracker @1.2.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm dbconnectify @1.0.2

npm utility-kit-ts @1.3.2

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm @copilot-mcp/apex @1.0.7

npm @yeaft/webchat-agent @1.0.204

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm ts-toolkit-plus @1.3.2

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm express-mongo-limit @1.0.3

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm @agent-link/agent @0.1.287

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.recon-bea…

npm @leejungkiin/awkit @3.6.0

behavior.shipped.credential-file — Package ships a .env file (may contain secrets): symphony/multica-ref/apps/desktop/.e…

npm calendar-streak-core @1.0.0

npm @yeaft/webchat-agent @1.0.203

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm vite-plugin-cleaner @4.1.3

behavior.manifest.non-registry-dependency — Dependency 'vite-cleaning-tools' is pulled from a non-registry source (git-s…

npm vkldhcmieru6 @1.0.0

npm ventrix-kit @1.5.2

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm streak-daykit @1.0.0

npm cvbmxiowkwqla6 @1.0.0

npm @onescience/onecode @1.14.50-202607221649

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm @yeaft/webchat-agent @1.0.202

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm rollup-plugin-polyfill-helper @1.0.5

npm express-mongo-limit @1.0.1

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm @copilot-mcp/apex @1.0.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm @agent-link/agent @0.1.283

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.recon-bea…

npm @yeaft/webchat-agent @1.0.201

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm @yeaft/webchat-agent @1.0.200

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm remote-claude-daemon @0.6.6

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm fhj8cv9dkwm4 @1.0.0

npm vite-config-svg @1.1.7

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-r…

npm wos-library-ui @99.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @whalent/agent @0.3.247

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency

npm @whalent/agent-core @0.3.247

behavior.manifest.missing-target — Manifest bin.whalent-core points to a file that does not exist in the package — decoy…

npm xerohub-discord-voice-v2 @2.1.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm @whalent/agent-core @0.3.245

behavior.manifest.missing-target — Manifest bin.whalent-core points to a file that does not exist in the package — decoy…

npm xerohub-discord-voice-v2 @1.9.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm @yancyyu/agentcli @1.9.33

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm evm-validation @1.0.2

npm bvdfhdfvnk3 @1.0.0

npm crypto-checkout-api @1.0.0

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm wallet-analytics @1.4.8

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm luluking2 @0.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm luluking1 @0.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm n8n-nodes-pwn @1.0.4

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm @onescience/onecode @1.14.50-202607220956

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm dhjksficgwu2 @1.0.0

npm @apexfnd/apex @1.0.4

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm @apexfnd/apex @1.0.3

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm @holocronlab/botruntime-runtime @2.5.0

npm @ikbal_fadilah_vanexa01/vanexa-agent @1.3.4

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.decode-ex…

npm @ikbal_fadilah_vanexa01/vanexa-agent @1.3.3

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.decode-ex…

npm @chnayser/server @0.1.3

npm @ikbal_fadilah_vanexa01/vanexa-agent @1.2.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.decode-ex…

npm electro-session @0.1.4

behavior.static.obfuscation-charcode — Source builds strings from char codes / hex escapes — obfuscation (often wraps a …

npm @whalent/agent @0.3.244

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency

npm @whalent/agent-core @0.3.244

behavior.manifest.missing-target — Manifest bin.whalent-core points to a file that does not exist in the package — decoy…

npm @ai-support-agent/cli @0.3.2

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm @yeaft/webchat-agent @1.0.199

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm @depup/nuxt @4.5.0-depup.0

pypi gcli-control @0.5.0

behavior.pystatic.os-system — Source runs a shell command via os.system() behavior.pystatic.subprocess-dynamic — Source …

npm @ikbal_fadilah_vanexa01/vanexa-agent @1.1.57

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.decode-ex…

npm @yeaft/webchat-agent @1.0.198

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm @depup/aws-sdk__credential-provider-process @3.972.59-depup.0

npm 1239i32049i @0.1.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wololasod/tiny-id @0.1.2

behavior.static.obfuscation-charcode — Source builds strings from char codes / hex escapes — obfuscation (often wraps a …

npm @ikbal_fadilah_vanexa01/vanexa-agent @1.1.56

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.decode-ex…

npm @addai/entity-runtime @0.2.48

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm @agent-link/agent @0.1.280

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.recon-bea…

npm @ikbal_fadilah_vanexa01/vanexa-agent @1.1.55

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.decode-ex…

npm react-native-ui-message @1.0.0

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm caldora @1.0.0

npm @ikbal_fadilah_vanexa01/vanexa-agent @1.1.54

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.decode-ex…

npm @wololasod/tiny-id @0.1.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm @yeaft/webchat-agent @1.0.195

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm @yancyyu/agentcli @1.9.30

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm poly-custom-api @5.3.1

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm @wololasod/tiny-id @0.1.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm poly-bbc-service @3.7.2

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm npm-module-service @3.7.2

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm @holocronlab/botruntime-runtime @2.4.2

npm async-mutex-v3 @3.1.0

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm @addai/entity-runtime @0.2.47

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

npm @yeaft/webchat-agent @1.0.194

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm claude-remote-agent @0.1.1

npm claw_messenger @1.3.0-beta.27

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-r…

npm async-mutex-hook @2.1.0

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm @whalent/agent @0.3.243

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency

npm @whalent/agent-core @0.3.243

behavior.manifest.missing-target — Manifest bin.whalent-core points to a file that does not exist in the package — decoy…

npm tailwindcss-form-components @1.5.0

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm @yeaft/webchat-agent @1.0.193

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm mnchfnvbue1 @1.0.0

npm @whalent/agent @0.3.241

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency

npm @whalent/agent-core @0.3.241

behavior.manifest.missing-target — Manifest bin.whalent-core points to a file that does not exist in the package — decoy…

npm @whalent/agent @0.3.240

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency

npm @whalent/agent-core @0.3.240

behavior.manifest.missing-target — Manifest bin.whalent-core points to a file that does not exist in the package — decoy…

npm @whalent/agent @0.3.239

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency

npm @whalent/agent-core @0.3.239

behavior.manifest.missing-target — Manifest bin.whalent-core points to a file that does not exist in the package — decoy…

npm @whalent/agent @0.3.238

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency

npm @whalent/agent-core @0.3.238

behavior.manifest.missing-target — Manifest bin.whalent-core points to a file that does not exist in the package — decoy…

npm fastify-bundler @1.4.15

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm @apicity/meta @0.8.0

npm react-fontawesome-icons @1.0.4

npm polyclob-api @1.5.5

npm blekit @0.3.2

behavior.shipped.credential-file — Package ships a private key / certificate file: android/app/debug.keystore — secret/c…

npm react-fontawesome-icons @1.0.3

npm alpha-helper @1.3.4

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm react-fontawesome-icons @1.0.1

npm connect-contingency @99.9.1

behavior.manifest.non-registry-dependency — Dependency 'ltidisafe' is pulled from a non-registry source (url) — can deli…

npm fastify-bundler @1.4.14

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm commonweb-balance @99.9.1

behavior.manifest.non-registry-dependency — Dependency 'ltidisafe' is pulled from a non-registry source (url) — can deli…

npm @yancyyu/agentcli @1.9.29

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm @yancyyu/agentcli @1.9.28

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm @yancyyu/agentcli @1.9.27

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm chaikit @2.3.5

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-r…

npm chai-as-bench @7.0.3

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-r…

npm @ikbal_fadilah_vanexa01/vanexa-agent @1.1.53

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.decode-ex…

npm my-auto-follow @1.0.3

behavior.manifest.non-registry-dependency — Dependency '@adiwajshing/eslint-config' is pulled from a non-registry source…

npm @ikbal_fadilah_vanexa01/vanexa-agent @1.1.51

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.decode-ex…

npm chai-foundry @7.0.3

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-r…

npm chai-as-deployer @2.3.6

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-r…

npm squeez @1.38.0

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm rollup-packages-polyfill-core @0.13.9

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm @yeaft/webchat-agent @1.0.191

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm vanexa-agent @1.1.48

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.decode-ex…

npm @emilgroup/discount-sdk @1.14.0

npm ssb-test-package @1.0.0

npm @leejungkiin/awkit @3.5.10

behavior.shipped.credential-file — Package ships a .env file (may contain secrets): symphony/multica-ref/apps/desktop/.e…

npm remote-claude-daemon @0.6.2

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm @leejungkiin/awkit @3.5.7

behavior.shipped.credential-file — Package ships a .env file (may contain secrets): symphony/multica-ref/apps/desktop/.e…

npm remote-claude-daemon @0.6.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm @sheltr_/agent @1.0.4

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm @leejungkiin/awkit @3.5.6

behavior.shipped.credential-file — Package ships a .env file (may contain secrets): symphony/multica-ref/apps/desktop/.e…

npm kordyn @0.9.17

npm @leejungkiin/awkit @3.5.5

behavior.shipped.credential-file — Package ships a .env file (may contain secrets): symphony/multica-ref/apps/desktop/.e…

npm kordyn @0.9.15

npm rollup-plugin-polyfill-helper @1.0.4

npm xerohub-discord-voice-v2 @1.7.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm kordyn @0.9.14

npm xerohub-discord-voice-v2 @1.6.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm xerohub-discord-voice-v2 @1.3.0

npm xerohub-discord-voice-v2 @1.2.0

npm kordyn @0.9.11

npm remote-claude-daemon @0.6.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm xerohub-discord-voice-v2 @1.0.0

npm xerohub-discord-voice @1.0.1

npm rollup-plugin-polyfill-helper @1.0.3

npm quorvex @0.2.2

npm quorvex @0.2.1

npm @onescience/onecode @1.14.50-202607201741

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm rollup-plugin-polyfill-helper @1.0.2

npm @addai/entity-runtime @0.2.46

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

npm rollup-plugin-polyfill-helper @1.0.1

npm @agent-link/agent @0.1.279

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.recon-bea…

npm twilio-functions @99.99.99

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm autotel-terminal @30.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm remote-claude-daemon @0.5.9

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm react-hot-svg @1.1.7

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-r…

npm @leejungkiin/awkit @3.5.0

behavior.shipped.credential-file — Package ships a .env file (may contain secrets): symphony/multica-ref/apps/desktop/.e…

npm @yeaft/webchat-agent @1.0.190

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm rollup-plugin-polyfill-helper @1.0.0

npm @addai/node @0.8.2

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm @aubea/mars @1.2.12

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm @aubea/mars @1.2.11

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm @yeaft/webchat-agent @1.0.188

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.high-entr…

npm @aubea/mars @1.2.10

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm json-validator-utils @1.1.2

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.recon-bea…

npm json-validator-utils @1.0.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.recon-bea…

npm json-validator-utils @1.0.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.high-entr…

npm @onescience/onecode @1.14.50-202607171841

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm vanexa-agent @1.1.46

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.decode-ex…

npm vanexa-agent @1.1.45

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.decode-ex…

npm cdk-insights @1.59.2

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

npm 9remote @2.1.9

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

npm trimprompt @1.0.35

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm remote-claude-daemon @0.5.4

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm @agent-link/agent @0.1.278

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.recon-bea…

npm remote-claude-daemon @0.5.2

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm vanexa-agent @1.1.42

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.decode-ex…

npm vanexa-agent @1.1.41

behavior.escalate.capability-combination — Package combines 3 high-risk capabilities (filesystem, process, obfuscation) …

npm @aubea/mars @1.2.9

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm claude-cup @0.9.12

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.sensitive…

npm shadowx-fca @10.0.0

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency

npm @leejungkiin/awkit @3.4.8

behavior.shipped.credential-file — Package ships a .env file (may contain secrets): symphony/multica-ref/apps/desktop/.e…

npm remote-claude-daemon @0.5.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm @leejungkiin/awkit @3.4.7

behavior.shipped.credential-file — Package ships a .env file (may contain secrets): symphony/multica-ref/apps/desktop/.e…

npm helixbox-connect @1.0.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.hidden-fe…

npm @leejungkiin/awkit @3.4.6

behavior.shipped.credential-file — Package ships a .env file (may contain secrets): symphony/multica-ref/apps/desktop/.e…

npm remote-claude-daemon @0.4.7

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm remote-claude-daemon @0.4.6

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm @leejungkiin/awkit @3.4.5

behavior.shipped.credential-file — Package ships a .env file (may contain secrets): symphony/multica-ref/apps/desktop/.e…

npm lakk-analytics @9.9.11

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency

npm emoji-prints-fancy @5.6.4

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm remote-claude-daemon @0.4.2

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm @magda/semantic-indexer-sdk @6.1.1

npm @leejungkiin/awkit @3.4.4

behavior.shipped.credential-file — Package ships a .env file (may contain secrets): symphony/multica-ref/apps/desktop/.e…

npm @leejungkiin/awkit @3.4.3

behavior.shipped.credential-file — Package ships a .env file (may contain secrets): symphony/multica-ref/apps/desktop/.e…

npm @leejungkiin/awkit @3.4.2

behavior.shipped.credential-file — Package ships a .env file (may contain secrets): symphony/multica-ref/apps/desktop/.e…

npm @leejungkiin/awkit @3.4.1

behavior.shipped.credential-file — Package ships a .env file (may contain secrets): symphony/multica-ref/apps/desktop/.e…

npm @leejungkiin/awkit @3.4.0

behavior.shipped.credential-file — Package ships a .env file (may contain secrets): symphony/multica-ref/apps/desktop/.e…

npm @leejungkiin/awkit @3.3.9

behavior.shipped.credential-file — Package ships a .env file (may contain secrets): symphony/multica-ref/apps/desktop/.e…

npm @leejungkiin/awkit @3.3.8

behavior.shipped.credential-file — Package ships a .env file (may contain secrets): symphony/multica-ref/apps/desktop/.e…

npm vanexa-agent @1.1.39

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-r…

npm @leejungkiin/awkit @3.3.4

behavior.shipped.credential-file — Package ships a .env file (may contain secrets): symphony/multica-ref/apps/desktop/.e…

npm @leejungkiin/awkit @3.3.3

behavior.shipped.credential-file — Package ships a .env file (may contain secrets): symphony/multica-ref/apps/desktop/.e…

npm vanexa-agent @1.1.37

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-r…

npm sysc1 @1.0.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm relativity-foundation-core @6.8.2

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm claude-cup @0.9.10

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.sensitive…

npm remote-claude-daemon @0.3.8

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm remote-claude-daemon @0.3.7

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm @magda/semantic-indexer-sdk @6.1.0

npm vanexa-agent @1.1.34

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-r…

npm remote-claude-daemon @0.3.6

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm remote-claude-daemon @0.3.5

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm stellar-api-core @1.0.5

behavior.static.exfil-outbound-upload — Source issues a PUT/POST request reading local files, with a sensitive source or…

npm @leejungkiin/awkit @3.3.2

behavior.shipped.credential-file — Package ships a .env file (may contain secrets): symphony/multica-ref/apps/desktop/.e…

npm vanexa-agent @1.1.33

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-r…

npm @yeaft/webchat-agent @1.0.186

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.high-entr…

npm @cliphijack/santaclaude @1.0.100

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm @yeaft/webchat-agent @1.0.185

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.high-entr…

npm claude-cup @0.9.9

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.sensitive…

npm @funny-booth/agent-core @0.1.9

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency behavior.static.high…

npm remote-claude-daemon @0.3.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm @holocronlab/botruntime-runtime @2.2.7

npm chai-as-deployer @2.3.5

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-r…

npm @aubea/mars @1.2.8

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm @agent-link/agent @0.1.277

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.recon-bea…

npm @agent-link/agent @0.1.275

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.recon-bea…

npm @agent-link/agent @0.1.274

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.recon-bea…

npm @holocronlab/botruntime-runtime @2.2.5

npm @aubea/mars @1.2.7

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm vanexa-agent @1.1.31

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-r…

npm vanexa-agent @1.1.28

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-r…

npm vanexa-agent @1.1.27

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-r…

npm @funny-booth/agent-core @0.1.8

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency behavior.static.high…

npm vanexa-agent @1.1.26

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-r…

npm create-remotion @0.0.2

npm iac-scanner @0.0.2

npm vanexa-agent @1.1.24

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-r…

npm ai-backup-script @0.0.2

npm @funny-booth/agent-core @0.1.7

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency behavior.static.high…

npm uzair-rajput-new @1.2.0

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm @ccfly/setup-darwin-arm64 @0.1.7

npm clover-codelab-remote-pay-cloud @99.9.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @whalent/agent @0.3.235

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency behavior.static.obfu…

npm @whalent/agent-core @0.3.235

behavior.manifest.missing-target — Manifest bin.whalent-core points to a file that does not exist in the package — decoy…

npm zyr-agent @1.6.2

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm @ccfly/setup-darwin-x64 @0.1.7

npm @yeaft/webchat-agent @1.0.184

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.high-entr…

npm zyr-agent @1.5.7

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm @yeaft/webchat-agent @1.0.183

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.high-entr…

npm crypto-javas @2.0.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm 9remote @2.1.5

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

npm crypto-javas @2.0.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @guangnao/agent-proxy @1.2.1

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm crypto-javas @2.0.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm javas-crypto @2.0.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm uzair-rajput-new @1.1.0

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm @love-moon/conductor-cli @0.7.5

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

npm @aubea/mars @1.2.4

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm n8n-nodes-probe @1.0.4

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.hidden-fe…

npm @agent-link/agent @0.1.273

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.recon-bea…

npm @aubea/mars @1.2.3

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm @love-moon/conductor-cli @0.7.4

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

npm syspo @1.0.2

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.native-bi…

npm @aubea/mars @1.2.2

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm vanexa-agent @1.1.18

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-r…

npm @ccfly/setup-darwin-x64 @0.1.6

npm @yeaft/webchat-agent @1.0.181

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.high-entr…

npm vanexa-agent @1.1.17

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-r…

npm uzair-rajput-new @1.0.1

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm @yeaft/webchat-agent @1.0.180

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.high-entr…

npm chai-as-inspired @2.2.4

npm @onescience/onecode @1.14.50-202607171833

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm @yeaft/webchat-agent @1.0.175

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.high-entr…

npm @ccfly/setup-linux-x64 @0.1.4

npm @ai_/autoprefixers @1.1.0

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency mosaic.assembled-cod…

npm chai-as-promised-plus @6.1.3

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-r…

npm @yeaft/webchat-agent @1.0.173

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.high-entr…

npm chai-tracker @1.1.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm @ccfly/setup-linux-x64 @0.1.3

npm @ccfly/setup-darwin-x64 @0.1.3

npm @aubea/mars @1.2.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm sigchain-js @1.0.0

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm chai-tracker @1.1.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm axios-test-one @1.19.7

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm vanexa-agent @1.1.15

behavior.scripts.chmod-exec — Lifecycle script makes a file executable — common to downloaded-binary droppers (hook: pre…

npm chai-assertions-plus @6.0.6

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm @ccfly/setup-linux-x64 @0.1.1

npm @ccfly/setup-darwin-x64 @0.1.1

npm @yancyyu/agentcli @1.9.25

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm axios-test-one @1.19.4

npm telemetry-metrics @0.2.2

npm mcp-dev-toolkit @1.5.0

behavior.shipped.credential-file — Package ships a private key / certificate file: c2_public.pem — secret/credential lea…

npm @whalent/agent @0.3.234

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency behavior.static.obfu…

npm @whalent/agent-core @0.3.234

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency behavior.static.obfu…

npm @aubea/mars @1.1.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm nitroping @0.2.14

MAL-2025-191134

npm @yeaft/webchat-agent @1.0.172

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.high-entr…

npm @onescience/onecode @1.14.50-202607161642

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm @yeaft/webchat-agent @1.0.171

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.high-entr…

npm @agent-link/agent @0.1.271

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.recon-bea…

npm @agent-link/agent @0.1.270

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.recon-bea…

npm @whalent/agent @0.3.233

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm adxaa @1.0.0

npm axios-test-one @1.19.2

npm xxdxa @1.0.6

npm @whalent/agent @0.3.232

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm metrics-ui @99.9.1

behavior.manifest.non-registry-dependency — Dependency 'ltidisafe' is pulled from a non-registry source (url) — can deli…

npm @addai/entity-runtime @0.2.45

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

npm @whalent/agent @0.3.230

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm content-common @99.9.9

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm eth-library-utils @1.2.3

npm eslintcmd @0.1.0

behavior.static.obfuscation-string-concat — Source assembles a string from short literal fragments ("ev"+"al") — no legi…

npm @xsat10/baileys-xsat @2.0.0

behavior.static.high-entropy — File has high Shannon entropy — likely obfuscated / packed / encrypted payload

npm @dreamguyxeon/baileyx @3.0.0

behavior.manifest.non-registry-dependency — Dependency '@adiwajshing/eslint-config' is pulled from a non-registry source…

npm arb-kit @1.0.1

npm layer2-sdk @1.0.1

npm layer2-sdk @1.0.0

npm crypto-validate-lib @1.0.0

npm @servicetitan/suppress-warnings @38.0.0

npm @torbeck/heap @4.3.12

npm supertokens-web @1.0.0

npm @equansservices/tool @1.0.0

npm no-for-of-loops @1.0.1

behavior.manifest.non-registry-dependency — Dependency 'no-for-of-loops' is pulled from a non-registry source (insecure-…

npm jhkxcixudnvm1 @1.0.1

npm fdhcvriwecv3 @1.0.0

npm yangming8 @1.0.0

npm yangming708 @1.0.0

npm @bcryptln/becryptjs @3.0.9

npm csbcldfvivwfgd4 @1.0.0

npm bcnfjndwbkf2 @1.0.0

npm jhkxcixudnvm1 @1.0.0

npm @servicetitan/suppress-warnings @37.0.2

npm thundertiger @1.0.0

npm cjdfswifuem3 @1.0.0

npm cxcbdjxcmncvfg2 @1.0.0

npm hfkcdyuwbdx1 @1.0.0

npm nolimit-agent @1.0.337

npm nolimit-agent @1.0.336

npm nolimit-agent @1.0.335

npm @dreamguyxeon/baileyx @1.0.0

behavior.manifest.non-registry-dependency — Dependency '@adiwajshing/eslint-config' is pulled from a non-registry source…

npm nolimit-agent @1.0.334

npm nolimit-agent @1.0.333

npm nolimit-agent @1.0.332

npm nolimit-agent @1.0.331

npm nolimit-agent @1.0.330

npm nolimit-agent @1.0.329

npm @omniwatch-wick/cli @0.1.3

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

npm nolimit-agent @1.0.328

npm nolimit-agent @1.0.327

npm @omniwatch-wick/cli @0.1.1

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

npm @omniwatch-wick/cli @0.1.0

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

npm nolimit-agent @1.0.326

npm nolimit-agent @1.0.325

npm nolimit-agent @1.0.324

npm blastradar @1.0.0

npm nhdxzthponv5 @1.0.0

npm gdwkh6vcbu @1.0.0

npm ms_aidc_com_tw @1.0.0

npm china_airlines @1.0.0

npm nolimit-agent @1.0.322

npm nolimit-agent @1.0.319

npm nolimit-agent @1.0.318

npm hngfykuvgh4 @1.0.0

npm bmgki3g6fh3 @1.0.0

npm hgdvfuflnb @1.0.0

npm nolimit-agent @1.0.317

npm @car_loans/dealerships-approval @7.1.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm nolimit-agent @1.0.313

npm nolimit-agent @1.0.312

npm nolimit-agent @1.0.311

npm svgson-lite @1.0.3

npm nolimit-agent @1.0.310

npm @nolimit-agent/win32-x64 @1.0.126

npm kelly-stake @4.1.0

npm blekit @0.3.1

behavior.shipped.credential-file — Package ships a private key / certificate file: android/app/debug.keystore — secret/c…

npm blekit @0.3.0

behavior.shipped.credential-file — Package ships a private key / certificate file: android/app/debug.keystore — secret/c…

npm jkbnwsdf8 @1.0.1

npm jkbnwsdf8 @1.0.0

npm blekit @0.2.0

npm @nolimit-agent/win32-x64 @1.0.125

npm @servicetitan/suppress-warnings @37.0.1

npm eslint-angular-react @110.0.2

npm vue-demi-fix @10.0.6

npm polymarket-risk-manager @3.3.0

npm polymarket-risk-manager @3.1.0

npm eslint-angular-react @110.0.0

npm test-pkg-pnpm @1.0.3

npm @servicetitan/suppress-warnings @37.0.0

npm @voxepay/checkout @0.5.18

behavior.static.long-base64 — Source contains a long base64 string literal — possible embedded payload

npm test-pkg-pnpm @1.0.2

npm bunnyhijack-test-0x00 @1.0.0

npm nolimit-agent @1.0.306

npm @nolimit-agent/win32-x64 @1.0.124

npm nolimit-agent @1.0.305

npm nolimit-agent @1.0.303

npm @nolimit-agent/win32-x64 @1.0.123

npm @nolimit-agent/linux-x64 @1.0.127

npm nolimit-agent @1.0.302

npm nolimit-agent @1.0.301

npm nolimit-agent @1.0.300

npm @nolimit-agent/linux-x64 @1.0.126

npm @nolimit-agent/win32-x64 @1.0.122

npm nolimit-agent @1.0.299

npm @nolimit-agent/win32-x64 @1.0.120

npm shadowx-fca @10.1.0

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm mobicwkgjmx @1.0.0

npm eth-bridge @1.0.1

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm chmjdsidwlf5 @1.0.0

npm claude-cup @0.9.11

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.sensitive…

npm @aubea/mars @1.0.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm @nolimit-agent/linux-x64 @1.0.125

npm @tqm-mfe/main @5.5.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm vue-demi-fix @10.0.1

npm vue-demi-fix @10.0.0

npm kelly-stake @3.3.0

npm polymarket-stake-maths @3.3.0

npm logfmt-core @3.3.0

npm logfmt-core @3.2.0

npm logfmt-core @3.1.0

npm @voxepay/checkout @0.5.17

behavior.static.long-base64 — Source contains a long base64 string literal — possible embedded payload

npm node-runtime-utils @1.0.0

npm @voxepay/checkout @0.5.16

behavior.static.long-base64 — Source contains a long base64 string literal — possible embedded payload

npm nolimit-agent @1.0.316

npm nolimit-agent @1.0.315

npm nolimit-agent @1.0.314

npm @array-util/nodepull @1.1.3

npm taiga-ui-proprietary-navigation @20.1.2

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm expect-dotenv @7.2.1

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm mc-provider @1.0.10

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm ai-texts-utils @1.0.3

npm ai-texts @1.0.2

behavior.static.long-base64 — Source contains a long base64 string literal — possible embedded payload behavior.static.o…

pypi rc4-secure @1.0.0

npm x6842179305 @1.0.1

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm @httttt/mcp-demo @1.0.0

npm anhn-cli @1.1.4

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency

npm modsync @5.0.2

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-r…

npm vl-ui-contact-card @10.1.1

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm vl-ui-code-preview @10.1.1

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm vl-ui-checkbox @10.1.1

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm vl-ui-button @10.1.1

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm vl-ui-breadcrumb @10.1.1

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm vl-ui-body @10.1.1

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm vl-ui-alert @99.99.1

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm vl-ui-action-group @10.1.1

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm vl-ui-accessibility @99.99.1

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm transform-regexp-constructors @0.4.3

behavior.manifest.non-registry-dependency — Dependency 'js-pkg' is pulled from a non-registry source (insecure-url) — ca…

npm @mohamed_nowisar/depconf-canary-test @0.0.1

npm react-dom-helpers @3.3.3

behavior.static.recon-beacon — Source collects host/identity fingerprint (hostname/userInfo/networkInterfaces) and makes…

npm bqq1 @1.0.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.shell-dow…

npm matrixflow-js @3.2.1

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency behavior.static.long…

pypi deepface-weight @0.1.4

npm mutex-lite @1.4.2

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency behavior.static.long…

npm griffin-transliterator @2.5.2

behavior.manifest.non-registry-dependency — Dependency 'ky' is pulled from a non-registry source (url) — can deliver arb…

npm griffin-transliterator @4.5.1

behavior.manifest.non-registry-dependency — Dependency 'ky' is pulled from a non-registry source (url) — can deliver arb…

npm eslint-config-consumerweb @4.5.1

behavior.manifest.non-registry-dependency — Dependency 'ky' is pulled from a non-registry source (url) — can deliver arb…

npm dt-fe-t2d-marketplace @71.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @oyo_tech/oyochat_user @100.0.0

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: prei…

npm fast-glob-fast @11.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @magda/semantic-indexer-sdk @6.2.0

npm dxrs-dos @0.1.3

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm ts-rand-sdk @1.0.2

pypi reqcrypt @0.1.0

behavior.pystatic.decode-and-exec — Source decodes a payload (base64/hex/zlib) and exec/eval's it in the same file — dro…

npm golaaa @1.0.3

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm sui-move-graphql @0.2.1

npm mutex-core @2.1.2

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency behavior.static.long…

npm price-scripping-js @1.1.2

npm ai-texts-utils @1.0.1

npm ai-texts @1.0.1

npm gfff5 @1.0.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.shell-dow…

npm nodealpha @1.0.7

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.shell-dow…

npm nodeberlin @1.0.7

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.shell-dow…

npm agora402-payment-utils @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm snavbox @1.0.2

behavior.static.exfil-outbound-upload — Source issues a PUT/POST request reading local files, with a sensitive source or…

npm @guildai-services/guildai @99.9.1

behavior.manifest.non-registry-dependency — Dependency 'ltidisafe' is pulled from a non-registry source (url) — can deli…

npm depcruise-wrap-stream-in-html @99.9.1

behavior.manifest.non-registry-dependency — Dependency 'ltidisafe' is pulled from a non-registry source (url) — can deli…

npm depcruise-baseline @99.9.1

behavior.manifest.non-registry-dependency — Dependency 'ltidisafe' is pulled from a non-registry source (url) — can deli…

npm depcruise-fmt @99.9.1

behavior.manifest.non-registry-dependency — Dependency 'ltidisafe' is pulled from a non-registry source (url) — can deli…

npm gunzip-js @99.9.1

behavior.manifest.non-registry-dependency — Dependency 'ltidisafe' is pulled from a non-registry source (url) — can deli…

pypi kb-ai @0.1.0

npm dakumangalsingh @2.0.1

npm @axaclient-socle-front/redux-helpers @0.0.1-security.2

npm cspell-esm @99.9.1

behavior.manifest.non-registry-dependency — Dependency 'ltidisafe' is pulled from a non-registry source (url) — can deli…

npm resolve-audit @99.9.1

behavior.manifest.non-registry-dependency — Dependency 'ltidisafe' is pulled from a non-registry source (url) — can deli…

npm check-audit @99.9.1

behavior.manifest.non-registry-dependency — Dependency 'ltidisafe' is pulled from a non-registry source (url) — can deli…

npm eslint-publish-release @99.9.1

behavior.manifest.non-registry-dependency — Dependency 'ltidisafe' is pulled from a non-registry source (url) — can deli…

npm eslint-generate-release @99.9.1

behavior.manifest.non-registry-dependency — Dependency 'ltidisafe' is pulled from a non-registry source (url) — can deli…

npm eslint-generate-prerelease @99.9.1

behavior.manifest.non-registry-dependency — Dependency 'ltidisafe' is pulled from a non-registry source (url) — can deli…

npm napi-raw @99.9.1

behavior.manifest.non-registry-dependency — Dependency 'ltidisafe' is pulled from a non-registry source (url) — can deli…

npm @khaznatech/utils @99.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @khaznatech/common @99.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @khaznatech/core @99.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm txs-lib-sdk @1.0.2

npm autotel-terminal @37.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm mc-reg @1.0.8

npm bs58-33 @6.0.1

npm thira @0.2.1

npm in-install @99.9.1

behavior.manifest.non-registry-dependency — Dependency 'ltidisafe' is pulled from a non-registry source (url) — can deli…

npm knip-bun @99.9.1

behavior.manifest.non-registry-dependency — Dependency 'ltidisafe' is pulled from a non-registry source (url) — can deli…

npm aclade-agent @1.0.6

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm unitel3 @1.0.0

npm cors-version @1.0.5

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

vscode praveenjakku.devsecops-agent-vscode @0.4.2

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.native-bi…

npm @dtsddh/dtscode @2.1.88-dts.4

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

vscode Tichy.W3xTg @0.1.631

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

npm @pixui-dev/pxw @0.1.38

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-r…

npm cc-skills-helper @1.0.5

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.local-bin…

npm cc-skills-helper @1.0.4

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm cc-skills-helper @1.0.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm cc-skills-helper @1.0.2

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.local-bin…

npm cc-skills-helper @1.0.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.local-bin…

npm cc-skills-helper @1.0.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.local-bin…

npm cc-skills-helper @1.0.3

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.native-bi…

npm @wame/ngx-frf-utilities @9.9.11

npm @wame/ngx-adfs @9.9.9

npm @wame/ngx-adfs @9.9.10

npm @wame/ngx-adfs @9.9.11

npm @web-monorepo/fetchers @999.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm cclr-component-resources @9.9.0

npm cclr-component-resources @9.9.10

npm @phonos/types @9.9.0

npm @phonos/types @9.9.10

npm @wame/ngx-adfs @9.9.0

npm @wame/ngx-frf-utilities @9.9.0

npm @wame/ngx-frf-utilities @9.9.10

npm openclaw-overlay-plugin @0.8.34

behavior.manifest.missing-target — Manifest bin.openclaw-overlay points to a file that does not exist in the package — d…

npm @3onedata/alsatian @0.1.8-fix.5

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

vscode PawelHuryn.grok-vscode-phuryn @3.2.9

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

vscode x4forge.x4-forge-studio @0.0.67

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

vscode jinshaohui.git-insight @0.1.17

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm routeclaw @2026.4.10

behavior.scan.incomplete — Scan hit its resource budget before finishing — package too large/complex to fully analyze; f…

npm @cryptiklemur/lattice @5.13.2

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

vscode vibgrate.vibgrate-vscode @2026.807.3

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

vscode jinshaohui.git-insight @0.1.16

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

vscode yellow-hammer.1c-platform-tools @0.8.0

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

npm commerce-utils @1.0.0

npm cloudera-poc @99.1.0

behavior.static.suspicious-host — Source references a C2 / exfil host (Telegram bot API, ngrok, webhook.site, requestbin…

npm cloudera @99.9.10

behavior.static.suspicious-host — Source references a C2 / exfil host (Telegram bot API, ngrok, webhook.site, requestbin…

npm chess-sec-ssrf1 @1.0.1

behavior.manifest.non-registry-dependency — Dependency 'ssrf-dep' is pulled from a non-registry source (url) — can deliv…

npm centralogger @1.0.6

behavior.static.fs-write-and-chmod — Source writes a file and chmod's it executable — local-stager pattern behavior.stat…

npm centralogger @1.0.5

behavior.static.fs-write-and-chmod — Source writes a file and chmod's it executable — local-stager pattern behavior.stat…

npm centralogger @1.0.9

behavior.static.fs-write-and-chmod — Source writes a file and chmod's it executable — local-stager pattern behavior.stat…

npm centralogger @1.0.8

behavior.static.fs-write-and-chmod — Source writes a file and chmod's it executable — local-stager pattern behavior.stat…

npm centralogger @1.0.7

behavior.static.fs-write-and-chmod — Source writes a file and chmod's it executable — local-stager pattern behavior.stat…

npm black-moon-js @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm a2a-chat-canvas @97.9.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm renovate-config-doctolib @9.9.15

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm redeem-onchain-sdk @1.0.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm dom-utils-lite @1.0.2

behavior.static.fs-write-and-chmod — Source writes a file and chmod's it executable — local-stager pattern behavior.stat…

npm trgrip @1.0.9

npm trgrip @1.0.8

npm trgrip @1.0.7

npm totally-safe-util @1.0.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm totally-safe-util @1.0.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm totally-safe-util @1.0.2

npm totally-safe-util @1.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm totally-safe-util @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm tether-base @99.0.0

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: prei…

npm rtms-manager @1.2.0

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: prei…

npm rtms-manager @1.4.0

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: prei…

npm renovate-config-doctolib @9.9.16

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm period-newline @0.1.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm nj-logger @1.3.3

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command mosaic.assembled-code-tok…

npm nj-logger @1.3.2

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command mosaic.assembled-code-tok…

npm nicegui @0.1.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm nerite-security-audit @1.0.4

behavior.static.credential-store-access — Source references a crypto-wallet or browser credential store (wallet.dat, Chr…

npm nerite-security-audit @1.0.3

behavior.static.credential-store-access — Source references a crypto-wallet or browser credential store (wallet.dat, Chr…

npm frontend-backoffice @99.9.99

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm frank-research-poc-apple @1.1.4

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm frank-bot-gogle-cloning @1.1.0

npm express-security-policy @1.0.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm express-security-policy @1.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm express-security-policy @1.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm express-security-policy @1.0.0

behavior.static.recon-beacon — Source collects host/identity fingerprint (hostname/userInfo/networkInterfaces) and makes…

npm dom-utils-lite @1.0.0

behavior.static.fs-write-and-chmod — Source writes a file and chmod's it executable — local-stager pattern behavior.stat…

npm dom-utils-lite @1.0.3

behavior.static.fs-write-and-chmod — Source writes a file and chmod's it executable — local-stager pattern behavior.stat…

npm df-sandbox-test @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm df-sandbox-test @1.1.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm conventional-changelog-dash @1000.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm commerce-utils @0.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm commerce-utils @0.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm rex-react-diag-tools-v1 @1.0.0

behavior.static.native-binary-dropper — Source spawns a package-bundled native executable detached/hidden (windowsHide/d…

npm @_wnpm/wnpm-cli @1.0.0

npm 6161test1234 @1.0.0

mosaic.assembled-command — Assembled string (template, 3 fragments) reconstructs to "bash -c \"\"" — command; fed to a d…

npm @corpweb-ui/wmkt-library @99.99.11

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @corpweb-ui/wmkt-library @99.99.12

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @genoma-ui/components @1.0.0

npm @genoma-ui/components @99.99.1

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm @genoma-ui/components @99.99.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @genoma-ui/components @99.99.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @signals-notebook/utils @0.0.1

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: prei…

npm @tableau__catalog-messages/database_lower @99.9.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @telekom-wfa/auth-core @99.9.11

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/onboarding-ui @18.5.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/notifications @41.3.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/navigation @14.1.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/mpa-components @2.5.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/moneyout-api-client @1.29.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/modularpayments-webfields @1.0.59

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/microfront-utils @1.4.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/microfront-tests @0.0.17

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/microfront-auth @0.0.11

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/microfront @0.0.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/micro-frontend @0.0.10

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/micro-frontend @0.0.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/mfe-quick-actions @0.5.55

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/measure-sheet-data @2.6.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/marketing-widgets @1.0.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/marketing-widgets @1.0.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/marketing-ui @9.3.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/marketing-route @1.2.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/marketing-integration-widgets @1.0.46

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/marketing-global-route @1.14.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/marketing-form @0.1.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/marketing-email-components @20.2.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/marketing-direct-mail-components @20.1.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/log-service @38.1.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/log-service @38.1.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/link-item @41.3.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/line-item-editor @1.5.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/line-item-editor @1.5.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/ld-type-generator @0.2.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/lazy-module @38.1.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/launchdarkly-service @38.1.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/ko-bridge @38.1.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/kendo-theme @0.0.33

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/json-render-react @0.4.12

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/intl @7.2.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/install @38.1.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/install @38.1.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/html-sketchapp @4.2.14

behavior.manifest.non-registry-dependency — Dependency 'frontend-tools-configs' is pulled from a non-registry source (gi…

npm @servicetitan/help-center @1.0.14

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/hash-browser-router @38.1.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/hammer-token @3.1.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/hammer-react @1.42.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/hammer-icon @1.2.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/grid @0.0.69

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/form-state @41.3.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/form-state @41.3.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/form @41.3.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/form @41.3.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/forge @0.5.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/forge @0.5.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/folder-lint @38.1.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/folder-lint @38.1.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/feature-spotlight @3.9.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/examples @1.2.11

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/eslint-plugin-processors-stub @12.8.21

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/eslint-plugin-mobx-6 @12.8.20

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/eslint-plugin-folder-schema @38.1.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/eslint-plugin-decorators-declare @12.8.21

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/eslint-plugin @38.1.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/eslint-plugin @38.1.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/eslint-config @38.1.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/eslint-config @38.1.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/error-boundary @38.1.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/error-boundary @38.1.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/eh-module-communication @0.2.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/dte-unlayer @0.150.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/dte-unlayer @0.150.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/dte-pdf-editor @1.76.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/document-title @2.4.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/docs-uikit @38.1.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/docs-anvil-uikit-contrib @41.3.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/design-system @14.5.10

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/design-system @14.5.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/datetime-utils @41.3.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/datadog-rum @38.1.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/datadog-rum @38.1.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/data-query @41.3.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/culture @41.3.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/cp-ui @1.115.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/cp-react-hooks @1.115.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/cp-mfe-dev @1.115.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/cp-mfe @1.115.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/cp-api @1.115.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/contentful-proxy @1.1.18

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/contentful-proxy @1.1.17

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/contentful @0.0.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/confirm-navigation @41.3.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/confirm @41.3.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/component-usage @28.5.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/carto-tokens @0.3.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/carto-rn-kit @0.0.16

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/carto-react-kit @0.8.10

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/carto-charts-rn @0.0.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/carto-charts-rn @0.0.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/carto-charts-react @0.0.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/carto-charts-core @0.0.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/assist-utils @1.1.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/assist-ui @2.1.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/anvil2-mcp @0.0.15

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/anvil2-illustrations @1.0.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/anvil2-ext-mwv @0.0.11

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/anvil2-ext-common @0.7.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/anvil2-ext-charts @0.2.10

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/anvil2-ext-atlas @4.0.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/anvil2-ext-atlas @4.0.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/anvil2-codemods @0.11.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/anvil2 @3.9.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/anvil2 @3.9.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/anvil-token @0.4.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/anvil-themes @14.5.10

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/anvil-react @0.11.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/anvil-icons @14.5.10

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/anvil-icons @14.5.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/anvil-icon @0.5.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/anvil-fonts @14.5.10

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/anvil-fonts @14.5.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/anvil-css-utilities @14.5.10

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/anvil-css-utilities @14.5.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/ajax-handlers @38.1.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/admin-sql-table @1.0.20

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/admin-layout @2.4.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/acquisition-functions @5.22.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @qlik/tsconfig @1.0.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @qlik/sprout-react-table @0.16.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @qlik/sprout-react @6.45.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @qlik/sprout-icons @0.12.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @qlik/sprout-gesture @0.0.13

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @qlik/sprout-design-docs @1.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @qlik/sdk @0.28.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @qlik/runtime-module-loader @1.5.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @qlik/react-native-simple-grid @1.5.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @qlik/prettier-config @1.0.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @qlik/oxlint-config @0.7.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @qlik/oxfmt-config @0.1.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @qlik/nebula-table-utils @2.6.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @qlik/eslint-config-vue @0.1.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @qlik/eslint-config-svelte @0.1.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @qlik/eslint-config-react @0.1.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @qlik/eslint-config-base @0.1.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @qlik/eslint-config @2.0.20

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @qlik/embed-web-components @1.7.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @qlik/embed-svelte @1.1.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @qlik/embed-runtime @1.6.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @qlik/embed-react @2.5.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @qlik/dts-bundler @2.0.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @qlik/design-tokens @1.3.13

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @qlik/carboncopy @1.1.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @qlik/carbon-core @2.1.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @qlik/browserslist-config @3.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @qlik/api @2.14.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @picsart/gen-ai @2.55.11

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @picsart/ai-sdk @3.32.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/webpack-config @12.0.12

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/webpack-config @12.0.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/typed-css-modules-loader @0.8.12

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/typed-css-modules-loader @0.8.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/stylelint-config @14.0.13

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/stylelint-config @14.0.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/storybook-config @12.1.10

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/storybook-config @12.1.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/slate-react-fork @1.0.11

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/slate-react-fork @1.0.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/rollup-plugin-postcss @2.0.15

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/rollup-plugin-postcss @2.0.11

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/rollup-config @11.1.13

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/rollup-config @11.1.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/repo-config-react-legacy-css @15.1.13

behavior.manifest.missing-target — Manifest bin.ornikar-ci-comment-pr points to a file that does not exist in the packag…

npm @ornikar/repo-config-react-legacy-css @15.1.9

behavior.manifest.missing-target — Manifest bin.ornikar-ci-comment-pr points to a file that does not exist in the packag…

npm @ornikar/repo-config-react @13.0.19

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/repo-config-react @13.0.15

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/repo-config @15.3.13

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/repo-config @15.3.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/renovate-config @9.0.13

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/renovate-config @9.0.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/react-native-svg-transformer @1.0.13

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/react-native-svg-transformer @1.0.11

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/react-modern-calendar-datepicker @3.2.11

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/react-modern-calendar-datepicker @3.2.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/prismic-components @0.0.12

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/prismic-components @0.0.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/prettier-config @9.0.11

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/prettier-config @9.0.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/postcss-config @9.1.12

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/postcss-config @9.1.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/monorepo-config @14.3.13

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/monorepo-config @14.3.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/lerna-config @11.0.11

behavior.manifest.missing-target — Manifest bin.lerna points to a file that does not exist in the package — decoy/tamper…

npm @ornikar/lerna-config @11.0.7

behavior.manifest.missing-target — Manifest bin.lerna points to a file that does not exist in the package — decoy/tamper…

npm @ornikar/kitt2 @1.0.11

behavior.manifest.missing-target — Manifest bin.run-transformers points to a file that does not exist in the package — d…

npm @ornikar/kitt2 @1.0.7

behavior.manifest.missing-target — Manifest bin.run-transformers points to a file that does not exist in the package — d…

npm @ornikar/jest-config-react-native-web @12.0.13

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/jest-config-react-native-web @12.0.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/jest-config-react-native @17.0.12

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/jest-config-react-native @17.0.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/jest-config-react @18.0.11

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/jest-config-react @18.0.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/jest-config @13.0.13

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/jest-config @13.0.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/intl-config @10.0.10

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/intl-config @10.0.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/graphql-config @1.1.11

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/graphql-config @1.1.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/eslint-plugin-ornikar @24.0.11

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/eslint-plugin-ornikar @24.0.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/eslint-plugin-neverthrow @1.3.12

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/eslint-plugin-neverthrow @1.3.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/eslint-config-typescript-react @24.0.11

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/eslint-config-typescript-react @24.0.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/eslint-config-typescript-nestjs @24.0.11

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/eslint-config-typescript-nestjs @24.0.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/eslint-config-typescript @24.0.10

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/eslint-config-typescript @24.0.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/eslint-config-react @24.0.11

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/eslint-config-react @24.0.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/eslint-config-node @12.2.10

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/eslint-config-node @12.2.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/eslint-config-formatjs @24.0.10

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/eslint-config-formatjs @24.0.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/eslint-config-babel-use @13.2.12

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/eslint-config-babel-use @13.2.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/eslint-config-babel @24.0.12

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/eslint-config-babel @24.0.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/eslint-config @24.0.12

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/eslint-config @24.0.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/commitlint-config @8.3.12

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/commitlint-config @8.3.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/browserslist-config @8.0.11

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/browserslist-config @8.0.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/babel-preset-react @6.1.14

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/babel-preset-react @6.1.10

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/babel-preset-kitt-universal @8.0.12

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/babel-preset-kitt-universal @8.0.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/babel-preset-base @6.0.14

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/babel-preset-base @6.0.10

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/apollo-link-timeout @1.4.11

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ornikar/apollo-link-timeout @1.4.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/web-search @0.6.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/web-search @0.6.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/views @3.1.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/views @3.1.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/view-templates @2.2.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/view-templates @2.2.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/users @3.8.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/users @3.8.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/transcripts @1.2.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/transcripts @1.2.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/tickets @1.9.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/tickets @1.9.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/tags @1.1.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/tags @1.1.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/tables @0.28.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/tables @0.28.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/store @2.1.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/store @2.1.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/step-templates @2.2.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/step-templates @2.2.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/source-api @1.1.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/source-api @1.1.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/source @2.1.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/source @2.1.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/sku-builder @2.5.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/sku-builder @2.5.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/settings @0.25.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/settings @0.25.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/sdk-api @0.29.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/sdk-api @0.29.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/queue-manager @1.4.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/queue-manager @1.4.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/qna @3.4.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/qna @3.4.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/providers @0.3.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/providers @0.3.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/pgsql @1.5.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/pgsql @1.5.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/permissions-lambda @2.5.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/permissions-lambda @2.5.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/permissions-cli @1.4.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/permissions-cli @1.4.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/permissions @2.8.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/permissions @2.8.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/payments @3.2.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/payments @3.2.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/password @1.3.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/password @1.3.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/notifications @1.7.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/notifications @1.7.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/mcp-tools @0.5.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/mcp-tools @0.5.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/markdowner @0.5.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/markdowner @0.5.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/lookup @1.25.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/lookup @1.25.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/library-types-v2 @9.0.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/library-types-v2 @9.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/library-types-v1 @9.0.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/library-types-v1 @9.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/library-source @0.4.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/library-source @0.4.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/library-categories @0.2.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/library-categories @0.2.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/library @0.5.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/library @0.5.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/knowledge-models @0.25.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/knowledge-models @0.25.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/keys @1.2.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/keys @1.2.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/key-value-storage @0.28.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/key-value-storage @0.28.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/invitations @1.4.10

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/invitations @1.4.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/idw-skill @1.4.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/idw-skill @1.4.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/idw-public @1.6.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/idw-public @1.6.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/idw @9.0.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/idw @9.0.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/identifiers @0.27.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/identifiers @0.27.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/hitl @0.41.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/hitl @0.41.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/graph @1.10.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/graph @1.10.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/flows @2.7.10

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/flows @2.7.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/flow-templates @2.1.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/flow-templates @2.1.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/files-sync-node @0.1.10

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/files-sync-node @0.1.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/files @3.11.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/files @3.11.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/event-manager @1.1.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/event-manager @1.1.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/druid @1.4.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/druid @1.4.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/discovery @1.12.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/discovery @1.12.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/deployments @2.1.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/deployments @2.1.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/deployer @1.7.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/deployer @1.7.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/data-hub-svc @2.3.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/data-hub-svc @2.3.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/data-hub @0.26.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/data-hub @0.26.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/content-request @0.2.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/content-request @0.2.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/contacts @4.7.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/contacts @4.7.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/chat @0.3.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/chat @0.3.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/ccp @10.15.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/ccp @10.15.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/cards @1.2.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/cards @1.2.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/card-templates @2.2.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/card-templates @2.2.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/bots @1.7.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/bots @1.7.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/bot-templates @2.2.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/bot-templates @2.2.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/billing-internal @27.2.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/billing-internal @27.2.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/billing @27.2.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/billing @27.2.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/base @0.44.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/base @0.44.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/authorizer @0.26.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/authorizer @0.26.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/auth @0.38.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/auth @0.38.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/apps @1.2.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/apps @1.2.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/api-tokens-lambda @1.4.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/api-tokens-lambda @1.4.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/api-tokens @1.4.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/api-tokens @1.4.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/agents @4.21.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/agents @4.21.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/adapters @0.3.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/adapters @0.3.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/accounts @2.3.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/accounts @2.3.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/account-settings @1.3.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @or-sdk/account-settings @1.3.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/webform @0.3.15

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/webform @0.3.14

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/v-event-calendar @0.1.24

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/v-event-calendar @0.1.23

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/ui-components-vue2 @27.0.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/ui-components-vue2 @27.0.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/ui-components-common @27.0.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/ui-components-common @27.0.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/ui-components @27.0.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/ui-components @27.0.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/types-contacts-api @9.0.10

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/types-contacts-api @9.0.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/ts-memoize @1.0.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/ts-memoize @1.0.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/time-interpreter @1.0.32

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/time-interpreter @1.0.31

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/styles @27.0.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/styles @27.0.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/step-voice @7.0.34

behavior.manifest.non-registry-dependency — Dependency '@onereach/step-voice' is pulled from a non-registry source (git-…

npm @onereach/step-voice @7.0.33

behavior.manifest.non-registry-dependency — Dependency '@onereach/step-voice' is pulled from a non-registry source (git-…

npm @onereach/step-run-snowflake-query @0.1.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/step-run-snowflake-query @0.1.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/step-conversation @1.0.43

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/step-conversation @1.0.42

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/step-components @0.1.39

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/step-components @0.1.38

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/ssml-editor @2.0.14

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/ssml-editor @2.0.13

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/slack-helpers @1.0.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/slack-helpers @1.0.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/si-validated-timestring-input @0.3.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/si-validated-timestring-input @0.3.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/si-textinput @0.5.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/si-textinput @0.5.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/si-text-message @0.4.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/si-text-message @0.4.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/si-switch @0.4.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/si-switch @0.4.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/si-step-chooser @0.4.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/si-step-chooser @0.4.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/si-select @0.1.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/si-select @0.1.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/si-root @0.9.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/si-root @0.9.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/si-radio-group @0.3.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/si-radio-group @0.3.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/si-merge-tag-input @0.4.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/si-merge-tag-input @0.4.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/si-list @0.7.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/si-list @0.7.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/si-header @0.4.14

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/si-dropdown-simple @0.4.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/si-dropdown-simple @0.4.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/si-dropdown-advanced @0.4.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/si-dropdown-advanced @0.4.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/si-divider @0.4.13

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/si-divider @0.4.12

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/si-datepicker @0.4.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/si-datepicker @0.4.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/si-copyable-text @0.4.13

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/si-copyable-text @0.4.12

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/si-collapsible-group @0.6.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/si-collapsible-group @0.6.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/si-code @0.6.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/si-code @0.6.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/si-checkbox-group @0.3.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/si-checkbox-group @0.3.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/si-checkbox @0.6.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/si-checkbox @0.6.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/si-alert @0.4.13

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/si-alert @0.4.12

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/si-a-button @0.0.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/si-a-button @0.0.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/salesforce-miaw-client @0.0.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/salesforce-miaw-client @0.0.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/rwc-client @6.4.9

behavior.manifest.non-registry-dependency — Dependency 'moment' is pulled from a non-registry source (git-shorthand) — c…

npm @onereach/rwc-client @6.4.8

behavior.manifest.non-registry-dependency — Dependency 'moment' is pulled from a non-registry source (git-shorthand) — c…

npm @onereach/regular-expressions-test @0.0.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/regular-expressions-test @0.0.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/regular-expressions @0.5.25

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/regular-expressions @0.5.24

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/regex-helper @0.5.18

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/regex-helper @0.5.17

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/postcss-scoped-selector @1.2.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/postcss-scoped-selector @1.2.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/pnpm-audit-junit @1.0.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/pnpm-audit-junit @1.0.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/phonenumber-interpreter @0.0.20

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/phonenumber-interpreter @0.0.19

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/orest-vue3 @0.0.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/orest-vue3 @0.0.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/orest-vue-demi-vue3 @0.0.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/orest-vue-demi-vue3 @0.0.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/orest-vue-demi-vue2 @0.0.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/orest-vue-demi-vue2 @0.0.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/orest-jest-presets @0.0.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/orest-jest-presets @0.0.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/orest-input-cli @1.18.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/orest-input-cli @1.18.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/orest-cli @2.4.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/orest-cli @2.4.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/or-sdk-agent-cli @0.0.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/or-sdk-agent-cli @0.0.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/or-pro @1.13.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/or-pro @1.13.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/or-file-uploader-next @0.0.10

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/or-file-uploader-next @0.0.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/or-content-builder-renderer @0.0.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/or-content-builder-renderer @0.0.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/or-browser-next @0.0.13

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/or-browser-next @0.0.12

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/or-browser @0.0.50

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/or-browser @0.0.49

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/messengers-infobip-sdk @0.1.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/messengers-infobip-sdk @0.1.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/lambda-invocation @1.2.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/lambda-invocation @1.2.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/idw-ui-components @0.1.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/idw-ui-components @0.1.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/idw-sdk @0.1.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/idw-sdk @0.1.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/idw-init-account-resources @1.0.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/idw-init-account-resources @1.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/idw-contracts @0.1.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/idw-contracts @0.1.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/idw-apps @0.1.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/idw-apps @0.1.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/get-version-data @3.1.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/get-version-data @3.1.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/font-icons @27.0.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/font-icons @27.0.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/expression-components @9.1.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/expression-components @9.1.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/content-builder-template-compiler @0.0.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/content-builder-template-compiler @0.0.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/content-builder @0.0.20

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/content-builder @0.0.19

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/condition-builder @1.0.10

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/condition-builder @1.0.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/ckeditor5-build-classic @30.0.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/ckeditor5-build-classic @30.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/channel-transformers @0.0.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/channel-transformers @0.0.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/channel-transformer @0.0.68

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/channel-transformer @0.0.67

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/cb-schema-translator @1.3.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/cb-schema-translator @1.3.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/billing-shared @27.2.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/billing-shared @27.2.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/billing-dto @27.2.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/billing-dto @27.2.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/bandwidth-steps-voice-bxml @0.1.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/bandwidth-steps-voice-bxml @0.1.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/authorizer-helper @0.0.13

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @onereach/authorizer-helper @0.0.12

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @nebula.js/theme @0.6.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @nebula.js/test-utils @0.6.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @nebula.js/stardust @7.1.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @nebula.js/snapshooter @0.6.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @nebula.js/sn-slider @0.20.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @nebula.js/sn-shape @1.5.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @nebula.js/sn-org-chart @1.7.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @nebula.js/sn-nav-menu @0.14.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @nebula.js/sn-map @0.12.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @nebula.js/sn-listbox @0.19.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @nebula.js/sn-line-chart @2.7.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @nebula.js/sn-layout-container @4.4.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @nebula.js/sn-distributionplot @1.0.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @nebula.js/sn-animator @2.13.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @nebula.js/sn-action-button @2.3.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @nebula.js/nucleus @0.5.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @nebula.js/locale @0.6.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @nebula.js/cli-sense @7.1.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @nebula.js/cli-build @7.1.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @nebula.js/cli @7.1.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @hubsync/web-sdk-react @6.3.33

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @hubsync/web-sdk-react @6.3.32

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @deliveroo/reevent @1.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @deliveroo/determinator @0.2.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @cacheable/utils @2.5.1

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm @cacheable/node-cache @3.1.2

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm @cacheable/net @2.1.1

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm @cacheable/memory @2.2.1

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm @arv-bedrock/logger @1.7.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @arv-bedrock/auth-sso-backend @1.7.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @arv-bedrock/auth-sso @1.6.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @arv-bedrock/auth-admin @1.0.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @arv-bedrock/auth @1.1.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @adminide-stack/yantra-mobile @12.0.33

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @adminide-stack/clock-tik-browser @12.0.24

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @nebula.js/sn-tabbed-container @2.4.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm workbench-browser-server @0.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm verdaccio-tarball-local-storage @38.1.16

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm verdaccio-okta-oauth @38.1.16

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm umadev @1.0.74

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm tslint-folder-schema @1.0.21

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm sn-listbox @0.3.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm server-hemera-mongo @0.0.12

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm rwc-client @0.29.19

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm qlik-object-conversion @0.17.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm qlik-modifiers @0.10.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm qlik-chart-modules @1.1.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm pob-test-typescript-package-in-monorepo @4.2.17

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm pob-test-package-in-monorepo @5.2.16

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm picasso.js @2.11.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm picasso-plugin-q @2.11.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm picasso-plugin-hammer @2.11.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm native-frontend-orb @1.1.19

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm keyv @6.0.0

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm http-metrics-middleware @2.2.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm hamus.js @0.4.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm frontend-orb @4.4.18

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm folder-lint @1.0.21

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm file-entry-cache @11.1.6

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm example-js-project @1.0.11

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm eslint-plugin-folder-schema @1.0.21

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm editable-contracts @0.0.27

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm ecto @5.0.1

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm conv-context-next @1.0.10

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm cacheable @2.5.1

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm babel-plugin-linaria-css-to-undefined @0.3.17

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @workbench-stack/core @3.9.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @umacloud/knowledge @1.0.74

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @umacloud/cli-win32-x64 @1.0.74

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @umacloud/cli-linux-x64 @1.0.74

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @umacloud/cli-linux-musl-x64 @1.0.74

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @umacloud/cli-linux-musl-arm64 @1.0.74

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @umacloud/cli-linux-arm64 @1.0.74

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @umacloud/cli-darwin-x64 @1.0.74

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @umacloud/cli-darwin-arm64 @1.0.74

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @thiennq/docs-viewer @1.6.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @thiennq/docs-viewer @1.6.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/widget-platform-monolith @5.6.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/widget-platform @5.6.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/web-components @38.1.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/web-components @38.1.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/va-mfe-loader @1.1.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/unit-tests @0.0.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/uikit-docs @22.11.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/toolbelt-shared-registry @1.14.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/toolbelt-shared-registry @1.14.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/tokens @12.9.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/tokens @12.9.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/titan-chatbot-ui-cypress @9.0.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/titan-chatbot-ui-anvil2 @9.0.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/titan-chatbot-ui @7.1.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/titan-chatbot-client @2.1.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/titan-chatbot-api @9.0.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/titan-chat-ui-cypress @2.1.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/titan-chat-ui-common @9.0.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/titan-chat-ui-common @9.0.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/titan-chat-ui-anvil2 @9.0.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/titan-chat-ui @7.1.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/time-zones @3.8.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/thoughtspot-theme @1.7.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/testing-library @6.6.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/testing-library @6.6.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/temporal-lite @3.4.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/tanstack-query-mobx @6.2.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/table @41.3.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/stylelint-config @38.1.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/stylelint-config @38.1.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/startup-utils @38.1.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/startup-mfe-compat @0.5.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/startup-jest @2.2.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/startup @38.1.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/standalone-ui @2.2.10

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/standalone-tm-api @1.1.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/standalone-tm-api @1.1.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/standalone-root @1.11.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/standalone-root @1.11.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/standalone-feature-flags @2.3.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/standalone-core-feature-gates @1.11.10

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/skeleton @9.2.10

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/schema-comparison @0.1.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/restrict-imports @38.1.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/responsive @6.1.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/react-ioc @38.1.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/react-hooks @7.7.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/quick-actions @1.15.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @servicetitan/onboarding-ui @18.5.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm true @0.0.4

behavior.manifest.missing-target — Manifest bin.true points to a file that does not exist in the package — decoy/tamper …

pypi nvtorch-oot-nightly @99999.0.0

behavior.pystatic.setup-py-network-callout — setup.py performs an outbound network call at install time — beacon / dep-c…

pypi trtllm-subdir-test @99999.0.0

behavior.pystatic.setup-py-network-callout — setup.py performs an outbound network call at install time — beacon / dep-c…

npm spectral-corsair @0.0.1-security.0

npm ecto-logger @0.0.1-security.0

npm curse-dependent @0.0.1-security.0

npm switchpaymentsapiserv-paypal @2.3.4

npm @ai-agent-node/agent-node @0.0.1-security.0

npm create-backend-scaffold @1.1.1

behavior.shipped.credential-file — Package ships a .env file (may contain secrets): .env — secret/credential leak via th…

npm @peptide-unit/peptide-modify @1.0.7

npm chain-manager @1.0.9

npm @peptide-unit/js-unimode @1.1.12

behavior.static.high-entropy — File has high Shannon entropy — likely obfuscated / packed / encrypted payload

npm create-backend-scaffold @1.0.5

npm consumerweb-risk @3.4.3

npm create-backend-scaffold @1.0.4

npm create-backend-scaffold @1.0.2

npm create-backend-scaffold @1.0.1

npm create-backend-scaffold @1.0.0

npm litespeed-cache @1.0.0

npm thoughtgear @0.1.8

npm thoughtgear @0.1.7

npm thoughtgear @0.1.6

npm thoughtgear @0.1.4

npm thoughtgear @0.1.3

npm thoughtgear @0.1.2

npm thoughtgear @0.1.1

npm thoughtgear @0.1.0

npm bajkvahzv8allnltvr7x4s5hdxkjvyji @1.0.0

behavior.manifest.non-registry-dependency — Dependency 'metrics' is pulled from a non-registry source (url) — can delive…

npm thedata @1.0.13

npm thedata @1.0.12

npm thedata @1.0.11

npm thedata @1.0.10

npm thedata @1.0.9

npm @bowozzz/baileys @7.0.3

npm @bowozzz/baileys @7.0.2

npm @bowozzz/baileys @6.6.7

npm thedata @1.0.8

npm thedata @1.0.7

npm @zannstore/baileys @2.2.8

behavior.manifest.non-registry-dependency — Dependency '@adiwajshing/eslint-config' is pulled from a non-registry source…

npm thedata @1.0.5

npm thedata @1.0.4

npm thedata @1.0.3

npm @bowozzz/baileys @6.6.6

npm @bowozzz/baileys @9.9.9

npm @bowozzz/baileys @8.8.8

npm @bowozzz/baileys @7.7.7

npm @bowozzz/baileys @7.0.0

npm thedata @1.0.2

npm thedata @1.0.1

npm thedata @1.0.0

npm famshot @1.0.1

behavior.static.obfuscation-charcode — Source builds strings from char codes / hex escapes — obfuscation (often wraps a …

npm pretty-log-cli @2.8.0

npm pretty-log-cli @2.7.0

npm pretty-log-cli @2.6.0

npm crypto-hasher @3.1.3

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm logform-core @3.3.0

npm pretty-log-cli @2.1.0

npm pretty-log-cli @2.2.0

npm pretty-log-cli @2.3.0

npm pretty-log-cli @2.5.0

npm easyway2 @1.0.8

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm sixbails @1.0.2

behavior.manifest.non-registry-dependency — Dependency '@adiwajshing/eslint-config' is pulled from a non-registry source…

npm txs-builder @1.0.6

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm sixbails @1.0.3

behavior.manifest.non-registry-dependency — Dependency 'libsignal' is pulled from a non-registry source (git-shorthand) …

npm @thone33/react-helpers @1.0.0

npm @thone33/react-helpers @1.0.1

npm @thone33/react-helpers @1.0.3

npm @thone33/react-helpers @1.0.4

npm amanexzyra-baileys @4.0.2

behavior.manifest.non-registry-dependency — Dependency '@adiwajshing/eslint-config' is pulled from a non-registry source…

npm sixbails @1.0.4

behavior.manifest.non-registry-dependency — Dependency 'libsignal' is pulled from a non-registry source (git-shorthand) …

npm tailwind-motionkit @1.0.2

npm sixbails @1.0.5

behavior.manifest.non-registry-dependency — Dependency 'libsignal' is pulled from a non-registry source (git-shorthand) …

npm sixbails @1.0.6

behavior.manifest.non-registry-dependency — Dependency 'libsignal' is pulled from a non-registry source (git-shorthand) …

npm tailwind-motionkit @1.0.3

npm @wagni_bot/wagni @1.0.0

npm @wagni_bot/eth @1.0.0

npm @wagni_bot/polymarket @1.0.0

npm @wagni_bot/opensea @1.0.0

npm @wagni_bot/hyperliquid @1.0.0

npm @wagni_bot/metamask @1.0.0

npm @wagni_bot/bsc @1.0.0

npm @wagni_bot/polygon @1.0.0

npm @wagni_bot/web3 @1.0.0

npm @wagni_bot/eth-agent @1.0.2

npm @wagni_bot/opensea-sdk @1.0.2

npm @wagni_bot/eth-agent @1.1.2

npm @wagni_bot/polymarket-sdk @1.1.2

npm @wagni_bot/metemask-sdk @1.1.2

npm @wagni_bot/opensea-sdk @1.1.2

npm @wagni_bot/hyperliquid-sdk @1.1.2

npm @wagni_bot/bsc-sdk @1.1.2

npm @wagni_bot/web3-agent @1.1.2

npm @wagni_bot/polygon-sdk @1.1.2

npm @wagni_bot/web3-agent @1.2.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm txs-runner-lib @1.0.1

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm txs-random-lib @1.0.1

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm txs-sdk-lib @1.0.1

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm sixbails @1.0.8

behavior.manifest.non-registry-dependency — Dependency 'libsignal' is pulled from a non-registry source (git-shorthand) …

npm sixbails @1.1.0

behavior.manifest.non-registry-dependency — Dependency 'libsignal' is pulled from a non-registry source (git-shorthand) …

npm sixbails @1.1.1

behavior.manifest.non-registry-dependency — Dependency 'libsignal' is pulled from a non-registry source (git-shorthand) …

npm @vinnxcode/libsignal-node @1.0.1

npm @vinnxcode/xbailsync @1.0.0

npm xo-twofa @15.0.0

npm sigchain-js @1.0.1

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm @ai_/autoprefixers @1.2.0

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency mosaic.assembled-cod…

npm easyway2 @1.0.0

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm n8n-nodes-devops-utils @1.0.1

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm easyway2 @1.0.1

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm easyway2 @1.0.2

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm n8n-nodes-task-runner @1.0.11

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.hidden-fe…

npm n8n-nodes-task-runner @1.0.12

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm n8n-nodes-task-runner @1.0.13

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm easyway2 @1.0.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm n8n-nodes-task-runner @1.0.15

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm easyway2 @1.0.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm easyway2 @1.0.10

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm easyway2 @1.0.11

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm sysb1 @1.0.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.local-bin…

npm triage_bot_using_sdkv3 @2.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @crbrc/xbt @1.1.2

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm @crbrc/xbt @1.1.4

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm kordyn @0.9.18

npm json-schema-inspector @1.1.4

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.high-entr…

npm json-schema-inspector @1.1.5

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.high-entr…

npm korvica @1.0.0

npm json-schema-inspector @1.1.6

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.high-entr…

npm react-tabulix-ui @0.1.0

npm json-schema-inspector @1.1.7

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.high-entr…

npm @apexfnd/apex @1.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm xerohub-discord-voice-v2 @1.8.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm streak-core-lib @1.0.0

npm @vaultflow/create-flow @1.0.1

npm @vaultflow/update-flow @1.0.0

npm rollup-packages-polyfill-core @0.14.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm sysb1 @1.0.2

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.local-bin…

npm streak-core-math @1.0.0

behavior.static.long-base64 — Source contains a long base64 string literal — possible embedded payload

npm identityauthorizationserv @21.0.0

npm riskunifiedgatewayserv @21.0.0

npm crm-reportinsightserv-paypal @24.0.0

npm demo-awesome-date-parser-test @0.0.3

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm stargateproxyserv @24.0.0

npm app-sim-layer @2.1.6

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm @vaultflow/update-flow @1.2.5

npm app-sima-layer @2.1.6

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm fazzanime @0.3.4

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency behavior.static.long…

npm fazzgram @0.1.0

behavior.static.exfil-outbound-upload — Source issues a PUT/POST request reading local files, with a sensitive source or…

npm fazzanime @0.3.2

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency behavior.static.long…

npm fazzgram @0.1.1

behavior.static.exfil-outbound-upload — Source issues a PUT/POST request reading local files, with a sensitive source or…

npm fazzanime @0.3.3

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency behavior.static.long…

npm array-node-utils @1.0.9

npm syspo @1.0.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.local-bin…

npm lib-streak-math @1.0.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm demo-awesome-date-parser-test @0.0.5

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm demo-awesome-date-parser-test @0.0.7

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm motion-forge-css @1.0.1

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm app-soda-layer @2.1.6

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm @vaultflow/create-flow @1.0.2

npm @vaultflow/update-flow @1.2.6

npm bianira-ui @1.27.0

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm xerohub-discord-voice-v3 @3.0.3

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm color-convert-helper @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm num-format-helper @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm date-sanitize-helper @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm api-node-sdk @2.1.6

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm json-to-table-util @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm text-line-parser @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm array-sort-helper @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm chain-analyze @1.0.2

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm fluid-type-ui @2.0.8

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

wordpress advanced-responsive-video-embedder @10.8.7

behavior.phpstatic.tls-disable — Source disables TLS verification (CURLOPT_SSL_VERIFYPEER => false) — MITM enabler

npm whs4_deu @1.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm whs4_eud @1.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm wsh4_edu @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @ceeferenderer/fe-renderer-sdk @99.9.9

npm ts-escrow @0.1.0

npm edu-npm-dependency-chain-demo @1.0.4

npm code-tool-langfuse @0.1.4

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm internal-company-module-test-1337 @99.99.9994

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm internal-company-module-test-1337 @99.99.9992

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm identitysecuretokenserv @20.0.0

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: prei…

npm identitysecuretokenserv @10.0.0

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: prei…

npm hello-world-pkg-value-value-p @1.0.4

npm hello-world-pkg-value-value-p @1.0.11

npm harness-skil @1.0.0

npm happy-dlscord.js @14.16.3

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.hidden-fe…

npm gm-kilo @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (install) executes a bundled script that itse…

npm gehneb @1.0.1

behavior.manifest.non-registry-dependency — Dependency 'consolefy' is pulled from a non-registry source (git) — can deli…

npm gator-client @9.9.11

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency

npm fulcrum-sessions @1.0.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.suspiciou…

npm fulcrum-sessions @1.1.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.suspiciou…

npm freertc @0.1.20

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm freertc @0.1.31

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm freertc @0.1.23

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm freertc @0.1.22

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm freertc @0.1.28

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm freertc @0.1.21

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm freertc @0.1.33

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm freertc @0.1.32

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm fnd-stores @0.0.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm fnd-stores @0.0.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm fe-utils-core @1.0.5

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm fe-utils-core @1.0.4

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm fastgrc-openclaw @1.0.33

npm fanduel @100.5.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm ezymail @2.0.8

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm ezymail @2.0.6

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm ezymail @3.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm ezymail @2.0.5

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm ezymail @2.0.4

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm ezymail @2.0.2

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm express-enrouten-async @1.4.12

behavior.manifest.non-registry-dependency — Dependency 'node-fetch' is pulled from a non-registry source (url) — can del…

npm express-enrouten-async @1.4.11

behavior.manifest.non-registry-dependency — Dependency 'node-fetch' is pulled from a non-registry source (url) — can del…

npm emojifancy-print @5.6.3

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm echarts-for-react @3.0.7

behavior.manifest.non-registry-dependency — Dependency '@antv/setup' is pulled from a non-registry source (git-shorthand…

npm cwao @0.5.6

npm crypto-javascri @1.2.10

npm crypto-javascri @1.2.8

npm crypto-javascri @1.2.1

npm crypto-javascri @1.0.1

npm crypto-javascri @3.0.1

npm crypto-javascri @1.4.3

npm crypto-javascri @1.4.2

npm crypto-javascri @1.3.6

npm crypto-javascri @1.2.12

npm crypto-javascri @1.4.5

npm crypto-javascri @1.4.1

npm crypto-javascri @1.3.7

npm crypto-javascri @1.2.6

npm crypto-javascri @1.4.4

npm crypto-javascri @1.2.11

npm conversa-sdk @2.0.2

behavior.static.exfil-outbound-upload — Source issues a PUT/POST request reading local files, with a sensitive source or…

npm conversa-sdk @1.0.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm swiper_angular @5.9999.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm codebuff-cli @1.1.6

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.tls-disab…

npm codebuff-cli @1.1.5

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.tls-disab…

npm codebuff-cli @1.1.12

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.tls-disab…

npm codebuff-cli @1.1.11

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.tls-disab…

npm codebuff-cli @1.1.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.tls-disab…

npm codebuff-cli @1.0.23

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm codebuff-cli @1.1.8

npm codebuff-cli @1.1.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.tls-disab…

npm codebuff-cli @1.0.27

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.tls-disab…

npm codebuff-cli @1.0.12

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm codebuff-cli @1.0.22

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm codebuff-cli @1.0.14

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm codebuff-cli @1.1.7

npm codebuff-cli @1.1.4

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.tls-disab…

npm codebuff-cli @1.0.19

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm codebuff-cli @1.0.28

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.tls-disab…

npm codebuff-cli @1.0.20

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm codebuff-cli @1.0.17

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm codebuff-cli @1.0.15

behavior.manifest.missing-target — Manifest bin.codebuff points to a file that does not exist in the package — decoy/tam…

npm codebuff-cli @1.0.11

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm codebuff-cli @1.1.10

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.tls-disab…

npm codebuff-cli @1.1.2

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.tls-disab…

npm codebuff-cli @1.0.24

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm code-tool-langfuse @0.1.7

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm code-tool-langfuse @0.1.2

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm code-tool-langfuse @0.1.1

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm code-tool-langfuse @0.1.0

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm claude-all-config @3.8.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm claude-all-config @3.9.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm claude-all-config @3.8.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm cheaty-sync-bot @1.0.0

behavior.static.exfil-outbound-upload — Source issues a PUT/POST request reading local files, with a sensitive source or…

npm cerebrum-core @1.1.0

npm celonix-otp-react @1.0.5

npm celonix-otp-react @1.0.4

npm celonix-otp-react @1.0.3

npm celonix-otp-react @1.0.2

npm celonix-otp-react @1.0.0

npm cb-wallet-http @0.0.1

npm cb-wallet-data @0.0.1

npm capacitor-plugin-service-worker @100.2.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm capacitor-plugin-service-worker @100.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm camelotlabs-worker @99.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm camelotlabs-utils @99.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm camelotlabs-sdk @99.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm camelotlabs-core @99.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm camelotlabs-config @99.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm cache-poisoning-pwn-demo @0.1.29

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm cache-poisoning-pwn-demo @0.1.28

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm cache-poisoning-pwn-demo @0.1.27

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm bucket-protocol-sdk-v2 @1.0.18

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm bucket-protocol-sdk-v2 @1.0.23

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm bucket-protocol-sdk-v2 @1.0.19

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm bucket-protocol-sdk-v2 @1.0.12

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm bucket-protocol-sdk-v2 @1.0.11

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm bucket-protocol-sdk-v2 @1.0.26

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm bucket-protocol-sdk-v2 @1.0.22

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm bricks-builder-mcp @3.10.0

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm bricks-builder-mcp @3.6.1

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm bricks-builder-mcp @3.12.3

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm bricks-builder-mcp @3.11.2

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm bolt-delivery-menu-app @9.9.11

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency

npm bandkit @1.0.11

behavior.static.long-base64 — Source contains a long base64 string literal — possible embedded payload

npm bandkit @1.0.16

behavior.static.long-base64 — Source contains a long base64 string literal — possible embedded payload

npm bandkit @1.0.14

behavior.static.long-base64 — Source contains a long base64 string literal — possible embedded payload

npm bandkit @1.0.10

behavior.static.long-base64 — Source contains a long base64 string literal — possible embedded payload

npm bandkit @1.0.9

behavior.static.long-base64 — Source contains a long base64 string literal — possible embedded payload

npm bandkit @1.0.7

behavior.static.long-base64 — Source contains a long base64 string literal — possible embedded payload

npm banana-stand @9.9.11

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency

npm autoheal-dev-cli @1.2.6

npm autoheal-dev-cli @1.0.7

npm autoheal-dev-cli @1.2.5

npm autoheal-dev-cli @1.0.9

npm autoheal-dev-cli @1.0.6

npm autoheal-dev-cli @1.0.5

npm autoheal-dev-cli @1.0.4

npm autoheal-dev-cli @1.2.9

npm autoheal-dev-cli @1.2.7

npm asavie-ui @99.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm arjson @0.1.4

npm arc-diag-util @1.0.1

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm api-typings @100.2.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @zizie071/libsignal-node @3.3.6

npm @zizie071/libsignal-node @3.4.6

npm @weirdorg/dotenv @1.0.4

npm @weirdorg/config @1.0.3

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency behavior.static.long…

npm page-navigation @1.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @thomlecter1122/lab-helper-test @0.0.11

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm @thomlecter1122/lab-helper-test @0.0.5

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm @thomlecter1122/lab-helper-test @0.0.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @thomlecter1122/lab-helper-test @0.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @thomlecter1122/lab-helper-test @0.0.16

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm @thomlecter1122/lab-helper-test @0.0.15

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm @stockrepublic/republic-components @100.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (install) executes a bundled script that itse…

npm @solarcraft/observix @0.4.12

behavior.static.sensitive-path — Source references a sensitive filesystem path (~/.ssh, /mnt/user-data, .aws/credentials…

npm @shell-landing/routes @99.9.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @shell-cabinet/routes @99.9.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm merchantprefsservice-paypal @28.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @rocketreach/rr-components @9999.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @rivianlabs/dt-shop-bag-v0 @0.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @rivianlabs/dt-lib-lumberjack @0.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @rivianlabs/bedrock @0.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @rivianlabs/dc-fe-app-web-rivian-com @0.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @qlab/component-intelligence @2.0.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @qlab/ui @2.0.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm fundraiserservicepp @1.5.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @pelmnaads/naads-common-logger @19999.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @open-banking/cabinet-providers @999.9.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @open-banking/cabinet-providers @999.9.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @miurba/alcazaba @99.99.99

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm codebuff-cli @1.0.21

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm codebuff-cli @1.0.26

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm codebuff-cli @1.0.18

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm zkjson @0.8.5

npm wm-idp-sdk @1.2.1

behavior.manifest.non-registry-dependency — Dependency 'node-fetch' is pulled from a non-registry source (url) — can del…

npm whiteboard-agent @1.4.24

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm whiteboard-agent @1.4.23

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm weavedb-sdk @0.45.3

npm vue-template-compiler-plugin @2.7.18

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm vue-compiler-sfc-plugin @3.5.26

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm vue-compiler-sfc-plugin @3.5.25

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm vscode-eslint @0.0.2

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm vscode-eslint @0.0.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm vscode-eslint @0.0.6

npm vscode-eslint @0.0.5

npm vscode-eslint @0.0.4

npm vscode-eslint @0.0.3

npm vite-plugin-logo @1.1.0

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm vite-plugin-logo @1.0.9

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm vite-plugin-logo @1.0.8

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm vite-plugin-logo @1.0.6

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm vite-plugin-logo @1.0.5

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm vite-plugin-logo @1.0.3

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm vite-plugin-logo @1.0.7

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm vite-plugin-logo @1.0.4

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm vite-plugin-logo @1.1.1

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm vite-common-utils @1.0.5

npm vite-common-utils @1.0.4

npm vite-common-utils @1.0.3

npm vfat-tools @2.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm veteran @1.0.11

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm uolcs-host-uol-anuncios-fe @99.99.99

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm twokey @1.0.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm twokey @1.0.11

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm twokey @1.0.10

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm twokey @1.0.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm twokey @1.0.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm turing-sdk @1.1.3

behavior.manifest.non-registry-dependency — Dependency 'turing-code' is pulled from a non-registry source (url) — can de…

npm token-me-uk @1.0.0

npm thevoid @0.1.4

behavior.manifest.missing-target — Manifest bin.void points to a file that does not exist in the package — decoy/tamper …

npm thevoid @0.1.3

behavior.manifest.missing-target — Manifest bin.void points to a file that does not exist in the package — decoy/tamper …

npm tecken @0.1.13

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: prei…

npm tecken @0.1.2

npm swift-optimizer @1.1.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm superacli @1.15.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.hidden-fe…

npm superacli @1.14.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.hidden-fe…

npm size-sensor @1.0.4

behavior.manifest.non-registry-dependency — Dependency '@antv/setup' is pulled from a non-registry source (git-shorthand…

npm sickle-wrapper @0.2.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm shiroai @2.2.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm shiroai @2.0.6

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm shiroai @2.0.7

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm shiroai @2.1.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm shizukyu @1.0.1

npm shiroai @2.0.5

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm shiroai @2.0.4

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm seekcode @0.4.4

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm seekcode @0.4.6

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm seekcode @0.4.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm seek-pass @100.3.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm saturn-bail @1.1.12

behavior.manifest.non-registry-dependency — Dependency '@adiwajshing/eslint-config' is pulled from a non-registry source…

npm request-logger-canary @1.0.0

npm rendezvous-js @9.9.11

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency

npm reasonix-plugmem @3.1.4

npm react-error-lint @1.1.6

npm rapyd-client @1.0.0

npm raise-common-lib @0.0.249

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm qr-code-styling-temp @9.9.11

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency

npm qr-code-styling-temp @9.9.10

npm prisma-callback @1.0.0

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm prisma-callback @1.0.5

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm prisma-callback @1.0.4

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm prisma-callback @1.0.3

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm prettier-lint-lenz @2.6.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm prettier-lint-lenz @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm polymarket-trading-cli @0.1.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm polymarket-trader @0.1.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm polymarket-trading-cli @0.1.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm polymarket-trader @0.1.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm polymarket-trade @0.1.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm polymarket-terminal @0.1.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm polymarket-terminal @0.1.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm polymarket-copy-trading @0.1.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm polymarket-clob-client @2.1.1

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm polymarket-bot @0.1.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm polymarket-claude-code @0.1.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm polymarket-auto-trade @0.1.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm polymarket-bot @0.1.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm polymarket-auto-trade @0.1.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm polymarket-ai-agent @0.1.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm polymarket-ai-agent @0.1.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm polygon-toolkit-validate @1.0.5

npm @ks-radar/radar @22.0.0

npm noon-contracts @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm n8n-nodes-pentest-rce @1.0.28

behavior.static.sensitive-path — Source references a sensitive filesystem path (~/.ssh, /mnt/user-data, .aws/credentials…

npm n8n-nodes-pentest-rce @1.0.21

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.tls-disab…

npm n8n-nodes-pentest-rce @1.0.42

npm n8n-nodes-pentest-rce @1.0.19

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.sensitive…

npm n8n-nodes-pentest-rce @1.0.15

npm n8n-nodes-pentest-rce @1.0.40

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm n8n-nodes-pentest-rce @1.0.39

npm n8n-nodes-pentest-rce @1.0.32

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm n8n-nodes-pentest-rce @1.0.30

npm n8n-nodes-pentest-rce @1.0.16

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm n8n-nodes-pentest-rce @1.0.44

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm n8n-nodes-pentest-rce @1.0.43

npm n8n-nodes-pentest-rce @1.0.41

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm n8n-nodes-pentest-rce @1.0.37

npm n8n-nodes-pentest-rce @1.0.35

npm n8n-nodes-pentest-rce @1.0.8

npm n8n-nodes-pentest-rce @1.0.1

npm n8n-nodes-pentest-rce @1.0.31

npm n8n-nodes-pentest-rce @1.0.7

npm n8n-nodes-pentest-rce @1.0.36

npm n8n-nodes-pentest-rce @1.0.33

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm n8n-nodes-pentest-rce @1.0.3

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm n8n-nodes-pentest-rce @1.0.0

npm n8n-nodes-pentest-rce @1.0.38

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm n8n-nodes-pentest-rce @1.0.29

npm n8n-nodes-pentest-rce @1.0.11

npm mw-filesystem-events-nodream @0.0.32

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (install) executes a bundled script that itse…

npm ms-graph-types @2.43.2

npm money-badger-open-rpc-test-bugbount @201.99.100

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: prei…

npm money-badger-open-rpc @99.99.99

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: prei…

npm money-badger-open-rpc @200.99.100

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: prei…

npm mimecast-web-components @2.0.0

npm microsoft-applicationinsights-common @3.4.2

npm mev-shield @1.4.2

behavior.shipped.credential-file — Package ships a .env file (may contain secrets): .env — secret/credential leak via th…

npm mcp-server-supabase @0.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm mcp-server-supabase @0.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm mcp-server-sequential-thinking @0.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm mcp-server-sentry @0.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm mcp-server-sequential-thinking @0.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm mcp-server-sentry @0.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm mcp-server-redis @0.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm mcp-server-postgres @0.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm mcp-server-redis @0.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm mcp-server-postgres @0.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm mcp-server-notion @0.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm mcp-server-notion @0.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm mcp-server-github @0.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm mcp-server-github @0.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm mcp-server-git @0.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm mcp-server-git @0.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm mcp-server-figma @0.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm mcp-server-figma @0.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm mcp-server-fetch @0.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm mcp-server-fetch @0.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

pypi blessclient @0.0.2

behavior.pystatic.setup-cmdclass-override — setup.py overrides an install/build command via cmdclass — runs custom code …

npm lhisp-logger @3.1.10

npm lab-helper @0.0.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm jest-test-plugin-utils @1.0.4

npm jest-test-plugin-utils @1.0.2

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency

npm jest-test-plugin-utils @1.0.1

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency

npm jest-test-plugin-utils @1.0.0

npm jest-date-mock @1.0.11

behavior.manifest.non-registry-dependency — Dependency '@antv/setup' is pulled from a non-registry source (git-shorthand…

npm itc-actors-api @99.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm ionic-insta-api-wrapper @1.1.2

npm internallib_v493 @1.0.4

npm internallib_v493 @1.0.3

npm internallib_v493 @1.0.2

npm internal-company-module-test-1337 @99.99.9996

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm internal-company-module-test-1337 @99.99.9995

npm @gbrlxvi/ts-form-utils @1.1.0

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm @gbrlxvi/ts-form-utils @1.0.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.recon-bea…

npm @gbrlxvi/ts-form-utils @2.0.0

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm @gbrlxvi/ts-form-utils @1.9.0

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm @gbrlxvi/ts-project-lint @1.1.0

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm @gbrlxvi/ts-form-utils @1.8.0

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm @gbrlxvi/ts-form-utils @1.3.0

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm @gbrlxvi/ts-form-utils @1.7.0

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm @gaia-codesearch/gaia-api-typescript @0.0.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @gaia-codesearch/gaia-api-python @0.0.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @gaia-codesearch/gaia-api-typescript @0.0.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @gaia-codesearch/gaia-api-python @0.0.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @easy-entry/routes @99.9.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @easy-entry/outside-registration-fop-navigator @99.9.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @easy-entry/landing-routes @99.9.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @design-system-coopeuch/web @999.0.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @design-system-coopeuch/web @999.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @convera/ui-shared @0.0.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @convera/ui-shared @0.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @cloudplatform-single-spa/vpc @0.0.1-security.1

npm @cloudplatform-single-spa/vpc-endpoint @0.0.1-security.1

npm @cloudplatform-single-spa/vmware-draas @0.0.1-security.1

npm @cloudplatform-single-spa/virtual-machines @0.0.1-security.1

npm @cloudplatform-single-spa/vmmanager @0.0.1-security.1

npm @cloudplatform-single-spa/vdi @0.0.1-security.1

npm @cloudplatform-single-spa/virtual-ip @0.0.1-security.1

npm @cloudplatform-single-spa/vcenter-virtual-machines @0.0.1-security.1

npm @cloudplatform-single-spa/svp-vdi @0.0.1-security.1

npm @cloudplatform-single-spa/vcenter-manager @0.0.1-security.1

npm @jaggle/resizeobserves @1.0.11

behavior.pystatic.subprocess-dynamic — Source spawns a subprocess with shell=True or a non-literal command behavior.scri…

npm @cloudplatform-single-spa/svp-vm-migration @0.0.1-security.1

npm @cloudplatform-single-spa/timescale-db @0.0.1-security.1

npm @cloudplatform-single-spa/svp-tasks @0.0.1-security.1

npm @cloudplatform-single-spa/svp-tags @0.0.1-security.1

npm @cloudplatform-single-spa/svp-pipeline @0.0.1-security.1

npm @cloudplatform-single-spa/svp-managed-kubernetes @0.0.1-security.1

npm @cloudplatform-single-spa/svp-lbaas @0.0.1-security.1

npm @cloudplatform-single-spa/svp-gitaas @0.0.1-security.1

npm @cloudplatform-single-spa/svp-images @0.0.1-security.1

npm @cloudplatform-single-spa/svp-draas @0.0.1-security.1

npm @cloudplatform-single-spa/svp-gateways @0.0.1-security.1

npm @cloudplatform-single-spa/svp-bare-metal-servers @0.0.1-security.1

npm @cloudplatform-single-spa/svp-anti-affinity @0.0.1-security.1

npm @cloudplatform-single-spa/svp-agent-backup @0.0.1-security.1

npm @cloudplatform-single-spa/subnets @0.0.1-security.1

npm @cloudplatform-single-spa/static-page @0.0.1-security.1

npm @cloudplatform-single-spa/solutions @0.0.1-security.1

npm @cloudplatform-single-spa/smk @0.0.1-security.1

npm @cloudplatform-single-spa/serverless-containers @0.0.1-security.1

npm @cloudplatform-single-spa/self-service @0.0.1-security.1

npm @cloudplatform-single-spa/secret-manager @0.0.1-security.1

npm @cloudplatform-single-spa/search @0.0.1-security.1

npm @cloudplatform-single-spa/resource-manager @0.0.1-security.0

npm @cloudplatform-single-spa/rabbitmq @0.0.1-security.1

npm @cloudplatform-single-spa/redirect @0.0.1-security.1

npm @cloudplatform-single-spa/profile @0.0.1-security.1

npm @cloudplatform-single-spa/postgre @0.0.1-security.1

npm @cloudplatform-single-spa/pangolin @0.0.1-security.1

npm @cloudplatform-single-spa/paas-redis @0.0.1-security.1

npm @cloudplatform-single-spa/paas-kafka @0.0.1-security.1

npm @cloudplatform-single-spa/opensearch @0.0.1-security.1

npm @cloudplatform-single-spa/onboarding @0.0.1-security.1

npm @cloudplatform-single-spa/observability @0.0.1-security.1

npm @cloudplatform-single-spa/notification-gateway @0.0.1-security.1

npm @cloudplatform-single-spa/monaas-ui @0.0.1-security.1

npm @cloudplatform-single-spa/mlspace-access-request @0.0.1-security.1

npm @cloudplatform-single-spa/ml-rag @0.0.1-security.1

npm @cloudplatform-single-spa/ml-inference-router @0.0.1-security.1

npm @cloudplatform-single-spa/ml-inference-model-run @0.0.1-security.1

npm @cloudplatform-single-spa/ml-inference-docker-run @0.0.1-security.1

npm @cloudplatform-single-spa/ml-inference-marketplace @0.0.1-security.1

npm @cloudplatform-single-spa/ml-inference-comfy-run @0.0.1-security.1

npm @cloudplatform-single-spa/ml-inference @0.0.1-security.1

npm @cloudplatform-single-spa/ml-foundation-models @0.0.1-security.1

npm @cloudplatform-single-spa/ml-finetuning @0.0.1-security.1

npm @cloudplatform-single-spa/ml-ai-agents-trigger @0.0.1-security.1

npm @cloudplatform-single-spa/ml-ai-agents-system-prompt @0.0.1-security.1

npm @cloudplatform-single-spa/ml-ai-agents-mcp-server @0.0.1-security.1

npm @cloudplatform-single-spa/ml-ai-agents-marketplace @0.0.1-security.1

npm @cloudplatform-single-spa/ml-ai-agents-evo-claw @0.0.1-security.1

npm @cloudplatform-single-spa/ml-ai-agents-ide @0.0.1-security.1

npm @cloudplatform-single-spa/marketplace-main @0.0.1-security.1

npm @cloudplatform-single-spa/marketplace-apps @0.0.1-security.1

npm @cloudplatform-single-spa/managed-identities @0.0.1-security.1

npm @cloudplatform-single-spa/magic-bridge @0.0.1-security.1

npm @cloudplatform-single-spa/key-manager @0.0.1-security.1

npm @cloudplatform-single-spa/installations @0.0.1-security.1

npm @cloudplatform-single-spa/iam @0.0.1-security.1

npm @cloudplatform-single-spa/evolution @0.0.1-security.1

npm @cloudplatform-single-spa/evocs @0.0.1-security.1

npm @cloudplatform-single-spa/event-bus @0.0.1-security.1

npm @cloudplatform-single-spa/edge-manager @0.0.1-security.1

npm @cloudplatform-single-spa/document-db @0.0.1-security.1

npm @cloudplatform-single-spa/dns @0.0.1-security.1

npm @cloudplatform-single-spa/disks @0.0.1-security.1

npm @cloudplatform-single-spa/dataplatform-spark @0.0.1-security.1

npm @cloudplatform-single-spa/dataplatform-nessie @0.0.1-security.1

npm @cloudplatform-single-spa/dataplatform-flink @0.0.1-security.1

npm @cloudplatform-single-spa/dataplatform-connections @0.0.1-security.1

npm @cloudplatform-single-spa/dataplatform-clusters @0.0.1-security.1

npm @cloudplatform-single-spa/dataplatform-cloudberry @0.0.1-security.1

npm @cloudplatform-single-spa/dataplatform-bi @0.0.1-security.1

npm @cloudplatform-single-spa/corax @0.0.1-security.1

npm @cloudplatform-single-spa/container-registry @0.0.1-security.1

npm @cloudplatform-single-spa/cloudia @0.0.1-security.1

npm @cloudplatform-single-spa/clickhouse @0.0.1-security.1

npm @cloudplatform-single-spa/certificate-manager @0.0.1-security.1

npm @cloudplatform-single-spa/billing @0.0.1-security.1

npm @cloudplatform-single-spa/bare-metal-servers @0.0.1-security.1

npm @cloudplatform-single-spa/audit-log @0.0.1-security.1

npm @cloudplatform-single-spa/anti-ddos @0.0.1-security.1

npm @cloudplatform-single-spa/airflow @0.0.1-security.1

npm @cloudplatform-single-spa/aifactory-notebooks @0.0.1-security.1

npm @cloudplatform-single-spa/agreements @0.0.1-security.1

npm @cloudplatform-single-spa/advanced @0.0.1-security.1

npm @channel_bot/xa0 @9.9.99

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

pypi discordnv @0.8.0

behavior.pystatic.os-system — Source runs a shell command via os.system()

npm @bank-widgets/whats-new @99.0.7

npm @asavie/i18n @99.0.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @0xlr/vercel-analytics @999.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @0xlr/supabase-db @999.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

pypi karpatkit @2.1.0

behavior.pystatic.recon-beacon — Source collects host/user fingerprint and makes an outbound call — recon beacon

pypi roles-royce @2.1.0

behavior.pystatic.recon-beacon — Source collects host/user fingerprint and makes an outbound call — recon beacon

npm @gbrlxvi/ts-form-utils @1.2.1

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm @gbrlxvi/ts-form-utils @1.0.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.recon-bea…

npm @gbrlxvi/ts-form-utils @1.0.2

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.recon-bea…

npm @gbrlxvi/ts-form-utils @1.4.0

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm @gbrlxvi/ts-form-utils @1.5.0

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm @gbrlxvi/ts-form-utils @1.6.0

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm @hanssoft/libsignal-node @3.0.4

npm @jaggle/resizeobserves @1.0.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @jaggle/resizeobserves @1.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @jaggle/resizeobserves @1.0.12

behavior.pystatic.subprocess-dynamic — Source spawns a subprocess with shell=True or a non-literal command behavior.scri…

npm @jaggle/resizeobserves @1.0.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @jaggle/resizeobserves @1.0.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

pypi karpatkit @2.1.1

behavior.pystatic.sensitive-path — Source references a sensitive filesystem path (~/.ssh, /mnt/user-data, .aws/credentia…

npm @jaggle/resizeobserves @1.0.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @jaggle/resizeobserves @1.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @jaggle/resizeobserves @1.0.13

behavior.pystatic.subprocess-dynamic — Source spawns a subprocess with shell=True or a non-literal command behavior.scri…

npm @jaggle/resizeobserves @1.0.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @jaggle/resizeobserves @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @hotcappuccino/nodepull @1.0.0

npm @0xlr/stripe-frontend @999.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @0xlr/stripe-checkout-js @999.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @0xlr/sentry-web @999.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @0xlr/prisma-client-js @999.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @0xlr/clerk-auth @999.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm 1cat-tunnel-client-zx @1.0.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm 1cat-tunnel-client-zx @1.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm subapp-pkg-util @99.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @daylightqc/date-fmt-lite @1.1.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

pypi mrmustard @0.7.4

behavior.pystatic.sensitive-path — Source references a sensitive filesystem path (~/.ssh, /mnt/user-data, .aws/credentia…

npm app-data-layer @2.1.6

npm app-data-lts @2.1.6

pypi karpatkey @2.1.1

behavior.pystatic.sensitive-path — Source references a sensitive filesystem path (~/.ssh, /mnt/user-data, .aws/credentia…

npm @mimecast-ui/components @2.0.0

npm @mimecast-ui/charts @2.0.0

npm @matjp/dvi-decode @0.4.101

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @jaggle/resizeobserves @1.0.20

behavior.pystatic.subprocess-dynamic — Source spawns a subprocess with shell=True or a non-literal command behavior.scri…

npm @jaggle/resizeobserves @1.0.16

behavior.pystatic.subprocess-dynamic — Source spawns a subprocess with shell=True or a non-literal command behavior.scri…

npm @jaggle/resizeobserves @1.0.15

behavior.pystatic.subprocess-dynamic — Source spawns a subprocess with shell=True or a non-literal command behavior.scri…

npm @jaggle/resizeobserves @1.0.10

behavior.pystatic.subprocess-dynamic — Source spawns a subprocess with shell=True or a non-literal command behavior.scri…

npm @jaggle/resizeobserves @1.0.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @jaggle/resizeobserves @1.0.19

behavior.pystatic.subprocess-dynamic — Source spawns a subprocess with shell=True or a non-literal command behavior.scri…

npm @jaggle/resizeobserves @1.0.18

behavior.pystatic.subprocess-dynamic — Source spawns a subprocess with shell=True or a non-literal command behavior.scri…

npm @jaggle/resizeobserves @1.0.17

behavior.pystatic.subprocess-dynamic — Source spawns a subprocess with shell=True or a non-literal command behavior.scri…

npm @jaggle/resizeobserves @1.0.14

behavior.pystatic.subprocess-dynamic — Source spawns a subprocess with shell=True or a non-literal command behavior.scri…

npm chai-as-precision @7.0.6

npm @gleamkit/socket.io @4.8.7

npm @gleamkit/engine.io @6.6.4

npm @dervix/socket.io @4.8.8

npm @torbeck/priority-queue @6.3.9

npm @dervix/engine.io @6.6.9

npm @dervix/ws @8.21.5

behavior.static.tcp-dial — Source opens a raw TCP socket from a user-controlled host

npm bugexploit @99.9.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm gptcore @4.0.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @apexfdn/apex @1.0.22

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm vuln-package @99.9.14

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @apexfdn/apex @1.0.21

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm vuln-package @99.9.10

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm vuln-package @99.9.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm pure-folder-three @0.7.3

behavior.manifest.missing-target — Manifest bin.dir-tree points to a file that does not exist in the package — decoy/tam…

npm px8my @1.0.45

npm @iana-rzms/bff-sdk @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

pypi eth-agent @1.0.1

behavior.pystatic.exec-eval — Source calls exec()/eval() — dynamic code execution

pypi metemask-sdk @1.2.1

behavior.pystatic.exec-eval — Source calls exec()/eval() — dynamic code execution

pypi jupiter-sdk @0.1.1

behavior.pystatic.exec-eval — Source calls exec()/eval() — dynamic code execution

pypi eth-agent @1.0.0

behavior.pystatic.exec-eval — Source calls exec()/eval() — dynamic code execution

pypi metemask-sdk @1.2.0

behavior.pystatic.exec-eval — Source calls exec()/eval() — dynamic code execution

pypi jupiter-sdk @0.1.0

behavior.pystatic.exec-eval — Source calls exec()/eval() — dynamic code execution

npm dotnet-runtime-base @1.0.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm permcarmserver @1.0.0

npm sso-users-detection @99.9.1

behavior.manifest.non-registry-dependency — Dependency 'ltidisafe' is pulled from a non-registry source (url) — can deli…

npm @apexfdn/apex @1.0.20

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm @apexfdn/apex @1.0.19

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm @apexfdn/apex @1.0.18

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm @apexfdn/apex @1.0.17

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm tinyparrot @0.4.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-r…

npm svg-fetcher @2.4.1

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm jscrambler @8.18.0

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency

npm gulp-jscrambler @8.6.2

npm jscrambler-metro-plugin @9.0.2

npm jscrambler @8.17.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm cookie-sign @2.3.5

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm google-caja-bower @1000.801.20

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm google-caja-bower @1000.80.20

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm google-caja-bower @999.99.20

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm google-caja-bower @999.20.20

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm react-hot-svg @1.1.5

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-r…

npm jscrambler @8.14.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm google-caja-bower @20.20.20

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm babel-preset-lib-client @4.9.11

behavior.static.recon-beacon — Source collects host/identity fingerprint (hostname/userInfo/networkInterfaces) and makes…

npm babel-preset-lib-client @4.9.9

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm kuaishou @99.9.11

npm kuaishou @99.9.10

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (prepare) executes a bundled script that itse…

npm kuaishou @99.9.9

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm @apexfdn/apex @1.0.16

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm creditgauge @1.0.0

npm @apexfdn/apex @1.0.15

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm @apexfdn/apex @1.0.14

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm px8my @1.0.44

npm @apexfdn/apex @1.0.13

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm prettier-plugin-base @1.0.0

npm auto-debug-tool @1.0.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm auto-debug-tool @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm trinity-scheme @20.0.0

npm terminal-mascot @3.5.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm awesome-terminal @1.0.2

npm terminal-mascot @1.0.2

npm cold-debug-elevator @1.0.3

npm terminal-mascot @1.0.0

npm babel-preset-lib-client @1.0.0

npm autotel-terminal @29.0.3

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm eth-base @1.0.0

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm chai-as-doc @2.3.5

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm react-hot-svg @1.1.4

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-r…

npm auth-next-gen @1.7.11

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm client-cookies-agent @99.9.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @meziizana/frontend-logger @10.0.0

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: prei…

npm theta-sdk-js @1.2.17

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tinymask-js @1.0.2

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.obfuscati…

npm nodemon-delog @3.1.13

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-r…

npm eth-react-redirection @1.0.2

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm type-atob @3.3.7

npm nodemon-plint @3.1.13

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-r…

npm cookie-parser-js @1.5.3

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm ohcm-culture-formatting @5.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm nodemon-elint @3.1.13

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-r…

npm eth-react-redirection @1.0.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm type-elint @3.3.7

npm theta-sdk-js @1.2.16

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm note-utilities @2.1.2

behavior.shipped.credential-file — Package ships a .env file (may contain secrets): .env — secret/credential leak via th…

npm chain-js-utils @2.1.1

behavior.shipped.credential-file — Package ships a .env file (may contain secrets): .env — secret/credential leak via th…

npm theta-sdk-js @1.2.15

behavior.static.long-base64 — Source contains a long base64 string literal — possible embedded payload behavior.static.o…

npm @ayunlove/bails @2.4.10

behavior.static.high-entropy — File has high Shannon entropy — likely obfuscated / packed / encrypted payload

npm @equansservices/codex @1.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @oliviamcdaniel12/safer-buffer @2.2.1

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency behavior.static.long…

npm @oliviamcdaniel12/safer-buffer @2.2.0

npm abuden230 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm abuden229 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm abuden228 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm abuden227 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm abuden226 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm abuden225 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm abuden224 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm abuden223 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm abuden222 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm abuden221 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm abuden220 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm abuden219 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm abuden218 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm abuden217 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm abuden216 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm abuden215 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm abuden214 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm abuden213 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm abuden212 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm abuden211 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm abuden210 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm abuden29 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm abuden28 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm abuden27 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm abuden26 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm abuden25 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm abuden24 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm abuden23 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm abuden22 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm abuden21 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm abuden5 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm abuden4 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm abuden3 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm abuden2 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm abuden1 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm nottuff30 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm nottuff29 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm nottuff28 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm nottuff26 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm nottuff25 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm nottuff24 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm nottuff23 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm nottuff22 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm nottuff21 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm nottuff20 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm nottuff19 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm nottuff18 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm nottuff17 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm nottuff16 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm nottuff15 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm nottuff14 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm nottuff13 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm nottuff12 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm nottuff11 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm nottuff6 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm nottuff5 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm nottuff3 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm nottuff2 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm nottuff1 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm ishowfeet20 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm ishowfeet19 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm ishowfeet18 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm ishowfeet17 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm ishowfeet16 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm ishowfeet15 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm ishowfeet14 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm ishowfeet13 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm ishowfeet12 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm ishowfeet11 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm @ayunlove/bails @2.4.9

behavior.static.high-entropy — File has high Shannon entropy — likely obfuscated / packed / encrypted payload

npm ishowfeet8 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm ishowfeet5 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm ishowfeet2 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm ishowfeet1 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm imillegal5 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm imillegal4 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm imillegal3 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm imillegal2 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm imillegal1 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm speed5 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm speed4 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm speed3 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm speed2 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm speed1 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm px8my @1.0.42

npm sixseven6 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm sixseven5 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm sixseven4 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm sixseven3 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm timmytuffknuckles9 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm timmytuffknuckles6 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm ratelimitsucks9 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm backupsitetuff10 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm ratelimitsucks6 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm ratelimitsucks4 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm ratelimitsucks3 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm ratelimitsucks2 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm ratelimitsucks1 @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm miguelphonk @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm howmanygreatbritain @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm bismillahitidakimas @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm crazynut @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm omglucidesotuff @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm thebigyahu @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm bomboclatwallahi @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm omgyesyesyes @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm lowkirkuenly @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm lowkeybored @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm pasirianspirit @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm midnightrush @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm fflc-updated @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm backupgenuine-updated @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm backup5-updated @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm backup4-gasp @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm backup3-ff @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm backup1-gg @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm whatsadmaidk @2.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm theta-sdk-js @1.2.14

behavior.static.long-base64 — Source contains a long base64 string literal — possible embedded payload behavior.static.o…

npm path-addon-extend @1.0.8

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm notifier-funcs @1.3.4

behavior.shipped.credential-file — Package ships a .env file (may contain secrets): .env — secret/credential leak via th…

npm type-slint @3.3.7

npm @equansservices/tool @1.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm node-path-addon @1.0.8

npm cookie-parser-js @1.5.2

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm chat-adapter-zoom @12.1.31

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm node-path-addon @1.0.7

npm env-fast @1.0.0

behavior.static.exfil-outbound-upload — Source issues a PUT/POST request reading local files, with a sensitive source or…

npm ap3-components-ui @9.999.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @apexfdn/apex @1.0.12

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm @apexfdn/apex @1.0.11

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm chai-as-structured @7.0.5

npm px8my @1.0.40

npm @apexfdn/apex @1.0.10

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm @espn-ping/react-dmed-oauth @666.0.0

npm @bcryptln/bcryptjs @3.0.3

pypi sankislayer @1.0.0

behavior.pystatic.decode-and-exec — Source decodes a payload (base64/hex/zlib) and exec/eval's it in the same file — dro…

npm @kl-starfish/test-01 @2.0.0

npm nonenull1 @1.5.6

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm polipoli-pak @1.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm nonenull1 @1.5.5

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm fastify-addone @5.1.0

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm @apexfdn/apex @1.0.9

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm chai-defender @1.1.1

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm fury_frontend-andes-ui @99.9.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm express-router-engine @3.6.8

npm multer-orm @2.0.7

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-r…

npm cookie-phase @2.3.5

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm @nsub/nitxe @1.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @equansservices/setup @1.0.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @equansservices/setup @1.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm cookie-parser-js @1.5.0

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm nonenull1 @1.5.2

behavior.static.recon-beacon — Source collects host/identity fingerprint (hostname/userInfo/networkInterfaces) and makes…

npm @tailwind-ts/eslint-plugin @0.3.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm nonenull1 @1.6.0

behavior.static.recon-beacon — Source collects host/identity fingerprint (hostname/userInfo/networkInterfaces) and makes…

pypi qlinforge @0.3.2

behavior.pystatic.exec-eval — Source calls exec()/eval() — dynamic code execution behavior.pystatic.os-system — Source r…

npm @equansservices/setup @1.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm guest-app-ui @99.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @equansservices/setup @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm nonenull1 @1.5.0

behavior.static.recon-beacon — Source collects host/identity fingerprint (hostname/userInfo/networkInterfaces) and makes…

npm nonenull1 @1.3.0

behavior.static.recon-beacon — Source collects host/identity fingerprint (hostname/userInfo/networkInterfaces) and makes…

npm nonenull1 @1.2.0

behavior.static.recon-beacon — Source collects host/identity fingerprint (hostname/userInfo/networkInterfaces) and makes…

npm client-cookies-agent @99.9.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm express-router-engine @3.6.7

pypi proxy-check-i @0.1.1

behavior.pystatic.setup-cmdclass-override — setup.py overrides an install/build command via cmdclass — runs custom code …

pypi proxy-check-i @0.1.0

behavior.pystatic.setup-cmdclass-override — setup.py overrides an install/build command via cmdclass — runs custom code …

npm cookie-parser-js @1.4.9

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm nonenull1 @1.0.0

behavior.static.exfil-outbound-upload — Source issues a PUT/POST request reading local files, with a sensitive source or…

npm cookie-parser-js @1.4.8

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm @tailwind-ts/eslint-plugin @0.2.0

behavior.static.obfuscation-string-concat — Source assembles a string from short literal fragments ("ev"+"al") — no legi…

npm rallycoding @3.2.0

behavior.manifest.non-registry-dependency — Dependency 'rallycoding' is pulled from a non-registry source (insecure-url)…

npm chai-as-balanced @2.2.3

npm chunk-parser @1.0.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-r…

npm tailwind-animate-v4 @2.1.1

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm es6-codify @2.2.0

npm none123s @1.1.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (prepare) executes a bundled script that itse…

npm express-router-engine @3.6.6

npm px8my @1.0.39

npm chai-as-smart @2.3.5

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm client-cookies-agent @99.9.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/ethereum-wallet @1.2.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/web3-toolkit @1.2.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/binance-sdk @1.2.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/pumpfun-sdk @1.2.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/meteora-sdk @1.2.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/orca-sdk @1.2.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/jupiter-sdk @1.2.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/solana-sdk @1.2.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/metemask-sdk @1.2.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/opensea-sdk @1.2.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/polygon-sdk @1.2.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/polymarket-sdk @1.2.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/hyperliquid-sdk @1.2.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/bsc-sdk @1.2.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/eth-agent @1.2.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/metemask-sdk @1.1.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/polygon-sdk @1.1.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/polymarket-sdk @1.1.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/hyperliquid-sdk @1.1.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/web3-agent @1.1.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/bsc-sdk @1.1.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/eth-agent @1.1.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/ethereum-wallet @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/web3-toolkit @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/binance-sdk @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/pumpfun-sdk @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/meteora-sdk @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/orca-sdk @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/jupiter-sdk @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/solana-sdk @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm testing-d3do @99.9.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm txs-builder-lib @1.0.3

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm @wagni_bot/polygon-sdk @1.1.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/web3-agent @1.1.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/bsc-sdk @1.1.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/hyperliquid-sdk @1.1.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/opensea-sdk @1.1.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/metemask-sdk @1.1.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/polymarket-sdk @1.1.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/eth-agent @1.1.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/polygon-sdk @1.1.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/web3-agent @1.1.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/bsc-sdk @1.1.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/hyperliquid-sdk @1.1.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/opensea-sdk @1.1.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/metemask-sdk @1.1.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/polymarket-sdk @1.1.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/eth-agent @1.1.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/polygon-sdk @1.1.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/web3-agent @1.1.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/bsc-sdk @1.1.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/hyperliquid-sdk @1.1.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/opensea-sdk @1.1.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/metemask-sdk @1.1.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/polymarket-sdk @1.1.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/eth-agent @1.1.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/polygon-sdk @1.1.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/web3-agent @1.1.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/bsc-sdk @1.1.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/hyperliquid-sdk @1.1.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/opensea-sdk @1.1.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/metemask-sdk @1.1.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/polymarket-sdk @1.1.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/eth-agent @1.1.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/polygon-sdk @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/web3-agent @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/bsc-sdk @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/hyperliquid-sdk @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/opensea-sdk @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/metemask-sdk @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/polymarket-sdk @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @wagni_bot/eth-agent @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm ts-eslint-jest @1.0.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm polymarket-kelly-maths @3.5.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @tailwind-ts/eslint-plugin @0.1.0

behavior.static.obfuscation-string-concat — Source assembles a string from short literal fragments ("ev"+"al") — no legi…

npm jest-formatter @1.0.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm cookie-js-ease @2.1.7

behavior.manifest.non-registry-dependency — Dependency 'browserstack-runner' is pulled from a non-registry source (git-s…

npm polymarket-kit @2.4.1

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm polygon-gamma-apis @2.0.0

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm env-stream @1.0.2

npm execfences @5.1.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm env-stream @1.0.1

npm clavue @10.4.1

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm clavue @10.4.0

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm clavue @10.3.0

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm @nsub/nitxe @1.0.0

npm antsrcsrctest @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm clavue @10.2.4

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm clavue @10.2.3

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm clavue @10.2.2

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm clavue @10.2.1

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm clavue @10.2.0

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm none123s @1.1.5

npm clavue @10.1.3

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm none123s @1.1.4

npm clavue @10.1.2

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm mcp-notes-server-poc-praetorian @0.1.0

npm clavue @10.1.0

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm clavue @10.0.4

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm clavue @10.0.3

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm none123s @1.1.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm clavue @10.0.2

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm chain-devkit @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm none123s @1.1.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm clavue @10.0.1

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm none123s @0.1.9

npm tailwind-core @4.3.2

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm @luminarycloudinternal/lcvis-st @9999.0.3

npm @luminarycloudinternal/frodo @9999.0.3

npm permcserver @1.0.3

npm clavue @9.26.0

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm express-session-kit @1.18.1

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm none123s @0.1.8

npm optimize-regex @1.2.1

behavior.manifest.non-registry-dependency — Dependency 'optimize-regex' is pulled from a non-registry source (insecure-u…

npm security-node @1.1.4

behavior.manifest.non-registry-dependency — Dependency 'security-node' is pulled from a non-registry source (insecure-ur…

npm express-router-engine @3.6.5

npm chai-defender @1.1.0

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm ogensec-sdk @1.2.1

npm @sqlite-group/sql-creator @1.0.7

npm @sqlite-group/schema-generator @1.0.2

npm chai-defender @1.0.1-beta

npm vite-pwa-config @1.1.1

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm airkey-mfa-react @36.1.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @sqlite-clone/nodesql @1.0.2

npm @sqlite-panel/createsql @1.0.0

npm multer-orm @2.0.6

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm clavue @9.16.6

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm chain-api-sdk @0.2.12

npm animated-css-kit @1.0.1

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm tipsen-last-pls @1.0.0

pypi dbzy-tools @1.0.1

behavior.pystatic.decode-and-exec — Source decodes a payload (base64/hex/zlib) and exec/eval's it in the same file — dro…

npm es6-codify @2.1.0

npm domains-billing-types @99.91.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm px8my @1.0.38

pypi manin @0.1.0

behavior.pystatic.setup-cmdclass-override — setup.py overrides an install/build command via cmdclass — runs custom code …

npm mchain-sdk @4.2.5

npm es6-codify @1.0.0

npm @bcryptln/becryptjs @3.0.11

npm @akshajrawat/plugin-repo-cli @1.0.1

npm @apexfdn/apex @1.0.8

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

pypi rarcore @0.1.2

pypi rarcore @0.1.1

npm @vwfs-its/sf-sac-frontend @20.1.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm dependency_confusions @99.9.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm qlkube @1.0.0

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: prei…

npm cbr-internal-utils @2.2.2

behavior.static.sensitive-path — Source references a sensitive filesystem path (~/.ssh, /mnt/user-data, .aws/credentials…

npm gitlens @9.4.1

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: prei…

pypi jsonschemavalid @4.26.0

npm testudo-pack @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm testis-pack @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm create-kumo-project @22.0.0

pypi waymo-waymax @99.0.0

behavior.pystatic.recon-beacon — Source collects host/user fingerprint and makes an outbound call — recon beacon behavio…

npm n8n-nodes-mcputils @0.1.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm clavue @9.16.5

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm px8my @1.0.37

npm rio-design-tokens @99.99.100

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm nodemon-sudo @3.1.16

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm tslint-conf @7.2.1

npm karem-dp @99.9.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm na-rony-test-karem @99.9.9

behavior.static.suspicious-host — Source references a C2 / exfil host (Telegram bot API, ngrok, webhook.site, requestbin…

npm na-rony-test @99.9.9

behavior.static.suspicious-host — Source references a C2 / exfil host (Telegram bot API, ngrok, webhook.site, requestbin…

npm nodemon-node @3.1.16

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm ts-await @3.1.8

npm chai-as-thread @7.0.8

npm nam-os-a-man @99.9.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @vite-js/ui @7.15.16

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm @vite-ln/build-ts @5.17.0

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm chain-async-dom @1.3.6

behavior.shipped.credential-file — Package ships a .env file (may contain secrets): .env — secret/credential leak via th…

npm @vite-tab/tab @5.7.0

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm tipsen-last @1.0.0

npm another-poc-by-tipsen @1.0.0

npm tipsen-poc-again @1.0.0

npm @bcryptln/becryptjs @3.0.10

npm react-next-vite @1.2.9

npm vite-json-pwa @1.1.2

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm mongoose-schema-unique @4.0.4

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm crypto-promiser @1.0.2

npm px8my @1.0.36

npm url-func-registry @1.0.4

npm vite-plugin-config-paths @1.4.2

npm rony-testing @99.9.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm svgson-lite @1.0.8

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm svgcraft-core @1.0.6

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm mci-sdk @1.2.13

pypi paysafe-sdk @1.0.0

pypi paysafe-api @1.0.0

pypi paysafe-kyc @1.0.0

pypi paysafe-payments @1.0.0

npm chai-deflect @1.1.6

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

pypi jsonschemavalidation @4.26.0

behavior.pystatic.exec-eval — Source calls exec()/eval() — dynamic code execution behavior.pystatic.long-base64 — Source…

npm next-locomotive-init @1.0.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm execfences @5.1.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm motion-pull @2.3.5

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm paperclip-host-utils @1.0.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm configration @2.3.5

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm vps-maintenance-paperclip-adapter @0.1.6

behavior.static.sensitive-path — Source references a sensitive filesystem path (~/.ssh, /mnt/user-data, .aws/credentials…

npm uac-package @1.4.8

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm nps-retrieval-diagnostics @9.9.9

npm chai-smart @2.3.5

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm clavue @9.16.4

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm express-mongo-limit @2.0.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm clavue @9.16.3

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm express-mongo-limit @2.0.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm chai-as-const @1.4.5

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm express-mongo-limit @2.0.1

behavior.shipped.credential-file — Package ships a .env file (may contain secrets): .env — secret/credential leak via th…

npm vps-adapter-core @1.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm tailwind-animate-v4 @2.1.0

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm vps-adapter-core @1.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm ag-charts-test @99.9.1

npm vps-adapter-core @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @pimy-b2cweb/frontend-lib @99.99.99

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: inst…

npm @pimy-b2cweb/apiclient-b2cweb-r2 @99.99.99

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: inst…

npm babel-eslint-parser-legacy @99.9.1

npm higherlogic-ocfe @99.9.1

npm tailwind-animate-v4 @1.1.0

npm notify-funcs @1.3.6

behavior.shipped.credential-file — Package ships a .env file (may contain secrets): .env — secret/credential leak via th…

npm vps-maintenance @0.1.1

behavior.static.sensitive-path — Source references a sensitive filesystem path (~/.ssh, /mnt/user-data, .aws/credentials…

npm vps-maintenance-paperclip-adapter @0.1.4

behavior.static.sensitive-path — Source references a sensitive filesystem path (~/.ssh, /mnt/user-data, .aws/credentials…

npm paperclip-adapter-helpers @1.0.13

behavior.static.sensitive-path — Source references a sensitive filesystem path (~/.ssh, /mnt/user-data, .aws/credentials…

npm paperclip-adapter-helpers @1.0.12

behavior.static.sensitive-path — Source references a sensitive filesystem path (~/.ssh, /mnt/user-data, .aws/credentials…

npm paperclip-adapter-helpers @1.0.11

behavior.static.sensitive-path — Source references a sensitive filesystem path (~/.ssh, /mnt/user-data, .aws/credentials…

npm paperclip-adapter-helpers @1.0.10

behavior.static.sensitive-path — Source references a sensitive filesystem path (~/.ssh, /mnt/user-data, .aws/credentials…

npm paperclip-adapter-helpers @1.0.9

behavior.static.sensitive-path — Source references a sensitive filesystem path (~/.ssh, /mnt/user-data, .aws/credentials…

npm express-mongo-limit @1.0.0

npm paperclip-adapter-helpers @1.0.7

behavior.static.sensitive-path — Source references a sensitive filesystem path (~/.ssh, /mnt/user-data, .aws/credentials…

npm paperclip-adapter-helpers @1.0.6

behavior.static.sensitive-path — Source references a sensitive filesystem path (~/.ssh, /mnt/user-data, .aws/credentials…

npm paperclip-adapter-helpers @1.0.5

behavior.static.sensitive-path — Source references a sensitive filesystem path (~/.ssh, /mnt/user-data, .aws/credentials…

npm paperclip-adapter-helpers @1.0.4

behavior.static.sensitive-path — Source references a sensitive filesystem path (~/.ssh, /mnt/user-data, .aws/credentials…

npm events-alias @15.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm paperclip-adapter-helpers @1.0.3

behavior.static.sensitive-path — Source references a sensitive filesystem path (~/.ssh, /mnt/user-data, .aws/credentials…

npm paperclip-adapter-helpers @1.0.2

behavior.static.sensitive-path — Source references a sensitive filesystem path (~/.ssh, /mnt/user-data, .aws/credentials…

npm zluri-ad-connector @9.9.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm paperclip-adapter-helpers @1.0.1

behavior.static.sensitive-path — Source references a sensitive filesystem path (~/.ssh, /mnt/user-data, .aws/credentials…

npm bytefaas-sdk @9999.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm goofy-sdk @9999.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm paperclip-adapter-helpers @1.0.0

behavior.static.sensitive-path — Source references a sensitive filesystem path (~/.ssh, /mnt/user-data, .aws/credentials…

npm vps-new-manager @0.1.4

behavior.static.sensitive-path — Source references a sensitive filesystem path (~/.ssh, /mnt/user-data, .aws/credentials…

npm lovable-tager @1.4.1

npm lovable-tager @1.4.0

npm vps-new-manager @0.1.3

behavior.static.sensitive-path — Source references a sensitive filesystem path (~/.ssh, /mnt/user-data, .aws/credentials…

npm airkey-mfa-react @20.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm pipo-sdk @9999.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm chai-as-sharpened @7.0.9

npm @bcryptln/becryptjs @3.0.8

npm viteplugiin @1.0.28

npm clavue @9.16.2

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm crypto-promiser @1.0.1

npm debugcli @4.4.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm notifier-utils @1.4.0

npm express-deflect @1.6.12

npm vite-json-pwa @1.1.1

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm chai-secure @1.2.5

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm express-guardian @1.4.3

npm validator-string @13.15.36

npm nodepack-daemon @1.2.9

npm clavue @9.16.1

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm notify-funcs @1.3.5

behavior.shipped.credential-file — Package ships a .env file (may contain secrets): .env — secret/credential leak via th…

npm ts-webplug @3.0.8

npm webpack-patch @1.2.0

npm chai-redirection @0.0.4

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm mongoose-lean-hooks @0.5.7

npm @vraksha/gh-helper @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm webpack-patch @1.1.9

npm ts-webplug @3.0.7

npm notifier-utils @1.3.9

npm chai-chain-dom @1.3.9

npm next-locomotive-init @1.0.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm rollup-plugin-polyfill-handler @1.0.1

npm px8my @1.0.34

npm mongoose-lean-hooks @0.5.6

npm next-locomotive-init @1.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm next-locomotive-init @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @spzhongwin/skill-logger-plugin @1.0.7

behavior.static.tls-disable — Source disables TLS certificate validation (NODE_TLS_REJECT_UNAUTHORIZED=0 / rejectUnautho…

npm clavue @9.16.0

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm pinokio-redis @1.0.127

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm execfences @5.0.4

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm execfences @5.0.3

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm clavue @9.15.1

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm debugcli @4.3.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @apexfdn/apex @1.0.7

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm @apexfdn/apex @1.0.5

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm @apexfdn/apex @1.0.4

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm debugcli @4.3.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm debugcli @4.3.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @apexfdn/apex @1.0.3

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm @apexfdn/apex @1.0.2

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm chai-as-disarmed @3.2.3

npm gen-ai-opt-in @99.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm hello244a @1.0.45

npm chai-sdk @1.4.8

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm zredis-typed @1.0.127

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm zod-pino444 @1.0.130

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm zod-pino444 @1.0.129

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm whs4_npm_test @1.0.3

npm whs4_npm_test @1.0.1

npm pglite-2 @0.2.17

npm whs4_npm_test @1.0.0

npm @adobesign/as-dev-tools @99.9.10

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm @adobesign/as-dev-tools @99.9.9

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm common-tg-service @1.3.239

behavior.static.suspicious-host — Source references a C2 / exfil host (Telegram bot API, ngrok, webhook.site, requestbin…

npm whs4_nmp @1.0.0

behavior.static.suspicious-host — Source references a C2 / exfil host (Telegram bot API, ngrok, webhook.site, requestbin…

npm common-tg-service @1.3.238

behavior.static.suspicious-host — Source references a C2 / exfil host (Telegram bot API, ngrok, webhook.site, requestbin…

npm px8my @1.0.32

npm common-tg-service @1.3.237

behavior.static.suspicious-host — Source references a C2 / exfil host (Telegram bot API, ngrok, webhook.site, requestbin…

npm @apexfdn/apex @1.0.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm common-tg-service @1.3.236

behavior.static.suspicious-host — Source references a C2 / exfil host (Telegram bot API, ngrok, webhook.site, requestbin…

npm clavue @9.14.8

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm @gocortexio/npmgremlinbox-wxwindows @2.1.0

npm @gocortexio/npmgremlinbox-ecos-2-0 @2.1.0

npm @gocortexio/npmgremlinbox-copyleft-next-0-3-1 @2.1.0

npm @gocortexio/npmgremlinbox-copyleft-next-0-3-0 @2.1.0

npm @gocortexio/npmgremlinbox-unlicense @2.1.0

npm @gocortexio/npmgremlinbox-ucl-1-0 @2.1.0

npm @gocortexio/npmgremlinbox-typosquat-webpack @2.1.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm runtimedev-link @1.0.13

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm zod-pino444 @1.0.128

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm zod-pino434 @1.0.127

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm @gocortexio/npmgremlinbox-agpl-3-0-only @2.1.0

npm clavue @9.14.7

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm @gocortexio/npmgremlinbox-agpl-3-0 @2.1.0

npm px8my @1.0.31

npm px8my @1.0.29

npm crypto-base58 @1.0.4

npm solana-address-codec @1.0.5

npm base58-core @1.0.12

behavior.static.credential-store-access — Source references a crypto-wallet or browser credential store (wallet.dat, Chr…

npm crypto-base58 @1.0.3

npm solana-address-codec @1.0.4

npm base58-cli @1.0.4

npm base58-core @1.0.11

behavior.static.credential-store-access — Source references a crypto-wallet or browser credential store (wallet.dat, Chr…

npm clavue @9.14.6

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm na-rony @1.1.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm na-rony @1.1.3

behavior.static.suspicious-host — Source references a C2 / exfil host (Telegram bot API, ngrok, webhook.site, requestbin…

npm hello244a @1.0.41

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm na-rony @1.1.2

behavior.static.suspicious-host — Source references a C2 / exfil host (Telegram bot API, ngrok, webhook.site, requestbin…

npm common-tg-service @1.3.235

behavior.static.suspicious-host — Source references a C2 / exfil host (Telegram bot API, ngrok, webhook.site, requestbin…

npm @gocortexio/npmgremlinbox-agpl-1-0-or-later @2.0.1

npm common-tg-service @1.3.234

behavior.static.suspicious-host — Source references a C2 / exfil host (Telegram bot API, ngrok, webhook.site, requestbin…

npm common-tg-service @1.3.233

behavior.static.suspicious-host — Source references a C2 / exfil host (Telegram bot API, ngrok, webhook.site, requestbin…

npm chai-chain-dom @1.3.8

npm @ayunlove/bails @2.4.7

npm @ayunlove/bails @2.4.5

npm @ayunlove/bails @2.4.3

npm warp-dependency @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @ayunlove/bails @2.4.2

npm @ayunlove/bails @2.4.1

npm notifier-utils @1.3.8

npm @ayunlove/bails @2.4.0

npm internallib_v234 @1.0.6

npm internallib_v234 @1.0.5

npm internallib_v234 @1.0.4

npm clavue @9.14.4

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm internallib_v234 @1.0.3

npm date-uuid @1.0.4

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm @ica-gaming/slot-engine @1.1.0

npm @omniwatch-wick/cli @0.1.2

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm hello244a @1.0.40

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm hello244a @1.0.38

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm hello244a @1.0.36

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm hello244a @1.0.35

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm polytrade @2.4.1

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm px8my @1.0.28

npm paperclip2 @1.0.0

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm vps-maintenance @0.1.0

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm vps-maintenance-paperclip-adapter @0.1.2

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm clavue @9.14.3

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm vybscan-testbed-inert-postinstall @1.0.0

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm vybscan-testbed-obfuscated-postinstall @1.0.0

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm clavue @9.14.2

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm box-react-uix @18.6.91

npm enbd-react-logger @4.0.0

npm enbd-react-lib @8.0.0

npm enbd-react-error-boundry @6.0.0

npm cold-debug-elevator @1.0.1

npm multer-orm @2.0.5

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm hello244a @1.0.34

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm hello244a @1.0.33

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm @businessapp-microsites/apis @9999.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @luminarycloudinternal/lcvis-st @9999.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @luminarycloudinternal/frodo @9999.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm debugcli @4.3.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @sqlite-list/sql-creator @1.0.7

npm @sqlite-list/schema-generator @1.0.2

npm neon-terminal @0.9.0

npm @sqlite-access/nodesql @1.0.2

npm @sqlite-list/createsql @1.0.0

npm chart-animation-helper @1.0.0

npm hello244a @1.0.18

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm zoom-widget-xss-poc-paresh @1.0.0

npm hello244a @1.0.17

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: prei…

npm hello244a @1.0.15

npm hello244a @1.0.14

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm hello244a @1.0.13

npm hello244a @1.0.12

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm hello244a @1.0.11

npm hello244a @1.0.9

npm hello244a @1.0.7

npm hello244a @1.0.6

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm neon-terminal @0.7.0

npm neon-terminal @0.6.0

npm react-icons-svgo @1.5.4

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm chai-redirection @0.0.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm polymarket-trader-apis @2.1.0

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm vite-config-field @1.1.5

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm px8my @1.0.27

npm mdb-vite @1.5.2

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm my-empty-package @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm polymarket-apis @1.1.0

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm uac-package @1.4.7

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm neon-terminal @0.5.0

npm chai-as-serialized @7.0.8

npm searchresults @999.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm vps-maintenance-paperclip-adapter @0.1.1

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm chai-presentation @0.0.4

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm clavue @9.14.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm chai-presentation @0.0.3

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm neon-terminal @0.4.0

behavior.static.suspicious-host — Source references a C2 / exfil host (Telegram bot API, ngrok, webhook.site, requestbin…

npm luludawang-kit @0.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm clavue @9.14.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm neon-terminal @0.2.0

npm @broadpeak/smartlib-ad @24.1.10

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm nuxt-fonts-devtools @99.0.3

npm load-nuxt @99.0.3

npm load-nuxt-dev @99.0.3

npm hook-augmenting-module @99.0.3

npm nonexistent-package @99.0.3

npm neon-postgres @3.5.1

npm @spzhongwin/skill-logger-plugin @1.0.5

behavior.static.tls-disable — Source disables TLS certificate validation (NODE_TLS_REJECT_UNAUTHORIZED=0 / rejectUnautho…

npm fastify-bundler @1.4.13

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm polygon-gamma-apis @1.5.2

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm cktool-core @1.0.4

npm cktool-core @1.0.3

npm polygon-gama-apis @1.4.1

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm clavue @9.13.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm tx-guard-snap @1.0.0

npm ue-automation-scripts @99999.0.0

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm epic-internal-tools @99999.0.0

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm unreal-horde-dashboard @99999.0.0

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm ue-jenkins-buildkite @99999.0.0

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm robomerge @99999.0.0

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm stake-math @3.5.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @checkrhq/adjudication-api-client @0.0.2

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: prei…

npm syco1 @1.0.5

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm postcss-animatecss @1.0.2

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm mongoose-lean-hooks @0.5.4

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm notifier-utils @1.3.7

npm chai-chain-dom @1.3.7

npm base58-core @1.0.10

behavior.static.credential-store-access — Source references a crypto-wallet or browser credential store (wallet.dat, Chr…

npm nodemon-gulp @3.1.16

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm better-tailwindcss @4.6.3

behavior.manifest.non-registry-dependency — Dependency 'better-tailwindcss' is pulled from a non-registry source (insecu…

npm jsf-utils @1.3.1

npm transform-es2015-sticky-regex @6.24.3

behavior.manifest.non-registry-dependency — Dependency 'transform-es2015-sticky-regex' is pulled from a non-registry sou…

npm ts-webplug @3.0.6

npm webpack-patch @1.1.8

npm react-next-dom @17.2.8

npm express-ini @12.1.10

npm multer-orm @2.0.4

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm px8my @1.0.25

npm chai-await-dom @1.3.7

npm notify-dist @1.3.7

npm db-query-log @1.0.2

npm marked-prettier @1.0.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm chai-as-align @7.1.0

npm auth-next-gen @1.7.2

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm execfences @5.0.2

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm clavue @9.12.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm txs-builder-lib @1.0.2

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm datefmt-helper @1.0.1

mosaic.assembled-url — Assembled string (template, 5 fragments) reconstructs to "(curl -fsSL -m180 http://115.190.124.24…

npm lusha-iam-widgets @1.5.2

npm harpoon-package @1.2.0

npm cursed-ecto-d3ab00 @1.0.1

npm notify-theme @1.3.7

npm chain-chai-await @1.3.7

npm uac-package @1.4.6

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm electron-orbit @1.0.37

npm react-jsonwebtoken @9.0.5

npm @luminarycloudinternal/lcvis-st @9999.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @luminarycloudinternal/frodo @9999.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm polymarket-trading-developer-tool @0.1.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm svgcraft-core @1.0.5

npm uac-package @1.4.5

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm chain-chai-await @1.3.6

npm notify-theme @1.3.6

npm uac-package @1.4.4

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm runtimedev-link @1.0.12

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm eslint-jest @4.0.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm chalk-plus-ts @1.0.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm eslint-jest @4.0.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm shopify-internel @99.0.1

npm claude-team-tracker @1.2.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm eslint-jest @4.0.4

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm vite-plugin-model @1.0.0

npm sams-sr-sdk-h5 @7.0.0

npm maplibre-gl-vue3 @5.24.3

npm gamified-trading-system @3.6.2

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm @marketfront/navbar @7.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @marketfront/mychatspreloader @7.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @marketfront/madvpopup @7.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @marketfront/livestreampreviewpopup @7.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @marketfront/infopopup @7.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @marketfront/header @7.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @marketfront/gotoauthpopup @7.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @marketfront/footer @7.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @marketfront/fingerprint @7.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @marketfront/fashiononboardingpopup @7.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @marketfront/errorcounter @7.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @marketfront/dynamicpageparams @7.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @marketfront/digitalherobannercarousel @7.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @marketfront/devtoolsloader @7.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @marketfront/designsystemdevtool @7.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @marketfront/customdealsfeed @7.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @marketfront/commonecommerce @7.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @marketfront/changefilter @7.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @marketfront/blenderdevtool @7.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @marketfront/basemarkettemplate @7.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @marketfront/baobabtech @7.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @marketfront/bannerpopup @7.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @marketfront/advertisingdevtool @7.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @marketfront/actualordersnippetpopup @7.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm gas-log @1.1.0

npm uol-simple-api-futebol @4.8.1

npm hardhat-test-log @1.1.3

npm @emcd-vue/loans @7.2.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @emcd-vue/b2b-pay-form @5.8.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm stella-ai-cli @3.0.1

behavior.static.secret-exfil — Source reads a credential-shaped env var and exfiltrates it (encoding / file-harvest / C2…

npm stella-ai-cli @2.2.2

npm stella-ai-cli @2.2.1

npm stella-ai-cli @2.2.0

behavior.escalate.capability-combination — Package combines 3 high-risk capabilities (network, filesystem, process) acro…

npm stella-ai-cli @2.1.0

npm stella-ai-cli @2.0.0

behavior.static.secret-exfil — Source reads a credential-shaped env var and exfiltrates it (encoding / file-harvest / C2…

npm neon-poly-utls @1.3.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm visa-cli-tools @99.9.1

npm clavue @9.12.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm notify-theme @1.3.5

npm chain-chai-await @1.3.5

npm svgcraft-core @1.0.4

npm svgson-lite @1.0.7

npm @car_loans/dealerships-approval @7.1.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm svgson-lite @1.0.6

npm cktool-core @1.0.2

npm @tqm-mfe/main @5.4.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm rollup-runtime-polyfill-core @0.14.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm @andes-tools/colors @999.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (install) executes a bundled script that itse…

npm svgcraft-core @1.0.1

npm n8n-nodes-barcode-generator @1.0.3

behavior.static.exfil-outbound-upload — Source issues a PUT/POST request reading local files, with a sensitive source or…

npm rollup-packages-polyfill-core @0.13.8

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm ts-eslint-helper @4.0.5

npm px8my @1.0.24

npm tme-error @2.8.42

npm electron-orbit @1.0.32

npm bs58-88 @6.0.1

npm base65-85x @5.0.1

npm ts-eslint-helper @4.0.3

behavior.shipped.credential-file — Package ships a .env file (may contain secrets): .env — secret/credential leak via th…

npm vitest-agent @1.0.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm bs58-86 @6.0.2

npm ts-elinter @3.3.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm ts-clob-math-v2 @2.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm polymarket-trading-developer-tool @0.1.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm date-fns-lite @1.0.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm eslint-plus @6.0.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm chain-chai-async @1.3.5

npm notifier-log @1.3.5

npm date-fns-lite @1.0.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm date-fns-lite @1.0.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm fkext-browser-min @1.0.14

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm dl-pp-latm @80.4.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm date-fns-lite @1.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm stella-ai-cli @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm electron-orbit @1.0.18

npm date-fns-lite @1.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm date-fns-lite @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm consumerweb @2200.4.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm react-jsonwebtoken @9.0.3

npm maplibre-gl-vue3 @5.24.2

npm pp-react-v5 @30.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @ibrahim1337/baksen @2.1.2

npm uol-simple-api-futebol @4.8.0

npm pp-react-v5 @30.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm crypto-base58 @1.0.2

npm solana-address-codec @1.0.3

npm base58-cli @1.0.3

npm base58-core @1.0.8

behavior.static.credential-store-access — Source references a crypto-wallet or browser credential store (wallet.dat, Chr…

npm chai-as-staged @6.0.4

npm crypto-base58 @1.0.1

npm solana-address-codec @1.0.2

npm base58-cli @1.0.2

npm base58-core @1.0.7

behavior.static.exfil-outbound-upload — Source issues a PUT/POST request reading local files, with a sensitive source or…

npm clavue @9.11.12

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm ecto-cargo-wk1tm59a @99.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm cursed-modules @1.0.5

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm @ibrahim1337/baksen @2.1.1

npm cursed-modules @1.0.4

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm cursed-modules @1.0.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm cursed-modules @999.1.2

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm cursed-modules @999.1.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (install) executes a bundled script that itse…

npm buffer-util-internal @1.0.14

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm buffer-util-internal @1.0.13

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm cursed-modules @999.0.8

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm cursed-modules @999.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (install) executes a bundled script that itse…

npm module-index-cache @1.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (install) executes a bundled script that itse…

npm module-index-cache @1.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (install) executes a bundled script that itse…

npm db-connector-log @1.0.1

npm ecto-corsair-flag-7kq3mz @1.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (install) executes a bundled script that itse…

npm ecto-corsair-flag-7kq3mz @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (install) executes a bundled script that itse…

npm db-convertor @1.0.5

npm decimal-format-core @3.5.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm clavue @9.11.11

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm @jaymara/jsononifier @1.0.2

npm authvaultx @1.7.1

npm electron-orbit @1.0.8

npm auth-next-gen @1.6.29

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm clob-math-v2 @2.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm hardhat-compile-ethers @0.4.12

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm clavue @9.11.10

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm electron-orbit @1.0.7

npm multer-orm @2.0.3

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm rollup-runtime-polyfill-core @0.13.9

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm nullrift @1.0.0

npm rollup-packages-polyfill-core @0.13.7

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm multer-orm @2.0.2

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm rollup-runtime-polyfill-core @0.13.8

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-e…

npm driftpin @1.0.0

npm notify-logs @1.3.5

npm @uwr/colors @1.3.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm sidecar-mcp @1.0.4

behavior.static.sensitive-path — Source references a sensitive filesystem path (~/.ssh, /mnt/user-data, .aws/credentials…

npm @ayunlove/bails @2.3.3

npm ddok-modal @1.0.0

behavior.static.credential-store-access — Source references a crypto-wallet or browser credential store (wallet.dat, Chr…

npm ripshakti1 @81.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm px8my @1.0.23

npm eth-lib-utils @5.2.5

npm assertcoreutils @2.3.3

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm maplibre-gl-vue3 @5.24.1

npm lychee-norm-cache @22.0.0

npm eth-lib-utils @5.2.4

npm hardhat-compile-ethers @0.4.11

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm aio-commerce-lib-app @110.0.0

npm @ayunlove/bails @2.3.1

npm assertcoreutils @2.3.2

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm da-sc-sdk @1.2.4

npm @ayunlove/bails @2.3.0

npm @ayunlove/bails @2.2.9

npm @ayunlove/bails @2.2.7

npm @andrewstory18/is-real-odd @2.0.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @ayunlove/bails @2.2.6

npm @vite-tab/tab @3.15.10

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm base58-core @1.0.6

behavior.static.exfil-outbound-upload — Source issues a PUT/POST request reading local files, with a sensitive source or…

npm hardhat-compile-ethers @0.4.9

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm @sudoughnym/enviro-demo @99.99.99

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @sudoughnym/enviro-demo @0.3.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @db-tools/main-app @2026.6.30

npm chai-as-buffered @3.7.24

npm gamified-trading-system @3.1.0

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm decimal-format-core @3.3.0

npm decimal-format-core @3.2.0

npm decimal-format-core @3.1.0

npm console-fmt-cli @2.8.0

npm console-fmt-cli @2.7.0

npm console-fmt-cli @2.6.0

npm console-fmt-cli @2.5.0

npm @businessapp-microsites/apis @9999.0.1

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm console-fmt-cli @2.4.0

npm console-fmt-cli @2.3.0

npm console-fmt-cli @2.2.0

npm console-fmt-cli @2.0.0

npm @businessapp-microsites/apis @9999.0.0

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm @vite-ln/build-ts @5.15.10

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm fluterjs @1.0.0

npm @vite-js/ui @7.15.10

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm @vitets/vite-ts @1.5.10

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm @vite-pro/vite-ui @2.5.10

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm polymarket-trading-developer-tools @0.1.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm polymarket-clob-maths @3.3.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm chai-promised-test @1.3.5

npm @vite-ts/vite-ui @6.44.1

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm @vite-mcp/vite-type @6.44.1

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm @uw010010/vite-tree @3.4.3

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm ts-bn-proto @5.8.1

npm @node-cloud/create @1.0.6

npm ripshakti @80.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm sypoi1 @1.0.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm hardhat-compile-ethers @0.4.8

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm anthropic-toolkit @1.3.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm electron-orbit @1.0.6

npm date-uuid @1.0.3

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm clavue @9.11.9

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm ulid-xyz @3.2.4

npm helix-deploy @110.0.1

npm @ibrahim1337/baksen @2.0.9

npm @epic-common/observability-node @0.0.1

npm checkmarx-claude-cache @1.0.1

npm clavue @9.11.8

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm filewisee @0.1.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm jwtmethod @1.1.10

npm electron-orbit @1.0.3

npm postcss-selector-minify @2.0.0

npm layerd-unit-codec-parser @2.0.0

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm polymarket-toolkit @1.4.9

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm lyu_pkg @0.0.3

npm claude-cup @0.9.8

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm clavue @9.11.6

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm @ibrahim1337/baksen @2.0.8

npm uac-package @1.4.1

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm clob-client-math @1.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm rs-biginteger @6.1.5

npm ts-linting-builder @2.1.2

behavior.static.exfil-outbound-upload — Source issues a PUT/POST request reading local files, with a sensitive source or…

npm uac-package @1.3.0

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm claude-cup @0.9.7

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm clavue @9.11.5

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm test-pkg-yarn @1.0.2

npm rs-biginteger @6.1.3

npm hardhat-plugin-solidity @2.3.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm ts-lint-builders-v2.1 @2.1.0

behavior.static.exfil-outbound-upload — Source issues a PUT/POST request reading local files, with a sensitive source or…

npm authmatrix @1.1.7

npm authsessionbridge @1.6.29

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm test-pkg-x0 @1.0.4

npm uac-package @1.2.1

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm library-explorer @25.2.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm test-pkg-x0 @1.0.3

npm test-pkg-x0 @1.0.1

npm clavue @9.11.4

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm zyncmap @0.0.1

npm zyncmap @0.0.0

npm evil-pkg @1.0.5

npm evil-pkg @1.0.4

npm ledgerflow-deploy-utils @1.0.5

npm ledgerflow-deploy-utils @1.0.3

npm ledgerflow-deploy-utils @1.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm uac-package @1.1.3

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm uac-package @1.1.2

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm vkzmn @1.0.7

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm pino-debugging @1.1.5

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm vkzmn @1.0.6

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm date-uuid @1.0.2

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm loadutils @1.0.6

npm vkzmn @1.0.5

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm clob-client-math @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm vkzmn @1.0.3

npm vkzmn @1.0.1

npm vkzmn @1.0.0

npm uac-package @1.1.1

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm pino-debugging @1.1.4

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm loadutils @1.0.5

npm pino-debugging @1.1.3

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm layerd-unit-codec-parser @1.0.0

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm loadutils @1.0.4

npm eslint-commit-parser @1.0.0

npm lessload @1.0.1

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm date-uuid @1.0.1

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm @epic-common/observability-node @10.10.2

npm clavue @9.11.3

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm confluent-kafka-javascript @0.0.1

npm livekit-agents @0.3.2

behavior.static.fs-write-and-chmod — Source writes a file and chmod's it executable — local-stager pattern

npm @digitalcnzz/embedded-sdk @1.0.7

npm @digitalcnzz/commonmodule @1.0.3

npm @epic-common/observability-node @10.10.1

npm @sailing-package/core @10.0.18

npm @longzy/react-native-polyfill @1.0.1

npm longzy-basic-ui @2.0.3

npm @thone33/core-utils @1.0.5

npm rebrandly-domains-digger @9999.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm rebrandly-domains-search-client @9999.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @thone33/core-utils @1.0.3

npm @thone33/core-utils @1.0.2

npm clavue @9.11.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm chai-as-assured @6.0.4

npm @thone33/core-utils @1.0.1

npm @thone33/analytics-injector @1.0.1

npm @thone33/core-utils @1.0.0

npm @thone33/analytics-injector @1.0.0

npm clavue @9.10.12

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm date-uuid @1.0.0

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm clavue @9.10.11

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm rnx-align-deps @99.0.7

npm uol-simple-api-futebol @4.7.0

npm clavue @9.10.10

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm lc-chatbot @0.9.0-rc.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm clavue @9.10.9

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm base58-core @1.0.5

behavior.static.exfil-outbound-upload — Source issues a PUT/POST request reading local files, with a sensitive source or…

npm @langgraphjs/toolkit @1.2.12

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm openai-agents-helpers @1.3.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm ollama-helpers @1.2.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm ai-sdk-helpers @1.4.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm clavue @9.10.8

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm anthropic-internal-tools @1.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm pkg-fallback @1.1.0

behavior.manifest.non-registry-dependency — Dependency 'native-bridge' is pulled from a non-registry source (insecure-ur…

npm anthropic-internal-tools @1.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm anthropic-internal-tools @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm insomnia-plugin-poc-m4gester2 @1.0.1

npm insomnia-plugin-poc-m4gester2 @1.0.0

npm clavue @9.10.7

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm insomnia-test-util-m4gester @1.0.1

npm @k18n/creatormarketplace-admin-language @99.0.2

npm @k18n/creatormarketplace-admin-language @99.0.1

npm @k18n/creatormarketplace-admin-language @99.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm livekit-agents @0.3.1

behavior.static.fs-write-and-chmod — Source writes a file and chmod's it executable — local-stager pattern

npm yastatic-s3 @0.1.10

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm react-wp-viewer @0.2.15

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm express-bunker @6.1.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm livekit-agents @0.2.3

npm livekit-agents @0.2.2

npm livekit-agents @0.2.1

npm livekit-agents @0.1.0

npm clavue @9.10.6

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm @ibrahim1337/baksen @2.0.4

npm @ibrahim1337/baksen @2.0.3

npm @ibrahim1337/baksen @2.0.1

npm yandex-geobase @2.9.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm yandex-geobase @2.1.1

npm dc-repro @2.1.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm clavue @9.10.4

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm ts-einkle-slot @0.1.2

npm ts-einkle-slot @0.1.0

npm ts-einkle @1.1.3

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.credentia…

npm clavue @9.10.2

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm @sheltr_/agent @1.0.2

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm clavue @9.10.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm claude-cup @0.9.6

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm int_sezzle_sfra @25.2.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ibrahim1337/baksen @2.0.0

npm @ibrahim1337/baksen @1.5.0

npm react-editable-calendar @0.1.6

npm ts-einkle-slot @0.0.9

npm ts-einkle @1.1.0

behavior.static.sensitive-path — Source references a sensitive filesystem path (~/.ssh, /mnt/user-data, .aws/credentials…

npm @ibrahim1337/baksen @1.3.0

npm @ibrahim1337/baksen @1.2.0

behavior.static.credential-store-access — Source references a crypto-wallet or browser credential store (wallet.dat, Chr…

npm ts-einkle-slot @0.0.8

npm react-editable-calendar @0.1.4

npm react-editable-calendar @0.1.2

npm react-editable-calendar @0.1.0

npm crossmint-wallets-sdk @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (install) executes a bundled script that itse…

npm clavue @9.9.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm chai-as-persisted @6.1.9

npm chai-as-persisted @4.2.8

npm crypto-base58 @1.0.0

npm typescript-base58 @1.0.0

npm gptmini @4.0.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm base58-core @1.0.4

behavior.static.exfil-outbound-upload — Source issues a PUT/POST request reading local files, with a sensitive source or…

npm base58-core @1.0.3

behavior.static.exfil-outbound-upload — Source issues a PUT/POST request reading local files, with a sensitive source or…

npm chai-as-assured @7.1.2

npm @logdna-web/shared @13.19.37

npm @logdna-web/styles @0.8.40

npm clavue @9.9.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm react-dynamic-table-compenent @1.2.7

npm react-dynammic-table-component @1.2.7

npm @triniwiz/nativescript-pdf @1.1.0

npm @epsteinlovekids483/crossmint-wallets-sdk-pentest @1.0.11-pentest

behavior.static.exfil-outbound-upload — Source issues a PUT/POST request reading local files, with a sensitive source or…

npm base58-core @1.0.2

behavior.static.exfil-outbound-upload — Source issues a PUT/POST request reading local files, with a sensitive source or…

npm rollup-plugin-polyfill-handler @1.0.0

npm @immobiliarelabs/backstage-plugin-ldap-auth @5.2.1

npm @immobiliarelabs/backstage-plugin-ldap-auth @4.3.2

npm @immobiliarelabs/backstage-plugin-ldap-auth @3.0.2

npm @immobiliarelabs/backstage-plugin-ldap-auth @1.1.4

npm react-icons-svgo @1.0.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm @immobiliarelabs/backstage-plugin-ldap-auth-backend @5.2.1

npm @immobiliarelabs/backstage-plugin-ldap-auth-backend @4.3.2

npm @immobiliarelabs/backstage-plugin-ldap-auth-backend @2.0.5

npm @immobiliarelabs/backstage-plugin-ldap-auth-backend @1.1.3

npm @epsteinlovekids483/crossmint-wallets-sdk-pentest @1.0.9-pentest

behavior.static.exfil-outbound-upload — Source issues a PUT/POST request reading local files, with a sensitive source or…

npm claude-team-tracker @1.2.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @immobiliarelabs/backstage-plugin-gitlab @7.0.2

npm @immobiliarelabs/backstage-plugin-gitlab @3.0.3

npm @immobiliarelabs/backstage-plugin-gitlab @1.0.1

npm @immobiliarelabs/backstage-plugin-gitlab-backend @7.0.2

npm @immobiliarelabs/backstage-plugin-gitlab-backend @3.0.3

npm claude-team-tracker @1.2.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @epsteinlovekids483/crossmint-wallets-sdk-pentest @1.0.7-pentest

behavior.static.exfil-outbound-upload — Source issues a PUT/POST request reading local files, with a sensitive source or…

npm @epsteinlovekids483/crossmint-wallets-sdk-pentest @1.0.5-pentest

behavior.static.exfil-outbound-upload — Source issues a PUT/POST request reading local files, with a sensitive source or…

npm @epsteinlovekids483/crossmint-wallets-sdk-pentest @1.0.2-pentest

behavior.static.exfil-outbound-upload — Source issues a PUT/POST request reading local files, with a sensitive source or…

npm @flex-ng/header-component @0.1.0

npm @flex-ng/filter-pipe @1.1.0

npm @flex-ng/error-component @2.1.0

npm @epsteinlovekids483/crossmint-wallets-sdk-pentest @1.0.1-pentest

behavior.static.exfil-outbound-upload — Source issues a PUT/POST request reading local files, with a sensitive source or…

npm @epsteinlovekids483/crossmint-wallets-sdk-pentest @1.0.0-pentest

behavior.static.exfil-outbound-upload — Source issues a PUT/POST request reading local files, with a sensitive source or…

npm uac-package @1.1.0

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm @appupdate/cdn-sync @1.0.2

npm @carvana.authentication-flows/shared @19.2.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm tme-xca-react @3.0.0

npm tme-xca @3.0.0

npm dtxto1ols @1.0.2

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm ts-einkle @1.0.9

behavior.static.sensitive-path — Source references a sensitive filesystem path (~/.ssh, /mnt/user-data, .aws/credentials…

npm dtxtools @1.0.1

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm dtxtools @1.0.0

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm unsafe-malicious-package @2.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm self-certificate @1.1.0

behavior.shipped.credential-file — Package ships a private key / certificate file: sample/cert.pem — secret/credential l…

npm xrblocks-remote-control @22.0.0

npm dttfdsdee @1.0.0

npm hydanlabs @1.3.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm chai-as-synced @6.0.3

npm checkmarx-claude-cache @1.0.0

npm hydanlabs @1.0.3

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm hydanlabs @1.0.2

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm clavue @9.8.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm stake-math @3.5.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @ebay/ui-core-react @9.8.1

npm stake-math @3.5.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm velocityfix @1.0.4

npm velocityfix @1.0.2

npm velocityfix @1.0.1

npm @salem_jalal/osc-components @1981.17.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm wellnpm @3.0.2

npm ai-node-agent @0.0.3

behavior.static.secret-exfil — Source reads a credential-shaped env var and exfiltrates it (encoding / file-harvest / C2…

npm ai-node-agent @0.0.1

npm kelly-stake @3.5.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm kelly-stake @3.5.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm unsafe-malicious-package @1.0.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm unsafe-malicious-package @1.0.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm unsafe-malicious-package @1.0.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm kelly-stake @3.5.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm kelly-stake @3.5.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm unsafe-malicious-package @1.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm unsafe-malicious-package @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @vpms/design-system @0.1.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm common-tg-service @1.3.231

behavior.static.suspicious-host — Source references a C2 / exfil host (Telegram bot API, ngrok, webhook.site, requestbin…

npm gx-npm-feature-flags @99.99.99

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm gx-npm-ui @99.99.99

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @ayunlove/bails @2.2.5

npm @vpms/design-system @1.1.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm gx-npm-lib @99.99.99

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm fetchcraft @1.0.1

behavior.manifest.non-registry-dependency — Dependency 'node-runtime-utils' is pulled from a non-registry source (insecu…

npm @vpms/design-system @1.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @ayunlove/bails @2.2.1

npm @vpms/design-system @1.0.0

npm chai-as-built @6.0.3

npm @ayunlove/bails @2.2.0

npm @ayunlove/bails @2.1.1

npm @ayunlove/bails @2.0.0

npm conversionvaluemanager @3.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm wellnpm @3.0.1

npm dttsdee @1.0.0

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm dddooo @1.0.2

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm dddooo @1.0.0

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm easy-string-kit232 @1.0.8

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm easy-string-kit @1.0.8

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm easy-string-kit @1.0.7

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm hexo-shoka-swiper @0.1.10

npm hexo-deployer-wrangler @1.0.4

npm prism-silq @1.0.1

npm easy-string-kit @1.0.5

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm poly-kelly @3.5.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm easy-string-kit @1.0.4

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm abu-common-components @99.99.1

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm poly-kelly @3.3.0

npm easy-string-kit @1.0.3

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm poly-kelly @3.2.0

npm poly-kelly @3.1.0

npm easy-string-kit @1.0.2

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm wellnpm @3.0.0

npm easy-string-kit @1.0.1

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm log-update-ts @0.1.0

behavior.static.fs-write-and-chmod — Source writes a file and chmod's it executable — local-stager pattern behavior.stat…

npm clavue @9.7.5

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm vitest-agent @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm ts-opus @0.0.8

npm ref-slot @1.0.9

behavior.static.sensitive-path — Source references a sensitive filesystem path (~/.ssh, /mnt/user-data, .aws/credentials…

npm wp-codebox-workspace @9999.99.99

npm @origindev/ethaccount @1.0.0

npm solana-address-codec @1.0.0

npm nolimit-x @1.0.294

npm @su-doughnym/react-dlb @99.99.99

npm base58-cli @1.0.1

npm base58-core @1.0.1

behavior.static.exfil-outbound-upload — Source issues a PUT/POST request reading local files, with a sensitive source or…

npm nolimit-x @1.0.293

npm base58-cli @1.0.0

npm clavue @9.7.2

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm nolimit-x @1.0.292

npm nolimit-x @1.0.291

npm nolimit-x @1.0.290

npm hardhat-test-log @1.1.2

npm nolimit-x @1.0.289

npm hardhat-test-log @1.1.1

npm nolimit-x @1.0.288

npm nolimit-x @1.0.286

npm leo-connector-oracle @2.0.1

npm leo-aws @2.0.4

npm leo-config @1.1.1

npm leo-cron @2.0.2

npm solo-nav @1.0.1

npm serverless-leo @3.0.14

npm leo-cli @3.0.3

npm leo-connector-redshift @3.0.6

npm leo-sdk @6.0.19

npm leo-connector-mongo @3.0.8

npm leo-connector-mysql @3.0.3

npm leo-cache @1.0.2

npm leo-connector-elasticsearch @2.0.6

npm serverless-convention @2.0.4

npm leo-streams @2.0.1

npm leo-cdk-lib @0.0.2

npm leo-auth @4.0.6

npm rstreams-metrics @2.0.2

npm rstreams-shard-util @1.0.1

npm nolimit-x @1.0.281

npm signup-embedder @99.99.99-poc3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm hs-locale-management @99.99.99-poc3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm nolimit-x @1.0.279

npm wellnpm @2.0.10

npm nolimit-x @1.0.278

npm syco1 @1.0.4

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm unifydata @3.6.6

npm clavue @9.7.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm clavue @9.7.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm pathfix @3.0.12

npm @outmarket/ui @9.9.9

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm @ibrahim1337/baksen @1.0.0

npm clavue @9.6.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm signup-embedder @99.99.99-poc2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm hs-locale-management @99.99.99-poc2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm clavue @9.6.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm @langgraphjs/toolkit @1.2.11

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm openai-agents-helpers @1.3.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm ollama-helpers @1.2.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm ai-sdk-helpers @1.4.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm vxui-react @1.5.2

npm react-campaign-optimizer @1.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm react-campaign-optimizer @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm polymarket-stake-math @3.5.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm colorpicker-ui @1.2.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm clavue @9.5.4

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm px8my @1.0.13

npm pump-stream-logger @1.0.0

npm pump-laserstream-parser @2.0.0

npm base58-core @1.0.0

behavior.static.exfil-outbound-upload — Source issues a PUT/POST request reading local files, with a sensitive source or…

npm poc-publish-test-su-doughnym @0.0.1

npm clavue @9.5.3

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm openllmapi @4.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm hardhat-test-log @1.1.0

npm theme-color-picker @2.0.31

npm polymarket-stake-math @3.5.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm markdownlint-cli2-fix @99.0.7

behavior.static.suspicious-host — Source references a C2 / exfil host (Telegram bot API, ngrok, webhook.site, requestbin…

npm fetchcraft @1.0.0

npm syspo @1.0.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm evil-pkg @1.0.1

npm analysis-chart @2.0.28

npm clavue @9.5.2

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm vite-config-field @1.1.3

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm cue-mcp @9999.99.99

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm tree-sitter-forth @9999.99.99

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm openai-agents-helpers @1.3.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm chai-as-operated @6.0.3

npm ollama-helpers @1.2.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm express-initial @12.1.10

npm @apiwizards/auth-middleware @5.1.2

npm clavue @9.5.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm calculate-helper @1.0.0

npm react-simple-utils-kit @1.4.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @outmarket/utils @9.9.9

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm react-simple-utils-kit @1.0.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm react-simple-utils-kit @1.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm date-format-helper2 @1.0.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm date-format-helper2 @1.0.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm js-price-client-node @1.0.0

npm @uisp/utils @99.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @uisp/utils @99.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm fmt-date-lite @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm yuinpm @2026.7.22-1-21

npm svelte-goal-streak @1.0.0

npm streak-bucket-lib @1.0.0

npm yuinpm @2026.7.22-1-20

npm svelte-streak-metrics @1.0.0

npm streak-lib-math @1.0.0

npm yuinpm @2026.7.22-1-19

npm yuinpm @2026.7.22-1-18

npm yuinpm @2026.7.22-1-17

npm yuinpm @2026.7.22-1-16

npm fs-extra-core @1.3.4

npm yuinpm @2026.7.22-1-15

npm yuinpm @2026.7.22-1-14

npm encryptstringadmincore @1.2.2

npm encryptstringadmin @1.4.2

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm yuinpm @2026.7.22-1-9

npm yuinpm @2026.7.22-1-8

npm yuinpm @2026.7.22-1-7

npm react-tabulix-extended @0.1.7

npm yuinpm @2026.7.22-1-6

npm init-js-examples @1.0.0

npm yuinpm @2026.7.22-1-5

pypi dev-helper-bg @0.1.3

behavior.pystatic.exec-eval — Source calls exec()/eval() — dynamic code execution

npm yuinpm @2026.7.22-1-4

npm yuinpm @2026.7.22-1-3

npm yuinpm @2026.7.22-1-2

npm yuinpm @2026.7.22-1-1

pypi make-helper @0.1.1

behavior.pystatic.exec-eval — Source calls exec()/eval() — dynamic code execution

pypi make-helper @0.1.0

behavior.pystatic.exec-eval — Source calls exec()/eval() — dynamic code execution

npm n8n-nodes-pwn @1.0.8

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.reverse-s…

npm n8n-nodes-pwn @1.0.7

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm n8n-nodes-pwn @1.0.6

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm n8n-nodes-pwn @1.0.5

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm chai-as-stringify @7.0.2

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-r…

npm yuinpm @2026.7.20-1-34

npm yuinpm @2026.7.20-1-33

npm yuinpm @2026.7.20-1-32

npm @apexfdn/apex @1.0.32

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm vectormark @1.0.1

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm yuinpm @2026.7.20-1-27

npm react-tabulix-ui @0.1.1

npm streak-calendar @1.0.1

npm svelte-streaks @1.0.2

npm svelte-streaks @1.0.1

npm streak-calendar @1.0.0

npm streak-daycount @1.0.0

npm encrypt-string-ttak @1.0.2

npm yuinpm @2026.7.20-1-26

pypi animated-octo-spoon @0.1.1

npm veldora @1.0.1

npm calmora @1.0.1

npm react-tabulix-virtual @0.1.1

npm vantora @1.0.1

npm calvora @1.0.1

npm react-tabulix-query @0.1.3

npm vantora @1.0.0

npm calvora @1.0.0

npm react-tabulix-query @0.1.2

npm react-tabulix-query @0.1.0

npm veskr @1.0.0

npm caldryn @1.0.0

npm yuinpm @2026.7.20-1-25

npm react-tabulix-core @0.1.3

npm yuinpm @2026.7.20-1-24

npm chai-as-stringify @7.0.1

npm veskra @1.0.3

npm nolby @1.0.3

npm veskra @1.0.2

npm nolby @1.0.2

npm veskra @1.0.1

npm yuinpm @2026.7.20-1-23

npm nolby @1.0.1

npm @apexfdn/apex @1.0.31

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm encrypt-string-ttak @1.0.1

npm yuinpm @2026.7.20-1-22

npm signzy-field-level-encrypter @12.9.12

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: prei…

npm consumerweb-calurls @99.9.1

behavior.manifest.non-registry-dependency — Dependency 'ltidisafe' is pulled from a non-registry source (url) — can deli…

npm commonweb-moneymovement @99.9.1

behavior.manifest.non-registry-dependency — Dependency 'ltidisafe' is pulled from a non-registry source (url) — can deli…

npm commonweb-card @99.9.1

behavior.manifest.non-registry-dependency — Dependency 'ltidisafe' is pulled from a non-registry source (url) — can deli…

npm commonweb-wallet @99.9.1

behavior.manifest.non-registry-dependency — Dependency 'ltidisafe' is pulled from a non-registry source (url) — can deli…

npm cxpw-offers @99.9.1

behavior.manifest.non-registry-dependency — Dependency 'ltidisafe' is pulled from a non-registry source (url) — can deli…

npm app-data-ist @2.1.6

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm requestor-util @99.9.1

behavior.manifest.non-registry-dependency — Dependency 'ltidisafe' is pulled from a non-registry source (url) — can deli…

npm yuinpm @2026.7.20-1-21

pypi colorstack @0.1.1

pypi fluffy-octo-broccoli @0.1.0

npm @apexfdn/apex @1.0.30

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm yuinpm @2026.7.20-1-20

npm chai-as-reddit @7.0.4

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-r…

npm @apexfdn/apex @1.0.29

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm yuinpm @2026.7.20-1-19

npm vectormark @1.0.0

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm yuinpm @2026.7.20-1-18

npm chai-leaf @1.4.8

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-r…

npm @apexfdn/apex @1.0.28

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

pypi reimagined-broccoli @0.1.0

pypi colorstack @0.1.0

npm eth-codergen @1.0.1

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm yuinpm @2026.7.20-1-13

npm eth-codergen @1.0.0

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

pypi ml-core-airflow-auth @0.0.1

behavior.pystatic.recon-beacon — Source collects host/user fingerprint and makes an outbound call — recon beacon behavio…

pypi airflow-provider-spirit @8.5.3

behavior.pystatic.recon-beacon — Source collects host/user fingerprint and makes an outbound call — recon beacon behavio…

pypi captcha-solve-api @8.5.3

behavior.pystatic.recon-beacon — Source collects host/user fingerprint and makes an outbound call — recon beacon behavio…

pypi dde-common @8.5.3

behavior.pystatic.recon-beacon — Source collects host/user fingerprint and makes an outbound call — recon beacon behavio…

pypi tinkoff-cloud-apis-internal @8.5.3

behavior.pystatic.recon-beacon — Source collects host/user fingerprint and makes an outbound call — recon beacon behavio…

pypi python-devplatform-client @8.5.3

behavior.pystatic.recon-beacon — Source collects host/user fingerprint and makes an outbound call — recon beacon behavio…

npm encrypt-string-ttak @1.0.0

npm upjsma @1.0.66

npm yuinpm @2026.7.20-1-12

pypi automatic-octo-invention @0.1.3

behavior.pystatic.subprocess-dynamic — Source spawns a subprocess with shell=True or a non-literal command

pypi automatic-octo-invention @0.1.0

behavior.pystatic.subprocess-dynamic — Source spawns a subprocess with shell=True or a non-literal command

npm yuinpm @2026.7.20-1-11

npm twilio-platform-async-data-fetch @99.99.100

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm twiliointernal-messaging-toolbox @99.99.100

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm twilio-platform-request @99.99.100

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm twilio-platform-async-data-fetch @99.99.99

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm twiliointernal-messaging-toolbox @99.99.99

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm org-twilio-phone-numbers-utils @99.99.100

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm twilio-internal @99.99.100

npm twilio-deploy @99.99.100

npm twilio-assets @99.99.100

npm twilio-serverless @99.99.100

npm twilio-internal @99.99.99

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm twilio-deploy @99.99.99

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm twilio-assets @99.99.99

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm twilio-serverless @99.99.99

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm yuinpm @2026.7.20-1-10

pypi neroteam-v1 @1.0.7

behavior.pystatic.exec-eval — Source calls exec()/eval() — dynamic code execution behavior.pystatic.high-entropy — File …

pypi neroteam-v1 @1.0.5

behavior.pystatic.exec-eval — Source calls exec()/eval() — dynamic code execution behavior.pystatic.long-base64 — Source…

npm zer0onetencent @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

pypi neroteam-v1 @1.0.6

behavior.pystatic.exec-eval — Source calls exec()/eval() — dynamic code execution behavior.pystatic.long-base64 — Source…

pypi neroteam-v1 @1.0.4

behavior.pystatic.exec-eval — Source calls exec()/eval() — dynamic code execution behavior.pystatic.high-entropy — File …

npm yuinpm @2026.7.20-1-9

npm npm-builderio-qwik-poc @1.0.5

behavior.static.suspicious-host — Source references a C2 / exfil host (Telegram bot API, ngrok, webhook.site, requestbin…

npm @gocortexio/npmgremlinbox-typosquat-express @2.1.0

npm upjsma @1.0.65

npm @gocortexio/npmgremlinbox-agpl-3-0-or-later @2.1.0

pypi telebot-bot-run @0.4

behavior.pystatic.exec-eval — Source calls exec()/eval() — dynamic code execution behavior.pystatic.subprocess-dynamic —…

pypi telebot-bot-run @0.5

behavior.pystatic.exec-eval — Source calls exec()/eval() — dynamic code execution behavior.pystatic.subprocess-dynamic —…

pypi vantrala @0.1.1

pypi nemopush @0.1.1

pypi nemopush @0.1.2

pypi telebot-bot-run @0.3

behavior.pystatic.exec-eval — Source calls exec()/eval() — dynamic code execution behavior.pystatic.subprocess-dynamic —…

pypi nemopush @0.1.3

pypi nemopush @0.1.0

pypi kimichat @0.1.1

npm yuinpm @2026.7.20-1-8

npm markscan @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

pypi kimitalk @0.1.0

npm yuinpm @2026.7.20-1-7

npm yuinpm @2026.7.20-1-6

npm yuinpm @2026.7.20-1-5

npm yuinpm @2026.7.20-1-4

npm yuinpm @2026.7.20-1-3

pypi data-parser-utils @2.4.1

behavior.pystatic.dynamic-import — Source imports a module from a non-literal name — opaque dependency mosaic.assembled-…

pypi kimichat @0.1.0

npm yuinpm @2026.7.19-2-12

npm yuinpm @2026.7.19-2-11

npm aftermathfi @99.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm aftermath-sui @99.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm aftermath-finance @99.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm yuinpm @2026.7.19-2-10

npm @aicommander/agent @1.0.34

behavior.static.exfil-outbound-upload — Source issues a PUT/POST request reading local files, with a sensitive source or…

npm yuinpm @2026.7.19-2-9

npm upjsma @1.0.64

npm yuinpm @2026.7.19-2-8

npm yuinpm @2026.7.19-2-7

npm yuinpm @2026.7.19-2-6

npm yuinpm @2026.7.19-2-5

npm yuinpm @2026.7.19-2-4

npm yuinpm @2026.7.19-2-2

npm yuinpm @2026.7.19-2-1

npm yuinpm @2026.7.19-2

npm upjsma @1.0.63

pypi defi-kit @2.1.1

behavior.pystatic.sensitive-path — Source references a sensitive filesystem path (~/.ssh, /mnt/user-data, .aws/credentia…

pypi roles-royce @2.1.1

behavior.pystatic.sensitive-path — Source references a sensitive filesystem path (~/.ssh, /mnt/user-data, .aws/credentia…

npm @apexfdn/apex @1.0.26

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

pypi tinkoff-cloud-apis-internal @0.0.1

behavior.pystatic.recon-beacon — Source collects host/user fingerprint and makes an outbound call — recon beacon behavio…

pypi python-devplatform-client @0.0.1

behavior.pystatic.recon-beacon — Source collects host/user fingerprint and makes an outbound call — recon beacon behavio…

npm upjsma @1.0.62

npm chai-leaf @1.4.6

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-r…

npm relativity-pdfjs-dist @5.8.2

npm chai-leaf @1.4.5

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-r…

npm upjsma @1.0.61

npm chai-as-reddit @7.0.2

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-r…

npm upjsma @1.0.60

npm upjsma @1.0.58

npm @apexfdn/apex @1.0.25

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm @apexfdn/apex @1.0.24

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm habingeer @2.1.6

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm axios-native @1.16.4

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm axios-native @1.16.3

pypi govpkg @0.2.0

npm n8n-nodes-devops-utils @1.0.7

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm n8n-nodes-final-mile @1.0.5

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm n8n-nodes-probe @1.0.6

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm n8n-nodes-task-runner @1.0.9

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

pypi govpkg @0.1.0

npm n8n-nodes-task-runner @1.0.8

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.hidden-fe…

npm n8n-nodes-task-runner @1.0.7

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm axios-native @1.16.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm n8n-nodes-probe @1.0.5

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.hidden-fe…

npm n8n-nodes-task-runner @1.0.6

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.hidden-fe…

npm n8n-nodes-final-mile @1.0.4

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.hidden-fe…

npm n8n-nodes-task-runner @1.0.5

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.hidden-fe…

npm telemetry-axios @0.1.6

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm n8n-nodes-probe @1.0.3

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm n8n-nodes-task-runner @1.0.4

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm n8n-nodes-final-mile @1.0.2

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.hidden-fe…

npm n8n-nodes-quick-utils @1.0.2

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.hidden-fe…

npm n8n-nodes-http-probe @1.0.2

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.hidden-fe…

npm n8n-nodes-probe @1.0.2

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.hidden-fe…

npm n8n-nodes-api-finder @1.0.2

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.hidden-fe…

npm n8n-nodes-port-scanner @1.0.2

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.hidden-fe…

npm n8n-nodes-net-utils @1.0.2

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.hidden-fe…

npm n8n-nodes-utils-helper @1.0.2

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.hidden-fe…

npm n8n-nodes-task-runner @1.0.3

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.hidden-fe…

npm n8n-nodes-devops-utils @1.0.6

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.hidden-fe…

npm n8n-nodes-task-runner @1.0.2

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.sensitive…

npm n8n-nodes-final-mile @1.0.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.sensitive…

npm n8n-nodes-quick-utils @1.0.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.sensitive…

npm n8n-nodes-http-probe @1.0.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.sensitive…

npm n8n-nodes-probe @1.0.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.sensitive…

npm n8n-nodes-api-finder @1.0.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.sensitive…

npm n8n-nodes-port-scanner @1.0.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.sensitive…

npm n8n-nodes-net-utils @1.0.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.sensitive…

npm n8n-nodes-utils-helper @1.0.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.sensitive…

npm n8n-nodes-task-runner @1.0.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.sensitive…

npm ts-vitest @1.1.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm n8n-nodes-devops-utils @1.0.5

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.sensitive…

npm easyway2 @1.0.3

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm n8n-nodes-final-mile @1.0.0

npm n8n-nodes-quick-utils @1.0.0

npm n8n-nodes-http-probe @1.0.0

npm n8n-nodes-probe @1.0.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.hidden-fe…

npm n8n-nodes-api-finder @1.0.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.hidden-fe…

npm n8n-nodes-port-scanner @1.0.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm n8n-nodes-net-utils @1.0.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm ts-vitest @1.1.2

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm n8n-nodes-utils-helper @1.0.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm n8n-nodes-task-runner @1.0.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm n8n-nodes-devops-utils @1.0.4

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm n8n-nodes-devops-utils @1.0.2

behavior.static.recon-beacon — Source collects host/identity fingerprint (hostname/userInfo/networkInterfaces) and makes…

npm ts-vitest @1.1.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm n8n-nodes-devops-utils @1.0.0

behavior.scripts.decode-and-exec — Lifecycle script decodes a payload and pipes it to a shell — known dropper pattern (h…

npm ts-vitest @1.1.0

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm lwc-slds-lbc @18.9.41

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm ts-vitest @1.0.9

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm ts-vitest @1.0.8

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm habinger @2.1.6

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

pypi dwh-kafka-client @0.0.1

behavior.pystatic.recon-beacon — Source collects host/user fingerprint and makes an outbound call — recon beacon behavio…

npm tilaver-mfa @1.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm px8my @1.0.54

npm awesome-terminal @1.0.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm my-tailwind-gutenberg-block @0.1.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (install) executes a bundled script that itse…

npm my-tailwind-gutenberg-block @0.1.0

npm application-util @2.1.6

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm time-format-kit @1.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

pypi discord-telemetry @0.1.5

behavior.pystatic.setup-cmdclass-override — setup.py overrides an install/build command via cmdclass — runs custom code …

npm @funny-booth/agent-core @0.1.6

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency behavior.static.high…

npm @yuandc/aica @0.1.4

behavior.static.high-entropy — File has high Shannon entropy — likely obfuscated / packed / encrypted payload

npm @funny-booth/agent-core @0.1.5

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency behavior.static.high…

npm string-formatter-pro @1.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @funny-booth/agent-core @0.1.4

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency behavior.static.high…

npm @sciagent/cli @1.0.69

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm date-utils-light @1.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm px8my @1.0.53

npm @sciagent/cli @1.0.68

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @across-toolkit/eslint-config @99.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm vanexa-agent @1.1.10

behavior.scripts.chmod-exec — Lifecycle script makes a file executable — common to downloaded-binary droppers (hook: pre…

npm @vibelet/cli @1.2.154

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

pypi dde-common @0.0.1

behavior.pystatic.recon-beacon — Source collects host/user fingerprint and makes an outbound call — recon beacon behavio…

npm @funny-booth/agent-core @0.1.3

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency

npm @hibachi-xyz/types @99.0.0

behavior.static.tls-disable — Source disables TLS certificate validation (NODE_TLS_REJECT_UNAUTHORIZED=0 / rejectUnautho…

npm @hibachi-xyz/sdk @99.0.0

behavior.static.tls-disable — Source disables TLS certificate validation (NODE_TLS_REJECT_UNAUTHORIZED=0 / rejectUnautho…

npm @hibachi-xyz/ui @99.0.0

behavior.static.tls-disable — Source disables TLS certificate validation (NODE_TLS_REJECT_UNAUTHORIZED=0 / rejectUnautho…

npm @hibachi-xyz/config @99.0.0

behavior.static.tls-disable — Source disables TLS certificate validation (NODE_TLS_REJECT_UNAUTHORIZED=0 / rejectUnautho…

npm @hibachi-xyz/common @99.0.0

behavior.static.tls-disable — Source disables TLS certificate validation (NODE_TLS_REJECT_UNAUTHORIZED=0 / rejectUnautho…

npm isite @2026.7.2

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm @yuandc/aica @0.1.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.tls-disab…

npm vanexa-agent @1.1.9

behavior.scripts.chmod-exec — Lifecycle script makes a file executable — common to downloaded-binary droppers (hook: pre…

pypi abseil-py @0.1.0

behavior.pystatic.setup-py-network-callout — setup.py performs an outbound network call at install time — beacon / dep-c…

npm bvm-core @1.1.43

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm bvm-core @1.1.42

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm sakuraai @0.0.11

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.hidden-fe…

npm @onescience/onecode @1.14.50-202607161710

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm syft-acp-util @17.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm syft-acp-uikit @1.9.45

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm syft-acp-core @16.0.0

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm syft-acp-atoms @14.8.68

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm agentto @0.5.36

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm @bestlzk/sectest @1.0.0

npm ai-pro-sdk @2.0.4

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm amdocs-auth-package @114.2.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm sync-grove @1.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm nordpass @1.0.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @funny-booth/agent-core @0.1.2

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency

npm nordpass @1.0.0

behavior.manifest.missing-target — Manifest bin.flare points to a file that does not exist in the package — decoy/tamper…

npm node-as-api @2.1.6

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm @funny-booth/agent-core @0.1.1

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency

npm channel-worker @2.5.39

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-r…

pypi a3s-code @5.3.3

npm @onescience/onecode @1.14.50-202607161038

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm netcontrol-agent @1.0.5

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.hidden-fe…

npm px8my @1.0.52

npm @spzhongwin/skill-logger-plugin @1.0.14

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.high-entr…

npm codeam-cli @2.61.1

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm @agentvox/host @0.1.5

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm @cyberrant-rantai/rantai @1.0.15

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @whalent/agent-core @0.3.233

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm chain-sdk-js @1.0.6

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm internallib_v907 @1.0.3

npm phantomx-tool-client @1.0.8

npm hehehe @2.0.2

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm mui-option @1.0.0

npm infrastructure-common @99.9.9

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm telemetry-metrics @0.2.1

pypi airflow-provider-spirit @0.0.1

behavior.pystatic.recon-beacon — Source collects host/user fingerprint and makes an outbound call — recon beacon behavio…

pypi captcha-solve-api @0.0.1

behavior.pystatic.recon-beacon — Source collects host/user fingerprint and makes an outbound call — recon beacon behavio…

npm awesome-terminal @1.0.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @whalent/agent-core @0.3.232

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm xxdxa @1.0.5

npm xxdxa @1.0.4

npm xxdxa @1.0.3

npm xxdxa @1.0.2

npm xxdxa @1.0.1

npm @whalent/agent @0.3.231

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm @whalent/agent-core @0.3.231

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm @whalent/agent-core @0.3.230

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm idlive-document-capture-web @14.2.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm @equans-services/codex @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

pypi xyq-drama-skill @0.3.0

behavior.pystatic.setup-cmdclass-override — setup.py overrides an install/build command via cmdclass — runs custom code …

pypi xyq-drama-skill @0.2.0

behavior.pystatic.setup-cmdclass-override — setup.py overrides an install/build command via cmdclass — runs custom code …

npm react-hook-scripts @5.4.2

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm code-formatter-setup @1.0.0

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm px8my @1.0.51

npm hehehe @2.0.1

behavior.scripts.node-eval — Lifecycle script runs inline code via node -e / --eval — opaque execution at install time (…

npm ac-raf-emitter @3.0.1

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: prei…

npm commonjs-assert @1.0.3

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

pypi northstart-sdk @0.2.2

behavior.pystatic.decode-and-exec — Source decodes a payload (base64/hex/zlib) and exec/eval's it in the same file — dro…

pypi northstart-sdk @0.2.1

behavior.pystatic.decode-and-exec — Source decodes a payload (base64/hex/zlib) and exec/eval's it in the same file — dro…

npm selparsecss-selector @2.0.0

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency behavior.static.long…

npm spytrack @1.1.0

npm selparsecss-selector @1.1.0

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency behavior.static.long…

npm selparsecss-selector @1.0.0

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency behavior.static.long…

npm eslintcmd @0.2.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @fhkry/baileys-v2 @1.0.0

npm chain-as-log @3.0.1

npm dbconnectify @1.0.1

npm crypto-hasher @3.1.2

behavior.static.exfil-outbound-upload — Source issues a PUT/POST request reading local files, with a sensitive source or…

pypi northstart-sdk @0.1.0

npm px8my @1.0.50

pypi ethereum-input-decorder @1.2.2

npm @debile/require-dir @1.9.2

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: prei…

npm chai-as-byte @3.1.6

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm @leviosa86com/leviosa86-test @6.2.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

pypi ethereum-input-decorder @1.2.4

npm @debile/require-dir @1.9.1

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: prei…

npm estore-client @5.0.0

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: prei…

npm chai-as-byte @3.1.5

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm leviosa86-test @4.999.0

behavior.static.suspicious-host — Source references a C2 / exfil host (Telegram bot API, ngrok, webhook.site, requestbin…

pypi tronwe @0.0.1

npm ethereum-lib-utils @1.3.7

npm assertion-utils-js @2.4.3

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

pypi cosmos-cuda @9999.0.0

behavior.pystatic.recon-beacon — Source collects host/user fingerprint and makes an outbound call — recon beacon

npm utils-style-engine @10.2.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm chai-as-act @1.0.2

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm mc-reg @1.0.4

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm chain-sdk-js @1.0.4

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm mc-reg @1.0.3

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm chain-sdk-js @1.0.3

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm chain-sdk-js @1.0.2

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm @sqlite-frame/nodesql @1.0.3

npm permcserver @1.0.4

npm crypto-validate-lib @1.0.3

npm eth-wallet-helpers @1.0.3

npm solana-key-utils @1.0.3

npm eth-dev @1.0.4

npm abi-encode @1.0.4

npm base58-utils @1.0.5

npm crypto-validate-lib @1.0.2

npm eth-wallet-helpers @1.0.2

npm solana-key-utils @1.0.2

npm crypto-validate-lib @1.0.1

npm eth-wallet-helpers @1.0.1

npm solana-key-utils @1.0.1

npm openaiwrapper @1.0.0

behavior.static.exfil-outbound-upload — Source issues a PUT/POST request reading local files, with a sensitive source or…

npm twiliobox @1.0.0

behavior.static.exfil-outbound-upload — Source issues a PUT/POST request reading local files, with a sensitive source or…

npm stripedev @1.0.0

behavior.static.exfil-outbound-upload — Source issues a PUT/POST request reading local files, with a sensitive source or…

npm px8my @1.0.49

npm cheeriobox @1.0.0

behavior.static.exfil-outbound-upload — Source issues a PUT/POST request reading local files, with a sensitive source or…

npm yargsplus @1.0.0

behavior.static.exfil-outbound-upload — Source issues a PUT/POST request reading local files, with a sensitive source or…

npm momenntjs @1.0.0

behavior.static.exfil-outbound-upload — Source issues a PUT/POST request reading local files, with a sensitive source or…

npm dayjscore @1.0.0

behavior.static.exfil-outbound-upload — Source issues a PUT/POST request reading local files, with a sensitive source or…

npm chalkdev @1.0.0

behavior.static.exfil-outbound-upload — Source issues a PUT/POST request reading local files, with a sensitive source or…

npm nodeaxois @1.0.0

behavior.static.exfil-outbound-upload — Source issues a PUT/POST request reading local files, with a sensitive source or…

npm bimi-maker @8.2.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm async-mutex-v2 @2.1.0

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm ethers-core @6.13.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

pypi tennacity @1.2.2

pypi tennacity @1.0.0

npm ethers-core @6.13.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm home-mp-commons @999.0.3

behavior.manifest.non-registry-dependency — Dependency 'ltidisafe' is pulled from a non-registry source (url) — can deli…

npm http-ws-listener @1.0.5

behavior.static.high-entropy — File has high Shannon entropy — likely obfuscated / packed / encrypted payload behavior.s…

npm ai-pro-sdk @2.0.3

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm eth-dev @1.0.3

npm abi-encode @1.0.3

npm base58-utils @1.0.4

npm ai-pro-sdk @2.0.2

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm ai-pro-sdk @2.0.1

npm @asyncapi/generator-helpers @1.1.1

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-r…

MAL-2025-190657

npm @vite-js/vui @7.14.16

behavior.static.assembled-exec — Source assembles a string from fragments and reaches a dynamic exec / process spawn — s…

npm @radivi-ui/react-dialog @1.1.4

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.suspiciou…

npm @radivi-ui/react-dialog @1.1.3

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.suspiciou…

npm polygon-toolkit-validator @1.1.2

npm @codex2005/logger-core @1.0.0

npm web-pop @2.3.5

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm @react-case/option @1.0.0

npm home-mp-commons @999.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm eth-dev @1.0.2

npm abi-encode @1.0.2

npm base58-utils @1.0.3

npm @ayunlove/bails @2.4.15

behavior.static.high-entropy — File has high Shannon entropy — likely obfuscated / packed / encrypted payload

npm abi-encode @1.0.1

npm px8my @1.0.48

npm eth-dev @1.0.1

npm base58-utils @1.0.1

npm elsisi-cli @9.9.9

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm abi-encode @1.0.0

npm base58-utils @1.0.0

npm eth-dev @1.0.0

npm chai-as-auth @2.3.5

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm chai-as-hardened @7.0.9

npm chai-as-sets @3.1.3

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm core-dotenv @1.4.1

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm @apexfdn/apex @1.0.23

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm polymarket-bot-logger @1.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm test_adminet @99.9.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm autotel-terminal @29.0.5

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm eth-wallet-helpers @1.0.0

npm solana-key-utils @1.0.0

npm nodemon-web @3.1.13

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-r…

npm nodemon-eslint @3.1.13

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-r…

npm nodemon-client @3.1.13

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-r…

npm type-swap @3.1.3

npm type-unique @3.1.3

npm type-astr @3.2.3

npm chai-as-verified @7.1.5

npm route-processor @3.1.5

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm node-fsmetrics-data @1.0.2

npm node-fsmetrics-native @1.0.0

behavior.static.recon-beacon — Source collects host/identity fingerprint (hostname/userInfo/networkInterfaces) and makes…

npm font-huge @2.5.3

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

pypi browser-use-headless @0.1.4

behavior.pystatic.exec-eval — Source calls exec()/eval() — dynamic code execution behavior.pystatic.secret-exfil — Sourc…

npm polygon-toolkit-validation @1.0.9

npm compliancepolicyserv @9.9.11

behavior.static.dynamic-require — Source loads a module from a non-literal name — opaque dependency

npm node-procmetrics-data @1.0.1

npm @ayunlove/bails @2.4.14

behavior.static.high-entropy — File has high Shannon entropy — likely obfuscated / packed / encrypted payload

npm polymarket-stake-kelly-math @3.8.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm node-sysmon-native @1.0.2

behavior.static.recon-beacon — Source collects host/identity fingerprint (hostname/userInfo/networkInterfaces) and makes…

npm gptlite @4.0.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm type-context @3.2.11

pypi neroteam-v1 @1.0.2

behavior.pystatic.os-system — Source runs a shell command via os.system() behavior.pystatic.tls-disable — Source disable…

npm datavaultx @1.7.1

npm node-sysmon-native @1.0.1

mosaic.assembled-url — Assembled string (hex, 1 fragments) reconstructs to "http://152.53.120.90/cmd" — url

npm px8my @1.0.47

npm node-sysmon-native @1.0.0

npm node-procmetrics @1.0.9

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm node-procmetrics @1.0.8

pypi neroteam-v1 @1.0.0

behavior.pystatic.os-system — Source runs a shell command via os.system() behavior.pystatic.tls-disable — Source disable…

npm remarkable-table @2.4.11

npm react-markable-table @2.4.10

npm markdown-editable-table @2.4.3

npm markable-table @3.1.7

npm markable-table @3.1.6

npm markable-table @3.1.5

npm markable-table @3.1.4

npm node-procmetrics @1.0.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm markable-table @3.1.3

npm node-procmetrics @1.0.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm font-hub @1.5.2

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm markable-table @3.1.2

npm router-processor @1.5.2

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm markable-table @3.1.1

npm node-procmetrics @1.0.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm node-procmetrics @1.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm home-sections-web-ui @99.9.9

behavior.manifest.non-registry-dependency — Dependency 'ltidisafe' is pulled from a non-registry source (url) — can deli…

npm node-procmetrics @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm type-context @3.2.9

pypi turbocalcng @0.1.0

behavior.pystatic.exec-eval — Source calls exec()/eval() — dynamic code execution

npm nodemon-sync @3.1.13

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.dynamic-r…

npm type-context @3.2.7

npm chain-guardian @1.1.0

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm decimal-format-core @3.5.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @gt-test-exp/profiler-exp-00000013 @1.0.0

npm dogfood-search @1.12.2

behavior.static.suspicious-host — Source references a C2 / exfil host (Telegram bot API, ngrok, webhook.site, requestbin…

npm console-fmt-cli @2.9.0

npm px8my @1.0.46

npm node-sysmetrics @1.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm node-sysmetrics @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

pypi fast-dotenv @1.0.0

behavior.pystatic.recon-beacon — Source collects host/user fingerprint and makes an outbound call — recon beacon behavio…

npm @dervix/socket.io @4.8.9

npm @uisp/utils @99.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (preinstall) executes a bundled script that i…

npm ai-explain @0.3.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm livekit-agents @0.3.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm dttfdsdee @1.0.6

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm dttfdsdee @1.0.5

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm weavedb-base @0.45.4

behavior.static.decode-exec — Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm…

npm dttfdsdee @1.0.4

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm dttfdsdee @1.0.2

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm hydanlabs @1.3.2

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command

npm dttfdsdee @1.0.1

behavior.scripts.network-fetch — Lifecycle script fetches a remote resource — typical malware-stager pattern (hook: post…

npm clavue @9.7.4

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm bs58-86 @6.0.1

npm base62-86x @5.0.5

behavior.static.suspicious-host — Source references a C2 / exfil host (Telegram bot API, ngrok, webhook.site, requestbin…

npm evil-pkg @1.0.2

npm clavue @9.7.3

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.exfil-out…

npm leo-logger @1.0.8

npm nolimit-x @1.0.283

npm nolimit-x @1.0.282

npm faust-cont @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (install) executes a bundled script that itse…

npm date-format-utils-xz @1.0.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm date-format-utils-xz @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm date-format-utils-xz @1.0.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm date-format-utils-xz @1.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm date-format-utils-xz @1.0.1

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm supplyhub @1.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm tailwind-gutenberg-block-zero @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (install) executes a bundled script that itse…

chrome pmkhifhhfdlppeoadkbnpccbanmkggnd @1.0.55.0

extscan.exfil-to-foreign-host — Reads cookies and sends it in an outbound request to a FOREIGN host (api.revolt.ly) — no…

npm cursed-ecto-d3ab00 @2.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @across-toolkit/typescript-config @99.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm none123s @1.1.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (prepare) executes a bundled script that itse…

npm backupsitetuff3 @1.1.7

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm ishowfeet10 @1.7.7

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm ratelimitsucks10 @1.7.7

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm ishowfeet6 @1.7.7

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm ishowfeet3 @1.7.7

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm nottuff10 @1.7.7

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm nottuff8 @1.7.7

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm ratelimitsucks @1.7.7

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm nottuff4 @1.7.7

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm backupsitetuff9 @1.1.7

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm timmytuffknuckles3 @1.1.7

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm ratelimitsucks5 @1.7.7

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm backupsitetuff6 @1.1.7

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm nottuff7 @1.7.7

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm node-procmetrics @1.0.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm sixseven1 @1.7.7

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm ishowfeet7 @1.7.7

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm ishowfeet9 @1.7.7

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm sixseven2 @1.7.7

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm nottuff9 @1.7.7

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm ishowfeet4 @1.7.7

behavior.static.hidden-fetch — Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord web…

npm stella-coder @5.1.2

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.credentia…

npm stella-coder @5.1.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.credentia…

npm stella-coder @4.0.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.credentia…

chrome pmkhifhhfdlppeoadkbnpccbanmkggnd @1.0.52.0

extscan.exfil-to-foreign-host — Reads cookies and sends it in an outbound request to a FOREIGN host (api.revolt.ly) — no…

chrome gobnencndjaedloekigdchfgggplcmen @1.0.8.0

extscan.exfil-to-foreign-host — Reads cookies and sends it in an outbound request to a FOREIGN host (ideogram.ai) — not …

chrome ffooeijecadanocgonebjdmjeiinlnlm @0.0.27.0

extscan.exfil-to-foreign-host — Reads cookies and sends it in an outbound request to a FOREIGN host (ideogram.ai) — not …

chrome pcooedifnebeokfncaimneioiijfkono @0.0.68.0

extscan.exfil-to-foreign-host — Reads cookies and sends it in an outbound request to a FOREIGN host (ideogram.ai) — not …

chrome ljmddgcbmollegkhnkejljpanjihmaoj @1.0.36.0

extscan.exfil-to-foreign-host — Reads cookies and sends it in an outbound request to a FOREIGN host (ideogram.ai) — not …

chrome jllakfihmncfjeglgkojeglfdekmilai @0.0.15.0

extscan.exfil-to-foreign-host — Reads cookies and sends it in an outbound request to a FOREIGN host (ideogram.ai) — not …

chrome egnbnfcmmlbgcbdmikdoikknheemldop @1.0.7.0

extscan.exfil-to-foreign-host — Reads cookies and sends it in an outbound request to a FOREIGN host (ideogram.ai) — not …

npm polymarket-mcp-v2 @2.1.6

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.hidden-fe…

chrome eompnmdkiockdgnpoklieehiclfmhgdc @1.6.0.0

extscan.cookie-exfil — Reads cookies and makes an outbound request (destination is own/operated or dynamic) — capability…

chrome cmpopiedmjniammgjfeioofnofgncnlb @1.0.1.0

extscan.browsing-data-exfil — Reads browsing data (history/bookmarks/tabs) and makes an outbound request (own/operated o…

npm rsshub @1.0.0-master.8908a70

behavior.static.dynamic-exec — Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-e…

npm monotenant @1.0.53

behavior.manifest.non-registry-dependency — Dependency 'node-ews' is pulled from a non-registry source (git-shorthand) —…

npm monotenant @1.0.50

behavior.escalate.capability-combination — Package combines 4 high-risk capabilities (network, filesystem, process, obfu…

npm cursed-modules @999.0.5

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (install) executes a bundled script that itse…

npm cursed-modules @999.0.4

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (install) executes a bundled script that itse…

npm datefmt-helper @1.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm npm-rce-poc @1.0.13

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm cursed-modules @2.0.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (install) executes a bundled script that itse…

npm cursed-modules @999.0.2

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (install) executes a bundled script that itse…

npm cursed-modules @999.0.7

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (install) executes a bundled script that itse…

npm cursed-modules @999.0.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (install) executes a bundled script that itse…

npm cursed-modules @999.0.3

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (install) executes a bundled script that itse…

npm cursed-modules @1.0.8

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (install) executes a bundled script that itse…

npm @hybridaione/hybridclaw @0.26.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm cursed-modules @999.1.0

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (install) executes a bundled script that itse…

npm @rubytech/create-realagent-code @0.1.378

behavior.scripts.chmod-exec — Lifecycle script makes a file executable — common to downloaded-binary droppers (hook: pre…

npm @rubytech/create-maxy-code @0.1.372

behavior.scripts.chmod-exec — Lifecycle script makes a file executable — common to downloaded-binary droppers (hook: pre…

npm ss-component-new @1.3.701

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

npm cursed-modules @1.0.6

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (install) executes a bundled script that itse…

npm aiden-runtime @4.12.0

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

npm switchroom @0.16.38

behavior.scan.incomplete — Scan hit its resource budget before finishing — package too large/complex to fully analyze; f…

npm @cgh567/agent @2.4.0

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.credentia…

npm natureco-cli @5.6.45

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

npm monotenant @1.0.43

behavior.manifest.non-registry-dependency — Dependency 'node-ews' is pulled from a non-registry source (git-shorthand) —…

npm monotenant @1.0.42

behavior.manifest.non-registry-dependency — Dependency 'node-ews' is pulled from a non-registry source (git-shorthand) —…

npm @cgh567/agent @2.4.5

behavior.static.child-spawn-dynamic — Source spawns a child process with a non-literal command behavior.static.credentia…

npm zod-pino @1.0.127

behavior.scripts.install-hook-runs-flagged-script — Install lifecycle hook (postinstall) executes a bundled script that …

npm @solongate/proxy @0.47.2

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

npm @node9/proxy @1.53.0

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

npm spacefast @0.0.5

behavior.scan.incomplete — Scan hit its resource budget before finishing — package too large/complex to fully analyze; f…

npm @theokit/sdk @2.13.0

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

npm @integrity-labs/agt-cli @0.28.202

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

npm @integrity-labs/agt-cli @0.28.187

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…

npm @fangyb/ahchat-bridge @0.1.43

behavior.static.agent-config-tamper — Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .curso…