[ { "id": "stella-ai-cli-2026-07-13", "display_name": "stella-ai-cli", "campaign": null, "detection_source": "osv", "packages": [ { "package": "stella-ai-cli", "ecosystem": "npm", "versions": [ "1.0.0", "2.1.0", "2.2.0", "2.2.1", "2.2.2", "3.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10133", "osv_published_at": "2026-07-10T15:59:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T23:37:04Z", "flagged_at": null, "confirmed_at": "2026-07-13T23:37:04Z", "osv_earliest_published_at": "2026-07-10T15:59:49Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T23:37:05Z" }, { "id": "polymarket-bot-logger-2026-07-13", "display_name": "polymarket-bot-logger", "campaign": null, "detection_source": "osv", "packages": [ { "package": "polymarket-bot-logger", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10516", "osv_published_at": "2026-07-13T22:48:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T23:06:37Z", "flagged_at": null, "confirmed_at": "2026-07-13T23:06:37Z", "osv_earliest_published_at": "2026-07-13T22:48:52Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T23:06:43Z" }, { "id": "nodemon-web-2026-07-13", "display_name": "nodemon-web", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nodemon-web", "ecosystem": "npm", "versions": [ "3.1.13" ], "osv_entries": [ { "osv_id": "MAL-2026-10515", "osv_published_at": "2026-07-13T22:19:16Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T23:06:36Z", "flagged_at": null, "confirmed_at": "2026-07-13T23:06:36Z", "osv_earliest_published_at": "2026-07-13T22:19:16Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T23:06:38Z" }, { "id": "type-unique-2026-07-13", "display_name": "type-unique", "campaign": null, "detection_source": "osv", "packages": [ { "package": "type-unique", "ecosystem": "npm", "versions": [ "3.1.3" ], "osv_entries": [ { "osv_id": "MAL-2026-10512", "osv_published_at": "2026-07-13T22:17:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T22:36:04Z", "flagged_at": null, "confirmed_at": "2026-07-13T22:36:04Z", "osv_earliest_published_at": "2026-07-13T22:17:03Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T22:36:38Z" }, { "id": "type-swap-2026-07-13", "display_name": "type-swap", "campaign": null, "detection_source": "osv", "packages": [ { "package": "type-swap", "ecosystem": "npm", "versions": [ "3.1.3" ], "osv_entries": [ { "osv_id": "MAL-2026-10511", "osv_published_at": "2026-07-13T22:17:10Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T22:36:03Z", "flagged_at": null, "confirmed_at": "2026-07-13T22:36:03Z", "osv_earliest_published_at": "2026-07-13T22:17:10Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T22:36:33Z" }, { "id": "type-astr-2026-07-13", "display_name": "type-astr", "campaign": null, "detection_source": "osv", "packages": [ { "package": "type-astr", "ecosystem": "npm", "versions": [ "3.2.3" ], "osv_entries": [ { "osv_id": "MAL-2026-10510", "osv_published_at": "2026-07-13T22:17:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T22:36:01Z", "flagged_at": null, "confirmed_at": "2026-07-13T22:36:01Z", "osv_earliest_published_at": "2026-07-13T22:17:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T22:36:28Z" }, { "id": "stella-coder-2026-07-13", "display_name": "stella-coder", "campaign": null, "detection_source": "osv", "packages": [ { "package": "stella-coder", "ecosystem": "npm", "versions": [ "5.3.3", "5.3.4", "5.3.5", "5.3.6" ], "osv_entries": [ { "osv_id": "MAL-2026-10134", "osv_published_at": "2026-07-10T15:59:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T22:35:59Z", "flagged_at": null, "confirmed_at": "2026-07-13T22:35:59Z", "osv_earliest_published_at": "2026-07-10T15:59:07Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T07:15:29Z" }, { "id": "nodemon-elint-2026-07-13", "display_name": "nodemon-elint", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nodemon-elint", "ecosystem": "npm", "versions": [ "3.1.13" ], "osv_entries": [ { "osv_id": "MAL-2026-10508", "osv_published_at": "2026-07-13T22:11:54Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T22:35:56Z", "flagged_at": null, "confirmed_at": "2026-07-13T22:35:56Z", "osv_earliest_published_at": "2026-07-13T22:11:54Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T22:36:14Z" }, { "id": "nodemon-delog-2026-07-13", "display_name": "nodemon-delog", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nodemon-delog", "ecosystem": "npm", "versions": [ "3.1.13" ], "osv_entries": [ { "osv_id": "MAL-2026-10507", "osv_published_at": "2026-07-13T22:12:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T22:35:54Z", "flagged_at": null, "confirmed_at": "2026-07-13T22:35:54Z", "osv_earliest_published_at": "2026-07-13T22:12:25Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T22:36:09Z" }, { "id": "node-fsagent-2026-07-13", "display_name": "node-fsagent", "campaign": null, "detection_source": "osv", "packages": [ { "package": "node-fsagent", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.4", "1.0.8", "1.1.1", "1.1.2", "1.1.3", "1.2.0", "1.2.1", "1.2.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10506", "osv_published_at": "2026-07-13T22:07:46Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T22:35:53Z", "flagged_at": null, "confirmed_at": "2026-07-13T22:35:53Z", "osv_earliest_published_at": "2026-07-13T22:07:46Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T22:36:03Z" }, { "id": "express-ini-2026-07-13", "display_name": "express-ini", "campaign": null, "detection_source": "osv", "packages": [ { "package": "express-ini", "ecosystem": "npm", "versions": [ "12.1.10" ], "osv_entries": [ { "osv_id": "MAL-2026-10505", "osv_published_at": "2026-07-13T21:50:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T22:35:50Z", "flagged_at": null, "confirmed_at": "2026-07-13T22:35:50Z", "osv_earliest_published_at": "2026-07-13T21:50:05Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T22:35:57Z" }, { "id": "electron-orbit-2026-07-13", "display_name": "electron-orbit", "campaign": null, "detection_source": "osv", "packages": [ { "package": "electron-orbit", "ecosystem": "npm", "versions": [ "1.0.37" ], "osv_entries": [ { "osv_id": "MAL-2026-6723", "osv_published_at": "2026-07-01T21:15:10Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T22:35:49Z", "flagged_at": null, "confirmed_at": "2026-07-13T22:35:49Z", "osv_earliest_published_at": "2026-07-01T21:15:10Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T22:35:52Z" }, { "id": "chai-as-verified-2026-07-13", "display_name": "chai-as-verified", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-verified", "ecosystem": "npm", "versions": [ "7.1.5" ], "osv_entries": [ { "osv_id": "MAL-2026-10504", "osv_published_at": "2026-07-13T22:10:30Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T22:35:45Z", "flagged_at": null, "confirmed_at": "2026-07-13T22:35:45Z", "osv_earliest_published_at": "2026-07-13T22:10:30Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T22:35:47Z" }, { "id": "n8n-nodes-rce-poc-2026-07-13", "display_name": "n8n-nodes-rce-poc", "campaign": null, "detection_source": "osv", "packages": [ { "package": "n8n-nodes-rce-poc", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10503", "osv_published_at": "2026-07-13T21:39:11Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T22:05:17Z", "flagged_at": null, "confirmed_at": "2026-07-13T22:05:17Z", "osv_earliest_published_at": "2026-07-13T21:39:11Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T22:05:53Z" }, { "id": "gamified-trading-system-2026-07-13", "display_name": "gamified-trading-system", "campaign": null, "detection_source": "osv", "packages": [ { "package": "gamified-trading-system", "ecosystem": "npm", "versions": [ "3.1.0", "3.6.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10502", "osv_published_at": "2026-07-13T21:34:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T22:05:15Z", "flagged_at": null, "confirmed_at": "2026-07-13T22:05:15Z", "osv_earliest_published_at": "2026-07-13T21:34:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T22:05:48Z" }, { "id": "filewisee-2026-07-13", "display_name": "filewisee", "campaign": null, "detection_source": "osv", "packages": [ { "package": "filewisee", "ecosystem": "npm", "versions": [ "0.1.0", "0.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10501", "osv_published_at": "2026-07-13T21:47:47Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T22:05:14Z", "flagged_at": null, "confirmed_at": "2026-07-13T22:05:14Z", "osv_earliest_published_at": "2026-07-13T21:47:47Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T22:05:42Z" }, { "id": "express-bunker-2026-07-13", "display_name": "express-bunker", "campaign": null, "detection_source": "osv", "packages": [ { "package": "express-bunker", "ecosystem": "npm", "versions": [ "6.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10500", "osv_published_at": "2026-07-13T21:31:57Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T22:05:12Z", "flagged_at": null, "confirmed_at": "2026-07-13T22:05:12Z", "osv_earliest_published_at": "2026-07-13T21:31:57Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T22:05:37Z" }, { "id": "eth-lib-utils-2026-07-13", "display_name": "eth-lib-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "eth-lib-utils", "ecosystem": "npm", "versions": [ "5.2.3", "5.2.4", "5.2.5" ], "osv_entries": [ { "osv_id": "MAL-2026-10499", "osv_published_at": "2026-07-13T21:26:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T22:05:11Z", "flagged_at": null, "confirmed_at": "2026-07-13T22:05:11Z", "osv_earliest_published_at": "2026-07-13T21:26:35Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T22:05:32Z" }, { "id": "eslint-angular-react-2026-07-13", "display_name": "eslint-angular-react", "campaign": null, "detection_source": "osv", "packages": [ { "package": "eslint-angular-react", "ecosystem": "npm", "versions": [ "110.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10498", "osv_published_at": "2026-07-13T21:32:29Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T22:05:09Z", "flagged_at": null, "confirmed_at": "2026-07-13T22:05:09Z", "osv_earliest_published_at": "2026-07-13T21:32:29Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T22:05:27Z" }, { "id": "ddok-modal-2026-07-13", "display_name": "ddok-modal", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ddok-modal", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10497", "osv_published_at": "2026-07-13T21:44:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T22:05:08Z", "flagged_at": null, "confirmed_at": "2026-07-13T22:05:08Z", "osv_earliest_published_at": "2026-07-13T21:44:42Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T22:05:22Z" }, { "id": "bubblestring-2026-07-13", "display_name": "bubblestring", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bubblestring", "ecosystem": "npm", "versions": [ "1.1.4" ], "osv_entries": [ { "osv_id": "MAL-2026-10496", "osv_published_at": "2026-07-13T21:44:59Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T22:05:07Z", "flagged_at": null, "confirmed_at": "2026-07-13T22:05:07Z", "osv_earliest_published_at": "2026-07-13T21:44:59Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T22:05:16Z" }, { "id": "quukk-opencode-clawmessenger-2026-07-13", "display_name": "@quukk/opencode-clawmessenger", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@quukk/opencode-clawmessenger", "ecosystem": "npm", "versions": [ "1.1.10" ], "osv_entries": [ { "osv_id": "MAL-2026-10495", "osv_published_at": "2026-07-13T21:29:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T22:05:05Z", "flagged_at": null, "confirmed_at": "2026-07-13T22:05:05Z", "osv_earliest_published_at": "2026-07-13T21:29:25Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T22:05:11Z" }, { "id": "quickcall-krew-2026-07-13", "display_name": "@quickcall/krew", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@quickcall/krew", "ecosystem": "npm", "versions": [ "0.1.7" ], "osv_entries": [ { "osv_id": "MAL-2026-10494", "osv_published_at": "2026-07-13T21:29:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T22:05:03Z", "flagged_at": null, "confirmed_at": "2026-07-13T22:05:03Z", "osv_earliest_published_at": "2026-07-13T21:29:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T22:05:05Z" }, { "id": "svgson-lite-2026-07-13", "display_name": "svgson-lite", "campaign": null, "detection_source": "osv", "packages": [ { "package": "svgson-lite", "ecosystem": "npm", "versions": [ "1.0.8" ], "osv_entries": [ { "osv_id": "MAL-2026-6707", "osv_published_at": "2026-07-01T18:35:11Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T21:34:42Z", "flagged_at": null, "confirmed_at": "2026-07-13T21:34:42Z", "osv_earliest_published_at": "2026-07-01T18:35:11Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T21:34:54Z" }, { "id": "insomnia-plugin-poc-m4gester-run-2026-07-13", "display_name": "insomnia-plugin-poc-m4gester-run", "campaign": null, "detection_source": "osv", "packages": [ { "package": "insomnia-plugin-poc-m4gester-run", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10493", "osv_published_at": "2026-07-13T21:04:34Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T21:34:40Z", "flagged_at": null, "confirmed_at": "2026-07-13T21:34:40Z", "osv_earliest_published_at": "2026-07-13T21:04:34Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T21:34:49Z" }, { "id": "font-huge-2026-07-13", "display_name": "font-huge", "campaign": null, "detection_source": "osv", "packages": [ { "package": "font-huge", "ecosystem": "npm", "versions": [ "2.5.3" ], "osv_entries": [ { "osv_id": "MAL-2026-10492", "osv_published_at": "2026-07-13T20:54:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T21:34:38Z", "flagged_at": null, "confirmed_at": "2026-07-13T21:34:38Z", "osv_earliest_published_at": "2026-07-13T20:54:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T21:34:44Z" }, { "id": "assertcoreutils-2026-07-13", "display_name": "assertcoreutils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "assertcoreutils", "ecosystem": "npm", "versions": [ "2.3.2", "2.3.3" ], "osv_entries": [ { "osv_id": "MAL-2026-10491", "osv_published_at": "2026-07-13T21:00:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T21:34:37Z", "flagged_at": null, "confirmed_at": "2026-07-13T21:34:37Z", "osv_earliest_published_at": "2026-07-13T21:00:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T21:34:39Z" }, { "id": "sqlite-panel-createsql-2026-07-13", "display_name": "@sqlite-panel/createsql", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@sqlite-panel/createsql", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10490", "osv_published_at": "2026-07-13T20:54:27Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T21:33:15Z", "flagged_at": null, "confirmed_at": "2026-07-13T21:33:15Z", "osv_earliest_published_at": "2026-07-13T20:54:27Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T21:33:17Z" }, { "id": "permcserver-2026-07-13", "display_name": "permcserver", "campaign": null, "detection_source": "osv", "packages": [ { "package": "permcserver", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.3", "1.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-10489", "osv_published_at": "2026-07-13T20:49:47Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T21:02:49Z", "flagged_at": null, "confirmed_at": "2026-07-13T21:02:49Z", "osv_earliest_published_at": "2026-07-13T20:49:47Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T20:42:00Z" }, { "id": "permcarmserver-2026-07-13", "display_name": "permcarmserver", "campaign": null, "detection_source": "osv", "packages": [ { "package": "permcarmserver", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10488", "osv_published_at": "2026-07-13T20:49:56Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T21:02:47Z", "flagged_at": null, "confirmed_at": "2026-07-13T21:02:47Z", "osv_earliest_published_at": "2026-07-13T20:49:56Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T21:02:52Z" }, { "id": "outsmartly-metaobjects-2026-07-13", "display_name": "@outsmartly/metaobjects", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@outsmartly/metaobjects", "ecosystem": "npm", "versions": [ "0.3.3-rc.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10487", "osv_published_at": "2026-07-13T20:43:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T21:02:45Z", "flagged_at": null, "confirmed_at": "2026-07-13T21:02:45Z", "osv_earliest_published_at": "2026-07-13T20:43:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T21:02:47Z" }, { "id": "omniwatch-wick-cli-2026-07-13", "display_name": "@omniwatch-wick/cli", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@omniwatch-wick/cli", "ecosystem": "npm", "versions": [ "0.1.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10486", "osv_published_at": "2026-07-13T20:43:55Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T21:01:51Z", "flagged_at": null, "confirmed_at": "2026-07-13T21:01:51Z", "osv_earliest_published_at": "2026-07-13T20:43:55Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T21:01:53Z" }, { "id": "browser-use-headless-2026-07-13", "display_name": "browser-use-headless", "campaign": null, "detection_source": "osv", "packages": [ { "package": "browser-use-headless", "ecosystem": "pypi", "versions": [ "0.1.4" ], "osv_entries": [ { "osv_id": "MAL-2026-10484", "osv_published_at": "2026-07-13T19:50:59Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T20:46:38Z", "flagged_at": null, "confirmed_at": "2026-07-13T20:46:38Z", "osv_earliest_published_at": "2026-07-13T19:50:59Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T20:47:01Z" }, { "id": "route-processor-2026-07-13", "display_name": "route-processor", "campaign": null, "detection_source": "osv", "packages": [ { "package": "route-processor", "ecosystem": "npm", "versions": [ "3.1.5" ], "osv_entries": [ { "osv_id": "MAL-2026-10483", "osv_published_at": "2026-07-13T19:46:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T20:46:35Z", "flagged_at": null, "confirmed_at": "2026-07-13T20:46:35Z", "osv_earliest_published_at": "2026-07-13T19:46:50Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T20:46:56Z" }, { "id": "react-icons-svgo-2026-07-13", "display_name": "react-icons-svgo", "campaign": null, "detection_source": "osv", "packages": [ { "package": "react-icons-svgo", "ecosystem": "npm", "versions": [ "1.0.0", "1.5.3", "1.5.4" ], "osv_entries": [ { "osv_id": "MAL-2026-10482", "osv_published_at": "2026-07-13T19:53:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T20:46:34Z", "flagged_at": null, "confirmed_at": "2026-07-13T20:46:34Z", "osv_earliest_published_at": "2026-07-13T19:53:21Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T20:46:51Z" }, { "id": "polymarket-mcp-v2-2026-07-13", "display_name": "polymarket-mcp-v2", "campaign": null, "detection_source": "osv", "packages": [ { "package": "polymarket-mcp-v2", "ecosystem": "npm", "versions": [ "2.1.6" ], "osv_entries": [ { "osv_id": "MAL-2026-10481", "osv_published_at": "2026-07-13T19:44:16Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T20:46:32Z", "flagged_at": null, "confirmed_at": "2026-07-13T20:46:32Z", "osv_earliest_published_at": "2026-07-13T19:44:16Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T20:46:46Z" }, { "id": "node-fsmetrics-native-2026-07-13", "display_name": "node-fsmetrics-native", "campaign": null, "detection_source": "osv", "packages": [ { "package": "node-fsmetrics-native", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10480", "osv_published_at": "2026-07-13T19:44:27Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T20:46:31Z", "flagged_at": null, "confirmed_at": "2026-07-13T20:46:31Z", "osv_earliest_published_at": "2026-07-13T19:44:27Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T20:46:40Z" }, { "id": "node-fsmetrics-data-2026-07-13", "display_name": "node-fsmetrics-data", "campaign": null, "detection_source": "osv", "packages": [ { "package": "node-fsmetrics-data", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2", "1.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10479", "osv_published_at": "2026-07-13T19:50:17Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T20:46:29Z", "flagged_at": null, "confirmed_at": "2026-07-13T20:46:29Z", "osv_earliest_published_at": "2026-07-13T19:50:17Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T05:01:05Z" }, { "id": "polymarket-stake-kelly-math-check-2026-07-13", "display_name": "polymarket-stake-kelly-math-check", "campaign": null, "detection_source": "osv", "packages": [ { "package": "polymarket-stake-kelly-math-check", "ecosystem": "npm", "versions": [ "3.5.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10485", "osv_published_at": "2026-07-13T20:07:13Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T20:46:26Z", "flagged_at": null, "confirmed_at": "2026-07-13T20:46:26Z", "osv_earliest_published_at": "2026-07-13T20:07:13Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T20:46:27Z" }, { "id": "claude-team-tracker-2026-07-13", "display_name": "claude-team-tracker", "campaign": null, "detection_source": "osv", "packages": [ { "package": "claude-team-tracker", "ecosystem": "npm", "versions": [ "1.2.0", "1.2.1", "1.2.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10473", "osv_published_at": "2026-07-13T19:05:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T19:43:51Z", "flagged_at": null, "confirmed_at": "2026-07-13T19:43:51Z", "osv_earliest_published_at": "2026-07-13T19:05:05Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T19:43:56Z" }, { "id": "torbeck-priority-queue-2026-07-13", "display_name": "@torbeck/priority-queue", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@torbeck/priority-queue", "ecosystem": "npm", "versions": [ "6.3.6", "6.3.7", "6.3.9" ], "osv_entries": [ { "osv_id": "MAL-2026-10472", "osv_published_at": "2026-07-13T19:34:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T19:43:49Z", "flagged_at": null, "confirmed_at": "2026-07-13T19:43:49Z", "osv_earliest_published_at": "2026-07-13T19:34:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T19:43:50Z" }, { "id": "loading-sessions-2026-07-13", "display_name": "loading-sessions", "campaign": null, "detection_source": "osv", "packages": [ { "package": "loading-sessions", "ecosystem": "npm", "versions": [ "6.13.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10471", "osv_published_at": "2026-07-13T18:54:09Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T19:13:22Z", "flagged_at": null, "confirmed_at": "2026-07-13T19:13:22Z", "osv_earliest_published_at": "2026-07-13T18:54:09Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T19:13:30Z" }, { "id": "uw010010-vite-tree-2026-07-13", "display_name": "@uw010010/vite-tree", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@uw010010/vite-tree", "ecosystem": "npm", "versions": [ "3.4.2", "3.4.3", "3.6.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10470", "osv_published_at": "2026-07-13T18:50:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T19:13:20Z", "flagged_at": null, "confirmed_at": "2026-07-13T19:13:20Z", "osv_earliest_published_at": "2026-07-13T18:50:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T19:13:25Z" }, { "id": "sheltr--agent-2026-07-13", "display_name": "@sheltr_/agent", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@sheltr_/agent", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10469", "osv_published_at": "2026-07-13T18:25:10Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T19:13:18Z", "flagged_at": null, "confirmed_at": "2026-07-13T19:13:18Z", "osv_earliest_published_at": "2026-07-13T18:25:10Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T19:13:19Z" }, { "id": "babel-preset-lib-client-2026-07-13", "display_name": "babel-preset-lib-client", "campaign": null, "detection_source": "osv", "packages": [ { "package": "babel-preset-lib-client", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10214", "osv_published_at": "2026-07-12T21:32:17Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T18:57:54Z", "flagged_at": null, "confirmed_at": "2026-07-13T18:57:54Z", "osv_earliest_published_at": "2026-07-12T21:32:17Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T18:57:55Z" }, { "id": "polymarket-stake-kelly-math-2026-07-13", "display_name": "polymarket-stake-kelly-math", "campaign": null, "detection_source": "osv", "packages": [ { "package": "polymarket-stake-kelly-math", "ecosystem": "npm", "versions": [ "3.8.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10467", "osv_published_at": "2026-07-13T17:38:01Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T18:27:21Z", "flagged_at": null, "confirmed_at": "2026-07-13T18:27:21Z", "osv_earliest_published_at": "2026-07-13T17:38:01Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T18:28:08Z" }, { "id": "polymarket-math-stake-kelly-2026-07-13", "display_name": "polymarket-math-stake-kelly", "campaign": null, "detection_source": "osv", "packages": [ { "package": "polymarket-math-stake-kelly", "ecosystem": "npm", "versions": [ "3.7.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10466", "osv_published_at": "2026-07-13T17:38:18Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T18:27:20Z", "flagged_at": null, "confirmed_at": "2026-07-13T18:27:20Z", "osv_earliest_published_at": "2026-07-13T17:38:18Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T18:28:03Z" }, { "id": "node-sysmon-native-2026-07-13", "display_name": "node-sysmon-native", "campaign": null, "detection_source": "osv", "packages": [ { "package": "node-sysmon-native", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10465", "osv_published_at": "2026-07-13T17:36:43Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T18:27:19Z", "flagged_at": null, "confirmed_at": "2026-07-13T18:27:19Z", "osv_earliest_published_at": "2026-07-13T17:36:43Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T18:27:57Z" }, { "id": "node-procmetrics-data-2026-07-13", "display_name": "node-procmetrics-data", "campaign": null, "detection_source": "osv", "packages": [ { "package": "node-procmetrics-data", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10464", "osv_published_at": "2026-07-13T17:37:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T18:27:17Z", "flagged_at": null, "confirmed_at": "2026-07-13T18:27:17Z", "osv_earliest_published_at": "2026-07-13T17:37:03Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T18:27:52Z" }, { "id": "node-path-addon-2026-07-13", "display_name": "node-path-addon", "campaign": null, "detection_source": "osv", "packages": [ { "package": "node-path-addon", "ecosystem": "npm", "versions": [ "1.0.7", "1.0.8" ], "osv_entries": [ { "osv_id": "MAL-2026-10463", "osv_published_at": "2026-07-13T17:37:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T18:27:16Z", "flagged_at": null, "confirmed_at": "2026-07-13T18:27:16Z", "osv_earliest_published_at": "2026-07-13T17:37:21Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T09:17:25Z" }, { "id": "hehehee-2026-07-13", "display_name": "hehehee", "campaign": null, "detection_source": "osv", "packages": [ { "package": "hehehee", "ecosystem": "npm", "versions": [ "1.0.9" ], "osv_entries": [ { "osv_id": "MAL-2026-10462", "osv_published_at": "2026-07-13T17:48:34Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T18:27:14Z", "flagged_at": null, "confirmed_at": "2026-07-13T18:27:14Z", "osv_earliest_published_at": "2026-07-13T17:48:34Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T18:27:42Z" }, { "id": "gptlite-2026-07-13", "display_name": "gptlite", "campaign": null, "detection_source": "osv", "packages": [ { "package": "gptlite", "ecosystem": "npm", "versions": [ "4.0.8" ], "osv_entries": [ { "osv_id": "MAL-2026-10461", "osv_published_at": "2026-07-13T17:38:10Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T18:27:12Z", "flagged_at": null, "confirmed_at": "2026-07-13T18:27:12Z", "osv_earliest_published_at": "2026-07-13T17:38:10Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T18:27:36Z" }, { "id": "datavaultx-2026-07-13", "display_name": "datavaultx", "campaign": null, "detection_source": "osv", "packages": [ { "package": "datavaultx", "ecosystem": "npm", "versions": [ "1.7.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10460", "osv_published_at": "2026-07-13T17:37:30Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T18:27:11Z", "flagged_at": null, "confirmed_at": "2026-07-13T18:27:11Z", "osv_earliest_published_at": "2026-07-13T17:37:30Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T18:27:31Z" }, { "id": "connectedmerchantsserv-2026-07-13", "display_name": "connectedmerchantsserv", "campaign": null, "detection_source": "osv", "packages": [ { "package": "connectedmerchantsserv", "ecosystem": "npm", "versions": [ "9.9.11" ], "osv_entries": [ { "osv_id": "MAL-2026-10459", "osv_published_at": "2026-07-13T17:37:46Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T18:27:09Z", "flagged_at": null, "confirmed_at": "2026-07-13T18:27:09Z", "osv_earliest_published_at": "2026-07-13T17:37:46Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T18:27:26Z" }, { "id": "compliancepolicyserv-2026-07-13", "display_name": "compliancepolicyserv", "campaign": null, "detection_source": "osv", "packages": [ { "package": "compliancepolicyserv", "ecosystem": "npm", "versions": [ "9.9.11" ], "osv_entries": [ { "osv_id": "MAL-2026-10458", "osv_published_at": "2026-07-13T17:37:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T18:27:08Z", "flagged_at": null, "confirmed_at": "2026-07-13T18:27:08Z", "osv_earliest_published_at": "2026-07-13T17:37:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T18:27:21Z" }, { "id": "cktool-core-2026-07-13", "display_name": "cktool-core", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cktool-core", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2", "1.0.3", "1.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-10457", "osv_published_at": "2026-07-13T17:44:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T18:27:07Z", "flagged_at": null, "confirmed_at": "2026-07-13T18:27:07Z", "osv_earliest_published_at": "2026-07-13T17:44:38Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-23T07:52:06Z", "observed_at": "2026-07-13T18:27:07Z", "ingested_at": "2026-07-13T18:27:07Z", "source_published_at": "2026-07-13T17:44:38Z", "ledger_committed_at": "2026-07-23T07:52:06Z" }, { "id": "spzhongwin-skill-logger-plugin-2026-07-13", "display_name": "@spzhongwin/skill-logger-plugin", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@spzhongwin/skill-logger-plugin", "ecosystem": "npm", "versions": [ "1.0.10", "1.0.14", "1.0.5", "1.0.7" ], "osv_entries": [ { "osv_id": "MAL-2026-10456", "osv_published_at": "2026-07-13T18:09:02Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T18:27:05Z", "flagged_at": null, "confirmed_at": "2026-07-13T18:27:05Z", "osv_earliest_published_at": "2026-07-13T18:09:02Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:14:10Z" }, { "id": "origindev-ethaccount-2026-07-13", "display_name": "@origindev/ethaccount", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@origindev/ethaccount", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10455", "osv_published_at": "2026-07-13T18:09:30Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T18:27:03Z", "flagged_at": null, "confirmed_at": "2026-07-13T18:27:03Z", "osv_earliest_published_at": "2026-07-13T18:09:30Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T18:27:04Z" }, { "id": "homeassistant-2026-07-13", "display_name": "homeassistant", "campaign": null, "detection_source": "osv", "packages": [ { "package": "homeassistant", "ecosystem": "pypi", "versions": [ "2020.02", "2020.12.0", "2020.12.1", "2020.12.2", "2021.1.0", "2021.1.0b0", "2021.1.0b1", "2021.1.0b2", "2021.1.0b3", "2021.1.1", "2021.1.2", "2021.1.3", "2021.1.4", "2021.1.5", "2021.10.0", "2021.10.0b0", "2021.10.0b1", "2021.10.0b2", "2021.10.0b3", "2021.10.0b4", "2021.10.0b5", "2021.10.0b6", "2021.10.0b7", "2021.10.0b9", "2021.10.1", "2021.10.2", "2021.10.3", "2021.10.4", "2021.10.5", "2021.10.6", "2021.10.7", "2021.11.0", "2021.11.0b0", "2021.11.0b1", "2021.11.0b2", "2021.11.0b3", "2021.11.0b4", "2021.11.0b5", "2021.11.1", "2021.11.2", "2021.11.3", "2021.11.4", "2021.11.5", "2021.12.0", "2021.12.0b0", "2021.12.0b1", "2021.12.0b2", "2021.12.0b3", "2021.12.0b4", "2021.12.0b5", "2021.12.0b6", "2021.12.0b7", "2021.12.1", "2021.12.10", "2021.12.2", "2021.12.3", "2021.12.4", "2021.12.5", "2021.12.6", "2021.12.7", "2021.12.8", "2021.12.9", "2021.2.0", "2021.2.0b0", "2021.2.0b1", "2021.2.0b2", "2021.2.0b3", "2021.2.0b4", "2021.2.0b5", "2021.2.1", "2021.2.2", "2021.2.3", "2021.3.0", "2021.3.0b0", "2021.3.0b1", "2021.3.0b2", "2021.3.0b3", "2021.3.0b4", "2021.3.0b5", "2021.3.0b6", "2021.3.0b7", "2021.3.1", "2021.3.2", "2021.3.3", "2021.3.4", "2021.4.0", "2021.4.0b0", "2021.4.0b1", "2021.4.0b2", "2021.4.0b3", "2021.4.0b4", "2021.4.0b5", "2021.4.0b6", "2021.4.1", "2021.4.2", "2021.4.3", "2021.4.4", "2021.4.5", "2021.4.6", "2021.5.0", "2021.5.0b0", "2021.5.0b1", "2021.5.0b2", "2021.5.0b3", "2021.5.0b4", "2021.5.0b5", "2021.5.0b6", "2021.5.0b7", "2021.5.0b8", "2021.5.1", "2021.5.2", "2021.5.3", "2021.5.4", "2021.5.5", "2021.6.0", "2021.6.0b0", "2021.6.0b1", "2021.6.0b2", "2021.6.0b3", "2021.6.0b4", "2021.6.0b5", "2021.6.1", "2021.6.2", "2021.6.3", "2021.6.4", "2021.6.5", "2021.6.6", "2021.7.0", "2021.7.0b0", "2021.7.0b1", "2021.7.0b2", "2021.7.0b3", "2021.7.0b4", "2021.7.0b5", "2021.7.0b6", "2021.7.1", "2021.7.2", "2021.7.3", "2021.7.4", "2021.8.0", "2021.8.0b0", "2021.8.0b1", "2021.8.0b10", "2021.8.0b2", "2021.8.0b3", "2021.8.0b4", "2021.8.0b5", "2021.8.0b6", "2021.8.0b7", "2021.8.0b8", "2021.8.0b9", "2021.8.1", "2021.8.2", "2021.8.3", "2021.8.4", "2021.8.5", "2021.8.6", "2021.8.7", "2021.8.8", "2021.9.0", "2021.9.0b0", "2021.9.0b1", "2021.9.0b2", "2021.9.0b3", "2021.9.0b4", "2021.9.0b5", "2021.9.0b6", "2021.9.0b7", "2021.9.1", "2021.9.2", "2021.9.3", "2021.9.4", "2021.9.5", "2021.9.6", "2021.9.7", "2022.10.0", "2022.10.0b0", "2022.10.0b1", "2022.10.0b2", "2022.10.0b3", "2022.10.0b4", "2022.10.0b5", "2022.10.0b6", "2022.10.1", "2022.10.2", "2022.10.3", "2022.10.4", "2022.10.5", "2022.11.0", "2022.11.0b0", "2022.11.0b1", "2022.11.0b2", "2022.11.0b3", "2022.11.0b4", "2022.11.0b5", "2022.11.0b6", "2022.11.0b7", "2022.11.1", "2022.11.2", "2022.11.3", "2022.11.4", "2022.11.5", "2022.12.0", "2022.12.0b0", "2022.12.0b1", "2022.12.0b2", "2022.12.0b3", "2022.12.0b4", "2022.12.0b5", "2022.12.0b6", "2022.12.0b7", "2022.12.1", "2022.12.2", "2022.12.3", "2022.12.4", "2022.12.5", "2022.12.6", "2022.12.7", "2022.12.8", "2022.12.9", "2022.2.0", "2022.2.0b0", "2022.2.0b1", "2022.2.0b2", "2022.2.0b3", "2022.2.0b4", "2022.2.0b5", "2022.2.0b6", "2022.2.1", "2022.2.2", "2022.2.3", "2022.2.4", "2022.2.5", "2022.2.6", "2022.2.7", "2022.2.8", "2022.2.9", "2022.3.0", "2022.3.0b0", "2022.3.0b1", "2022.3.0b2", "2022.3.0b3", "2022.3.0b4", "2022.3.0b5", "2022.3.0b6", "2022.3.1", "2022.3.2", "2022.3.3", "2022.3.4", "2022.3.5", "2022.3.6", "2022.3.7", "2022.3.8", "2022.4.0", "2022.4.0b0", "2022.4.0b1", "2022.4.0b2", "2022.4.0b3", "2022.4.0b4", "2022.4.0b5", "2022.4.1", "2022.4.2", "2022.4.3", "2022.4.4", "2022.4.5", "2022.4.6", "2022.4.7", "2022.5.0", "2022.5.0b0", "2022.5.0b1", "2022.5.0b2", "2022.5.0b3", "2022.5.0b4", "2022.5.0b5", "2022.5.0b6", "2022.5.0b7", "2022.5.1", "2022.5.2", "2022.5.3", "2022.5.4", "2022.5.5", "2022.6.0", "2022.6.0b0", "2022.6.0b1", "2022.6.0b2", "2022.6.0b3", "2022.6.0b4", "2022.6.0b5", "2022.6.0b6", "2022.6.0b7", "2022.6.1", "2022.6.2", "2022.6.3", "2022.6.4", "2022.6.5", "2022.6.6", "2022.6.7", "2022.7.0", "2022.7.0b0", "2022.7.0b1", "2022.7.0b2", "2022.7.0b3", "2022.7.0b4", "2022.7.0b5", "2022.7.1", "2022.7.2", "2022.7.3", "2022.7.4", "2022.7.5", "2022.7.6", "2022.7.7", "2022.8.0", "2022.8.0b0", "2022.8.0b1", "2022.8.0b2", "2022.8.0b3", "2022.8.0b4", "2022.8.0b5", "2022.8.0b6", "2022.8.0b7", "2022.8.1", "2022.8.2", "2022.8.3", "2022.8.4", "2022.8.5", "2022.8.6", "2022.8.7", "2022.9.0", "2022.9.0b0", "2022.9.0b1", "2022.9.0b2", "2022.9.0b3", "2022.9.0b4", "2022.9.0b5", "2022.9.0b6", "2022.9.1", "2022.9.2", "2022.9.3", "2022.9.4", "2022.9.5", "2022.9.6", "2022.9.7", "2023.1.0", "2023.1.0b0", "2023.1.0b1", "2023.1.0b2", "2023.1.0b3", "2023.1.0b4", "2023.1.0b5", "2023.1.1", "2023.1.2", "2023.1.3", "2023.1.4", "2023.1.5", "2023.1.6", "2023.1.7", "2023.10.0", "2023.10.0b0", "2023.10.0b1", "2023.10.0b2", "2023.10.0b3", "2023.10.0b4", "2023.10.0b6", "2023.10.0b7", "2023.10.0b9", "2023.10.1", "2023.10.2", "2023.10.3", "2023.10.4", "2023.10.5", "2023.11.0", "2023.11.0b0", "2023.11.0b1", "2023.11.0b2", "2023.11.0b3", "2023.11.0b4", "2023.11.0b5", "2023.11.0b6", "2023.11.1", "2023.11.2", "2023.11.3", "2023.12.0", "2023.12.0b0", "2023.12.0b1", "2023.12.0b2", "2023.12.0b3", "2023.12.0b4", "2023.12.0b5", "2023.12.1", "2023.12.2", "2023.12.3", "2023.12.4", "2023.2.0", "2023.2.0b0", "2023.2.0b1", "2023.2.0b2", "2023.2.0b3", "2023.2.0b4", "2023.2.0b5", "2023.2.0b6", "2023.2.0b7", "2023.2.0b8", "2023.2.0b9", "2023.2.1", "2023.2.2", "2023.2.3", "2023.2.4", "2023.2.5", "2023.3.0", "2023.3.0b0", "2023.3.0b1", "2023.3.0b2", "2023.3.0b3", "2023.3.0b4", "2023.3.0b5", "2023.3.0b6", "2023.3.0b7", "2023.3.1", "2023.3.2", "2023.3.3", "2023.3.4", "2023.3.5", "2023.3.6", "2023.4.0", "2023.4.0b0", "2023.4.0b1", "2023.4.0b2", "2023.4.0b3", "2023.4.0b4", "2023.4.0b5", "2023.4.0b6", "2023.4.0b7", "2023.4.1", "2023.4.2", "2023.4.3", "2023.4.4", "2023.4.5", "2023.4.6", "2023.5.0", "2023.5.0b0", "2023.5.0b1", "2023.5.0b2", "2023.5.0b3", "2023.5.0b4", "2023.5.0b5", "2023.5.0b6", "2023.5.0b7", "2023.5.0b8", "2023.5.1", "2023.5.2", "2023.5.3", "2023.5.4", "2023.6.0", "2023.6.0b0", "2023.6.0b1", "2023.6.0b2", "2023.6.0b3", "2023.6.0b4", "2023.6.0b5", "2023.6.0b6", "2023.6.1", "2023.6.2", "2023.6.3", "2023.7.0", "2023.7.0b0", "2023.7.0b1", "2023.7.0b2", "2023.7.0b3", "2023.7.0b4", "2023.7.0b5", "2023.7.0b6", "2023.7.1", "2023.7.2", "2023.7.3", "2023.8.0", "2023.8.0b0", "2023.8.0b1", "2023.8.0b2", "2023.8.0b3", "2023.8.0b4", "2023.8.1", "2023.8.2", "2023.8.3", "2023.8.4", "2023.9.0", "2023.9.0b0", "2023.9.0b1", "2023.9.0b2", "2023.9.0b3", "2023.9.0b4", "2023.9.0b5", "2023.9.0b6", "2023.9.1", "2023.9.2", "2023.9.3", "2024.1.0", "2024.1.0b0", "2024.1.0b1", "2024.1.0b2", "2024.1.0b3", "2024.1.0b4", "2024.1.0b5", "2024.1.0b6", "2024.1.0b7", "2024.1.0b8", "2024.1.1", "2024.1.2", "2024.1.3", "2024.1.4", "2024.1.5", "2024.1.6", "2024.10.0", "2024.10.0b0", "2024.10.0b1", "2024.10.0b10", "2024.10.0b11", "2024.10.0b12", "2024.10.0b2", "2024.10.0b3", "2024.10.0b4", "2024.10.0b5", "2024.10.0b6", "2024.10.0b7", "2024.10.0b8", "2024.10.0b9", "2024.10.1", "2024.10.2", "2024.10.3", "2024.10.4", "2024.11.0", "2024.11.0b0", "2024.11.0b1", "2024.11.0b2", "2024.11.0b3", "2024.11.0b4", "2024.11.0b5", "2024.11.0b6", "2024.11.0b7", "2024.11.0b8", "2024.11.0b9", "2024.11.1", "2024.11.2", "2024.11.3", "2024.12.0", "2024.12.0b0", "2024.12.0b1", "2024.12.0b2", "2024.12.0b3", "2024.12.0b4", "2024.12.0b5", "2024.12.0b6", "2024.12.1", "2024.12.2", "2024.12.3", "2024.12.4", "2024.12.5", "2024.2.0", "2024.2.0b0", "2024.2.0b1", "2024.2.0b10", "2024.2.0b11", "2024.2.0b2", "2024.2.0b3", "2024.2.0b4", "2024.2.0b5", "2024.2.0b6", "2024.2.0b7", "2024.2.0b8", "2024.2.0b9", "2024.2.1", "2024.2.2", "2024.2.3", "2024.2.4", "2024.2.5", "2024.3.0", "2024.3.0b0", "2024.3.0b1", "2024.3.0b2", "2024.3.0b3", "2024.3.0b4", "2024.3.0b5", "2024.3.0b6", "2024.3.0b7", "2024.3.0b8", "2024.3.1", "2024.3.2", "2024.3.3", "2024.4.0", "2024.4.0b0", "2024.4.0b1", "2024.4.0b2", "2024.4.0b3", "2024.4.0b4", "2024.4.0b5", "2024.4.0b6", "2024.4.0b7", "2024.4.0b8", "2024.4.0b9", "2024.4.1", "2024.4.2", "2024.4.3", "2024.4.4", "2024.5.0", "2024.5.0b0", "2024.5.0b1", "2024.5.0b2", "2024.5.0b3", "2024.5.0b4", "2024.5.0b5", "2024.5.0b6", "2024.5.0b7", "2024.5.1", "2024.5.2", "2024.5.3", "2024.5.4", "2024.5.5", "2024.6.0", "2024.6.0b0", "2024.6.0b1", "2024.6.0b2", "2024.6.0b3", "2024.6.0b4", "2024.6.0b5", "2024.6.0b6", "2024.6.0b7", "2024.6.0b8", "2024.6.0b9", "2024.6.1", "2024.6.2", "2024.6.3", "2024.6.4", "2024.7.0", "2024.7.0b0", "2024.7.0b1", "2024.7.0b10", "2024.7.0b11", "2024.7.0b2", "2024.7.0b3", "2024.7.0b4", "2024.7.0b5", "2024.7.0b6", "2024.7.0b7", "2024.7.0b8", "2024.7.0b9", "2024.7.1", "2024.7.2", "2024.7.3", "2024.7.4", "2024.8.0", "2024.8.0b0", "2024.8.0b1", "2024.8.0b2", "2024.8.0b3", "2024.8.0b4", "2024.8.0b5", "2024.8.0b6", "2024.8.0b7", "2024.8.0b8", "2024.8.0b9", "2024.8.1", "2024.8.2", "2024.8.3", "2024.9.0", "2024.9.0b0", "2024.9.0b1", "2024.9.0b2", "2024.9.0b3", "2024.9.0b4", "2024.9.0b5", "2024.9.1", "2024.9.2", "2024.9.3", "2025.1.0", "2025.1.0b0", "2025.1.0b1", "2025.1.0b2", "2025.1.0b3", "2025.1.0b4", "2025.1.0b5", "2025.1.0b6", "2025.1.0b7", "2025.1.0b8", "2025.1.0b9", "2025.1.1", "2025.1.2", "2025.1.3", "2025.1.4", "2025.10.0", "2025.10.0b0", "2025.10.0b1", "2025.10.0b2", "2025.10.0b4", "2025.10.0b5", "2025.10.0b6", "2025.10.0b7", "2025.10.1", "2025.10.2", "2025.10.3", "2025.10.4", "2025.11.0", "2025.11.0b0", "2025.11.0b1", "2025.11.0b2", "2025.11.0b3", "2025.11.0b4", "2025.11.0b5", "2025.11.0b6", "2025.11.1", "2025.11.2", "2025.11.3", "2025.12.0", "2025.12.0b0", "2025.12.0b1", "2025.12.0b2", "2025.12.0b3", "2025.12.0b4", "2025.12.0b5", "2025.12.0b6", "2025.12.0b7", "2025.12.0b8", "2025.12.0b9", "2025.12.1", "2025.12.2", "2025.12.3", "2025.12.4", "2025.12.5", "2025.2.0", "2025.2.0b0", "2025.2.0b1", "2025.2.0b10", "2025.2.0b11", "2025.2.0b12", "2025.2.0b2", "2025.2.0b3", "2025.2.0b4", "2025.2.0b5", "2025.2.0b6", "2025.2.0b7", "2025.2.0b8", "2025.2.0b9", "2025.2.1", "2025.2.2", "2025.2.3", "2025.2.4", "2025.2.5", "2025.3.0", "2025.3.0b0", "2025.3.0b1", "2025.3.0b2", "2025.3.0b3", "2025.3.0b4", "2025.3.0b5", "2025.3.0b6", "2025.3.0b7", "2025.3.0b8", "2025.3.1", "2025.3.2", "2025.3.3", "2025.3.4", "2025.4.0", "2025.4.0b0", "2025.4.0b1", "2025.4.0b10", "2025.4.0b11", "2025.4.0b12", "2025.4.0b13", "2025.4.0b14", "2025.4.0b15", "2025.4.0b2", "2025.4.0b3", "2025.4.0b4", "2025.4.0b5", "2025.4.0b6", "2025.4.0b7", "2025.4.0b8", "2025.4.0b9", "2025.4.1", "2025.4.2", "2025.4.3", "2025.4.4", "2025.5.0", "2025.5.0b0", "2025.5.0b1", "2025.5.0b10", "2025.5.0b2", "2025.5.0b3", "2025.5.0b4", "2025.5.0b5", "2025.5.0b6", "2025.5.0b7", "2025.5.0b8", "2025.5.0b9", "2025.5.1", "2025.5.2", "2025.5.3", "2025.6.0", "2025.6.0b0", "2025.6.0b1", "2025.6.0b2", "2025.6.0b3", "2025.6.0b4", "2025.6.0b5", "2025.6.0b6", "2025.6.0b7", "2025.6.0b8", "2025.6.0b9", "2025.6.1", "2025.6.2", "2025.6.3", "2025.7.0", "2025.7.0b0", "2025.7.0b1", "2025.7.0b2", "2025.7.0b3", "2025.7.0b4", "2025.7.0b5", "2025.7.0b6", "2025.7.0b7", "2025.7.0b8", "2025.7.0b9", "2025.7.1", "2025.7.2", "2025.7.3", "2025.7.4", "2025.8.0", "2025.8.0b0", "2025.8.0b1", "2025.8.0b2", "2025.8.0b3", "2025.8.0b4", "2025.8.0b5", "2025.8.1", "2025.8.2", "2025.8.3", "2025.9.0", "2025.9.0b0", "2025.9.0b1", "2025.9.0b2", "2025.9.0b3", "2025.9.0b4", "2025.9.0b5", "2025.9.0b6", "2025.9.1", "2025.9.2", "2025.9.3", "2025.9.4", "2026.1.0b0", "2026.1.0b1", "2026.1.0b2", "2026.1.0b3", "2026.1.0b4", "2026.1.0b5" ], "osv_entries": [ { "osv_id": "GHSA-r584-6283-p7xc", "osv_published_at": "2026-03-27T20:33:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T17:59:44Z", "flagged_at": null, "confirmed_at": "2026-07-13T17:59:44Z", "osv_earliest_published_at": "2026-03-27T20:33:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T17:59:45Z" }, { "id": "guarddog-2026-07-13", "display_name": "guarddog", "campaign": null, "detection_source": "osv", "packages": [ { "package": "guarddog", "ecosystem": "pypi", "versions": [ "2.6.0", "2.7.0", "2.7.1", "2.8.4", "2.9.0" ], "osv_entries": [ { "osv_id": "GHSA-m5p4-gvpx-4mvr", "osv_published_at": "2026-05-11T14:43:43Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T17:58:01Z", "flagged_at": null, "confirmed_at": "2026-07-13T17:58:01Z", "osv_earliest_published_at": "2026-05-11T14:43:43Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T17:58:10Z" }, { "id": "nemo-toolkit-2026-07-13", "display_name": "nemo-toolkit", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nemo-toolkit", "ecosystem": "pypi", "versions": [ "0.10.0", "0.10.0b0", "0.10.0b1", "0.10.0b10", "0.10.0b2", "0.10.0b3", "0.10.0b4", "0.10.0b5", "0.10.0b6", "0.10.0b7", "0.10.0b8", "0.10.0b9", "0.10.1", "0.11.0", "0.11.0b1", "0.11.0b10", "0.11.0b11", "0.11.0b12", "0.11.0b14", "0.11.0b2", "0.11.0b3", "0.11.0b4", "0.11.0b5", "0.11.0b6", "0.11.0b8", "0.8", "0.8.1", "0.8.2", "0.9.0", "1.0.0", "1.0.0a4", "1.0.0b0", "1.0.0b1", "1.0.0b2", "1.0.0b3", "1.0.0rc1", "1.0.1", "1.0.2", "1.1.0", "1.10.0", "1.11.0", "1.12.0", "1.13.0", "1.14.0", "1.15.0", "1.16.0", "1.17.0", "1.18.0", "1.18.1", "1.19.0", "1.19.1", "1.2.0", "1.20.0", "1.21.0", "1.22.0", "1.23.0", "1.3.0", "1.4.0", "1.5.0", "1.5.1", "1.6.0", "1.6.1", "1.6.2", "1.7.0", "1.7.1", "1.7.2", "1.8.0", "1.8.1", "1.8.2", "1.9.0", "2.0.0", "2.0.0rc0", "2.0.0rc1", "2.1.0", "2.1.0rc0", "2.1.0rc1", "2.1.0rc2", "2.2.0", "2.2.0rc0", "2.2.0rc1", "2.2.0rc2", "2.2.0rc3", "2.2.1", "2.3.0", "2.3.0rc2", "2.3.0rc3", "2.3.0rc4", "2.3.1", "2.3.2", "2.3.3", "2.4.0", "2.4.0rc0", "2.4.0rc1", "2.4.0rc2", "2.4.1", "2.5.0", "2.5.0rc0", "2.5.1", "2.5.2", "2.5.3", "2.6.0", "2.6.0rc0" ], "osv_entries": [ { "osv_id": "GHSA-9379-mwvr-7wxx", "osv_published_at": "2026-02-18T15:31:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T17:57:59Z", "flagged_at": null, "confirmed_at": "2026-07-13T17:57:59Z", "osv_earliest_published_at": "2026-02-18T15:31:25Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T17:58:01Z" }, { "id": "router-processor-2026-07-13", "display_name": "router-processor", "campaign": null, "detection_source": "osv", "packages": [ { "package": "router-processor", "ecosystem": "npm", "versions": [ "1.5.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10453", "osv_published_at": "2026-07-13T14:22:59Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T15:38:47Z", "flagged_at": null, "confirmed_at": "2026-07-13T15:38:47Z", "osv_earliest_published_at": "2026-07-13T14:22:59Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T15:39:30Z" }, { "id": "markdown-editable-table-2026-07-13", "display_name": "markdown-editable-table", "campaign": null, "detection_source": "osv", "packages": [ { "package": "markdown-editable-table", "ecosystem": "npm", "versions": [ "2.4.2", "2.4.3", "2.4.4" ], "osv_entries": [ { "osv_id": "MAL-2026-10452", "osv_published_at": "2026-07-13T14:20:16Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T15:38:44Z", "flagged_at": null, "confirmed_at": "2026-07-13T15:38:44Z", "osv_earliest_published_at": "2026-07-13T14:20:16Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T15:39:03Z" }, { "id": "gifuct-2026-07-13", "display_name": "gifuct", "campaign": null, "detection_source": "osv", "packages": [ { "package": "gifuct", "ecosystem": "npm", "versions": [ "2.1.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10451", "osv_published_at": "2026-07-13T14:22:14Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T15:38:42Z", "flagged_at": null, "confirmed_at": "2026-07-13T15:38:42Z", "osv_earliest_published_at": "2026-07-13T14:22:14Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T15:38:57Z" }, { "id": "font-hub-2026-07-13", "display_name": "font-hub", "campaign": null, "detection_source": "osv", "packages": [ { "package": "font-hub", "ecosystem": "npm", "versions": [ "1.5.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10450", "osv_published_at": "2026-07-13T14:22:43Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T15:38:41Z", "flagged_at": null, "confirmed_at": "2026-07-13T15:38:41Z", "osv_earliest_published_at": "2026-07-13T14:22:43Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T15:38:50Z" }, { "id": "auth-gen-next-2026-07-13", "display_name": "auth-gen-next", "campaign": null, "detection_source": "osv", "packages": [ { "package": "auth-gen-next", "ecosystem": "npm", "versions": [ "1.7.13" ], "osv_entries": [ { "osv_id": "MAL-2026-10449", "osv_published_at": "2026-07-13T14:20:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T15:38:39Z", "flagged_at": null, "confirmed_at": "2026-07-13T15:38:39Z", "osv_earliest_published_at": "2026-07-13T14:20:42Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T15:38:41Z" }, { "id": "sqlite-group-schema-generator-2026-07-13", "display_name": "@sqlite-group/schema-generator", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@sqlite-group/schema-generator", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10448", "osv_published_at": "2026-07-13T14:22:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T15:37:50Z", "flagged_at": null, "confirmed_at": "2026-07-13T15:37:50Z", "osv_earliest_published_at": "2026-07-13T14:22:33Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T15:37:53Z" }, { "id": "remarkable-table-2026-07-13", "display_name": "remarkable-table", "campaign": null, "detection_source": "osv", "packages": [ { "package": "remarkable-table", "ecosystem": "npm", "versions": [ "2.4.11" ], "osv_entries": [ { "osv_id": "MAL-2026-10447", "osv_published_at": "2026-07-13T14:03:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T14:36:59Z", "flagged_at": null, "confirmed_at": "2026-07-13T14:36:59Z", "osv_earliest_published_at": "2026-07-13T14:03:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T14:37:44Z" }, { "id": "react-markable-table-2026-07-13", "display_name": "react-markable-table", "campaign": null, "detection_source": "osv", "packages": [ { "package": "react-markable-table", "ecosystem": "npm", "versions": [ "2.4.10" ], "osv_entries": [ { "osv_id": "MAL-2026-10446", "osv_published_at": "2026-07-13T14:03:16Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T14:36:57Z", "flagged_at": null, "confirmed_at": "2026-07-13T14:36:57Z", "osv_earliest_published_at": "2026-07-13T14:03:16Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T14:37:36Z" }, { "id": "node-procmetrics-2026-07-13", "display_name": "node-procmetrics", "campaign": null, "detection_source": "osv", "packages": [ { "package": "node-procmetrics", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2", "1.0.3", "1.0.4", "1.0.5", "1.0.6", "1.0.7", "1.0.8", "1.0.9" ], "osv_entries": [ { "osv_id": "MAL-2026-10445", "osv_published_at": "2026-07-13T13:59:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T14:36:55Z", "flagged_at": null, "confirmed_at": "2026-07-13T14:36:55Z", "osv_earliest_published_at": "2026-07-13T13:59:48Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T15:39:10Z" }, { "id": "markable-table-2026-07-13", "display_name": "markable-table", "campaign": null, "detection_source": "osv", "packages": [ { "package": "markable-table", "ecosystem": "npm", "versions": [ "3.1.0", "3.1.1", "3.1.2", "3.1.3", "3.1.4", "3.1.5", "3.1.6", "3.1.7", "3.1.8" ], "osv_entries": [ { "osv_id": "MAL-2026-10444", "osv_published_at": "2026-07-13T14:02:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T14:36:52Z", "flagged_at": null, "confirmed_at": "2026-07-13T14:36:52Z", "osv_earliest_published_at": "2026-07-13T14:02:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T07:13:40Z" }, { "id": "home-sections-web-ui-2026-07-13", "display_name": "home-sections-web-ui", "campaign": null, "detection_source": "osv", "packages": [ { "package": "home-sections-web-ui", "ecosystem": "npm", "versions": [ "99.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-10443", "osv_published_at": "2026-07-13T14:01:27Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T14:36:50Z", "flagged_at": null, "confirmed_at": "2026-07-13T14:36:50Z", "osv_earliest_published_at": "2026-07-13T14:01:27Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T14:37:05Z" }, { "id": "amdocs-core-package-2026-07-13", "display_name": "amdocs-core-package", "campaign": null, "detection_source": "osv", "packages": [ { "package": "amdocs-core-package", "ecosystem": "npm", "versions": [ "11.11.11" ], "osv_entries": [ { "osv_id": "MAL-2025-6695", "osv_published_at": "2025-08-01T17:28:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T14:36:49Z", "flagged_at": null, "confirmed_at": "2026-07-13T14:36:49Z", "osv_earliest_published_at": "2025-08-01T17:28:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T14:36:59Z" }, { "id": "oliviamcdaniel12-safer-buffer-2026-07-13", "display_name": "@oliviamcdaniel12/safer-buffer", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@oliviamcdaniel12/safer-buffer", "ecosystem": "npm", "versions": [ "2.2.0", "2.2.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10442", "osv_published_at": "2026-07-13T14:07:15Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T14:36:47Z", "flagged_at": null, "confirmed_at": "2026-07-13T14:36:47Z", "osv_earliest_published_at": "2026-07-13T14:07:15Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T14:36:54Z" }, { "id": "nsub-nitxe-2026-07-13", "display_name": "@nsub/nitxe", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@nsub/nitxe", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10429", "osv_published_at": "2026-07-13T08:30:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T14:36:45Z", "flagged_at": null, "confirmed_at": "2026-07-13T14:36:45Z", "osv_earliest_published_at": "2026-07-13T08:30:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T07:07:41Z" }, { "id": "nottuff7-2026-07-13", "display_name": "nottuff7", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nottuff7", "ecosystem": "npm", "versions": [ "1.1.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5918", "osv_published_at": "2026-06-16T19:27:27Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T12:02:17Z", "flagged_at": null, "confirmed_at": "2026-07-13T12:02:17Z", "osv_earliest_published_at": "2026-06-16T19:27:27Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T12:08:39Z" }, { "id": "nottuff4-2026-07-13", "display_name": "nottuff4", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nottuff4", "ecosystem": "npm", "versions": [ "1.1.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5917", "osv_published_at": "2026-06-16T19:27:24Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T12:02:15Z", "flagged_at": null, "confirmed_at": "2026-07-13T12:02:15Z", "osv_earliest_published_at": "2026-06-16T19:27:24Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T12:08:32Z" }, { "id": "nottuff25-2026-07-13", "display_name": "nottuff25", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nottuff25", "ecosystem": "npm", "versions": [ "1.1.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5916", "osv_published_at": "2026-06-16T19:27:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T12:02:14Z", "flagged_at": null, "confirmed_at": "2026-07-13T12:02:14Z", "osv_earliest_published_at": "2026-06-16T19:27:25Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T12:08:24Z" }, { "id": "nottuff23-2026-07-13", "display_name": "nottuff23", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nottuff23", "ecosystem": "npm", "versions": [ "1.1.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5915", "osv_published_at": "2026-06-16T19:27:26Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T12:02:13Z", "flagged_at": null, "confirmed_at": "2026-07-13T12:02:13Z", "osv_earliest_published_at": "2026-06-16T19:27:26Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T12:08:15Z" }, { "id": "sysb1-2026-07-13", "display_name": "sysb1", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sysb1", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10428", "osv_published_at": "2026-07-13T08:10:57Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T12:01:58Z", "flagged_at": null, "confirmed_at": "2026-07-13T12:01:58Z", "osv_earliest_published_at": "2026-07-13T08:10:57Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T12:07:40Z" }, { "id": "svg-fetcher-2026-07-13", "display_name": "svg-fetcher", "campaign": null, "detection_source": "osv", "packages": [ { "package": "svg-fetcher", "ecosystem": "npm", "versions": [ "2.4.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10427", "osv_published_at": "2026-07-13T08:10:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T12:01:56Z", "flagged_at": null, "confirmed_at": "2026-07-13T12:01:56Z", "osv_earliest_published_at": "2026-07-13T08:10:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T12:07:34Z" }, { "id": "tipsen-poc-again-2026-07-13", "display_name": "tipsen-poc-again", "campaign": null, "detection_source": "osv", "packages": [ { "package": "tipsen-poc-again", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10393", "osv_published_at": "2026-07-13T06:30:31Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T12:01:37Z", "flagged_at": null, "confirmed_at": "2026-07-13T12:01:37Z", "osv_earliest_published_at": "2026-07-13T06:30:31Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T12:06:39Z" }, { "id": "tipsen-last-pls-2026-07-13", "display_name": "tipsen-last-pls", "campaign": null, "detection_source": "osv", "packages": [ { "package": "tipsen-last-pls", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10392", "osv_published_at": "2026-07-13T06:30:32Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T12:01:36Z", "flagged_at": null, "confirmed_at": "2026-07-13T12:01:36Z", "osv_earliest_published_at": "2026-07-13T06:30:32Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T12:06:33Z" }, { "id": "tipsen-last-2026-07-13", "display_name": "tipsen-last", "campaign": null, "detection_source": "osv", "packages": [ { "package": "tipsen-last", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10391", "osv_published_at": "2026-07-13T06:30:31Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T12:01:35Z", "flagged_at": null, "confirmed_at": "2026-07-13T12:01:35Z", "osv_earliest_published_at": "2026-07-13T06:30:31Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T12:06:27Z" }, { "id": "nottuff9-2026-07-13", "display_name": "nottuff9", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nottuff9", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10360", "osv_published_at": "2026-07-13T06:27:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T12:01:16Z", "flagged_at": null, "confirmed_at": "2026-07-13T12:01:16Z", "osv_earliest_published_at": "2026-07-13T06:27:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T12:05:34Z" }, { "id": "nottuff8-2026-07-13", "display_name": "nottuff8", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nottuff8", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10359", "osv_published_at": "2026-07-13T06:27:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T12:01:15Z", "flagged_at": null, "confirmed_at": "2026-07-13T12:01:15Z", "osv_earliest_published_at": "2026-07-13T06:27:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T12:05:16Z" }, { "id": "nottuff6-2026-07-13", "display_name": "nottuff6", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nottuff6", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10358", "osv_published_at": "2026-07-13T06:27:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T12:01:13Z", "flagged_at": null, "confirmed_at": "2026-07-13T12:01:13Z", "osv_earliest_published_at": "2026-07-13T06:27:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T12:05:05Z" }, { "id": "nottuff5-2026-07-13", "display_name": "nottuff5", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nottuff5", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10357", "osv_published_at": "2026-07-13T06:27:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T12:01:12Z", "flagged_at": null, "confirmed_at": "2026-07-13T12:01:12Z", "osv_earliest_published_at": "2026-07-13T06:27:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T12:04:59Z" }, { "id": "nottuff30-2026-07-13", "display_name": "nottuff30", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nottuff30", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10356", "osv_published_at": "2026-07-13T06:27:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T12:01:11Z", "flagged_at": null, "confirmed_at": "2026-07-13T12:01:11Z", "osv_earliest_published_at": "2026-07-13T06:27:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T12:04:53Z" }, { "id": "nottuff3-2026-07-13", "display_name": "nottuff3", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nottuff3", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10355", "osv_published_at": "2026-07-13T06:27:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T12:01:09Z", "flagged_at": null, "confirmed_at": "2026-07-13T12:01:09Z", "osv_earliest_published_at": "2026-07-13T06:27:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T12:04:48Z" }, { "id": "nottuff29-2026-07-13", "display_name": "nottuff29", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nottuff29", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10354", "osv_published_at": "2026-07-13T06:27:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T12:01:08Z", "flagged_at": null, "confirmed_at": "2026-07-13T12:01:08Z", "osv_earliest_published_at": "2026-07-13T06:27:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T12:04:42Z" }, { "id": "nottuff28-2026-07-13", "display_name": "nottuff28", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nottuff28", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10353", "osv_published_at": "2026-07-13T06:27:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T12:01:07Z", "flagged_at": null, "confirmed_at": "2026-07-13T12:01:07Z", "osv_earliest_published_at": "2026-07-13T06:27:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T12:04:36Z" }, { "id": "nottuff27-2026-07-13", "display_name": "nottuff27", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nottuff27", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7" ], "osv_entries": [ { "osv_id": "MAL-2026-10352", "osv_published_at": "2026-07-13T06:27:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T12:01:05Z", "flagged_at": null, "confirmed_at": "2026-07-13T12:01:05Z", "osv_earliest_published_at": "2026-07-13T06:27:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T12:04:26Z" }, { "id": "nottuff26-2026-07-13", "display_name": "nottuff26", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nottuff26", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10351", "osv_published_at": "2026-07-13T06:27:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T12:01:04Z", "flagged_at": null, "confirmed_at": "2026-07-13T12:01:04Z", "osv_earliest_published_at": "2026-07-13T06:27:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T12:04:13Z" }, { "id": "nottuff24-2026-07-13", "display_name": "nottuff24", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nottuff24", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10350", "osv_published_at": "2026-07-13T06:27:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T12:01:03Z", "flagged_at": null, "confirmed_at": "2026-07-13T12:01:03Z", "osv_earliest_published_at": "2026-07-13T06:27:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T12:04:05Z" }, { "id": "nottuff22-2026-07-13", "display_name": "nottuff22", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nottuff22", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10349", "osv_published_at": "2026-07-13T06:27:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T12:01:02Z", "flagged_at": null, "confirmed_at": "2026-07-13T12:01:02Z", "osv_earliest_published_at": "2026-07-13T06:27:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T12:03:58Z" }, { "id": "nottuff21-2026-07-13", "display_name": "nottuff21", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nottuff21", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10348", "osv_published_at": "2026-07-13T06:27:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T12:01:00Z", "flagged_at": null, "confirmed_at": "2026-07-13T12:01:00Z", "osv_earliest_published_at": "2026-07-13T06:27:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T12:03:53Z" }, { "id": "nottuff20-2026-07-13", "display_name": "nottuff20", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nottuff20", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10347", "osv_published_at": "2026-07-13T06:27:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T12:00:59Z", "flagged_at": null, "confirmed_at": "2026-07-13T12:00:59Z", "osv_earliest_published_at": "2026-07-13T06:27:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T12:03:46Z" }, { "id": "tme-xca-2026-07-13", "display_name": "tme-xca", "campaign": null, "detection_source": "osv", "packages": [ { "package": "tme-xca", "ecosystem": "npm", "versions": [ "3.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10236", "osv_published_at": "2026-07-06T00:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T11:59:51Z", "flagged_at": null, "confirmed_at": "2026-07-13T11:59:51Z", "osv_earliest_published_at": "2026-07-06T00:00:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T12:00:19Z" }, { "id": "tme-error-2026-07-13", "display_name": "tme-error", "campaign": null, "detection_source": "osv", "packages": [ { "package": "tme-error", "ecosystem": "npm", "versions": [ "2.8.42" ], "osv_entries": [ { "osv_id": "MAL-2026-10235", "osv_published_at": "2026-07-06T00:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T11:59:50Z", "flagged_at": null, "confirmed_at": "2026-07-13T11:59:50Z", "osv_earliest_published_at": "2026-07-06T00:00:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T12:00:10Z" }, { "id": "onnx-2026-07-13", "display_name": "onnx", "campaign": null, "detection_source": "osv", "packages": [ { "package": "onnx", "ecosystem": "pypi", "versions": [ "0.1", "0.2", "0.2.1", "1.0.0", "1.0.1", "1.1.0", "1.1.1", "1.1.2", "1.10.0", "1.10.1", "1.10.2", "1.11.0", "1.12.0", "1.13.0", "1.13.1", "1.14.0", "1.14.1", "1.15.0", "1.16.0", "1.16.1", "1.16.2", "1.17.0", "1.18.0", "1.19.0", "1.19.1", "1.19.1rc1", "1.2.1", "1.2.2", "1.2.3", "1.20.0", "1.20.0rc1", "1.20.0rc2", "1.20.1", "1.20.1rc1", "1.21.0rc1", "1.21.0rc2", "1.21.0rc3", "1.21.0rc4", "1.3.0", "1.4.0", "1.4.1", "1.5.0", "1.6.0", "1.7.0", "1.8.0", "1.8.1", "1.9.0" ], "osv_entries": [ { "osv_id": "GHSA-538c-55jv-c5g9", "osv_published_at": "2026-04-01T21:10:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T11:55:37Z", "flagged_at": null, "confirmed_at": "2026-07-13T11:55:37Z", "osv_earliest_published_at": "2026-04-01T21:10:52Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T11:55:39Z" }, { "id": "turbocalcng-2026-07-13", "display_name": "turbocalcng", "campaign": null, "detection_source": "osv", "packages": [ { "package": "turbocalcng", "ecosystem": "pypi", "versions": [ "0.1.0", "0.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10441", "osv_published_at": "2026-07-13T09:00:16Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:44:29Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:44:29Z", "osv_earliest_published_at": "2026-07-13T09:00:16Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T10:55:07Z" }, { "id": "type-context-2026-07-13", "display_name": "type-context", "campaign": null, "detection_source": "osv", "packages": [ { "package": "type-context", "ecosystem": "npm", "versions": [ "3.2.11", "3.2.7", "3.2.8", "3.2.9" ], "osv_entries": [ { "osv_id": "MAL-2026-10440", "osv_published_at": "2026-07-13T09:21:55Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:44:13Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:44:13Z", "osv_earliest_published_at": "2026-07-13T09:21:55Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T18:28:13Z" }, { "id": "timmytuffknuckles9-2026-07-13", "display_name": "timmytuffknuckles9", "campaign": null, "detection_source": "osv", "packages": [ { "package": "timmytuffknuckles9", "ecosystem": "npm", "versions": [ "1.1.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10390", "osv_published_at": "2026-07-13T06:27:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:44:11Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:44:11Z", "osv_earliest_published_at": "2026-07-13T06:27:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T07:16:18Z" }, { "id": "timmytuffknuckles6-2026-07-13", "display_name": "timmytuffknuckles6", "campaign": null, "detection_source": "osv", "packages": [ { "package": "timmytuffknuckles6", "ecosystem": "npm", "versions": [ "1.1.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10389", "osv_published_at": "2026-07-13T06:27:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:44:10Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:44:10Z", "osv_earliest_published_at": "2026-07-13T06:27:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T07:16:08Z" }, { "id": "timmytuffknuckles3-2026-07-13", "display_name": "timmytuffknuckles3", "campaign": null, "detection_source": "osv", "packages": [ { "package": "timmytuffknuckles3", "ecosystem": "npm", "versions": [ "1.1.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10388", "osv_published_at": "2026-07-13T06:27:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:44:08Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:44:08Z", "osv_earliest_published_at": "2026-07-13T06:27:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T07:15:58Z" }, { "id": "speed5-2026-07-13", "display_name": "speed5", "campaign": null, "detection_source": "osv", "packages": [ { "package": "speed5", "ecosystem": "npm", "versions": [ "1.1.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10385", "osv_published_at": "2026-07-13T06:27:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:44:07Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:44:07Z", "osv_earliest_published_at": "2026-07-13T06:27:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T10:54:05Z" }, { "id": "speed4-2026-07-13", "display_name": "speed4", "campaign": null, "detection_source": "osv", "packages": [ { "package": "speed4", "ecosystem": "npm", "versions": [ "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5938", "osv_published_at": "2026-06-16T23:42:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:44:06Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:44:06Z", "osv_earliest_published_at": "2026-06-16T23:42:21Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T10:53:54Z" }, { "id": "speed3-2026-07-13", "display_name": "speed3", "campaign": null, "detection_source": "osv", "packages": [ { "package": "speed3", "ecosystem": "npm", "versions": [ "1.1.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10384", "osv_published_at": "2026-07-13T06:27:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:44:04Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:44:04Z", "osv_earliest_published_at": "2026-07-13T06:27:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T10:53:33Z" }, { "id": "speed2-2026-07-13", "display_name": "speed2", "campaign": null, "detection_source": "osv", "packages": [ { "package": "speed2", "ecosystem": "npm", "versions": [ "1.1.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10383", "osv_published_at": "2026-07-13T06:27:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:44:03Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:44:03Z", "osv_earliest_published_at": "2026-07-13T06:27:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T10:53:27Z" }, { "id": "speed1-2026-07-13", "display_name": "speed1", "campaign": null, "detection_source": "osv", "packages": [ { "package": "speed1", "ecosystem": "npm", "versions": [ "1.1.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10382", "osv_published_at": "2026-07-13T06:27:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:44:01Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:44:01Z", "osv_earliest_published_at": "2026-07-13T06:27:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T10:53:10Z" }, { "id": "slds-lsp-client-2026-07-13", "display_name": "slds-lsp-client", "campaign": null, "detection_source": "osv", "packages": [ { "package": "slds-lsp-client", "ecosystem": "npm", "versions": [ "2026.7.11" ], "osv_entries": [ { "osv_id": "MAL-2026-10234", "osv_published_at": "2026-07-13T00:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:44:00Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:44:00Z", "osv_earliest_published_at": "2026-07-13T00:00:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T10:52:58Z" }, { "id": "sixseven9-2026-07-13", "display_name": "sixseven9", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sixseven9", "ecosystem": "npm", "versions": [ "1.7.7" ], "osv_entries": [ { "osv_id": "MAL-2026-10381", "osv_published_at": "2026-07-13T06:27:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:43:58Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:43:58Z", "osv_earliest_published_at": "2026-07-13T06:27:42Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T10:52:41Z" }, { "id": "sixseven8-2026-07-13", "display_name": "sixseven8", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sixseven8", "ecosystem": "npm", "versions": [ "1.7.7" ], "osv_entries": [ { "osv_id": "MAL-2026-10380", "osv_published_at": "2026-07-13T06:27:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:43:57Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:43:57Z", "osv_earliest_published_at": "2026-07-13T06:27:42Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T10:52:36Z" }, { "id": "sixseven7-2026-07-13", "display_name": "sixseven7", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sixseven7", "ecosystem": "npm", "versions": [ "1.7.7" ], "osv_entries": [ { "osv_id": "MAL-2026-10379", "osv_published_at": "2026-07-13T06:27:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:43:56Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:43:56Z", "osv_earliest_published_at": "2026-07-13T06:27:42Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T10:52:16Z" }, { "id": "sixseven6-2026-07-13", "display_name": "sixseven6", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sixseven6", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10378", "osv_published_at": "2026-07-13T06:27:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:43:54Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:43:54Z", "osv_earliest_published_at": "2026-07-13T06:27:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T10:52:02Z" }, { "id": "sixseven5-2026-07-13", "display_name": "sixseven5", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sixseven5", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10377", "osv_published_at": "2026-07-13T06:27:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:43:53Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:43:53Z", "osv_earliest_published_at": "2026-07-13T06:27:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T10:51:40Z" }, { "id": "sixseven4-2026-07-13", "display_name": "sixseven4", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sixseven4", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10376", "osv_published_at": "2026-07-13T06:27:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:43:51Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:43:51Z", "osv_earliest_published_at": "2026-07-13T06:27:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T10:51:23Z" }, { "id": "sixseven3-2026-07-13", "display_name": "sixseven3", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sixseven3", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10375", "osv_published_at": "2026-07-13T06:27:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:43:49Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:43:49Z", "osv_earliest_published_at": "2026-07-13T06:27:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T10:51:12Z" }, { "id": "sixseven2-2026-07-13", "display_name": "sixseven2", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sixseven2", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10374", "osv_published_at": "2026-07-13T06:27:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:43:48Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:43:48Z", "osv_earliest_published_at": "2026-07-13T06:27:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T10:51:00Z" }, { "id": "sixseven10-2026-07-13", "display_name": "sixseven10", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sixseven10", "ecosystem": "npm", "versions": [ "1.7.7" ], "osv_entries": [ { "osv_id": "MAL-2026-10373", "osv_published_at": "2026-07-13T06:27:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:43:46Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:43:46Z", "osv_earliest_published_at": "2026-07-13T06:27:42Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T10:50:49Z" }, { "id": "sixseven1-2026-07-13", "display_name": "sixseven1", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sixseven1", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10372", "osv_published_at": "2026-07-13T06:27:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:43:45Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:43:45Z", "osv_earliest_published_at": "2026-07-13T06:27:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T10:50:36Z" }, { "id": "sams-sr-sdk-h5-2026-07-13", "display_name": "sams-sr-sdk-h5", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sams-sr-sdk-h5", "ecosystem": "npm", "versions": [ "7.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10233", "osv_published_at": "2026-07-06T00:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:43:43Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:43:43Z", "osv_earliest_published_at": "2026-07-06T00:00:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T10:50:25Z" }, { "id": "salesforce-vscode-slds-2026-07-13", "display_name": "salesforce-vscode-slds", "campaign": null, "detection_source": "osv", "packages": [ { "package": "salesforce-vscode-slds", "ecosystem": "npm", "versions": [ "2026.7.11" ], "osv_entries": [ { "osv_id": "MAL-2026-10232", "osv_published_at": "2026-07-13T00:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:43:42Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:43:42Z", "osv_earliest_published_at": "2026-07-13T00:00:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T10:50:12Z" }, { "id": "react-hot-svg-2026-07-13", "display_name": "react-hot-svg", "campaign": null, "detection_source": "osv", "packages": [ { "package": "react-hot-svg", "ecosystem": "npm", "versions": [ "1.1.4", "1.1.5" ], "osv_entries": [ { "osv_id": "MAL-2026-10439", "osv_published_at": "2026-07-13T09:21:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:43:40Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:43:40Z", "osv_earliest_published_at": "2026-07-13T09:21:48Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T10:49:58Z" }, { "id": "ratelimitsucks9-2026-07-13", "display_name": "ratelimitsucks9", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ratelimitsucks9", "ecosystem": "npm", "versions": [ "1.1.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10371", "osv_published_at": "2026-07-13T06:27:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:43:39Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:43:39Z", "osv_earliest_published_at": "2026-07-13T06:27:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T10:49:39Z" }, { "id": "ratelimitsucks6-2026-07-13", "display_name": "ratelimitsucks6", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ratelimitsucks6", "ecosystem": "npm", "versions": [ "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6136", "osv_published_at": "2026-06-18T16:30:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:43:37Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:43:37Z", "osv_earliest_published_at": "2026-06-18T16:30:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T10:49:18Z" }, { "id": "ratelimitsucks5-2026-07-13", "display_name": "ratelimitsucks5", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ratelimitsucks5", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10370", "osv_published_at": "2026-07-13T06:27:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:43:36Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:43:36Z", "osv_earliest_published_at": "2026-07-13T06:27:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T10:49:13Z" }, { "id": "ratelimitsucks4-2026-07-13", "display_name": "ratelimitsucks4", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ratelimitsucks4", "ecosystem": "npm", "versions": [ "1.1.6", "1.1.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10369", "osv_published_at": "2026-07-13T06:27:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:43:34Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:43:34Z", "osv_earliest_published_at": "2026-07-13T06:27:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T10:48:58Z" }, { "id": "ratelimitsucks3-2026-07-13", "display_name": "ratelimitsucks3", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ratelimitsucks3", "ecosystem": "npm", "versions": [ "1.1.5", "1.1.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10368", "osv_published_at": "2026-07-13T06:27:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:43:32Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:43:32Z", "osv_earliest_published_at": "2026-07-13T06:27:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T10:48:51Z" }, { "id": "ratelimitsucks2-2026-07-13", "display_name": "ratelimitsucks2", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ratelimitsucks2", "ecosystem": "npm", "versions": [ "1.1.4", "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10367", "osv_published_at": "2026-07-13T06:27:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:43:31Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:43:31Z", "osv_earliest_published_at": "2026-07-13T06:27:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T10:48:40Z" }, { "id": "ratelimitsucks10-2026-07-13", "display_name": "ratelimitsucks10", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ratelimitsucks10", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10366", "osv_published_at": "2026-07-13T06:27:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:43:29Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:43:29Z", "osv_earliest_published_at": "2026-07-13T06:27:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T10:48:35Z" }, { "id": "ratelimitsucks1-2026-07-13", "display_name": "ratelimitsucks1", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ratelimitsucks1", "ecosystem": "npm", "versions": [ "1.1.3", "1.1.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10365", "osv_published_at": "2026-07-13T06:27:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:43:27Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:43:27Z", "osv_earliest_published_at": "2026-07-13T06:27:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T10:48:21Z" }, { "id": "ratelimitsucks-2026-07-13", "display_name": "ratelimitsucks", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ratelimitsucks", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6135", "osv_published_at": "2026-06-18T16:30:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:43:26Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:43:26Z", "osv_earliest_published_at": "2026-06-18T16:30:12Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-23T08:48:53Z", "observed_at": "2026-07-13T10:43:26Z", "ingested_at": "2026-07-13T10:43:26Z", "source_published_at": "2026-06-18T16:30:12Z", "ledger_committed_at": "2026-07-23T08:48:53Z" }, { "id": "nottuff15-2026-07-13", "display_name": "nottuff15", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nottuff15", "ecosystem": "npm", "versions": [ "1.1.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5914", "osv_published_at": "2026-06-16T19:27:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:43:24Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:43:24Z", "osv_earliest_published_at": "2026-06-16T19:27:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T10:47:53Z" }, { "id": "nottuff14-2026-07-13", "display_name": "nottuff14", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nottuff14", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10341", "osv_published_at": "2026-07-13T06:27:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:43:22Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:43:22Z", "osv_earliest_published_at": "2026-07-13T06:27:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T10:47:25Z" }, { "id": "nottuff13-2026-07-13", "display_name": "nottuff13", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nottuff13", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10340", "osv_published_at": "2026-07-13T06:27:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:43:21Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:43:21Z", "osv_earliest_published_at": "2026-07-13T06:27:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T10:47:20Z" }, { "id": "nottuff12-2026-07-13", "display_name": "nottuff12", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nottuff12", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10339", "osv_published_at": "2026-07-13T06:27:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:43:19Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:43:19Z", "osv_earliest_published_at": "2026-07-13T06:27:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T10:47:09Z" }, { "id": "nottuff11-2026-07-13", "display_name": "nottuff11", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nottuff11", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10338", "osv_published_at": "2026-07-13T06:27:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:43:17Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:43:17Z", "osv_earliest_published_at": "2026-07-13T06:27:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T10:46:50Z" }, { "id": "nottuff10-2026-07-13", "display_name": "nottuff10", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nottuff10", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10337", "osv_published_at": "2026-07-13T06:27:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:43:15Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:43:15Z", "osv_earliest_published_at": "2026-07-13T06:27:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T10:46:39Z" }, { "id": "nottuff1-2026-07-13", "display_name": "nottuff1", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nottuff1", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10336", "osv_published_at": "2026-07-13T06:27:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:43:13Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:43:13Z", "osv_earliest_published_at": "2026-07-13T06:27:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T10:46:17Z" }, { "id": "netspeedutil-2026-07-13", "display_name": "netspeedutil", "campaign": null, "detection_source": "osv", "packages": [ { "package": "netspeedutil", "ecosystem": "npm", "versions": [ "1.0.13" ], "osv_entries": [ { "osv_id": "MAL-2026-10438", "osv_published_at": "2026-07-13T09:22:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:43:11Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:43:11Z", "osv_earliest_published_at": "2026-07-13T09:22:42Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T10:45:57Z" }, { "id": "jsonfb-2026-07-13", "display_name": "jsonfb", "campaign": null, "detection_source": "osv", "packages": [ { "package": "jsonfb", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2", "1.0.4", "1.0.5", "1.0.6", "1.0.7", "1.0.8", "1.0.9", "1.1.0", "1.1.0-beta.1", "1.1.0-beta.2", "1.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10437", "osv_published_at": "2026-07-13T09:17:31Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:43:10Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:43:10Z", "osv_earliest_published_at": "2026-07-13T09:17:31Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-23T08:36:54Z", "observed_at": "2026-07-13T10:43:10Z", "ingested_at": "2026-07-13T10:43:10Z", "source_published_at": "2026-07-13T09:17:31Z", "ledger_committed_at": "2026-07-23T08:36:54Z" }, { "id": "jest-formatter-2026-07-13", "display_name": "jest-formatter", "campaign": null, "detection_source": "osv", "packages": [ { "package": "jest-formatter", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10436", "osv_published_at": "2026-07-13T09:22:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:43:08Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:43:08Z", "osv_earliest_published_at": "2026-07-13T09:22:35Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T10:45:39Z" }, { "id": "fetchcraft-2026-07-13", "display_name": "fetchcraft", "campaign": null, "detection_source": "osv", "packages": [ { "package": "fetchcraft", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10435", "osv_published_at": "2026-07-13T09:24:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:43:07Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:43:07Z", "osv_earliest_published_at": "2026-07-13T09:24:42Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T10:45:21Z" }, { "id": "env-fast-2026-07-13", "display_name": "env-fast", "campaign": null, "detection_source": "osv", "packages": [ { "package": "env-fast", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10434", "osv_published_at": "2026-07-13T09:22:28Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:43:05Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:43:05Z", "osv_earliest_published_at": "2026-07-13T09:22:28Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T10:45:12Z" }, { "id": "chalk-plus-ts-2026-07-13", "display_name": "chalk-plus-ts", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chalk-plus-ts", "ecosystem": "npm", "versions": [ "1.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-5710", "osv_published_at": "2026-06-12T20:34:58Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:43:03Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:43:03Z", "osv_earliest_published_at": "2026-06-12T20:34:58Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T10:45:05Z" }, { "id": "chain-guardian-2026-07-13", "display_name": "chain-guardian", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chain-guardian", "ecosystem": "npm", "versions": [ "1.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10433", "osv_published_at": "2026-07-13T09:21:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:43:02Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:43:02Z", "osv_earliest_published_at": "2026-07-13T09:21:39Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T10:44:50Z" }, { "id": "backupgenuine-updated-2026-07-13", "display_name": "backupgenuine-updated", "campaign": null, "detection_source": "osv", "packages": [ { "package": "backupgenuine-updated", "ecosystem": "npm", "versions": [ "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10290", "osv_published_at": "2026-07-13T06:27:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:43:00Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:43:00Z", "osv_earliest_published_at": "2026-07-13T06:27:39Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T10:44:32Z" }, { "id": "backup5-updated-2026-07-13", "display_name": "backup5-updated", "campaign": null, "detection_source": "osv", "packages": [ { "package": "backup5-updated", "ecosystem": "npm", "versions": [ "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10289", "osv_published_at": "2026-07-13T06:27:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:42:59Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:42:59Z", "osv_earliest_published_at": "2026-07-13T06:27:39Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T10:44:18Z" }, { "id": "backup4-gasp-2026-07-13", "display_name": "backup4-gasp", "campaign": null, "detection_source": "osv", "packages": [ { "package": "backup4-gasp", "ecosystem": "npm", "versions": [ "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10288", "osv_published_at": "2026-07-13T06:27:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:42:57Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:42:57Z", "osv_earliest_published_at": "2026-07-13T06:27:39Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T10:44:04Z" }, { "id": "backup3-ff-2026-07-13", "display_name": "backup3-ff", "campaign": null, "detection_source": "osv", "packages": [ { "package": "backup3-ff", "ecosystem": "npm", "versions": [ "1.1.2", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10287", "osv_published_at": "2026-07-13T06:27:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:42:56Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:42:56Z", "osv_earliest_published_at": "2026-07-13T06:27:39Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-21T23:18:17Z" }, { "id": "backup2-asd-2026-07-13", "display_name": "backup2-asd", "campaign": null, "detection_source": "osv", "packages": [ { "package": "backup2-asd", "ecosystem": "npm", "versions": [ "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10286", "osv_published_at": "2026-07-13T06:27:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:42:54Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:42:54Z", "osv_earliest_published_at": "2026-07-13T06:27:39Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T10:43:32Z" }, { "id": "backup1-gg-2026-07-13", "display_name": "backup1-gg", "campaign": null, "detection_source": "osv", "packages": [ { "package": "backup1-gg", "ecosystem": "npm", "versions": [ "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10285", "osv_published_at": "2026-07-13T06:27:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:42:53Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:42:53Z", "osv_earliest_published_at": "2026-07-13T06:27:39Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T10:43:11Z" }, { "id": "animated-css-kit-2026-07-13", "display_name": "animated-css-kit", "campaign": null, "detection_source": "osv", "packages": [ { "package": "animated-css-kit", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10432", "osv_published_at": "2026-07-13T09:21:32Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:42:51Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:42:51Z", "osv_earliest_published_at": "2026-07-13T09:21:32Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T10:42:53Z" }, { "id": "tailwind-ts-eslint-plugin-2026-07-13", "display_name": "@tailwind-ts/eslint-plugin", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@tailwind-ts/eslint-plugin", "ecosystem": "npm", "versions": [ "0.1.0", "0.2.0", "0.3.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10431", "osv_published_at": "2026-07-13T09:22:02Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T10:42:06Z", "flagged_at": null, "confirmed_at": "2026-07-13T10:42:06Z", "osv_earliest_published_at": "2026-07-13T09:22:02Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T20:00:01Z" }, { "id": "nottuff2-2026-07-13", "display_name": "nottuff2", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nottuff2", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10346", "osv_published_at": "2026-07-13T06:27:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:24:46Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:24:46Z", "osv_earliest_published_at": "2026-07-13T06:27:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:38:18Z" }, { "id": "nottuff19-2026-07-13", "display_name": "nottuff19", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nottuff19", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10345", "osv_published_at": "2026-07-13T06:27:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:24:44Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:24:44Z", "osv_earliest_published_at": "2026-07-13T06:27:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:38:04Z" }, { "id": "nottuff18-2026-07-13", "display_name": "nottuff18", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nottuff18", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10344", "osv_published_at": "2026-07-13T06:27:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:24:42Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:24:42Z", "osv_earliest_published_at": "2026-07-13T06:27:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:37:53Z" }, { "id": "nottuff17-2026-07-13", "display_name": "nottuff17", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nottuff17", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10343", "osv_published_at": "2026-07-13T06:27:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:24:40Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:24:40Z", "osv_earliest_published_at": "2026-07-13T06:27:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:37:24Z" }, { "id": "nottuff16-2026-07-13", "display_name": "nottuff16", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nottuff16", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10342", "osv_published_at": "2026-07-13T06:27:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:24:39Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:24:39Z", "osv_earliest_published_at": "2026-07-13T06:27:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:37:18Z" }, { "id": "ishowfeet9-2026-07-13", "display_name": "ishowfeet9", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ishowfeet9", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10330", "osv_published_at": "2026-07-13T06:27:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:24:37Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:24:37Z", "osv_earliest_published_at": "2026-07-13T06:27:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:37:06Z" }, { "id": "ishowfeet8-2026-07-13", "display_name": "ishowfeet8", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ishowfeet8", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10329", "osv_published_at": "2026-07-13T06:27:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:24:35Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:24:35Z", "osv_earliest_published_at": "2026-07-13T06:27:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:36:52Z" }, { "id": "ishowfeet7-2026-07-13", "display_name": "ishowfeet7", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ishowfeet7", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10328", "osv_published_at": "2026-07-13T06:27:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:24:34Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:24:34Z", "osv_earliest_published_at": "2026-07-13T06:27:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:36:47Z" }, { "id": "ishowfeet6-2026-07-13", "display_name": "ishowfeet6", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ishowfeet6", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10327", "osv_published_at": "2026-07-13T06:27:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:24:32Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:24:32Z", "osv_earliest_published_at": "2026-07-13T06:27:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:36:41Z" }, { "id": "ishowfeet5-2026-07-13", "display_name": "ishowfeet5", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ishowfeet5", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10326", "osv_published_at": "2026-07-13T06:27:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:24:30Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:24:30Z", "osv_earliest_published_at": "2026-07-13T06:27:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:36:27Z" }, { "id": "ishowfeet4-2026-07-13", "display_name": "ishowfeet4", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ishowfeet4", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10325", "osv_published_at": "2026-07-13T06:27:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:24:29Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:24:29Z", "osv_earliest_published_at": "2026-07-13T06:27:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:36:11Z" }, { "id": "ishowfeet3-2026-07-13", "display_name": "ishowfeet3", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ishowfeet3", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10324", "osv_published_at": "2026-07-13T06:27:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:24:27Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:24:27Z", "osv_earliest_published_at": "2026-07-13T06:27:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:35:59Z" }, { "id": "ishowfeet20-2026-07-13", "display_name": "ishowfeet20", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ishowfeet20", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10323", "osv_published_at": "2026-07-13T06:27:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:24:25Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:24:25Z", "osv_earliest_published_at": "2026-07-13T06:27:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:35:51Z" }, { "id": "ishowfeet2-2026-07-13", "display_name": "ishowfeet2", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ishowfeet2", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10322", "osv_published_at": "2026-07-13T06:27:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:24:23Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:24:23Z", "osv_earliest_published_at": "2026-07-13T06:27:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:35:26Z" }, { "id": "ishowfeet19-2026-07-13", "display_name": "ishowfeet19", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ishowfeet19", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10321", "osv_published_at": "2026-07-13T06:27:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:24:22Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:24:22Z", "osv_earliest_published_at": "2026-07-13T06:27:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:35:14Z" }, { "id": "ishowfeet18-2026-07-13", "display_name": "ishowfeet18", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ishowfeet18", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10320", "osv_published_at": "2026-07-13T06:27:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:24:20Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:24:20Z", "osv_earliest_published_at": "2026-07-13T06:27:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:34:59Z" }, { "id": "ishowfeet17-2026-07-13", "display_name": "ishowfeet17", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ishowfeet17", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10319", "osv_published_at": "2026-07-13T06:27:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:24:18Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:24:18Z", "osv_earliest_published_at": "2026-07-13T06:27:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:34:40Z" }, { "id": "ishowfeet16-2026-07-13", "display_name": "ishowfeet16", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ishowfeet16", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10318", "osv_published_at": "2026-07-13T06:27:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:24:16Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:24:16Z", "osv_earliest_published_at": "2026-07-13T06:27:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:34:25Z" }, { "id": "ishowfeet15-2026-07-13", "display_name": "ishowfeet15", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ishowfeet15", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10317", "osv_published_at": "2026-07-13T06:27:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:24:15Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:24:15Z", "osv_earliest_published_at": "2026-07-13T06:27:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:34:18Z" }, { "id": "ishowfeet14-2026-07-13", "display_name": "ishowfeet14", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ishowfeet14", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10316", "osv_published_at": "2026-07-13T06:27:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:24:13Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:24:13Z", "osv_earliest_published_at": "2026-07-13T06:27:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:34:13Z" }, { "id": "ishowfeet13-2026-07-13", "display_name": "ishowfeet13", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ishowfeet13", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10315", "osv_published_at": "2026-07-13T06:27:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:24:11Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:24:11Z", "osv_earliest_published_at": "2026-07-13T06:27:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:34:02Z" }, { "id": "ishowfeet12-2026-07-13", "display_name": "ishowfeet12", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ishowfeet12", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10314", "osv_published_at": "2026-07-13T06:27:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:24:09Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:24:09Z", "osv_earliest_published_at": "2026-07-13T06:27:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:33:54Z" }, { "id": "ishowfeet11-2026-07-13", "display_name": "ishowfeet11", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ishowfeet11", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10313", "osv_published_at": "2026-07-13T06:27:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:24:08Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:24:08Z", "osv_earliest_published_at": "2026-07-13T06:27:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:33:41Z" }, { "id": "ishowfeet10-2026-07-13", "display_name": "ishowfeet10", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ishowfeet10", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10312", "osv_published_at": "2026-07-13T06:27:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:24:06Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:24:06Z", "osv_earliest_published_at": "2026-07-13T06:27:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:33:32Z" }, { "id": "ishowfeet1-2026-07-13", "display_name": "ishowfeet1", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ishowfeet1", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10311", "osv_published_at": "2026-07-13T06:27:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:24:04Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:24:04Z", "osv_earliest_published_at": "2026-07-13T06:27:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:33:26Z" }, { "id": "imillegal5-2026-07-13", "display_name": "imillegal5", "campaign": null, "detection_source": "osv", "packages": [ { "package": "imillegal5", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10310", "osv_published_at": "2026-07-13T06:27:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:24:02Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:24:02Z", "osv_earliest_published_at": "2026-07-13T06:27:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:33:16Z" }, { "id": "imillegal4-2026-07-13", "display_name": "imillegal4", "campaign": null, "detection_source": "osv", "packages": [ { "package": "imillegal4", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10309", "osv_published_at": "2026-07-13T06:27:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:24:01Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:24:01Z", "osv_earliest_published_at": "2026-07-13T06:27:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:33:01Z" }, { "id": "imillegal3-2026-07-13", "display_name": "imillegal3", "campaign": null, "detection_source": "osv", "packages": [ { "package": "imillegal3", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10308", "osv_published_at": "2026-07-13T06:27:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:23:59Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:23:59Z", "osv_earliest_published_at": "2026-07-13T06:27:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:32:55Z" }, { "id": "imillegal2-2026-07-13", "display_name": "imillegal2", "campaign": null, "detection_source": "osv", "packages": [ { "package": "imillegal2", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10307", "osv_published_at": "2026-07-13T06:27:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:23:57Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:23:57Z", "osv_earliest_published_at": "2026-07-13T06:27:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:32:41Z" }, { "id": "imillegal1-2026-07-13", "display_name": "imillegal1", "campaign": null, "detection_source": "osv", "packages": [ { "package": "imillegal1", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10306", "osv_published_at": "2026-07-13T06:27:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:23:55Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:23:55Z", "osv_earliest_published_at": "2026-07-13T06:27:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:32:31Z" }, { "id": "enbd-react-logger-2026-07-13", "display_name": "enbd-react-logger", "campaign": null, "detection_source": "osv", "packages": [ { "package": "enbd-react-logger", "ecosystem": "npm", "versions": [ "4.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10231", "osv_published_at": "2026-07-06T00:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:23:54Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:23:54Z", "osv_earliest_published_at": "2026-07-06T00:00:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:32:05Z" }, { "id": "enbd-react-lib-2026-07-13", "display_name": "enbd-react-lib", "campaign": null, "detection_source": "osv", "packages": [ { "package": "enbd-react-lib", "ecosystem": "npm", "versions": [ "8.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10230", "osv_published_at": "2026-07-06T00:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:23:52Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:23:52Z", "osv_earliest_published_at": "2026-07-06T00:00:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:31:50Z" }, { "id": "enbd-react-error-boundry-2026-07-13", "display_name": "enbd-react-error-boundry", "campaign": null, "detection_source": "osv", "packages": [ { "package": "enbd-react-error-boundry", "ecosystem": "npm", "versions": [ "6.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10229", "osv_published_at": "2026-07-06T00:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:23:51Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:23:51Z", "osv_earliest_published_at": "2026-07-06T00:00:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:31:37Z" }, { "id": "chat-adapter-zoom-2026-07-13", "display_name": "chat-adapter-zoom", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chat-adapter-zoom", "ecosystem": "npm", "versions": [ "12.1.31" ], "osv_entries": [ { "osv_id": "MAL-2026-10228", "osv_published_at": "2026-07-13T00:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:23:48Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:23:48Z", "osv_earliest_published_at": "2026-07-13T00:00:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:31:30Z" }, { "id": "chai-log-2026-07-13", "display_name": "chai-log", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-log", "ecosystem": "npm", "versions": [ "1.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10426", "osv_published_at": "2026-07-13T08:01:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:23:47Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:23:47Z", "osv_earliest_published_at": "2026-07-13T08:01:03Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:31:19Z" }, { "id": "box-react-uix-2026-07-13", "display_name": "box-react-uix", "campaign": null, "detection_source": "osv", "packages": [ { "package": "box-react-uix", "ecosystem": "npm", "versions": [ "18.6.91" ], "osv_entries": [ { "osv_id": "MAL-2026-10227", "osv_published_at": "2026-07-06T00:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:23:45Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:23:45Z", "osv_earliest_published_at": "2026-07-06T00:00:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:31:13Z" }, { "id": "backupsitetuff9-2026-07-13", "display_name": "backupsitetuff9", "campaign": null, "detection_source": "osv", "packages": [ { "package": "backupsitetuff9", "ecosystem": "npm", "versions": [ "1.1.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10294", "osv_published_at": "2026-07-13T06:27:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:23:44Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:23:44Z", "osv_earliest_published_at": "2026-07-13T06:27:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:31:06Z" }, { "id": "backupsitetuff6-2026-07-13", "display_name": "backupsitetuff6", "campaign": null, "detection_source": "osv", "packages": [ { "package": "backupsitetuff6", "ecosystem": "npm", "versions": [ "1.1.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10293", "osv_published_at": "2026-07-13T06:27:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:23:43Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:23:43Z", "osv_earliest_published_at": "2026-07-13T06:27:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:30:47Z" }, { "id": "backupsitetuff3-2026-07-13", "display_name": "backupsitetuff3", "campaign": null, "detection_source": "osv", "packages": [ { "package": "backupsitetuff3", "ecosystem": "npm", "versions": [ "1.1.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10292", "osv_published_at": "2026-07-13T06:27:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:23:41Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:23:41Z", "osv_earliest_published_at": "2026-07-13T06:27:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:30:36Z" }, { "id": "backupsitetuff10-2026-07-13", "display_name": "backupsitetuff10", "campaign": null, "detection_source": "osv", "packages": [ { "package": "backupsitetuff10", "ecosystem": "npm", "versions": [ "1.1.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10291", "osv_published_at": "2026-07-13T06:27:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:23:40Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:23:40Z", "osv_earliest_published_at": "2026-07-13T06:27:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:30:29Z" }, { "id": "another-poc-by-tipsen-2026-07-13", "display_name": "another-poc-by-tipsen", "campaign": null, "detection_source": "osv", "packages": [ { "package": "another-poc-by-tipsen", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10283", "osv_published_at": "2026-07-13T06:30:31Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:23:38Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:23:38Z", "osv_earliest_published_at": "2026-07-13T06:30:31Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:30:19Z" }, { "id": "abuden5-2026-07-13", "display_name": "abuden5", "campaign": null, "detection_source": "osv", "packages": [ { "package": "abuden5", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10281", "osv_published_at": "2026-07-13T06:27:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:23:37Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:23:37Z", "osv_earliest_published_at": "2026-07-13T06:27:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:30:11Z" }, { "id": "abuden4-2026-07-13", "display_name": "abuden4", "campaign": null, "detection_source": "osv", "packages": [ { "package": "abuden4", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10280", "osv_published_at": "2026-07-13T06:27:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:23:35Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:23:35Z", "osv_earliest_published_at": "2026-07-13T06:27:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:29:51Z" }, { "id": "abuden3-2026-07-13", "display_name": "abuden3", "campaign": null, "detection_source": "osv", "packages": [ { "package": "abuden3", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10279", "osv_published_at": "2026-07-13T06:27:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:23:34Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:23:34Z", "osv_earliest_published_at": "2026-07-13T06:27:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:29:46Z" }, { "id": "abuden29-2026-07-13", "display_name": "abuden29", "campaign": null, "detection_source": "osv", "packages": [ { "package": "abuden29", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10278", "osv_published_at": "2026-07-13T06:27:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:23:32Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:23:32Z", "osv_earliest_published_at": "2026-07-13T06:27:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:29:27Z" }, { "id": "abuden28-2026-07-13", "display_name": "abuden28", "campaign": null, "detection_source": "osv", "packages": [ { "package": "abuden28", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10277", "osv_published_at": "2026-07-13T06:27:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:23:30Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:23:30Z", "osv_earliest_published_at": "2026-07-13T06:27:42Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:29:14Z" }, { "id": "abuden27-2026-07-13", "display_name": "abuden27", "campaign": null, "detection_source": "osv", "packages": [ { "package": "abuden27", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10276", "osv_published_at": "2026-07-13T06:27:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:23:29Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:23:29Z", "osv_earliest_published_at": "2026-07-13T06:27:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:29:01Z" }, { "id": "abuden26-2026-07-13", "display_name": "abuden26", "campaign": null, "detection_source": "osv", "packages": [ { "package": "abuden26", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10275", "osv_published_at": "2026-07-13T06:27:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:23:27Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:23:27Z", "osv_earliest_published_at": "2026-07-13T06:27:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:28:51Z" }, { "id": "abuden25-2026-07-13", "display_name": "abuden25", "campaign": null, "detection_source": "osv", "packages": [ { "package": "abuden25", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10274", "osv_published_at": "2026-07-13T06:27:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:23:25Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:23:25Z", "osv_earliest_published_at": "2026-07-13T06:27:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:28:42Z" }, { "id": "abuden24-2026-07-13", "display_name": "abuden24", "campaign": null, "detection_source": "osv", "packages": [ { "package": "abuden24", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10273", "osv_published_at": "2026-07-13T06:27:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:23:24Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:23:24Z", "osv_earliest_published_at": "2026-07-13T06:27:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:28:29Z" }, { "id": "abuden230-2026-07-13", "display_name": "abuden230", "campaign": null, "detection_source": "osv", "packages": [ { "package": "abuden230", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10272", "osv_published_at": "2026-07-13T06:27:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:23:22Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:23:22Z", "osv_earliest_published_at": "2026-07-13T06:27:42Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:28:21Z" }, { "id": "abuden23-2026-07-13", "display_name": "abuden23", "campaign": null, "detection_source": "osv", "packages": [ { "package": "abuden23", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10271", "osv_published_at": "2026-07-13T06:27:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:23:20Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:23:20Z", "osv_earliest_published_at": "2026-07-13T06:27:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:28:08Z" }, { "id": "abuden229-2026-07-13", "display_name": "abuden229", "campaign": null, "detection_source": "osv", "packages": [ { "package": "abuden229", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10270", "osv_published_at": "2026-07-13T06:27:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:23:19Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:23:19Z", "osv_earliest_published_at": "2026-07-13T06:27:42Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:27:58Z" }, { "id": "abuden228-2026-07-13", "display_name": "abuden228", "campaign": null, "detection_source": "osv", "packages": [ { "package": "abuden228", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10269", "osv_published_at": "2026-07-13T06:27:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:23:17Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:23:17Z", "osv_earliest_published_at": "2026-07-13T06:27:42Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:27:48Z" }, { "id": "abuden227-2026-07-13", "display_name": "abuden227", "campaign": null, "detection_source": "osv", "packages": [ { "package": "abuden227", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10268", "osv_published_at": "2026-07-13T06:27:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:23:15Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:23:15Z", "osv_earliest_published_at": "2026-07-13T06:27:42Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:27:28Z" }, { "id": "abuden226-2026-07-13", "display_name": "abuden226", "campaign": null, "detection_source": "osv", "packages": [ { "package": "abuden226", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10267", "osv_published_at": "2026-07-13T06:27:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:23:14Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:23:14Z", "osv_earliest_published_at": "2026-07-13T06:27:42Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:27:04Z" }, { "id": "abuden225-2026-07-13", "display_name": "abuden225", "campaign": null, "detection_source": "osv", "packages": [ { "package": "abuden225", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10266", "osv_published_at": "2026-07-13T06:27:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:23:12Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:23:12Z", "osv_earliest_published_at": "2026-07-13T06:27:42Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:26:55Z" }, { "id": "abuden224-2026-07-13", "display_name": "abuden224", "campaign": null, "detection_source": "osv", "packages": [ { "package": "abuden224", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10265", "osv_published_at": "2026-07-13T06:27:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:23:10Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:23:10Z", "osv_earliest_published_at": "2026-07-13T06:27:42Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:26:46Z" }, { "id": "abuden223-2026-07-13", "display_name": "abuden223", "campaign": null, "detection_source": "osv", "packages": [ { "package": "abuden223", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10264", "osv_published_at": "2026-07-13T06:27:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:23:09Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:23:09Z", "osv_earliest_published_at": "2026-07-13T06:27:42Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:26:36Z" }, { "id": "abuden222-2026-07-13", "display_name": "abuden222", "campaign": null, "detection_source": "osv", "packages": [ { "package": "abuden222", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10263", "osv_published_at": "2026-07-13T06:27:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:23:07Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:23:07Z", "osv_earliest_published_at": "2026-07-13T06:27:42Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:26:13Z" }, { "id": "abuden221-2026-07-13", "display_name": "abuden221", "campaign": null, "detection_source": "osv", "packages": [ { "package": "abuden221", "ecosystem": "npm", "versions": [ "1.1.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6130", "osv_published_at": "2026-06-18T16:29:47Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:23:05Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:23:05Z", "osv_earliest_published_at": "2026-06-18T16:29:47Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:26:00Z" }, { "id": "abuden220-2026-07-13", "display_name": "abuden220", "campaign": null, "detection_source": "osv", "packages": [ { "package": "abuden220", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10262", "osv_published_at": "2026-07-13T06:27:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:23:03Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:23:03Z", "osv_earliest_published_at": "2026-07-13T06:27:42Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:25:55Z" }, { "id": "abuden22-2026-07-13", "display_name": "abuden22", "campaign": null, "detection_source": "osv", "packages": [ { "package": "abuden22", "ecosystem": "npm", "versions": [ "1.1.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6129", "osv_published_at": "2026-06-18T16:29:47Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:23:01Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:23:01Z", "osv_earliest_published_at": "2026-06-18T16:29:47Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:25:38Z" }, { "id": "abuden219-2026-07-13", "display_name": "abuden219", "campaign": null, "detection_source": "osv", "packages": [ { "package": "abuden219", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10261", "osv_published_at": "2026-07-13T06:27:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:23:00Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:23:00Z", "osv_earliest_published_at": "2026-07-13T06:27:42Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:25:29Z" }, { "id": "abuden218-2026-07-13", "display_name": "abuden218", "campaign": null, "detection_source": "osv", "packages": [ { "package": "abuden218", "ecosystem": "npm", "versions": [ "1.1.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6128", "osv_published_at": "2026-06-18T16:29:46Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:22:58Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:22:58Z", "osv_earliest_published_at": "2026-06-18T16:29:46Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:25:06Z" }, { "id": "abuden217-2026-07-13", "display_name": "abuden217", "campaign": null, "detection_source": "osv", "packages": [ { "package": "abuden217", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10260", "osv_published_at": "2026-07-13T06:27:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:22:57Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:22:57Z", "osv_earliest_published_at": "2026-07-13T06:27:42Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:24:54Z" }, { "id": "abuden216-2026-07-13", "display_name": "abuden216", "campaign": null, "detection_source": "osv", "packages": [ { "package": "abuden216", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10259", "osv_published_at": "2026-07-13T06:27:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:22:55Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:22:55Z", "osv_earliest_published_at": "2026-07-13T06:27:42Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:24:47Z" }, { "id": "abuden215-2026-07-13", "display_name": "abuden215", "campaign": null, "detection_source": "osv", "packages": [ { "package": "abuden215", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10258", "osv_published_at": "2026-07-13T06:27:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:22:53Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:22:53Z", "osv_earliest_published_at": "2026-07-13T06:27:42Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:24:35Z" }, { "id": "abuden214-2026-07-13", "display_name": "abuden214", "campaign": null, "detection_source": "osv", "packages": [ { "package": "abuden214", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10257", "osv_published_at": "2026-07-13T06:27:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:22:52Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:22:52Z", "osv_earliest_published_at": "2026-07-13T06:27:42Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:24:24Z" }, { "id": "abuden213-2026-07-13", "display_name": "abuden213", "campaign": null, "detection_source": "osv", "packages": [ { "package": "abuden213", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10256", "osv_published_at": "2026-07-13T06:27:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:22:50Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:22:50Z", "osv_earliest_published_at": "2026-07-13T06:27:42Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:24:16Z" }, { "id": "abuden212-2026-07-13", "display_name": "abuden212", "campaign": null, "detection_source": "osv", "packages": [ { "package": "abuden212", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10255", "osv_published_at": "2026-07-13T06:27:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:22:48Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:22:48Z", "osv_earliest_published_at": "2026-07-13T06:27:42Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:24:05Z" }, { "id": "abuden211-2026-07-13", "display_name": "abuden211", "campaign": null, "detection_source": "osv", "packages": [ { "package": "abuden211", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10254", "osv_published_at": "2026-07-13T06:27:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:22:47Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:22:47Z", "osv_earliest_published_at": "2026-07-13T06:27:42Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:23:41Z" }, { "id": "abuden210-2026-07-13", "display_name": "abuden210", "campaign": null, "detection_source": "osv", "packages": [ { "package": "abuden210", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10253", "osv_published_at": "2026-07-13T06:27:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:22:45Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:22:45Z", "osv_earliest_published_at": "2026-07-13T06:27:42Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:23:24Z" }, { "id": "abuden21-2026-07-13", "display_name": "abuden21", "campaign": null, "detection_source": "osv", "packages": [ { "package": "abuden21", "ecosystem": "npm", "versions": [ "1.1.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5937", "osv_published_at": "2026-06-16T23:43:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:22:44Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:22:44Z", "osv_earliest_published_at": "2026-06-16T23:43:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:23:10Z" }, { "id": "abuden2-2026-07-13", "display_name": "abuden2", "campaign": null, "detection_source": "osv", "packages": [ { "package": "abuden2", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10252", "osv_published_at": "2026-07-13T06:27:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:22:42Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:22:42Z", "osv_earliest_published_at": "2026-07-13T06:27:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:22:51Z" }, { "id": "abuden1-2026-07-13", "display_name": "abuden1", "campaign": null, "detection_source": "osv", "packages": [ { "package": "abuden1", "ecosystem": "npm", "versions": [ "1.1.7", "1.7.7", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10251", "osv_published_at": "2026-07-13T06:27:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:22:25Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:22:25Z", "osv_earliest_published_at": "2026-07-13T06:27:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:22:33Z" }, { "id": "logdna-web-styles-2026-07-13", "display_name": "@logdna-web/styles", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@logdna-web/styles", "ecosystem": "npm", "versions": [ "0.8.40" ], "osv_entries": [ { "osv_id": "MAL-2026-10226", "osv_published_at": "2026-07-06T00:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:22:07Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:22:07Z", "osv_earliest_published_at": "2026-07-06T00:00:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:22:09Z" }, { "id": "logdna-web-shared-2026-07-13", "display_name": "@logdna-web/shared", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@logdna-web/shared", "ecosystem": "npm", "versions": [ "13.19.37" ], "osv_entries": [ { "osv_id": "MAL-2026-10225", "osv_published_at": "2026-07-06T00:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:21:23Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:21:23Z", "osv_earliest_published_at": "2026-07-06T00:00:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:21:25Z" }, { "id": "napster-corp-edge-mcp-2026-07-13", "display_name": "@napster-corp/edge-mcp", "campaign": "idms-corp", "detection_source": "npm_registry", "packages": [ { "package": "@napster-corp/edge-mcp", "ecosystem": "npm", "versions": [ "1.2.0", "1.2.1", "1.3.0" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:20:46Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:20:46Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40napster-corp%2Fedge-mcp", "ledger_commit_at": "2026-07-13T09:20:52Z" }, { "id": "idms-corp-auth-ui-2026-07-13", "display_name": "@idms-corp/auth-ui", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@idms-corp/auth-ui", "ecosystem": "npm", "versions": [ "0.0.0", "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10224", "osv_published_at": "2026-07-06T00:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:20:00Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:20:00Z", "osv_earliest_published_at": "2026-07-06T00:00:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:20:06Z" }, { "id": "flex-ng-header-component-2026-07-13", "display_name": "@flex-ng/header-component", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@flex-ng/header-component", "ecosystem": "npm", "versions": [ "0.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10223", "osv_published_at": "2026-07-06T00:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:19:41Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:19:41Z", "osv_earliest_published_at": "2026-07-06T00:00:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:19:50Z" }, { "id": "flex-ng-filter-pipe-2026-07-13", "display_name": "@flex-ng/filter-pipe", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@flex-ng/filter-pipe", "ecosystem": "npm", "versions": [ "1.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10222", "osv_published_at": "2026-07-06T00:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:19:23Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:19:23Z", "osv_earliest_published_at": "2026-07-06T00:00:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:19:25Z" }, { "id": "flex-ng-error-component-2026-07-13", "display_name": "@flex-ng/error-component", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@flex-ng/error-component", "ecosystem": "npm", "versions": [ "2.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10221", "osv_published_at": "2026-07-06T00:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T09:18:15Z", "flagged_at": null, "confirmed_at": "2026-07-13T09:18:15Z", "osv_earliest_published_at": "2026-07-06T00:00:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T09:18:17Z" }, { "id": "vps-new-manager-2026-07-13", "display_name": "vps-new-manager", "campaign": null, "detection_source": "osv", "packages": [ { "package": "vps-new-manager", "ecosystem": "npm", "versions": [ "0.1.3" ], "osv_entries": [ { "osv_id": "MAL-2026-7014", "osv_published_at": "2026-07-08T17:31:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T08:01:51Z", "flagged_at": null, "confirmed_at": "2026-07-13T08:01:51Z", "osv_earliest_published_at": "2026-07-08T17:31:07Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T08:08:58Z" }, { "id": "trinity-scheme-2026-07-13", "display_name": "trinity-scheme", "campaign": null, "detection_source": "osv", "packages": [ { "package": "trinity-scheme", "ecosystem": "npm", "versions": [ "20.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10425", "osv_published_at": "2026-07-13T06:55:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T08:01:50Z", "flagged_at": null, "confirmed_at": "2026-07-13T08:01:50Z", "osv_earliest_published_at": "2026-07-13T06:55:05Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T08:08:42Z" }, { "id": "tokenization-util-2026-07-13", "display_name": "tokenization-util", "campaign": null, "detection_source": "osv", "packages": [ { "package": "tokenization-util", "ecosystem": "npm", "versions": [ "0.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6440", "osv_published_at": "2026-06-25T05:29:26Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T08:01:49Z", "flagged_at": null, "confirmed_at": "2026-07-13T08:01:49Z", "osv_earliest_published_at": "2026-06-25T05:29:26Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T08:08:25Z" }, { "id": "terminal-mascot-2026-07-13", "display_name": "terminal-mascot", "campaign": null, "detection_source": "osv", "packages": [ { "package": "terminal-mascot", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2", "1.0.3", "3.5.2", "3.5.3" ], "osv_entries": [ { "osv_id": "MAL-2026-10424", "osv_published_at": "2026-07-13T06:51:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T08:01:47Z", "flagged_at": null, "confirmed_at": "2026-07-13T08:01:47Z", "osv_earliest_published_at": "2026-07-13T06:51:23Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-17T01:06:03Z" }, { "id": "supertokens-web-2026-07-13", "display_name": "supertokens-web", "campaign": null, "detection_source": "osv", "packages": [ { "package": "supertokens-web", "ecosystem": "npm", "versions": [ "1.16.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10423", "osv_published_at": "2026-07-13T06:56:32Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T08:01:46Z", "flagged_at": null, "confirmed_at": "2026-07-13T08:01:46Z", "osv_earliest_published_at": "2026-07-13T06:56:32Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T08:07:56Z" }, { "id": "sso-users-detection-2026-07-13", "display_name": "sso-users-detection", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sso-users-detection", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10422", "osv_published_at": "2026-07-13T07:00:55Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T08:01:44Z", "flagged_at": null, "confirmed_at": "2026-07-13T08:01:44Z", "osv_earliest_published_at": "2026-07-13T07:00:55Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T08:07:44Z" }, { "id": "portway-2026-07-13", "display_name": "portway", "campaign": null, "detection_source": "osv", "packages": [ { "package": "portway", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10421", "osv_published_at": "2026-07-13T07:01:27Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T08:01:43Z", "flagged_at": null, "confirmed_at": "2026-07-13T08:01:43Z", "osv_earliest_published_at": "2026-07-13T07:01:27Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T08:07:29Z" }, { "id": "path-addon-extend-2026-07-13", "display_name": "path-addon-extend", "campaign": null, "detection_source": "osv", "packages": [ { "package": "path-addon-extend", "ecosystem": "npm", "versions": [ "1.0.10", "1.0.7", "1.0.8" ], "osv_entries": [ { "osv_id": "MAL-2026-10420", "osv_published_at": "2026-07-13T06:59:11Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T08:01:42Z", "flagged_at": null, "confirmed_at": "2026-07-13T08:01:42Z", "osv_earliest_published_at": "2026-07-13T06:59:11Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T14:37:28Z" }, { "id": "notifications-broadcast-2026-07-13", "display_name": "notifications-broadcast", "campaign": null, "detection_source": "osv", "packages": [ { "package": "notifications-broadcast", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10419", "osv_published_at": "2026-07-13T07:01:34Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T08:01:40Z", "flagged_at": null, "confirmed_at": "2026-07-13T08:01:40Z", "osv_earliest_published_at": "2026-07-13T07:01:34Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T08:07:05Z" }, { "id": "note-utilities-2026-07-13", "display_name": "note-utilities", "campaign": null, "detection_source": "osv", "packages": [ { "package": "note-utilities", "ecosystem": "npm", "versions": [ "2.1.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10418", "osv_published_at": "2026-07-13T06:49:02Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T08:01:39Z", "flagged_at": null, "confirmed_at": "2026-07-13T08:01:39Z", "osv_earliest_published_at": "2026-07-13T06:49:02Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T08:06:59Z" }, { "id": "nodemon-slint-2026-07-13", "display_name": "nodemon-slint", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nodemon-slint", "ecosystem": "npm", "versions": [ "3.1.13" ], "osv_entries": [ { "osv_id": "MAL-2026-10117", "osv_published_at": "2026-07-10T10:18:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T08:01:37Z", "flagged_at": null, "confirmed_at": "2026-07-13T08:01:37Z", "osv_earliest_published_at": "2026-07-10T10:18:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T08:06:47Z" }, { "id": "minigptcore-2026-07-13", "display_name": "minigptcore", "campaign": null, "detection_source": "osv", "packages": [ { "package": "minigptcore", "ecosystem": "npm", "versions": [ "4.0.8" ], "osv_entries": [ { "osv_id": "MAL-2026-10417", "osv_published_at": "2026-07-13T06:54:44Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T08:01:36Z", "flagged_at": null, "confirmed_at": "2026-07-13T08:01:36Z", "osv_earliest_published_at": "2026-07-13T06:54:44Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T08:06:28Z" }, { "id": "kuaishou-2026-07-13", "display_name": "kuaishou", "campaign": null, "detection_source": "osv", "packages": [ { "package": "kuaishou", "ecosystem": "npm", "versions": [ "99.9.10", "99.9.11", "99.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-10416", "osv_published_at": "2026-07-13T06:17:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T08:01:35Z", "flagged_at": null, "confirmed_at": "2026-07-13T08:01:35Z", "osv_earliest_published_at": "2026-07-13T06:17:05Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T07:11:53Z" }, { "id": "frontend-regulations-2026-07-13", "display_name": "frontend-regulations", "campaign": null, "detection_source": "osv", "packages": [ { "package": "frontend-regulations", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10415", "osv_published_at": "2026-07-13T07:01:44Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T08:01:33Z", "flagged_at": null, "confirmed_at": "2026-07-13T08:01:33Z", "osv_earliest_published_at": "2026-07-13T07:01:44Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T08:05:49Z" }, { "id": "firefly-utilities-helper-2026-07-13", "display_name": "firefly-utilities-helper", "campaign": null, "detection_source": "osv", "packages": [ { "package": "firefly-utilities-helper", "ecosystem": "npm", "versions": [ "99.9.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5517", "osv_published_at": "2026-06-10T17:38:18Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T08:01:32Z", "flagged_at": null, "confirmed_at": "2026-07-13T08:01:32Z", "osv_earliest_published_at": "2026-06-10T17:38:18Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T08:05:36Z" }, { "id": "express-request-engine-2026-07-13", "display_name": "express-request-engine", "campaign": null, "detection_source": "osv", "packages": [ { "package": "express-request-engine", "ecosystem": "npm", "versions": [ "3.6.3" ], "osv_entries": [ { "osv_id": "MAL-2026-10414", "osv_published_at": "2026-07-13T06:55:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T08:01:30Z", "flagged_at": null, "confirmed_at": "2026-07-13T08:01:30Z", "osv_earliest_published_at": "2026-07-13T06:55:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T08:05:15Z" }, { "id": "execfences-2026-07-13", "display_name": "execfences", "campaign": null, "detection_source": "osv", "packages": [ { "package": "execfences", "ecosystem": "npm", "versions": [ "5.0.2", "5.0.3", "5.0.4", "5.0.5", "5.0.6", "5.1.0", "5.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10118", "osv_published_at": "2026-07-10T12:24:57Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T08:01:29Z", "flagged_at": null, "confirmed_at": "2026-07-13T08:01:29Z", "osv_earliest_published_at": "2026-07-10T12:24:57Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T08:05:01Z" }, { "id": "eth-react-redirection-2026-07-13", "display_name": "eth-react-redirection", "campaign": null, "detection_source": "osv", "packages": [ { "package": "eth-react-redirection", "ecosystem": "npm", "versions": [ "1.0.1", "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10127", "osv_published_at": "2026-07-10T15:19:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T08:01:27Z", "flagged_at": null, "confirmed_at": "2026-07-13T08:01:27Z", "osv_earliest_published_at": "2026-07-10T15:19:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T08:04:41Z" }, { "id": "eth-base-2026-07-13", "display_name": "eth-base", "campaign": null, "detection_source": "osv", "packages": [ { "package": "eth-base", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10413", "osv_published_at": "2026-07-13T06:51:45Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T08:01:25Z", "flagged_at": null, "confirmed_at": "2026-07-13T08:01:25Z", "osv_earliest_published_at": "2026-07-13T06:51:45Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T08:04:29Z" }, { "id": "es6-codify-2026-07-13", "display_name": "es6-codify", "campaign": null, "detection_source": "osv", "packages": [ { "package": "es6-codify", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10062", "osv_published_at": "2026-07-09T15:46:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T08:01:24Z", "flagged_at": null, "confirmed_at": "2026-07-13T08:01:24Z", "osv_earliest_published_at": "2026-07-09T15:46:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T08:04:17Z" }, { "id": "env-stream-2026-07-13", "display_name": "env-stream", "campaign": null, "detection_source": "osv", "packages": [ { "package": "env-stream", "ecosystem": "npm", "versions": [ "1.0.1", "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10412", "osv_published_at": "2026-07-13T06:56:15Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T08:01:22Z", "flagged_at": null, "confirmed_at": "2026-07-13T08:01:22Z", "osv_earliest_published_at": "2026-07-13T06:56:15Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T08:04:05Z" }, { "id": "cookie-sign-2026-07-13", "display_name": "cookie-sign", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cookie-sign", "ecosystem": "npm", "versions": [ "2.3.5" ], "osv_entries": [ { "osv_id": "MAL-2026-10411", "osv_published_at": "2026-07-13T06:48:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T08:01:19Z", "flagged_at": null, "confirmed_at": "2026-07-13T08:01:19Z", "osv_earliest_published_at": "2026-07-13T06:48:33Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T08:03:43Z" }, { "id": "cookie-phase-2026-07-13", "display_name": "cookie-phase", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cookie-phase", "ecosystem": "npm", "versions": [ "2.3.5" ], "osv_entries": [ { "osv_id": "MAL-2026-10410", "osv_published_at": "2026-07-13T06:48:44Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T08:01:18Z", "flagged_at": null, "confirmed_at": "2026-07-13T08:01:18Z", "osv_earliest_published_at": "2026-07-13T06:48:44Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T08:03:29Z" }, { "id": "console-fmt-cli-2026-07-13", "display_name": "console-fmt-cli", "campaign": null, "detection_source": "osv", "packages": [ { "package": "console-fmt-cli", "ecosystem": "npm", "versions": [ "2.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6688", "osv_published_at": "2026-06-30T00:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T08:01:16Z", "flagged_at": null, "confirmed_at": "2026-07-13T08:01:16Z", "osv_earliest_published_at": "2026-06-30T00:00:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://safedep.io/defi-infostealer-fake-arbitrage-bot-npm/", "ledger_commit_at": "2026-07-13T08:03:22Z" }, { "id": "cold-debug-elevator-2026-07-13", "display_name": "cold-debug-elevator", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cold-debug-elevator", "ecosystem": "npm", "versions": [ "1.0.1", "1.0.3", "1.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-10409", "osv_published_at": "2026-07-13T06:58:13Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T08:01:14Z", "flagged_at": null, "confirmed_at": "2026-07-13T08:01:14Z", "osv_earliest_published_at": "2026-07-13T06:58:13Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T08:03:08Z" }, { "id": "chain-js-utils-2026-07-13", "display_name": "chain-js-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chain-js-utils", "ecosystem": "npm", "versions": [ "2.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10408", "osv_published_at": "2026-07-13T06:49:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T08:01:12Z", "flagged_at": null, "confirmed_at": "2026-07-13T08:01:12Z", "osv_earliest_published_at": "2026-07-13T06:49:21Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T08:02:58Z" }, { "id": "bs58-86-2026-07-13", "display_name": "bs58-86", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bs58-86", "ecosystem": "npm", "versions": [ "6.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6448", "osv_published_at": "2026-06-25T06:43:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T08:01:11Z", "flagged_at": null, "confirmed_at": "2026-07-13T08:01:11Z", "osv_earliest_published_at": "2026-06-25T06:43:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T08:02:42Z" }, { "id": "awesome-terminal-2026-07-13", "display_name": "awesome-terminal", "campaign": null, "detection_source": "osv", "packages": [ { "package": "awesome-terminal", "ecosystem": "npm", "versions": [ "1.0.1", "1.0.2", "1.0.3", "1.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-10407", "osv_published_at": "2026-07-13T06:51:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T08:01:10Z", "flagged_at": null, "confirmed_at": "2026-07-13T08:01:10Z", "osv_earliest_published_at": "2026-07-13T06:51:07Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T23:47:00Z" }, { "id": "autotel-terminal-2026-07-13", "display_name": "autotel-terminal", "campaign": null, "detection_source": "osv", "packages": [ { "package": "autotel-terminal", "ecosystem": "npm", "versions": [ "29.0.3", "29.0.4", "29.0.5" ], "osv_entries": [ { "osv_id": "MAL-2026-5186", "osv_published_at": "2026-06-04T18:54:09Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T08:01:08Z", "flagged_at": null, "confirmed_at": "2026-07-13T08:01:08Z", "osv_earliest_published_at": "2026-06-04T18:54:09Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T07:09:26Z" }, { "id": "async-chain-dom-2026-07-13", "display_name": "async-chain-dom", "campaign": null, "detection_source": "osv", "packages": [ { "package": "async-chain-dom", "ecosystem": "npm", "versions": [ "1.3.5" ], "osv_entries": [ { "osv_id": "MAL-2026-10406", "osv_published_at": "2026-07-13T06:49:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T08:01:04Z", "flagged_at": null, "confirmed_at": "2026-07-13T08:01:04Z", "osv_earliest_published_at": "2026-07-13T06:49:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T08:01:39Z" }, { "id": "torbeck-heap-2026-07-13", "display_name": "@torbeck/heap", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@torbeck/heap", "ecosystem": "npm", "versions": [ "4.3.10", "4.3.11", "4.3.14" ], "osv_entries": [ { "osv_id": "MAL-2026-10405", "osv_published_at": "2026-07-13T06:53:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T08:01:02Z", "flagged_at": null, "confirmed_at": "2026-07-13T08:01:02Z", "osv_earliest_published_at": "2026-07-13T06:53:07Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T08:01:28Z" }, { "id": "luminarycloudinternal-lcvis-st-2026-07-13", "display_name": "@luminarycloudinternal/lcvis-st", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@luminarycloudinternal/lcvis-st", "ecosystem": "npm", "versions": [ "9999.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6987", "osv_published_at": "2026-07-08T16:27:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T08:01:00Z", "flagged_at": null, "confirmed_at": "2026-07-13T08:01:00Z", "osv_earliest_published_at": "2026-07-08T16:27:42Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T08:01:15Z" }, { "id": "luminarycloudinternal-frodo-2026-07-13", "display_name": "@luminarycloudinternal/frodo", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@luminarycloudinternal/frodo", "ecosystem": "npm", "versions": [ "9999.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6986", "osv_published_at": "2026-07-08T16:20:43Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T08:00:59Z", "flagged_at": null, "confirmed_at": "2026-07-13T08:00:59Z", "osv_earliest_published_at": "2026-07-08T16:20:43Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T08:01:05Z" }, { "id": "ica-gaming-slot-engine-2026-07-13", "display_name": "@ica-gaming/slot-engine", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@ica-gaming/slot-engine", "ecosystem": "npm", "versions": [ "1.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10404", "osv_published_at": "2026-07-13T07:03:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T07:59:45Z", "flagged_at": null, "confirmed_at": "2026-07-13T07:59:45Z", "osv_earliest_published_at": "2026-07-13T07:03:37Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T07:59:59Z" }, { "id": "iana-rzms-bff-sdk-2026-07-13", "display_name": "@iana-rzms/bff-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@iana-rzms/bff-sdk", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10403", "osv_published_at": "2026-07-13T05:58:14Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T07:59:43Z", "flagged_at": null, "confirmed_at": "2026-07-13T07:59:43Z", "osv_earliest_published_at": "2026-07-13T05:58:14Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T07:59:53Z" }, { "id": "gleamkit-ws-2026-07-13", "display_name": "@gleamkit/ws", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@gleamkit/ws", "ecosystem": "npm", "versions": [ "8.21.3" ], "osv_entries": [ { "osv_id": "MAL-2026-10402", "osv_published_at": "2026-07-13T06:00:14Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T07:59:41Z", "flagged_at": null, "confirmed_at": "2026-07-13T07:59:41Z", "osv_earliest_published_at": "2026-07-13T06:00:14Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T07:59:44Z" }, { "id": "espn-ping-react-dmed-oauth-2026-07-13", "display_name": "@espn-ping/react-dmed-oauth", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@espn-ping/react-dmed-oauth", "ecosystem": "npm", "versions": [ "666.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10401", "osv_published_at": "2026-07-13T05:15:09Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T07:58:32Z", "flagged_at": null, "confirmed_at": "2026-07-13T07:58:32Z", "osv_earliest_published_at": "2026-07-13T05:15:09Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T07:58:48Z" }, { "id": "equansservices-tool-2026-07-13", "display_name": "@equansservices/tool", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@equansservices/tool", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10400", "osv_published_at": "2026-07-13T05:14:28Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T07:58:30Z", "flagged_at": null, "confirmed_at": "2026-07-13T07:58:30Z", "osv_earliest_published_at": "2026-07-13T05:14:28Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T07:58:41Z" }, { "id": "equansservices-codex-2026-07-13", "display_name": "@equansservices/codex", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@equansservices/codex", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10399", "osv_published_at": "2026-07-13T05:14:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T07:58:28Z", "flagged_at": null, "confirmed_at": "2026-07-13T07:58:28Z", "osv_earliest_published_at": "2026-07-13T05:14:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T07:58:35Z" }, { "id": "dervix-ws-2026-07-13", "display_name": "@dervix/ws", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@dervix/ws", "ecosystem": "npm", "versions": [ "8.21.0", "8.21.1", "8.21.5", "8.21.7" ], "osv_entries": [ { "osv_id": "MAL-2026-6496", "osv_published_at": "2026-06-26T01:56:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T07:58:26Z", "flagged_at": null, "confirmed_at": "2026-07-13T07:58:26Z", "osv_earliest_published_at": "2026-06-26T01:56:33Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T07:06:22Z" }, { "id": "db-tools-main-app-2026-07-13", "display_name": "@db-tools/main-app", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@db-tools/main-app", "ecosystem": "npm", "versions": [ "2026.6.30" ], "osv_entries": [ { "osv_id": "MAL-2026-10398", "osv_published_at": "2026-07-13T05:14:59Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T07:57:35Z", "flagged_at": null, "confirmed_at": "2026-07-13T07:57:35Z", "osv_earliest_published_at": "2026-07-13T05:14:59Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T07:57:42Z" }, { "id": "car-loans-dealerships-approval-2026-07-13", "display_name": "@car_loans/dealerships-approval", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@car_loans/dealerships-approval", "ecosystem": "npm", "versions": [ "7.1.5" ], "osv_entries": [ { "osv_id": "MAL-2026-10397", "osv_published_at": "2026-07-13T05:13:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T07:57:33Z", "flagged_at": null, "confirmed_at": "2026-07-13T07:57:33Z", "osv_earliest_published_at": "2026-07-13T05:13:48Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T07:57:35Z" }, { "id": "hbsig-2026-07-13", "display_name": "hbsig", "campaign": null, "detection_source": "osv", "packages": [ { "package": "hbsig", "ecosystem": "npm", "versions": [ "0.3.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5190", "osv_published_at": "2026-06-04T22:27:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T07:39:46Z", "flagged_at": null, "confirmed_at": "2026-07-13T07:39:46Z", "osv_earliest_published_at": "2026-06-04T22:27:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T07:41:48Z" }, { "id": "decimal-format-core-2026-07-13", "display_name": "decimal-format-core", "campaign": null, "detection_source": "osv", "packages": [ { "package": "decimal-format-core", "ecosystem": "npm", "versions": [ "3.5.4", "3.5.5" ], "osv_entries": [ { "osv_id": "MAL-2026-6689", "osv_published_at": "2026-06-30T00:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T07:39:40Z", "flagged_at": null, "confirmed_at": "2026-07-13T07:39:40Z", "osv_earliest_published_at": "2026-06-30T00:00:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://safedep.io/defi-infostealer-fake-arbitrage-bot-npm/", "ledger_commit_at": "2026-07-13T07:41:27Z" }, { "id": "zredis-typed-2026-07-13", "display_name": "zredis-typed", "campaign": null, "detection_source": "osv", "packages": [ { "package": "zredis-typed", "ecosystem": "npm", "versions": [ "1.0.127" ], "osv_entries": [ { "osv_id": "MAL-2026-6944", "osv_published_at": "2026-07-06T00:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T06:53:04Z", "flagged_at": null, "confirmed_at": "2026-07-13T06:53:04Z", "osv_earliest_published_at": "2026-07-06T00:00:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://safedep.io/malicious-forge-jsxy-npm-rat-evolution/", "ledger_commit_at": "2026-07-13T06:53:17Z" }, { "id": "mdb-vite-2026-07-13", "display_name": "mdb-vite", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mdb-vite", "ecosystem": "npm", "versions": [ "1.5.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10144", "osv_published_at": "2026-07-10T16:12:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T05:35:56Z", "flagged_at": null, "confirmed_at": "2026-07-13T05:35:56Z", "osv_earliest_published_at": "2026-07-10T16:12:23Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T05:36:37Z" }, { "id": "marked-prettier-2026-07-13", "display_name": "marked-prettier", "campaign": null, "detection_source": "osv", "packages": [ { "package": "marked-prettier", "ecosystem": "npm", "versions": [ "1.0.4", "1.0.5" ], "osv_entries": [ { "osv_id": "MAL-2026-10143", "osv_published_at": "2026-07-10T16:05:17Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T05:35:54Z", "flagged_at": null, "confirmed_at": "2026-07-13T05:35:54Z", "osv_earliest_published_at": "2026-07-10T16:05:17Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T05:36:22Z" }, { "id": "chai-as-precision-2026-07-13", "display_name": "chai-as-precision", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-precision", "ecosystem": "npm", "versions": [ "7.0.6" ], "osv_entries": [ { "osv_id": "MAL-2026-10219", "osv_published_at": "2026-07-13T04:16:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T05:35:52Z", "flagged_at": null, "confirmed_at": "2026-07-13T05:35:52Z", "osv_earliest_published_at": "2026-07-13T04:16:07Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T05:36:03Z" }, { "id": "pure-folder-three-2026-07-13", "display_name": "pure-folder-three", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pure-folder-three", "ecosystem": "npm", "versions": [ "0.5.0", "0.6.0", "0.7.0", "0.7.1", "0.7.3" ], "osv_entries": [ { "osv_id": "MAL-2026-10218", "osv_published_at": "2026-07-13T01:52:55Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T02:10:41Z", "flagged_at": null, "confirmed_at": "2026-07-13T02:10:41Z", "osv_earliest_published_at": "2026-07-13T01:52:55Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T02:10:59Z" }, { "id": "dotnet-runtime-base-2026-07-13", "display_name": "dotnet-runtime-base", "campaign": null, "detection_source": "osv", "packages": [ { "package": "dotnet-runtime-base", "ecosystem": "npm", "versions": [ "1.0.4", "1.0.5" ], "osv_entries": [ { "osv_id": "MAL-2026-10217", "osv_published_at": "2026-07-13T01:19:16Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T02:10:38Z", "flagged_at": null, "confirmed_at": "2026-07-13T02:10:38Z", "osv_earliest_published_at": "2026-07-13T01:19:16Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T02:10:41Z" }, { "id": "node-sysmetrics-2026-07-13", "display_name": "node-sysmetrics", "campaign": null, "detection_source": "osv", "packages": [ { "package": "node-sysmetrics", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10216", "osv_published_at": "2026-07-13T00:47:59Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-13T01:09:32Z", "flagged_at": null, "confirmed_at": "2026-07-13T01:09:32Z", "osv_earliest_published_at": "2026-07-13T00:47:59Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-13T05:36:43Z" }, { "id": "fast-dotenv-2026-07-12", "display_name": "fast-dotenv", "campaign": null, "detection_source": "osv", "packages": [ { "package": "fast-dotenv", "ecosystem": "pypi", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10215", "osv_published_at": "2026-07-12T21:59:58Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-12T22:34:25Z", "flagged_at": null, "confirmed_at": "2026-07-12T22:34:25Z", "osv_earliest_published_at": "2026-07-12T21:59:58Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-12T22:34:31Z" }, { "id": "stella-coder-2026-07-12", "display_name": "stella-coder", "campaign": null, "detection_source": "osv", "packages": [ { "package": "stella-coder", "ecosystem": "npm", "versions": [ "5.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10134", "osv_published_at": "2026-07-10T15:59:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-12T22:34:23Z", "flagged_at": null, "confirmed_at": "2026-07-12T22:34:23Z", "osv_earliest_published_at": "2026-07-10T15:59:07Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-12T22:34:25Z" }, { "id": "babel-preset-lib-client-2026-07-12", "display_name": "babel-preset-lib-client", "campaign": null, "detection_source": "osv", "packages": [ { "package": "babel-preset-lib-client", "ecosystem": "npm", "versions": [ "4.9.10", "4.9.11", "4.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-10214", "osv_published_at": "2026-07-12T21:32:17Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-12T22:03:55Z", "flagged_at": null, "confirmed_at": "2026-07-12T22:03:55Z", "osv_earliest_published_at": "2026-07-12T21:32:17Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-12T22:03:58Z" }, { "id": "pipspeed-2026-07-12", "display_name": "pipspeed", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pipspeed", "ecosystem": "pypi", "versions": [ "0.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10213", "osv_published_at": "2026-07-12T20:55:04Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-12T21:33:29Z", "flagged_at": null, "confirmed_at": "2026-07-12T21:33:29Z", "osv_earliest_published_at": "2026-07-12T20:55:04Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-12T21:34:45Z" }, { "id": "vuln-package-2026-07-12", "display_name": "vuln-package", "campaign": null, "detection_source": "osv", "packages": [ { "package": "vuln-package", "ecosystem": "npm", "versions": [ "99.9.10", "99.9.11", "99.9.14", "99.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-10212", "osv_published_at": "2026-07-12T20:57:24Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-12T21:33:22Z", "flagged_at": null, "confirmed_at": "2026-07-12T21:33:22Z", "osv_earliest_published_at": "2026-07-12T20:57:24Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-12T21:34:33Z" }, { "id": "react-next-vite-2026-07-12", "display_name": "react-next-vite", "campaign": null, "detection_source": "osv", "packages": [ { "package": "react-next-vite", "ecosystem": "npm", "versions": [ "1.2.9" ], "osv_entries": [ { "osv_id": "MAL-2026-10211", "osv_published_at": "2026-07-12T20:48:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-12T21:33:20Z", "flagged_at": null, "confirmed_at": "2026-07-12T21:33:20Z", "osv_earliest_published_at": "2026-07-12T20:48:42Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-12T21:34:27Z" }, { "id": "mcp-notes-server-poc-praetorian-2026-07-12", "display_name": "mcp-notes-server-poc-praetorian", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mcp-notes-server-poc-praetorian", "ecosystem": "npm", "versions": [ "0.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10210", "osv_published_at": "2026-07-12T20:55:56Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-12T21:33:19Z", "flagged_at": null, "confirmed_at": "2026-07-12T21:33:19Z", "osv_earliest_published_at": "2026-07-12T20:55:56Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-12T21:34:15Z" }, { "id": "auto-debug-tool-2026-07-12", "display_name": "auto-debug-tool", "campaign": null, "detection_source": "osv", "packages": [ { "package": "auto-debug-tool", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.2", "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-10209", "osv_published_at": "2026-07-12T21:14:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-12T21:33:17Z", "flagged_at": null, "confirmed_at": "2026-07-12T21:33:17Z", "osv_earliest_published_at": "2026-07-12T21:14:39Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-12T21:33:51Z" }, { "id": "authvaultx-2026-07-12", "display_name": "authvaultx", "campaign": null, "detection_source": "osv", "packages": [ { "package": "authvaultx", "ecosystem": "npm", "versions": [ "1.7.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10185", "osv_published_at": "2026-07-11T00:07:32Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-12T21:33:15Z", "flagged_at": null, "confirmed_at": "2026-07-12T21:33:15Z", "osv_earliest_published_at": "2026-07-11T00:07:32Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-12T21:33:38Z" }, { "id": "meziizana-frontend-logger-2026-07-12", "display_name": "@meziizana/frontend-logger", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@meziizana/frontend-logger", "ecosystem": "npm", "versions": [ "10.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10208", "osv_published_at": "2026-07-12T20:49:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-12T21:33:12Z", "flagged_at": null, "confirmed_at": "2026-07-12T21:33:12Z", "osv_earliest_published_at": "2026-07-12T20:49:38Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-12T21:33:18Z" }, { "id": "react-dom-v17-2026-07-12", "display_name": "react-dom-v17", "campaign": null, "detection_source": "osv", "packages": [ { "package": "react-dom-v17", "ecosystem": "npm", "versions": [ "15.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10207", "osv_published_at": "2026-07-12T20:47:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-12T21:02:32Z", "flagged_at": null, "confirmed_at": "2026-07-12T21:02:32Z", "osv_earliest_published_at": "2026-07-12T20:47:33Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-12T21:04:03Z" }, { "id": "nullrift-2026-07-12", "display_name": "nullrift", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nullrift", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10206", "osv_published_at": "2026-07-12T20:48:13Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-12T21:02:31Z", "flagged_at": null, "confirmed_at": "2026-07-12T21:02:31Z", "osv_earliest_published_at": "2026-07-12T20:48:13Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-12T21:03:52Z" }, { "id": "library-explorer-2026-07-12", "display_name": "library-explorer", "campaign": null, "detection_source": "osv", "packages": [ { "package": "library-explorer", "ecosystem": "npm", "versions": [ "25.2.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10205", "osv_published_at": "2026-07-12T20:47:17Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-12T21:02:30Z", "flagged_at": null, "confirmed_at": "2026-07-12T21:02:30Z", "osv_earliest_published_at": "2026-07-12T20:47:17Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-12T21:03:40Z" }, { "id": "gptcore-2026-07-12", "display_name": "gptcore", "campaign": null, "detection_source": "osv", "packages": [ { "package": "gptcore", "ecosystem": "npm", "versions": [ "4.0.6", "4.0.7", "4.0.8" ], "osv_entries": [ { "osv_id": "MAL-2026-10204", "osv_published_at": "2026-07-12T20:45:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-12T21:02:29Z", "flagged_at": null, "confirmed_at": "2026-07-12T21:02:29Z", "osv_earliest_published_at": "2026-07-12T20:45:48Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-12T21:03:25Z" }, { "id": "giantswarm-2026-07-12", "display_name": "giantswarm", "campaign": null, "detection_source": "osv", "packages": [ { "package": "giantswarm", "ecosystem": "npm", "versions": [ "22.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10203", "osv_published_at": "2026-07-12T20:47:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-12T21:02:27Z", "flagged_at": null, "confirmed_at": "2026-07-12T21:02:27Z", "osv_earliest_published_at": "2026-07-12T20:47:05Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-12T21:03:11Z" }, { "id": "fastify-addone-2026-07-12", "display_name": "fastify-addone", "campaign": null, "detection_source": "osv", "packages": [ { "package": "fastify-addone", "ecosystem": "npm", "versions": [ "5.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10098", "osv_published_at": "2026-07-09T22:16:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-12T21:02:26Z", "flagged_at": null, "confirmed_at": "2026-07-12T21:02:26Z", "osv_earliest_published_at": "2026-07-09T22:16:42Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-12T21:02:49Z" }, { "id": "chain-await-dom-2026-07-12", "display_name": "chain-await-dom", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chain-await-dom", "ecosystem": "npm", "versions": [ "1.3.4" ], "osv_entries": [ { "osv_id": "MAL-2026-10202", "osv_published_at": "2026-07-12T20:47:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-12T21:02:24Z", "flagged_at": null, "confirmed_at": "2026-07-12T21:02:24Z", "osv_earliest_published_at": "2026-07-12T20:47:51Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-12T21:02:39Z" }, { "id": "bugexploit-2026-07-12", "display_name": "bugexploit", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bugexploit", "ecosystem": "npm", "versions": [ "99.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-10201", "osv_published_at": "2026-07-12T20:45:28Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-12T21:02:23Z", "flagged_at": null, "confirmed_at": "2026-07-12T21:02:23Z", "osv_earliest_published_at": "2026-07-12T20:45:28Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-12T21:02:30Z" }, { "id": "api-changelly-2026-07-12", "display_name": "api-changelly", "campaign": null, "detection_source": "osv", "packages": [ { "package": "api-changelly", "ecosystem": "npm", "versions": [ "19.2.11" ], "osv_entries": [ { "osv_id": "MAL-2026-10200", "osv_published_at": "2026-07-12T20:46:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-12T21:02:21Z", "flagged_at": null, "confirmed_at": "2026-07-12T21:02:21Z", "osv_earliest_published_at": "2026-07-12T20:46:51Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-12T21:02:23Z" }, { "id": "polymarket-kelly-math-stake-2026-07-12", "display_name": "polymarket-kelly-math-stake", "campaign": null, "detection_source": "osv", "packages": [ { "package": "polymarket-kelly-math-stake", "ecosystem": "npm", "versions": [ "3.6.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10199", "osv_published_at": "2026-07-12T15:12:02Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-12T15:41:04Z", "flagged_at": null, "confirmed_at": "2026-07-12T15:41:04Z", "osv_earliest_published_at": "2026-07-12T15:12:02Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-12T15:41:11Z" }, { "id": "polylabel-web-lib-2026-07-12", "display_name": "polylabel-web-lib", "campaign": null, "detection_source": "osv", "packages": [ { "package": "polylabel-web-lib", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10198", "osv_published_at": "2026-07-12T15:12:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-12T15:41:02Z", "flagged_at": null, "confirmed_at": "2026-07-12T15:41:02Z", "osv_earliest_published_at": "2026-07-12T15:12:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-12T15:41:04Z" }, { "id": "metemask-sdk-2026-07-12", "display_name": "metemask-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "metemask-sdk", "ecosystem": "pypi", "versions": [ "1.2.0", "1.2.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10197", "osv_published_at": "2026-07-12T11:23:55Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-12T12:08:03Z", "flagged_at": null, "confirmed_at": "2026-07-12T12:08:03Z", "osv_earliest_published_at": "2026-07-12T11:23:55Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-12T12:08:16Z" }, { "id": "jupiter-sdk-2026-07-12", "display_name": "jupiter-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "jupiter-sdk", "ecosystem": "pypi", "versions": [ "0.1.0", "0.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10196", "osv_published_at": "2026-07-12T11:25:55Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-12T12:08:01Z", "flagged_at": null, "confirmed_at": "2026-07-12T12:08:01Z", "osv_earliest_published_at": "2026-07-12T11:25:55Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-12T12:08:10Z" }, { "id": "eth-agent-2026-07-12", "display_name": "eth-agent", "campaign": null, "detection_source": "osv", "packages": [ { "package": "eth-agent", "ecosystem": "pypi", "versions": [ "1.0.0", "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10195", "osv_published_at": "2026-07-12T11:25:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-12T12:08:00Z", "flagged_at": null, "confirmed_at": "2026-07-12T12:08:00Z", "osv_earliest_published_at": "2026-07-12T11:25:25Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-12T12:08:02Z" }, { "id": "solidity-dev-2026-07-12", "display_name": "solidity-dev", "campaign": null, "detection_source": "osv", "packages": [ { "package": "solidity-dev", "ecosystem": "pypi", "versions": [ "1.3.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10194", "osv_published_at": "2026-07-12T08:18:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-12T09:20:33Z", "flagged_at": null, "confirmed_at": "2026-07-12T09:20:33Z", "osv_earliest_published_at": "2026-07-12T08:18:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-12T09:20:53Z" }, { "id": "py-base58-2026-07-12", "display_name": "py-base58", "campaign": null, "detection_source": "osv", "packages": [ { "package": "py-base58", "ecosystem": "pypi", "versions": [ "2.1.3", "2.1.4" ], "osv_entries": [ { "osv_id": "MAL-2026-10193", "osv_published_at": "2026-07-12T08:13:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-12T09:20:31Z", "flagged_at": null, "confirmed_at": "2026-07-12T09:20:31Z", "osv_earliest_published_at": "2026-07-12T08:13:49Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-12T09:20:45Z" }, { "id": "defi-tools-2026-07-12", "display_name": "defi-tools", "campaign": null, "detection_source": "osv", "packages": [ { "package": "defi-tools", "ecosystem": "pypi", "versions": [ "0.8.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10192", "osv_published_at": "2026-07-12T08:17:43Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-12T09:20:30Z", "flagged_at": null, "confirmed_at": "2026-07-12T09:20:30Z", "osv_earliest_published_at": "2026-07-12T08:17:43Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-12T09:20:39Z" }, { "id": "data-harvester-2026-07-12", "display_name": "data-harvester", "campaign": null, "detection_source": "osv", "packages": [ { "package": "data-harvester", "ecosystem": "pypi", "versions": [ "0.3.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10191", "osv_published_at": "2026-07-12T08:16:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-12T09:20:28Z", "flagged_at": null, "confirmed_at": "2026-07-12T09:20:28Z", "osv_earliest_published_at": "2026-07-12T08:16:33Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-12T09:20:34Z" }, { "id": "tinyparrot-2026-07-12", "display_name": "tinyparrot", "campaign": null, "detection_source": "osv", "packages": [ { "package": "tinyparrot", "ecosystem": "npm", "versions": [ "0.4.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10190", "osv_published_at": "2026-07-11T23:20:47Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-12T00:03:53Z", "flagged_at": null, "confirmed_at": "2026-07-12T00:03:53Z", "osv_earliest_published_at": "2026-07-11T23:20:47Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-12T00:04:17Z" }, { "id": "tinymask-js-2026-07-12", "display_name": "tinymask-js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "tinymask-js", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10189", "osv_published_at": "2026-07-11T23:23:11Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-12T00:03:52Z", "flagged_at": null, "confirmed_at": "2026-07-12T00:03:52Z", "osv_earliest_published_at": "2026-07-11T23:23:11Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-12T00:04:05Z" }, { "id": "svgcraft-core-2026-07-12", "display_name": "svgcraft-core", "campaign": null, "detection_source": "osv", "packages": [ { "package": "svgcraft-core", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.5", "1.0.6", "1.0.7" ], "osv_entries": [ { "osv_id": "MAL-2026-6715", "osv_published_at": "2026-07-01T20:48:15Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-12T00:03:50Z", "flagged_at": null, "confirmed_at": "2026-07-12T00:03:50Z", "osv_earliest_published_at": "2026-07-01T20:48:15Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-23T22:54:52Z", "observed_at": "2026-07-12T00:03:50Z", "ingested_at": "2026-07-12T00:03:50Z", "source_published_at": "2026-07-01T20:48:15Z", "ledger_committed_at": "2026-07-23T22:54:52Z" }, { "id": "awesome-ts-jest-2026-07-12", "display_name": "awesome-ts-jest", "campaign": null, "detection_source": "osv", "packages": [ { "package": "awesome-ts-jest", "ecosystem": "npm", "versions": [ "29.4.12" ], "osv_entries": [ { "osv_id": "MAL-2026-10188", "osv_published_at": "2026-07-11T23:21:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-12T00:03:48Z", "flagged_at": null, "confirmed_at": "2026-07-12T00:03:48Z", "osv_earliest_published_at": "2026-07-11T23:21:03Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-12T00:03:50Z" }, { "id": "jscrambler-2026-07-11", "display_name": "jscrambler", "campaign": null, "detection_source": "osv", "packages": [ { "package": "jscrambler", "ecosystem": "npm", "versions": [ "8.14.0", "8.16.0", "8.17.0", "8.18.0", "8.20.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10187", "osv_published_at": "2026-07-11T21:31:27Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-11T22:01:51Z", "flagged_at": null, "confirmed_at": "2026-07-11T22:01:51Z", "osv_earliest_published_at": "2026-07-11T00:00:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-11T17:59:26Z", "press_urls": [ "https://thehackernews.com/2026/07/compromised-jscrambler-8140-npm-release.html" ], "advisory_url": "https://thehackernews.com/2026/07/compromised-jscrambler-8140-npm-release.html", "ledger_commit_at": "2026-07-12T09:20:27Z" }, { "id": "google-caja-bower-2026-07-11", "display_name": "google-caja-bower", "campaign": null, "detection_source": "osv", "packages": [ { "package": "google-caja-bower", "ecosystem": "npm", "versions": [ "1000.80.20", "1000.800.20", "1000.801.20", "20.20.20", "999.20.20", "999.99.20", "999.999.20" ], "osv_entries": [ { "osv_id": "MAL-2026-10186", "osv_published_at": "2026-07-11T21:32:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-11T22:01:49Z", "flagged_at": null, "confirmed_at": "2026-07-11T22:01:49Z", "osv_earliest_published_at": "2026-07-11T21:32:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-11T22:01:51Z" }, { "id": "client-cookies-agent-2026-07-11", "display_name": "client-cookies-agent", "campaign": null, "detection_source": "osv", "packages": [ { "package": "client-cookies-agent", "ecosystem": "npm", "versions": [ "99.9.7" ], "osv_entries": [ { "osv_id": "MAL-2026-10019", "osv_published_at": "2026-07-09T12:25:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-11T04:46:36Z", "flagged_at": null, "confirmed_at": "2026-07-11T04:46:36Z", "osv_earliest_published_at": "2026-07-09T12:25:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-11T04:46:38Z" }, { "id": "mongoose-schema-unique-2026-07-10", "display_name": "mongoose-schema-unique", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mongoose-schema-unique", "ecosystem": "npm", "versions": [ "4.0.2", "4.0.3", "4.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-10184", "osv_published_at": "2026-07-10T22:42:27Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T22:53:38Z", "flagged_at": null, "confirmed_at": "2026-07-10T22:53:38Z", "osv_earliest_published_at": "2026-07-10T22:42:27Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T22:54:13Z" }, { "id": "fkext-browser-min-2026-07-10", "display_name": "fkext-browser-min", "campaign": null, "detection_source": "osv", "packages": [ { "package": "fkext-browser-min", "ecosystem": "npm", "versions": [ "1.0.14" ], "osv_entries": [ { "osv_id": "MAL-2026-10183", "osv_published_at": "2026-07-10T22:43:30Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T22:53:36Z", "flagged_at": null, "confirmed_at": "2026-07-10T22:53:36Z", "osv_earliest_published_at": "2026-07-10T22:43:30Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T22:54:07Z" }, { "id": "express-guardian-2026-07-10", "display_name": "express-guardian", "campaign": null, "detection_source": "osv", "packages": [ { "package": "express-guardian", "ecosystem": "npm", "versions": [ "1.4.1", "1.4.3" ], "osv_entries": [ { "osv_id": "MAL-2026-10182", "osv_published_at": "2026-07-10T22:42:45Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T22:53:35Z", "flagged_at": null, "confirmed_at": "2026-07-10T22:53:35Z", "osv_earliest_published_at": "2026-07-10T22:42:45Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T22:53:59Z" }, { "id": "consumerweb-2026-07-10", "display_name": "consumerweb", "campaign": null, "detection_source": "osv", "packages": [ { "package": "consumerweb", "ecosystem": "npm", "versions": [ "2200.4.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10181", "osv_published_at": "2026-07-10T22:43:11Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T22:53:33Z", "flagged_at": null, "confirmed_at": "2026-07-10T22:53:33Z", "osv_earliest_published_at": "2026-07-10T22:43:11Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T22:53:53Z" }, { "id": "auth-next-gen-2026-07-10", "display_name": "auth-next-gen", "campaign": null, "detection_source": "osv", "packages": [ { "package": "auth-next-gen", "ecosystem": "npm", "versions": [ "1.6.29", "1.7.11", "1.7.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10180", "osv_published_at": "2026-07-10T22:42:02Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T22:53:32Z", "flagged_at": null, "confirmed_at": "2026-07-10T22:53:32Z", "osv_earliest_published_at": "2026-07-10T22:42:02Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T22:53:47Z" }, { "id": "uwr-colors-2026-07-10", "display_name": "@uwr/colors", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@uwr/colors", "ecosystem": "npm", "versions": [ "1.3.6" ], "osv_entries": [ { "osv_id": "MAL-2026-10179", "osv_published_at": "2026-07-10T22:43:45Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T22:53:29Z", "flagged_at": null, "confirmed_at": "2026-07-10T22:53:29Z", "osv_earliest_published_at": "2026-07-10T22:43:45Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T22:53:39Z" }, { "id": "broadpeak-smartlib-ad-2026-07-10", "display_name": "@broadpeak/smartlib-ad", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@broadpeak/smartlib-ad", "ecosystem": "npm", "versions": [ "24.1.10" ], "osv_entries": [ { "osv_id": "MAL-2026-10178", "osv_published_at": "2026-07-10T22:43:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T22:53:28Z", "flagged_at": null, "confirmed_at": "2026-07-10T22:53:28Z", "osv_earliest_published_at": "2026-07-10T22:43:23Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T22:53:29Z" }, { "id": "jaymara-jsononifier-2026-07-10", "display_name": "@jaymara/jsononifier", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@jaymara/jsononifier", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10177", "osv_published_at": "2026-07-10T21:29:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T22:07:46Z", "flagged_at": null, "confirmed_at": "2026-07-10T22:07:46Z", "osv_earliest_published_at": "2026-07-10T21:29:35Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T22:07:48Z" }, { "id": "uncaxss-2026-07-10", "display_name": "uncaxss", "campaign": null, "detection_source": "osv", "packages": [ { "package": "uncaxss", "ecosystem": "npm", "versions": [ "1.3.4", "1.3.5" ], "osv_entries": [ { "osv_id": "MAL-2026-10176", "osv_published_at": "2026-07-10T21:24:28Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T21:37:07Z", "flagged_at": null, "confirmed_at": "2026-07-10T21:37:07Z", "osv_earliest_published_at": "2026-07-10T21:24:28Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T21:37:16Z" }, { "id": "chai-as-doc-2026-07-10", "display_name": "chai-as-doc", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-doc", "ecosystem": "npm", "versions": [ "2.3.5" ], "osv_entries": [ { "osv_id": "MAL-2026-10175", "osv_published_at": "2026-07-10T21:24:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T21:37:05Z", "flagged_at": null, "confirmed_at": "2026-07-10T21:37:05Z", "osv_earliest_published_at": "2026-07-10T21:24:50Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T21:37:07Z" }, { "id": "type-atob-2026-07-10", "display_name": "type-atob", "campaign": null, "detection_source": "osv", "packages": [ { "package": "type-atob", "ecosystem": "npm", "versions": [ "3.3.7" ], "osv_entries": [ { "osv_id": "MAL-2026-10174", "osv_published_at": "2026-07-10T18:35:43Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T19:19:38Z", "flagged_at": null, "confirmed_at": "2026-07-10T19:19:38Z", "osv_earliest_published_at": "2026-07-10T18:35:43Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T19:20:38Z" }, { "id": "polygon-gamma-apis-2026-07-10", "display_name": "polygon-gamma-apis", "campaign": null, "detection_source": "osv", "packages": [ { "package": "polygon-gamma-apis", "ecosystem": "npm", "versions": [ "1.5.2", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10148", "osv_published_at": "2026-07-10T16:12:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T19:19:34Z", "flagged_at": null, "confirmed_at": "2026-07-10T19:19:34Z", "osv_earliest_published_at": "2026-07-10T16:12:23Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T19:20:25Z" }, { "id": "polygon-gama-apis-2026-07-10", "display_name": "polygon-gama-apis", "campaign": null, "detection_source": "osv", "packages": [ { "package": "polygon-gama-apis", "ecosystem": "npm", "versions": [ "1.4.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10147", "osv_published_at": "2026-07-10T16:12:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T19:19:33Z", "flagged_at": null, "confirmed_at": "2026-07-10T19:19:33Z", "osv_earliest_published_at": "2026-07-10T16:12:23Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T19:20:20Z" }, { "id": "paysafe-vault-2026-07-10", "display_name": "paysafe-vault", "campaign": null, "detection_source": "osv", "packages": [ { "package": "paysafe-vault", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10173", "osv_published_at": "2026-07-10T18:38:15Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T19:19:31Z", "flagged_at": null, "confirmed_at": "2026-07-10T19:19:31Z", "osv_earliest_published_at": "2026-07-10T18:38:15Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T19:20:15Z" }, { "id": "paysafe-payments-2026-07-10", "display_name": "paysafe-payments", "campaign": null, "detection_source": "osv", "packages": [ { "package": "paysafe-payments", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10172", "osv_published_at": "2026-07-10T18:38:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T19:19:30Z", "flagged_at": null, "confirmed_at": "2026-07-10T19:19:30Z", "osv_earliest_published_at": "2026-07-10T18:38:06Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T19:20:09Z" }, { "id": "paysafe-node-2026-07-10", "display_name": "paysafe-node", "campaign": null, "detection_source": "osv", "packages": [ { "package": "paysafe-node", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10171", "osv_published_at": "2026-07-10T18:37:58Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T19:19:28Z", "flagged_at": null, "confirmed_at": "2026-07-10T19:19:28Z", "osv_earliest_published_at": "2026-07-10T18:37:58Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T19:20:03Z" }, { "id": "paysafe-kyc-2026-07-10", "display_name": "paysafe-kyc", "campaign": null, "detection_source": "osv", "packages": [ { "package": "paysafe-kyc", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10170", "osv_published_at": "2026-07-10T18:37:46Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T19:19:27Z", "flagged_at": null, "confirmed_at": "2026-07-10T19:19:27Z", "osv_earliest_published_at": "2026-07-10T18:37:46Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T19:19:56Z" }, { "id": "paysafe-js-2026-07-10", "display_name": "paysafe-js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "paysafe-js", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10169", "osv_published_at": "2026-07-10T18:37:30Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T19:19:25Z", "flagged_at": null, "confirmed_at": "2026-07-10T19:19:25Z", "osv_earliest_published_at": "2026-07-10T18:37:30Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T19:19:50Z" }, { "id": "paysafe-fraud-2026-07-10", "display_name": "paysafe-fraud", "campaign": null, "detection_source": "osv", "packages": [ { "package": "paysafe-fraud", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10168", "osv_published_at": "2026-07-10T18:37:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T19:19:24Z", "flagged_at": null, "confirmed_at": "2026-07-10T19:19:24Z", "osv_earliest_published_at": "2026-07-10T18:37:38Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T19:19:45Z" }, { "id": "paysafe-checkout-2026-07-10", "display_name": "paysafe-checkout", "campaign": null, "detection_source": "osv", "packages": [ { "package": "paysafe-checkout", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10167", "osv_published_at": "2026-07-10T18:37:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T19:19:22Z", "flagged_at": null, "confirmed_at": "2026-07-10T19:19:22Z", "osv_earliest_published_at": "2026-07-10T18:37:21Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T19:19:39Z" }, { "id": "paysafe-api-2026-07-10", "display_name": "paysafe-api", "campaign": null, "detection_source": "osv", "packages": [ { "package": "paysafe-api", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10166", "osv_published_at": "2026-07-10T18:37:14Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T19:19:21Z", "flagged_at": null, "confirmed_at": "2026-07-10T19:19:21Z", "osv_earliest_published_at": "2026-07-10T18:37:14Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T19:19:34Z" }, { "id": "evil-pkg-2026-07-10", "display_name": "evil-pkg", "campaign": null, "detection_source": "osv", "packages": [ { "package": "evil-pkg", "ecosystem": "npm", "versions": [ "1.0.2", "1.0.3", "1.0.4", "1.0.5" ], "osv_entries": [ { "osv_id": "MAL-2026-6374", "osv_published_at": "2026-06-24T06:16:56Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T19:19:19Z", "flagged_at": null, "confirmed_at": "2026-07-10T19:19:19Z", "osv_earliest_published_at": "2026-06-24T06:16:56Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T19:19:29Z" }, { "id": "eslint-jest-2026-07-10", "display_name": "eslint-jest", "campaign": null, "detection_source": "osv", "packages": [ { "package": "eslint-jest", "ecosystem": "npm", "versions": [ "4.0.4", "4.0.5", "4.0.6" ], "osv_entries": [ { "osv_id": "MAL-2026-10142", "osv_published_at": "2026-07-10T16:05:17Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T19:19:17Z", "flagged_at": null, "confirmed_at": "2026-07-10T19:19:17Z", "osv_earliest_published_at": "2026-07-10T16:05:17Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T19:19:23Z" }, { "id": "type-async-2026-07-10", "display_name": "type-async", "campaign": null, "detection_source": "osv", "packages": [ { "package": "type-async", "ecosystem": "npm", "versions": [ "3.3.7" ], "osv_entries": [ { "osv_id": "MAL-2026-10164", "osv_published_at": "2026-07-10T17:50:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T18:18:09Z", "flagged_at": null, "confirmed_at": "2026-07-10T18:18:09Z", "osv_earliest_published_at": "2026-07-10T17:50:03Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T18:18:23Z" }, { "id": "next-locomotive-init-2026-07-10", "display_name": "next-locomotive-init", "campaign": null, "detection_source": "osv", "packages": [ { "package": "next-locomotive-init", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-7013", "osv_published_at": "2026-07-08T17:28:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T18:18:07Z", "flagged_at": null, "confirmed_at": "2026-07-10T18:18:07Z", "osv_earliest_published_at": "2026-07-08T17:28:48Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T18:18:16Z" }, { "id": "llama-tokenizer-2026-07-10", "display_name": "llama-tokenizer", "campaign": null, "detection_source": "osv", "packages": [ { "package": "llama-tokenizer", "ecosystem": "npm", "versions": [ "1.2.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10163", "osv_published_at": "2026-07-10T17:50:28Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T18:18:05Z", "flagged_at": null, "confirmed_at": "2026-07-10T18:18:05Z", "osv_earliest_published_at": "2026-07-10T17:50:28Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T18:18:10Z" }, { "id": "bcryptln-becryptjs-2026-07-10", "display_name": "@bcryptln/becryptjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@bcryptln/becryptjs", "ecosystem": "npm", "versions": [ "3.0.10", "3.0.11", "3.0.8" ], "osv_entries": [ { "osv_id": "MAL-2026-10162", "osv_published_at": "2026-07-10T17:16:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T18:18:03Z", "flagged_at": null, "confirmed_at": "2026-07-10T18:18:03Z", "osv_earliest_published_at": "2026-07-10T17:16:37Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T18:18:05Z" }, { "id": "sidecar-mcp-2026-07-10", "display_name": "sidecar-mcp", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sidecar-mcp", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2", "1.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-10161", "osv_published_at": "2026-07-10T16:25:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T17:16:00Z", "flagged_at": null, "confirmed_at": "2026-07-10T17:16:00Z", "osv_earliest_published_at": "2026-07-10T16:25:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T17:17:25Z" }, { "id": "rollup-runtime-polyfill-core-2026-07-10", "display_name": "rollup-runtime-polyfill-core", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rollup-runtime-polyfill-core", "ecosystem": "npm", "versions": [ "0.13.8", "0.13.9", "0.14.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6372", "osv_published_at": "2026-06-24T03:58:02Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T17:15:58Z", "flagged_at": null, "confirmed_at": "2026-07-10T17:15:58Z", "osv_earliest_published_at": "2026-06-24T03:58:02Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T17:17:20Z" }, { "id": "rollup-packages-polyfill-core-2026-07-10", "display_name": "rollup-packages-polyfill-core", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rollup-packages-polyfill-core", "ecosystem": "npm", "versions": [ "0.13.7", "0.13.8" ], "osv_entries": [ { "osv_id": "MAL-2026-10160", "osv_published_at": "2026-07-10T16:56:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T17:15:56Z", "flagged_at": null, "confirmed_at": "2026-07-10T17:15:56Z", "osv_earliest_published_at": "2026-07-10T16:56:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T17:17:14Z" }, { "id": "npm-rce-safe-proof-yourname-2026-07-10", "display_name": "npm-rce-safe-proof-yourname", "campaign": null, "detection_source": "osv", "packages": [ { "package": "npm-rce-safe-proof-yourname", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10159", "osv_published_at": "2026-07-10T16:34:59Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T17:15:54Z", "flagged_at": null, "confirmed_at": "2026-07-10T17:15:54Z", "osv_earliest_published_at": "2026-07-10T16:34:59Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T17:17:09Z" }, { "id": "notify-utilities-2026-07-10", "display_name": "notify-utilities", "campaign": null, "detection_source": "osv", "packages": [ { "package": "notify-utilities", "ecosystem": "npm", "versions": [ "1.3.5" ], "osv_entries": [ { "osv_id": "MAL-2026-10158", "osv_published_at": "2026-07-10T16:47:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T17:15:53Z", "flagged_at": null, "confirmed_at": "2026-07-10T17:15:53Z", "osv_earliest_published_at": "2026-07-10T16:47:38Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T17:17:04Z" }, { "id": "notify-theme-2026-07-10", "display_name": "notify-theme", "campaign": null, "detection_source": "osv", "packages": [ { "package": "notify-theme", "ecosystem": "npm", "versions": [ "1.3.5", "1.3.6", "1.3.7" ], "osv_entries": [ { "osv_id": "MAL-2026-10157", "osv_published_at": "2026-07-10T16:47:11Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T17:15:51Z", "flagged_at": null, "confirmed_at": "2026-07-10T17:15:51Z", "osv_earliest_published_at": "2026-07-10T16:47:11Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T17:16:58Z" }, { "id": "notify-logs-2026-07-10", "display_name": "notify-logs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "notify-logs", "ecosystem": "npm", "versions": [ "1.3.5" ], "osv_entries": [ { "osv_id": "MAL-2026-10156", "osv_published_at": "2026-07-10T16:47:28Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T17:15:50Z", "flagged_at": null, "confirmed_at": "2026-07-10T17:15:50Z", "osv_earliest_published_at": "2026-07-10T16:47:28Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T17:16:52Z" }, { "id": "notify-funcs-2026-07-10", "display_name": "notify-funcs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "notify-funcs", "ecosystem": "npm", "versions": [ "1.3.5", "1.3.6" ], "osv_entries": [ { "osv_id": "MAL-2026-10155", "osv_published_at": "2026-07-10T16:46:45Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T17:15:48Z", "flagged_at": null, "confirmed_at": "2026-07-10T17:15:48Z", "osv_earliest_published_at": "2026-07-10T16:46:45Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T17:16:46Z" }, { "id": "notify-dist-2026-07-10", "display_name": "notify-dist", "campaign": null, "detection_source": "osv", "packages": [ { "package": "notify-dist", "ecosystem": "npm", "versions": [ "1.3.7" ], "osv_entries": [ { "osv_id": "MAL-2026-10154", "osv_published_at": "2026-07-10T16:46:54Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T17:15:46Z", "flagged_at": null, "confirmed_at": "2026-07-10T17:15:46Z", "osv_earliest_published_at": "2026-07-10T16:46:54Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T17:16:36Z" }, { "id": "notifier-log-2026-07-10", "display_name": "notifier-log", "campaign": null, "detection_source": "osv", "packages": [ { "package": "notifier-log", "ecosystem": "npm", "versions": [ "1.3.5" ], "osv_entries": [ { "osv_id": "MAL-2026-10153", "osv_published_at": "2026-07-10T16:46:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T17:15:39Z", "flagged_at": null, "confirmed_at": "2026-07-10T17:15:39Z", "osv_earliest_published_at": "2026-07-10T16:46:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T17:16:29Z" }, { "id": "notifier-funcs-2026-07-10", "display_name": "notifier-funcs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "notifier-funcs", "ecosystem": "npm", "versions": [ "1.3.4" ], "osv_entries": [ { "osv_id": "MAL-2026-10152", "osv_published_at": "2026-07-10T16:46:28Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T17:15:38Z", "flagged_at": null, "confirmed_at": "2026-07-10T17:15:38Z", "osv_earliest_published_at": "2026-07-10T16:46:28Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T17:16:22Z" }, { "id": "nonenull1-2026-07-10", "display_name": "nonenull1", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nonenull1", "ecosystem": "npm", "versions": [ "1.5.6" ], "osv_entries": [ { "osv_id": "MAL-2026-10090", "osv_published_at": "2026-07-09T16:34:31Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T17:15:36Z", "flagged_at": null, "confirmed_at": "2026-07-10T17:15:36Z", "osv_earliest_published_at": "2026-07-09T16:34:31Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T17:16:16Z" }, { "id": "ggk-happy-2026-07-10", "display_name": "ggk-happy", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ggk-happy", "ecosystem": "npm", "versions": [ "1.2.20", "1.2.22", "1.2.24", "1.2.28", "1.2.30", "1.2.32", "1.2.33", "1.2.34", "1.2.43" ], "osv_entries": [ { "osv_id": "MAL-2026-4789", "osv_published_at": "2026-05-26T09:03:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T17:15:34Z", "flagged_at": null, "confirmed_at": "2026-07-10T17:15:34Z", "osv_earliest_published_at": "2026-05-26T09:03:51Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T05:00:21Z" }, { "id": "express-session-kit-2026-07-10", "display_name": "express-session-kit", "campaign": null, "detection_source": "osv", "packages": [ { "package": "express-session-kit", "ecosystem": "npm", "versions": [ "1.1.0-beta", "1.1.1", "1.18.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10131", "osv_published_at": "2026-07-10T15:46:24Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T17:15:31Z", "flagged_at": null, "confirmed_at": "2026-07-10T17:15:31Z", "osv_earliest_published_at": "2026-07-10T15:46:24Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T17:16:03Z" }, { "id": "express-mongo-limit-2026-07-10", "display_name": "express-mongo-limit", "campaign": null, "detection_source": "osv", "packages": [ { "package": "express-mongo-limit", "ecosystem": "npm", "versions": [ "1.0.0", "2.0.1", "2.0.3", "2.0.4", "2.0.5" ], "osv_entries": [ { "osv_id": "MAL-2026-7012", "osv_published_at": "2026-07-08T17:28:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T17:15:30Z", "flagged_at": null, "confirmed_at": "2026-07-10T17:15:30Z", "osv_earliest_published_at": "2026-07-07T00:00:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T07:10:29Z" }, { "id": "buffer-util-internal-2026-07-10", "display_name": "buffer-util-internal", "campaign": null, "detection_source": "osv", "packages": [ { "package": "buffer-util-internal", "ecosystem": "npm", "versions": [ "1.0.13", "1.0.14" ], "osv_entries": [ { "osv_id": "MAL-2026-10151", "osv_published_at": "2026-07-10T16:54:54Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T17:15:25Z", "flagged_at": null, "confirmed_at": "2026-07-10T17:15:25Z", "osv_earliest_published_at": "2026-07-10T16:54:54Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T17:15:37Z" }, { "id": "ap3-components-ui-2026-07-10", "display_name": "ap3-components-ui", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ap3-components-ui", "ecosystem": "npm", "versions": [ "9.999.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10150", "osv_published_at": "2026-07-10T16:47:46Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T17:15:24Z", "flagged_at": null, "confirmed_at": "2026-07-10T17:15:24Z", "osv_earliest_published_at": "2026-07-10T16:47:46Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T17:15:27Z" }, { "id": "web-api-node-2026-07-10", "display_name": "web-api-node", "campaign": null, "detection_source": "osv", "packages": [ { "package": "web-api-node", "ecosystem": "npm", "versions": [ "1.3.2", "1.3.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6747", "osv_published_at": "2026-07-03T16:06:55Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T16:59:47Z", "flagged_at": null, "confirmed_at": "2026-07-10T16:59:47Z", "osv_earliest_published_at": "2026-07-03T16:06:55Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T17:02:03Z" }, { "id": "typescript-util-core-2026-07-10", "display_name": "typescript-util-core", "campaign": null, "detection_source": "osv", "packages": [ { "package": "typescript-util-core", "ecosystem": "npm", "versions": [ "3.5.0", "7.1.3", "7.1.5", "7.1.6" ], "osv_entries": [ { "osv_id": "MAL-2026-6746", "osv_published_at": "2026-07-03T16:06:55Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T16:59:45Z", "flagged_at": null, "confirmed_at": "2026-07-10T16:59:45Z", "osv_earliest_published_at": "2026-07-03T16:06:55Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T17:01:53Z" }, { "id": "ts-node-utils-2026-07-10", "display_name": "ts-node-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ts-node-utils", "ecosystem": "npm", "versions": [ "8.0.1", "8.0.4", "8.0.6" ], "osv_entries": [ { "osv_id": "MAL-2026-6745", "osv_published_at": "2026-07-03T16:06:55Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T16:59:42Z", "flagged_at": null, "confirmed_at": "2026-07-10T16:59:42Z", "osv_earliest_published_at": "2026-07-03T16:06:55Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T17:01:46Z" }, { "id": "decode-sdks-2026-07-10", "display_name": "decode-sdks", "campaign": null, "detection_source": "osv", "packages": [ { "package": "decode-sdks", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6740", "osv_published_at": "2026-07-03T15:37:44Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T16:59:06Z", "flagged_at": null, "confirmed_at": "2026-07-10T16:59:06Z", "osv_earliest_published_at": "2026-07-03T15:37:44Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T17:00:13Z" }, { "id": "api-node-utils-2026-07-10", "display_name": "api-node-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "api-node-utils", "ecosystem": "npm", "versions": [ "2.2.4" ], "osv_entries": [ { "osv_id": "MAL-2026-6743", "osv_published_at": "2026-07-03T16:06:54Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T16:58:51Z", "flagged_at": null, "confirmed_at": "2026-07-10T16:58:51Z", "osv_earliest_published_at": "2026-07-03T16:06:54Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T16:59:26Z" }, { "id": "animatecss-postcss-plugin-2026-07-10", "display_name": "animatecss-postcss-plugin", "campaign": null, "detection_source": "osv", "packages": [ { "package": "animatecss-postcss-plugin", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6495", "osv_published_at": "2026-06-26T01:42:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T16:58:49Z", "flagged_at": null, "confirmed_at": "2026-07-10T16:58:49Z", "osv_earliest_published_at": "2026-06-26T01:42:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T16:59:19Z" }, { "id": "alder-morrgan-2026-07-10", "display_name": "alder_morrgan", "campaign": null, "detection_source": "osv", "packages": [ { "package": "alder_morrgan", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6742", "osv_published_at": "2026-07-03T16:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T16:58:48Z", "flagged_at": null, "confirmed_at": "2026-07-10T16:58:48Z", "osv_earliest_published_at": "2026-07-03T16:00:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T16:59:11Z" }, { "id": "jacobtan-decode-sdk-2026-07-10", "display_name": "@jacobtan/decode-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@jacobtan/decode-sdk", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6738", "osv_published_at": "2026-07-03T15:37:43Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T16:58:31Z", "flagged_at": null, "confirmed_at": "2026-07-10T16:58:31Z", "osv_earliest_published_at": "2026-07-03T15:37:43Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T16:58:37Z" }, { "id": "turbocalc-2026-07-10", "display_name": "turbocalc", "campaign": null, "detection_source": "osv", "packages": [ { "package": "turbocalc", "ecosystem": "pypi", "versions": [ "0.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10139", "osv_published_at": "2026-07-10T15:51:13Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T16:27:58Z", "flagged_at": null, "confirmed_at": "2026-07-10T16:27:58Z", "osv_earliest_published_at": "2026-07-10T15:51:13Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T16:28:49Z" }, { "id": "uac-package-2026-07-10", "display_name": "uac-package", "campaign": null, "detection_source": "osv", "packages": [ { "package": "uac-package", "ecosystem": "npm", "versions": [ "1.1.0", "1.1.1", "1.1.2", "1.1.3", "1.2.1", "1.3.0", "1.4.0", "1.4.1", "1.4.3", "1.4.4", "1.4.5", "1.4.6", "1.4.7", "1.4.8" ], "osv_entries": [ { "osv_id": "MAL-2026-10138", "osv_published_at": "2026-07-10T15:50:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T16:27:48Z", "flagged_at": null, "confirmed_at": "2026-07-10T16:27:48Z", "osv_earliest_published_at": "2026-07-10T15:50:23Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T06:05:48Z" }, { "id": "type-elint-2026-07-10", "display_name": "type-elint", "campaign": null, "detection_source": "osv", "packages": [ { "package": "type-elint", "ecosystem": "npm", "versions": [ "3.3.7" ], "osv_entries": [ { "osv_id": "MAL-2026-10137", "osv_published_at": "2026-07-10T15:31:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T16:27:44Z", "flagged_at": null, "confirmed_at": "2026-07-10T16:27:44Z", "osv_earliest_published_at": "2026-07-10T15:31:38Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T16:28:20Z" }, { "id": "transform-es2015-sticky-regex-2026-07-10", "display_name": "transform-es2015-sticky-regex", "campaign": null, "detection_source": "osv", "packages": [ { "package": "transform-es2015-sticky-regex", "ecosystem": "npm", "versions": [ "6.24.3" ], "osv_entries": [ { "osv_id": "MAL-2026-10136", "osv_published_at": "2026-07-10T15:39:56Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T16:27:43Z", "flagged_at": null, "confirmed_at": "2026-07-10T16:27:43Z", "osv_earliest_published_at": "2026-07-10T15:39:56Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T16:28:13Z" }, { "id": "theta-sdk-js-2026-07-10", "display_name": "theta-sdk-js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "theta-sdk-js", "ecosystem": "npm", "versions": [ "1.2.14", "1.2.15", "1.2.16", "1.2.17" ], "osv_entries": [ { "osv_id": "MAL-2026-10135", "osv_published_at": "2026-07-10T16:15:18Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T16:27:41Z", "flagged_at": null, "confirmed_at": "2026-07-10T16:27:41Z", "osv_earliest_published_at": "2026-07-10T16:15:18Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T19:20:31Z" }, { "id": "stella-coder-2026-07-10", "display_name": "stella-coder", "campaign": null, "detection_source": "osv", "packages": [ { "package": "stella-coder", "ecosystem": "npm", "versions": [ "4.0.0", "5.0.0", "5.0.1", "5.1.0", "5.1.1", "5.1.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10134", "osv_published_at": "2026-07-10T15:59:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T16:27:39Z", "flagged_at": null, "confirmed_at": "2026-07-10T16:27:39Z", "osv_earliest_published_at": "2026-07-10T15:59:07Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T16:27:59Z" }, { "id": "stella-ai-cli-2026-07-10", "display_name": "stella-ai-cli", "campaign": null, "detection_source": "osv", "packages": [ { "package": "stella-ai-cli", "ecosystem": "npm", "versions": [ "2.0.0", "3.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10133", "osv_published_at": "2026-07-10T15:59:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T16:27:37Z", "flagged_at": null, "confirmed_at": "2026-07-10T16:27:37Z", "osv_earliest_published_at": "2026-07-10T15:59:49Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T16:27:52Z" }, { "id": "react-jsonwebtoken-2026-07-10", "display_name": "react-jsonwebtoken", "campaign": null, "detection_source": "osv", "packages": [ { "package": "react-jsonwebtoken", "ecosystem": "npm", "versions": [ "9.0.3", "9.0.4", "9.0.5" ], "osv_entries": [ { "osv_id": "MAL-2026-10132", "osv_published_at": "2026-07-10T16:16:01Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T16:27:35Z", "flagged_at": null, "confirmed_at": "2026-07-10T16:27:35Z", "osv_earliest_published_at": "2026-07-10T16:16:01Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T16:27:42Z" }, { "id": "nodepack-daemon-2026-07-10", "display_name": "nodepack-daemon", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nodepack-daemon", "ecosystem": "npm", "versions": [ "1.2.9" ], "osv_entries": [ { "osv_id": "MAL-2026-10111", "osv_published_at": "2026-07-10T02:45:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T16:27:33Z", "flagged_at": null, "confirmed_at": "2026-07-10T16:27:33Z", "osv_earliest_published_at": "2026-07-10T02:45:25Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T16:27:35Z" }, { "id": "type-plint-2026-07-10", "display_name": "type-plint", "campaign": null, "detection_source": "osv", "packages": [ { "package": "type-plint", "ecosystem": "npm", "versions": [ "3.3.7" ], "osv_entries": [ { "osv_id": "MAL-2026-10130", "osv_published_at": "2026-07-10T15:17:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T15:40:44Z", "flagged_at": null, "confirmed_at": "2026-07-10T15:40:44Z", "osv_earliest_published_at": "2026-07-10T15:17:48Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T15:41:21Z" }, { "id": "rtc-integration-frontend-sdk-2026-07-10", "display_name": "rtc-integration-frontend-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rtc-integration-frontend-sdk", "ecosystem": "npm", "versions": [ "99.9.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10129", "osv_published_at": "2026-07-10T15:19:04Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T15:40:43Z", "flagged_at": null, "confirmed_at": "2026-07-10T15:40:43Z", "osv_earliest_published_at": "2026-07-10T15:19:04Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T15:41:14Z" }, { "id": "ohcm-culture-formatting-2026-07-10", "display_name": "ohcm-culture-formatting", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ohcm-culture-formatting", "ecosystem": "npm", "versions": [ "5.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10128", "osv_published_at": "2026-07-10T15:19:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T15:40:41Z", "flagged_at": null, "confirmed_at": "2026-07-10T15:40:41Z", "osv_earliest_published_at": "2026-07-10T15:19:50Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T15:41:07Z" }, { "id": "nodemon-patch-2026-07-10", "display_name": "nodemon-patch", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nodemon-patch", "ecosystem": "npm", "versions": [ "3.1.15", "3.1.16" ], "osv_entries": [ { "osv_id": "MAL-2026-10110", "osv_published_at": "2026-07-10T02:56:04Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T15:40:40Z", "flagged_at": null, "confirmed_at": "2026-07-10T15:40:40Z", "osv_earliest_published_at": "2026-07-10T02:56:04Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T15:41:01Z" }, { "id": "eth-react-redirection-2026-07-10", "display_name": "eth-react-redirection", "campaign": null, "detection_source": "osv", "packages": [ { "package": "eth-react-redirection", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10127", "osv_published_at": "2026-07-10T15:19:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T15:40:34Z", "flagged_at": null, "confirmed_at": "2026-07-10T15:40:34Z", "osv_earliest_published_at": "2026-07-10T15:19:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T15:40:41Z" }, { "id": "injectivelabs-wallet-cosmos-strategy-2026-07-10", "display_name": "@injectivelabs/wallet-cosmos-strategy", "campaign": null, "detection_source": "npm_deprecation", "packages": [ { "package": "@injectivelabs/wallet-cosmos-strategy", "ecosystem": "npm", "versions": [ "1.20.21" ], "osv_entries": [] } ], "malware_type": "deprecated_release", "attestd_detected_at": "2026-07-10T15:08:42Z", "flagged_at": null, "confirmed_at": "2026-07-10T15:08:42Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40injectivelabs%2Fwallet-cosmos-strategy", "ledger_commit_at": "2026-07-10T15:09:56Z" }, { "id": "injectivelabs-wallet-turnkey-2026-07-10", "display_name": "@injectivelabs/wallet-turnkey", "campaign": null, "detection_source": "npm_deprecation", "packages": [ { "package": "@injectivelabs/wallet-turnkey", "ecosystem": "npm", "versions": [ "1.20.21" ], "osv_entries": [] } ], "malware_type": "deprecated_release", "attestd_detected_at": "2026-07-10T15:08:41Z", "flagged_at": null, "confirmed_at": "2026-07-10T15:08:41Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40injectivelabs%2Fwallet-turnkey", "ledger_commit_at": "2026-07-10T15:09:51Z" }, { "id": "injectivelabs-wallet-strategy-2026-07-10", "display_name": "@injectivelabs/wallet-strategy", "campaign": null, "detection_source": "npm_deprecation", "packages": [ { "package": "@injectivelabs/wallet-strategy", "ecosystem": "npm", "versions": [ "1.20.21" ], "osv_entries": [] } ], "malware_type": "deprecated_release", "attestd_detected_at": "2026-07-10T15:08:40Z", "flagged_at": null, "confirmed_at": "2026-07-10T15:08:40Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40injectivelabs%2Fwallet-strategy", "ledger_commit_at": "2026-07-10T15:09:46Z" }, { "id": "injectivelabs-wallet-magic-2026-07-10", "display_name": "@injectivelabs/wallet-magic", "campaign": null, "detection_source": "npm_deprecation", "packages": [ { "package": "@injectivelabs/wallet-magic", "ecosystem": "npm", "versions": [ "1.20.21" ], "osv_entries": [] } ], "malware_type": "deprecated_release", "attestd_detected_at": "2026-07-10T15:08:39Z", "flagged_at": null, "confirmed_at": "2026-07-10T15:08:39Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40injectivelabs%2Fwallet-magic", "ledger_commit_at": "2026-07-10T15:09:40Z" }, { "id": "injectivelabs-wallet-wallet-connect-2026-07-10", "display_name": "@injectivelabs/wallet-wallet-connect", "campaign": null, "detection_source": "npm_deprecation", "packages": [ { "package": "@injectivelabs/wallet-wallet-connect", "ecosystem": "npm", "versions": [ "1.20.21" ], "osv_entries": [] } ], "malware_type": "deprecated_release", "attestd_detected_at": "2026-07-10T15:08:38Z", "flagged_at": null, "confirmed_at": "2026-07-10T15:08:38Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40injectivelabs%2Fwallet-wallet-connect", "ledger_commit_at": "2026-07-10T15:09:26Z" }, { "id": "injectivelabs-wallet-ledger-2026-07-10", "display_name": "@injectivelabs/wallet-ledger", "campaign": null, "detection_source": "npm_deprecation", "packages": [ { "package": "@injectivelabs/wallet-ledger", "ecosystem": "npm", "versions": [ "1.20.21" ], "osv_entries": [] } ], "malware_type": "deprecated_release", "attestd_detected_at": "2026-07-10T15:08:37Z", "flagged_at": null, "confirmed_at": "2026-07-10T15:08:37Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40injectivelabs%2Fwallet-ledger", "ledger_commit_at": "2026-07-10T15:09:21Z" }, { "id": "injectivelabs-wallet-cosmostation-2026-07-10", "display_name": "@injectivelabs/wallet-cosmostation", "campaign": null, "detection_source": "npm_deprecation", "packages": [ { "package": "@injectivelabs/wallet-cosmostation", "ecosystem": "npm", "versions": [ "1.20.21" ], "osv_entries": [] } ], "malware_type": "deprecated_release", "attestd_detected_at": "2026-07-10T15:08:36Z", "flagged_at": null, "confirmed_at": "2026-07-10T15:08:36Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40injectivelabs%2Fwallet-cosmostation", "ledger_commit_at": "2026-07-10T15:09:16Z" }, { "id": "injectivelabs-wallet-trezor-2026-07-10", "display_name": "@injectivelabs/wallet-trezor", "campaign": null, "detection_source": "npm_deprecation", "packages": [ { "package": "@injectivelabs/wallet-trezor", "ecosystem": "npm", "versions": [ "1.20.21" ], "osv_entries": [] } ], "malware_type": "deprecated_release", "attestd_detected_at": "2026-07-10T15:08:35Z", "flagged_at": null, "confirmed_at": "2026-07-10T15:08:35Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40injectivelabs%2Fwallet-trezor", "ledger_commit_at": "2026-07-10T15:09:10Z" }, { "id": "injectivelabs-wallet-evm-2026-07-10", "display_name": "@injectivelabs/wallet-evm", "campaign": null, "detection_source": "npm_deprecation", "packages": [ { "package": "@injectivelabs/wallet-evm", "ecosystem": "npm", "versions": [ "1.20.21" ], "osv_entries": [] } ], "malware_type": "deprecated_release", "attestd_detected_at": "2026-07-10T15:08:34Z", "flagged_at": null, "confirmed_at": "2026-07-10T15:08:34Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40injectivelabs%2Fwallet-evm", "ledger_commit_at": "2026-07-10T15:09:05Z" }, { "id": "injectivelabs-wallet-cosmos-2026-07-10", "display_name": "@injectivelabs/wallet-cosmos", "campaign": null, "detection_source": "npm_deprecation", "packages": [ { "package": "@injectivelabs/wallet-cosmos", "ecosystem": "npm", "versions": [ "1.20.21" ], "osv_entries": [] } ], "malware_type": "deprecated_release", "attestd_detected_at": "2026-07-10T15:08:33Z", "flagged_at": null, "confirmed_at": "2026-07-10T15:08:33Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40injectivelabs%2Fwallet-cosmos", "ledger_commit_at": "2026-07-10T15:08:55Z" }, { "id": "injectivelabs-wallet-core-2026-07-10", "display_name": "@injectivelabs/wallet-core", "campaign": null, "detection_source": "npm_deprecation", "packages": [ { "package": "@injectivelabs/wallet-core", "ecosystem": "npm", "versions": [ "1.20.21" ], "osv_entries": [] } ], "malware_type": "deprecated_release", "attestd_detected_at": "2026-07-10T15:08:32Z", "flagged_at": null, "confirmed_at": "2026-07-10T15:08:32Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40injectivelabs%2Fwallet-core", "ledger_commit_at": "2026-07-10T15:08:43Z" }, { "id": "injectivelabs-wallet-base-2026-07-10", "display_name": "@injectivelabs/wallet-base", "campaign": null, "detection_source": "npm_deprecation", "packages": [ { "package": "@injectivelabs/wallet-base", "ecosystem": "npm", "versions": [ "1.20.21" ], "osv_entries": [] } ], "malware_type": "deprecated_release", "attestd_detected_at": "2026-07-10T15:08:31Z", "flagged_at": null, "confirmed_at": "2026-07-10T15:08:31Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40injectivelabs%2Fwallet-base", "ledger_commit_at": "2026-07-10T15:08:38Z" }, { "id": "injectivelabs-sdk-ts-2026-07-10", "display_name": "@injectivelabs/sdk-ts", "campaign": null, "detection_source": "npm_deprecation", "packages": [ { "package": "@injectivelabs/sdk-ts", "ecosystem": "npm", "versions": [ "1.20.21" ], "osv_entries": [ { "osv_id": "MAL-2026-10165", "osv_published_at": "2026-07-10T18:43:14Z" } ] } ], "malware_type": "deprecated_release", "attestd_detected_at": "2026-07-10T15:08:30Z", "flagged_at": null, "confirmed_at": "2026-07-10T15:08:30Z", "osv_earliest_published_at": "2026-07-10T18:43:14Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-10T17:29:28Z", "press_urls": [ "https://thehackernews.com/2026/07/injective-labs-github-compromise-pushes.html" ], "advisory_url": "https://registry.npmjs.org/%40injectivelabs%2Fsdk-ts", "ledger_commit_at": "2026-07-10T19:19:16Z" }, { "id": "injectivelabs-wallet-private-key-2026-07-10", "display_name": "@injectivelabs/wallet-private-key", "campaign": null, "detection_source": "npm_deprecation", "packages": [ { "package": "@injectivelabs/wallet-private-key", "ecosystem": "npm", "versions": [ "1.20.21" ], "osv_entries": [] } ], "malware_type": "deprecated_release", "attestd_detected_at": "2026-07-10T15:08:24Z", "flagged_at": null, "confirmed_at": "2026-07-10T15:08:24Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40injectivelabs%2Fwallet-private-key", "ledger_commit_at": "2026-07-10T15:08:26Z" }, { "id": "sankislayer-2026-07-10", "display_name": "sankislayer", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sankislayer", "ecosystem": "pypi", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10119", "osv_published_at": "2026-07-10T12:10:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T13:47:18Z", "flagged_at": null, "confirmed_at": "2026-07-10T13:47:18Z", "osv_earliest_published_at": "2026-07-10T12:10:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T13:47:19Z" }, { "id": "jwtmethod-2026-07-10", "display_name": "jwtmethod", "campaign": null, "detection_source": "osv", "packages": [ { "package": "jwtmethod", "ecosystem": "npm", "versions": [ "1.1.10" ], "osv_entries": [ { "osv_id": "MAL-2026-10116", "osv_published_at": "2026-07-10T06:43:55Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T12:46:11Z", "flagged_at": null, "confirmed_at": "2026-07-10T12:46:11Z", "osv_earliest_published_at": "2026-07-10T06:43:55Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T12:46:32Z" }, { "id": "fmt-date-lite-2026-07-10", "display_name": "fmt-date-lite", "campaign": null, "detection_source": "osv", "packages": [ { "package": "fmt-date-lite", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10115", "osv_published_at": "2026-07-10T06:45:28Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T12:46:10Z", "flagged_at": null, "confirmed_at": "2026-07-10T12:46:10Z", "osv_earliest_published_at": "2026-07-10T06:45:28Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T12:46:19Z" }, { "id": "driftpin-2026-07-10", "display_name": "driftpin", "campaign": null, "detection_source": "osv", "packages": [ { "package": "driftpin", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10114", "osv_published_at": "2026-07-10T06:45:55Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T12:46:09Z", "flagged_at": null, "confirmed_at": "2026-07-10T12:46:09Z", "osv_earliest_published_at": "2026-07-10T06:45:55Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T12:46:12Z" }, { "id": "weavedb-sdk-2026-07-10", "display_name": "weavedb-sdk", "campaign": null, "detection_source": "npm_deprecation", "packages": [ { "package": "weavedb-sdk", "ecosystem": "npm", "versions": [ "0.45.3" ], "osv_entries": [] } ], "malware_type": "deprecated_release", "attestd_detected_at": "2026-07-10T07:08:39Z", "flagged_at": null, "confirmed_at": "2026-07-10T07:08:39Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/weavedb-sdk", "ledger_commit_at": "2026-07-10T07:08:41Z" }, { "id": "vite-config-field-2026-07-10", "display_name": "vite-config-field", "campaign": null, "detection_source": "osv", "packages": [ { "package": "vite-config-field", "ecosystem": "npm", "versions": [ "1.1.4", "1.1.5" ], "osv_entries": [ { "osv_id": "MAL-2026-5936", "osv_published_at": "2026-06-16T22:20:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T03:59:12Z", "flagged_at": null, "confirmed_at": "2026-07-10T03:59:12Z", "osv_earliest_published_at": "2026-06-16T22:20:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T03:59:26Z" }, { "id": "clavuepro-2026-07-10", "display_name": "clavuepro", "campaign": null, "detection_source": "osv", "packages": [ { "package": "clavuepro", "ecosystem": "npm", "versions": [ "0.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7031", "osv_published_at": "2026-07-09T05:53:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:45:35Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:45:35Z", "osv_earliest_published_at": "2026-07-09T05:53:35Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:49:17Z" }, { "id": "clavue-agent-sdk-2026-07-10", "display_name": "clavue-agent-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "clavue-agent-sdk", "ecosystem": "npm", "versions": [ "2.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7030", "osv_published_at": "2026-07-09T05:53:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:45:34Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:45:34Z", "osv_earliest_published_at": "2026-07-09T05:53:35Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:49:10Z" }, { "id": "calvuepro-2026-07-10", "display_name": "calvuepro", "campaign": null, "detection_source": "osv", "packages": [ { "package": "calvuepro", "ecosystem": "npm", "versions": [ "0.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7028", "osv_published_at": "2026-07-09T05:53:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:45:33Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:45:33Z", "osv_earliest_published_at": "2026-07-09T05:53:35Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:49:03Z" }, { "id": "pinokio-redis-2026-07-10", "display_name": "pinokio-redis", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pinokio-redis", "ecosystem": "npm", "versions": [ "1.0.127" ], "osv_entries": [ { "osv_id": "MAL-2026-6938", "osv_published_at": "2026-07-07T16:00:26Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:44:10Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:44:10Z", "osv_earliest_published_at": "2026-07-07T16:00:26Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:48:36Z" }, { "id": "solana-address-codec-2026-07-10", "display_name": "solana-address-codec", "campaign": null, "detection_source": "osv", "packages": [ { "package": "solana-address-codec", "ecosystem": "npm", "versions": [ "1.0.2", "1.0.3", "1.0.4", "1.0.5" ], "osv_entries": [ { "osv_id": "MAL-2026-6924", "osv_published_at": "2026-07-07T15:06:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:44:09Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:44:09Z", "osv_earliest_published_at": "2026-07-07T15:06:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:48:29Z" }, { "id": "crypto-base58-2026-07-10", "display_name": "crypto-base58", "campaign": null, "detection_source": "osv", "packages": [ { "package": "crypto-base58", "ecosystem": "npm", "versions": [ "1.0.2", "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6920", "osv_published_at": "2026-07-07T15:06:09Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:44:08Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:44:08Z", "osv_earliest_published_at": "2026-07-07T15:06:09Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:48:22Z" }, { "id": "sqlite-access-nodesql-2026-07-10", "display_name": "@sqlite-access/nodesql", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@sqlite-access/nodesql", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6914", "osv_published_at": "2026-07-07T14:48:43Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:43:13Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:43:13Z", "osv_earliest_published_at": "2026-07-07T14:48:43Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:48:16Z" }, { "id": "express-deflect-2026-07-10", "display_name": "express-deflect", "campaign": null, "detection_source": "osv", "packages": [ { "package": "express-deflect", "ecosystem": "npm", "versions": [ "1.6.12" ], "osv_entries": [ { "osv_id": "MAL-2026-6908", "osv_published_at": "2026-07-07T06:27:27Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:43:12Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:43:12Z", "osv_earliest_published_at": "2026-07-07T06:27:27Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:48:09Z" }, { "id": "marketfront-dynamicpageparams-2026-07-10", "display_name": "@marketfront/dynamicpageparams", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@marketfront/dynamicpageparams", "ecosystem": "npm", "versions": [ "7.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6776", "osv_published_at": "2026-07-02T00:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:43:08Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:43:08Z", "osv_earliest_published_at": "2026-07-02T00:00:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://safedep.io/marketfront-dependency-confusion-campaign/", "ledger_commit_at": "2026-07-10T00:47:59Z" }, { "id": "marketfront-captchaservice-2026-07-10", "display_name": "@marketfront/captchaservice", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@marketfront/captchaservice", "ecosystem": "npm", "versions": [ "7.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6769", "osv_published_at": "2026-07-02T00:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:43:07Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:43:07Z", "osv_earliest_published_at": "2026-07-02T00:00:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://safedep.io/marketfront-dependency-confusion-campaign/", "ledger_commit_at": "2026-07-10T00:47:53Z" }, { "id": "node-cloud-create-2026-07-10", "display_name": "@node-cloud/create", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@node-cloud/create", "ecosystem": "npm", "versions": [ "1.0.4", "1.0.6" ], "osv_entries": [ { "osv_id": "MAL-2026-6741", "osv_published_at": "2026-07-03T15:59:09Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:42:05Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:42:05Z", "osv_earliest_published_at": "2026-07-03T15:59:09Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:47:46Z" }, { "id": "console-fmt-cli-2026-07-10", "display_name": "console-fmt-cli", "campaign": null, "detection_source": "osv", "packages": [ { "package": "console-fmt-cli", "ecosystem": "npm", "versions": [ "2.6.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6688", "osv_published_at": "2026-06-30T00:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:42:03Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:42:03Z", "osv_earliest_published_at": "2026-06-30T00:00:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://safedep.io/defi-infostealer-fake-arbitrage-bot-npm/", "ledger_commit_at": "2026-07-10T00:47:39Z" }, { "id": "maplibre-gl-vue3-2026-07-10", "display_name": "maplibre-gl-vue3", "campaign": null, "detection_source": "osv", "packages": [ { "package": "maplibre-gl-vue3", "ecosystem": "npm", "versions": [ "5.24.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6592", "osv_published_at": "2026-06-29T09:11:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:42:01Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:42:01Z", "osv_earliest_published_at": "2026-06-29T09:11:39Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:47:25Z" }, { "id": "layerd-unit-codec-parser-2026-07-10", "display_name": "layerd-unit-codec-parser", "campaign": null, "detection_source": "osv", "packages": [ { "package": "layerd-unit-codec-parser", "ecosystem": "npm", "versions": [ "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6578", "osv_published_at": "2026-06-29T06:35:34Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:41:58Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:41:58Z", "osv_earliest_published_at": "2026-06-29T06:35:34Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:47:12Z" }, { "id": "ibrahim1337-baksen-2026-07-10", "display_name": "@ibrahim1337/baksen", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@ibrahim1337/baksen", "ecosystem": "npm", "versions": [ "1.4.0", "2.0.2", "3.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6575", "osv_published_at": "2026-06-29T05:24:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:41:57Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:41:57Z", "osv_earliest_published_at": "2026-06-29T05:24:50Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:47:06Z" }, { "id": "livekit-agents-2026-07-10", "display_name": "livekit-agents", "campaign": null, "detection_source": "osv", "packages": [ { "package": "livekit-agents", "ecosystem": "npm", "versions": [ "0.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6555", "osv_published_at": "2026-06-28T06:01:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:41:54Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:41:54Z", "osv_earliest_published_at": "2026-06-28T06:01:35Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:46:59Z" }, { "id": "express-initial-2026-07-10", "display_name": "express-initial", "campaign": null, "detection_source": "osv", "packages": [ { "package": "express-initial", "ecosystem": "npm", "versions": [ "12.1.7", "12.1.8" ], "osv_entries": [ { "osv_id": "MAL-2026-6543", "osv_published_at": "2026-06-26T21:40:14Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:41:53Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:41:53Z", "osv_earliest_published_at": "2026-06-26T21:40:14Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:46:52Z" }, { "id": "appupdate-cdn-sync-2026-07-10", "display_name": "@appupdate/cdn-sync", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@appupdate/cdn-sync", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6531", "osv_published_at": "2026-06-26T18:24:34Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:41:51Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:41:51Z", "osv_earliest_published_at": "2026-06-26T18:24:34Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:46:45Z" }, { "id": "ai-node-agent-2026-07-10", "display_name": "ai-node-agent", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ai-node-agent", "ecosystem": "npm", "versions": [ "0.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6517", "osv_published_at": "2026-06-26T11:16:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:41:50Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:41:50Z", "osv_earliest_published_at": "2026-06-26T11:16:52Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:46:39Z" }, { "id": "pump-stream-logger-2026-07-10", "display_name": "pump-stream-logger", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pump-stream-logger", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6507", "osv_published_at": "2026-06-26T05:11:13Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:41:49Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:41:49Z", "osv_earliest_published_at": "2026-06-26T05:11:13Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:46:33Z" }, { "id": "pino-zod-2026-07-10", "display_name": "pino-zod", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pino-zod", "ecosystem": "npm", "versions": [ "1.0.121", "1.0.122" ], "osv_entries": [ { "osv_id": "MAL-2026-6505", "osv_published_at": "2026-06-26T05:11:13Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:41:48Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:41:48Z", "osv_earliest_published_at": "2026-06-26T05:11:13Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:46:26Z" }, { "id": "block-slot-2026-07-10", "display_name": "block-slot", "campaign": null, "detection_source": "osv", "packages": [ { "package": "block-slot", "ecosystem": "npm", "versions": [ "1.0.9" ], "osv_entries": [ { "osv_id": "MAL-2026-6416", "osv_published_at": "2026-06-25T04:29:43Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:41:46Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:41:46Z", "osv_earliest_published_at": "2026-06-25T04:29:43Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:46:18Z" }, { "id": "server-parket-2026-07-10", "display_name": "server-parket", "campaign": null, "detection_source": "osv", "packages": [ { "package": "server-parket", "ecosystem": "npm", "versions": [ "0.1.0", "3.8.1", "3.9.1", "3.9.2", "4.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6335", "osv_published_at": "2026-06-23T15:32:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:41:45Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:41:45Z", "osv_earliest_published_at": "2026-06-23T15:32:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:46:12Z" }, { "id": "parket-flow-2026-07-10", "display_name": "parket-flow", "campaign": null, "detection_source": "osv", "packages": [ { "package": "parket-flow", "ecosystem": "npm", "versions": [ "3.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6334", "osv_published_at": "2026-06-23T15:27:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:41:43Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:41:43Z", "osv_earliest_published_at": "2026-06-23T15:27:33Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:46:05Z" }, { "id": "cursorai-agent-2026-07-10", "display_name": "cursorai-agent", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cursorai-agent", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6332", "osv_published_at": "2026-06-23T16:03:56Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:41:42Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:41:42Z", "osv_earliest_published_at": "2026-06-23T16:03:56Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:45:59Z" }, { "id": "react-simple-utils-kit-2026-07-10", "display_name": "react-simple-utils-kit", "campaign": null, "detection_source": "osv", "packages": [ { "package": "react-simple-utils-kit", "ecosystem": "npm", "versions": [ "1.0.3", "1.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6303", "osv_published_at": "2026-06-23T14:46:34Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:41:41Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:41:41Z", "osv_earliest_published_at": "2026-06-23T14:46:34Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:45:52Z" }, { "id": "new-solt-1-2026-07-10", "display_name": "new-solt-1", "campaign": null, "detection_source": "osv", "packages": [ { "package": "new-solt-1", "ecosystem": "npm", "versions": [ "0.0.9" ], "osv_entries": [ { "osv_id": "MAL-2026-6286", "osv_published_at": "2026-06-23T12:15:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:41:39Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:41:39Z", "osv_earliest_published_at": "2026-06-23T12:15:37Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:45:45Z" }, { "id": "new-solt-2026-07-10", "display_name": "new-solt", "campaign": null, "detection_source": "osv", "packages": [ { "package": "new-solt", "ecosystem": "npm", "versions": [ "0.0.7", "0.0.8", "0.0.9" ], "osv_entries": [ { "osv_id": "MAL-2026-6285", "osv_published_at": "2026-06-23T12:15:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:41:38Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:41:38Z", "osv_earliest_published_at": "2026-06-23T12:15:37Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:45:39Z" }, { "id": "new-helper-2026-07-10", "display_name": "new-helper", "campaign": null, "detection_source": "osv", "packages": [ { "package": "new-helper", "ecosystem": "npm", "versions": [ "5.8.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6284", "osv_published_at": "2026-06-23T12:15:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:41:37Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:41:37Z", "osv_earliest_published_at": "2026-06-23T12:15:37Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:45:32Z" }, { "id": "local-ip-helper-2026-07-10", "display_name": "local-ip-helper", "campaign": null, "detection_source": "osv", "packages": [ { "package": "local-ip-helper", "ecosystem": "npm", "versions": [ "0.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6282", "osv_published_at": "2026-06-23T12:05:04Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:41:36Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:41:36Z", "osv_earliest_published_at": "2026-06-23T12:05:04Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:45:26Z" }, { "id": "forge-jsx4-2026-07-10", "display_name": "forge-jsx4", "campaign": null, "detection_source": "osv", "packages": [ { "package": "forge-jsx4", "ecosystem": "npm", "versions": [ "1.0.122" ], "osv_entries": [ { "osv_id": "MAL-2026-6279", "osv_published_at": "2026-06-22T12:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:41:35Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:41:35Z", "osv_earliest_published_at": "2026-06-22T12:00:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://safedep.io/malicious-forge-jsxy-npm-rat-evolution/", "ledger_commit_at": "2026-07-10T00:45:19Z" }, { "id": "node-fetch-utils-2026-07-10", "display_name": "node-fetch-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "node-fetch-utils", "ecosystem": "npm", "versions": [ "1.2.8" ], "osv_entries": [ { "osv_id": "MAL-2026-6271", "osv_published_at": "2026-06-22T19:54:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:41:34Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:41:34Z", "osv_earliest_published_at": "2026-06-22T19:54:51Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:45:12Z" }, { "id": "free-anthropic-claude-2026-07-10", "display_name": "free-anthropic-claude", "campaign": null, "detection_source": "osv", "packages": [ { "package": "free-anthropic-claude", "ecosystem": "npm", "versions": [ "5.0.2", "5.1.7", "5.1.8" ], "osv_entries": [ { "osv_id": "MAL-2026-6260", "osv_published_at": "2026-06-20T18:47:32Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:41:32Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:41:32Z", "osv_earliest_published_at": "2026-06-20T18:47:32Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:45:05Z" }, { "id": "parket-helper-2026-07-10", "display_name": "parket-helper", "campaign": null, "detection_source": "osv", "packages": [ { "package": "parket-helper", "ecosystem": "npm", "versions": [ "5.8.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6119", "osv_published_at": "2026-06-18T15:18:14Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:41:30Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:41:30Z", "osv_earliest_published_at": "2026-06-18T15:18:14Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:44:59Z" }, { "id": "data-utils-d703-2026-07-10", "display_name": "data-utils-d703", "campaign": null, "detection_source": "osv", "packages": [ { "package": "data-utils-d703", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6112", "osv_published_at": "2026-06-18T03:27:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:41:29Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:41:29Z", "osv_earliest_published_at": "2026-06-18T03:27:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:44:52Z" }, { "id": "rafaelsene01-agent-flow-2026-07-10", "display_name": "@rafaelsene01/agent-flow", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@rafaelsene01/agent-flow", "ecosystem": "npm", "versions": [ "1.0.5", "1.1.0", "1.2.0", "1.6.0", "1.8.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6111", "osv_published_at": "2026-06-18T05:19:16Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:41:27Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:41:27Z", "osv_earliest_published_at": "2026-06-18T05:19:16Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:44:46Z" }, { "id": "sodel-pych-2026-07-10", "display_name": "sodel-pych", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sodel-pych", "ecosystem": "npm", "versions": [ "1.0.121", "1.0.122" ], "osv_entries": [ { "osv_id": "MAL-2026-6062", "osv_published_at": "2026-06-17T13:04:18Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:41:25Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:41:25Z", "osv_earliest_published_at": "2026-06-17T13:04:18Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:44:40Z" }, { "id": "redis-type-os-2026-07-10", "display_name": "redis-type-os", "campaign": null, "detection_source": "osv", "packages": [ { "package": "redis-type-os", "ecosystem": "npm", "versions": [ "1.0.4", "1.0.5", "1.0.8", "1.0.9" ], "osv_entries": [ { "osv_id": "MAL-2026-5882", "osv_published_at": "2026-06-16T11:54:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:41:20Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:41:20Z", "osv_earliest_published_at": "2026-06-16T11:54:37Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:44:22Z" }, { "id": "nat-ulid-2026-07-10", "display_name": "nat-ulid", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nat-ulid", "ecosystem": "npm", "versions": [ "3.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5880", "osv_published_at": "2026-06-16T11:44:56Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:41:18Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:41:18Z", "osv_earliest_published_at": "2026-06-16T11:44:56Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:44:16Z" }, { "id": "rbac-auth-2026-07-10", "display_name": "rbac-auth", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rbac-auth", "ecosystem": "npm", "versions": [ "1.1.6" ], "osv_entries": [ { "osv_id": "MAL-2026-5873", "osv_published_at": "2026-06-16T06:09:11Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:41:17Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:41:17Z", "osv_earliest_published_at": "2026-06-16T06:09:11Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:44:09Z" }, { "id": "epm-service-module-v2-2026-07-10", "display_name": "epm-service-module-v2", "campaign": null, "detection_source": "osv", "packages": [ { "package": "epm-service-module-v2", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5851", "osv_published_at": "2026-06-16T00:05:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:41:16Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:41:16Z", "osv_earliest_published_at": "2026-06-16T00:05:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:44:02Z" }, { "id": "prettier-v2-2026-07-10", "display_name": "prettier_v2", "campaign": null, "detection_source": "osv", "packages": [ { "package": "prettier_v2", "ecosystem": "npm", "versions": [ "3.8.5" ], "osv_entries": [ { "osv_id": "MAL-2026-5846", "osv_published_at": "2026-06-15T23:45:43Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:41:15Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:41:15Z", "osv_earliest_published_at": "2026-06-15T23:45:43Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:43:55Z" }, { "id": "prettier-v1-2026-07-10", "display_name": "prettier_v1", "campaign": null, "detection_source": "osv", "packages": [ { "package": "prettier_v1", "ecosystem": "npm", "versions": [ "3.8.4" ], "osv_entries": [ { "osv_id": "MAL-2026-5845", "osv_published_at": "2026-06-15T23:45:43Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:41:14Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:41:14Z", "osv_earliest_published_at": "2026-06-15T23:45:43Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:43:48Z" }, { "id": "browserslist-db-sync-2026-07-10", "display_name": "browserslist-db-sync", "campaign": null, "detection_source": "osv", "packages": [ { "package": "browserslist-db-sync", "ecosystem": "npm", "versions": [ "1.0.4", "1.0.6" ], "osv_entries": [ { "osv_id": "MAL-2026-5842", "osv_published_at": "2026-06-15T23:45:43Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:41:13Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:41:13Z", "osv_earliest_published_at": "2026-06-15T23:45:43Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:43:40Z" }, { "id": "index-ulid-2026-07-10", "display_name": "index-ulid", "campaign": null, "detection_source": "osv", "packages": [ { "package": "index-ulid", "ecosystem": "npm", "versions": [ "3.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5827", "osv_published_at": "2026-06-15T20:08:59Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:41:12Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:41:12Z", "osv_earliest_published_at": "2026-06-15T20:08:59Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:43:34Z" }, { "id": "mailconfirmer-2026-07-10", "display_name": "mailconfirmer", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mailconfirmer", "ecosystem": "npm", "versions": [ "3.3.33" ], "osv_entries": [ { "osv_id": "MAL-2026-5750", "osv_published_at": "2026-06-13T21:10:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:41:07Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:41:07Z", "osv_earliest_published_at": "2026-06-13T21:10:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:43:20Z" }, { "id": "ecto-spirit-win-k4n8-2026-07-10", "display_name": "ecto-spirit-win-k4n8", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ecto-spirit-win-k4n8", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5691", "osv_published_at": "2026-06-12T14:32:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:41:03Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:41:03Z", "osv_earliest_published_at": "2026-06-12T14:32:51Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:43:13Z" }, { "id": "ecto-nightly-spirit-2026-07-10", "display_name": "ecto-nightly-spirit", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ecto-nightly-spirit", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5688", "osv_published_at": "2026-06-12T14:32:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:41:02Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:41:02Z", "osv_earliest_published_at": "2026-06-12T14:32:51Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:43:06Z" }, { "id": "ecto-flag-read-m7p2-2026-07-10", "display_name": "ecto-flag-read-m7p2", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ecto-flag-read-m7p2", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5687", "osv_published_at": "2026-06-12T14:32:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:41:01Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:41:01Z", "osv_earliest_published_at": "2026-06-12T14:32:51Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:42:59Z" }, { "id": "coral-wraith-2026-07-10", "display_name": "coral-wraith", "campaign": null, "detection_source": "osv", "packages": [ { "package": "coral-wraith", "ecosystem": "npm", "versions": [ "18.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5682", "osv_published_at": "2026-06-12T01:41:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:41:00Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:41:00Z", "osv_earliest_published_at": "2026-06-12T01:41:21Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:42:52Z" }, { "id": "ecto-corsair-whisper-6f3b9-2026-07-10", "display_name": "ecto-corsair-whisper-6f3b9", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ecto-corsair-whisper-6f3b9", "ecosystem": "npm", "versions": [ "1.0.6", "1.0.9" ], "osv_entries": [ { "osv_id": "MAL-2026-5640", "osv_published_at": "2026-06-11T12:40:47Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:40:56Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:40:56Z", "osv_earliest_published_at": "2026-06-11T12:40:47Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:42:46Z" }, { "id": "sass-format-2026-07-10", "display_name": "sass-format", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sass-format", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5628", "osv_published_at": "2026-06-11T09:35:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:40:53Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:40:53Z", "osv_earliest_published_at": "2026-06-11T09:35:12Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:42:39Z" }, { "id": "rate-limits-flexible-2026-07-10", "display_name": "rate-limits-flexible", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rate-limits-flexible", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5627", "osv_published_at": "2026-06-11T09:35:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:40:52Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:40:52Z", "osv_earliest_published_at": "2026-06-11T09:35:12Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:42:33Z" }, { "id": "forge-jsx2-2026-07-10", "display_name": "forge-jsx2", "campaign": null, "detection_source": "osv", "packages": [ { "package": "forge-jsx2", "ecosystem": "npm", "versions": [ "1.0.126" ], "osv_entries": [ { "osv_id": "MAL-2026-5568", "osv_published_at": "2026-06-11T04:47:43Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:40:51Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:40:51Z", "osv_earliest_published_at": "2026-06-11T04:47:43Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:42:26Z" }, { "id": "sql-access-nodesql-2026-07-10", "display_name": "@sql-access/nodesql", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@sql-access/nodesql", "ecosystem": "npm", "versions": [ "1.1.0", "1.1.9" ], "osv_entries": [ { "osv_id": "MAL-2026-5394", "osv_published_at": "2026-06-09T15:58:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:39:44Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:39:44Z", "osv_earliest_published_at": "2026-06-09T15:58:52Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:42:18Z" }, { "id": "doaction-examples-2026-07-10", "display_name": "@doaction/examples", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@doaction/examples", "ecosystem": "npm", "versions": [ "9.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-5372", "osv_published_at": "2026-06-09T14:17:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:39:42Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:39:42Z", "osv_earliest_published_at": "2026-06-09T14:17:42Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:42:10Z" }, { "id": "doaction-example-2026-07-10", "display_name": "@doaction/example", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@doaction/example", "ecosystem": "npm", "versions": [ "9.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-5371", "osv_published_at": "2026-06-09T14:17:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:39:40Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:39:40Z", "osv_earliest_published_at": "2026-06-09T14:17:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:42:03Z" }, { "id": "ethereum-kit-1-2026-07-10", "display_name": "ethereum-kit-1", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ethereum-kit-1", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5355", "osv_published_at": "2026-06-09T07:55:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:39:39Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:39:39Z", "osv_earliest_published_at": "2026-06-09T07:55:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://app.safedep.io/community/malysis/01KTN5C3T4WGY271HXKTAZVC5D", "ledger_commit_at": "2026-07-10T00:41:55Z" }, { "id": "crypto-utils-7-2026-07-10", "display_name": "crypto-utils-7", "campaign": null, "detection_source": "osv", "packages": [ { "package": "crypto-utils-7", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5353", "osv_published_at": "2026-06-09T07:55:28Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:39:37Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:39:37Z", "osv_earliest_published_at": "2026-06-09T07:55:28Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://app.safedep.io/community/malysis/01KTN5C3TJZG5F660Y9K4BDYDN", "ledger_commit_at": "2026-07-10T00:41:48Z" }, { "id": "blockchain-helper-0-2026-07-10", "display_name": "blockchain-helper-0", "campaign": null, "detection_source": "osv", "packages": [ { "package": "blockchain-helper-0", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5352", "osv_published_at": "2026-06-09T07:53:45Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:39:36Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:39:36Z", "osv_earliest_published_at": "2026-06-09T07:53:45Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://app.safedep.io/community/malysis/01KTN3QACESWZP4EK3W7D1JJGC", "ledger_commit_at": "2026-07-10T00:41:42Z" }, { "id": "os-ulid-void-2026-07-10", "display_name": "os-ulid-void", "campaign": null, "detection_source": "osv", "packages": [ { "package": "os-ulid-void", "ecosystem": "npm", "versions": [ "3.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5348", "osv_published_at": "2026-06-09T09:47:44Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:39:35Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:39:35Z", "osv_earliest_published_at": "2026-06-09T09:47:44Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:41:35Z" }, { "id": "autotel-terminal-2026-07-10", "display_name": "autotel-terminal", "campaign": null, "detection_source": "osv", "packages": [ { "package": "autotel-terminal", "ecosystem": "npm", "versions": [ "24.0.0", "25.0.0", "26.0.0", "27.0.0", "27.0.1", "28.0.0", "29.0.0", "29.0.1", "29.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5186", "osv_published_at": "2026-06-04T18:54:09Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:39:33Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:39:33Z", "osv_earliest_published_at": "2026-06-04T18:54:09Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:41:26Z" }, { "id": "validator-string-2026-07-10", "display_name": "validator-string", "campaign": null, "detection_source": "osv", "packages": [ { "package": "validator-string", "ecosystem": "npm", "versions": [ "13.15.36" ], "osv_entries": [ { "osv_id": "MAL-2026-10109", "osv_published_at": "2026-07-09T23:05:09Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:39:26Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:39:26Z", "osv_earliest_published_at": "2026-07-09T23:05:09Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:41:12Z" }, { "id": "url-func-registry-2026-07-10", "display_name": "url-func-registry", "campaign": null, "detection_source": "osv", "packages": [ { "package": "url-func-registry", "ecosystem": "npm", "versions": [ "1.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-10108", "osv_published_at": "2026-07-09T23:04:55Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:39:25Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:39:25Z", "osv_earliest_published_at": "2026-07-09T23:04:55Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:41:05Z" }, { "id": "security-node-2026-07-10", "display_name": "security-node", "campaign": null, "detection_source": "osv", "packages": [ { "package": "security-node", "ecosystem": "npm", "versions": [ "1.1.4" ], "osv_entries": [ { "osv_id": "MAL-2026-10107", "osv_published_at": "2026-07-09T23:02:15Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:39:24Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:39:24Z", "osv_earliest_published_at": "2026-07-09T23:02:15Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:40:58Z" }, { "id": "rallycoding-2026-07-10", "display_name": "rallycoding", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rallycoding", "ecosystem": "npm", "versions": [ "3.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10106", "osv_published_at": "2026-07-09T22:57:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:39:23Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:39:23Z", "osv_earliest_published_at": "2026-07-09T22:57:12Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:40:51Z" }, { "id": "pxpure8-2026-07-10", "display_name": "pxpure8", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pxpure8", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10105", "osv_published_at": "2026-07-09T23:09:27Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:39:22Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:39:22Z", "osv_earliest_published_at": "2026-07-09T23:09:27Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:40:45Z" }, { "id": "px8my-2026-07-10", "display_name": "px8my", "campaign": null, "detection_source": "osv", "packages": [ { "package": "px8my", "ecosystem": "npm", "versions": [ "1.0.13", "1.0.22", "1.0.23", "1.0.24", "1.0.25", "1.0.26", "1.0.27", "1.0.28", "1.0.29", "1.0.30", "1.0.31", "1.0.32", "1.0.33", "1.0.34", "1.0.35", "1.0.36", "1.0.37", "1.0.38", "1.0.39", "1.0.40", "1.0.41", "1.0.42", "1.0.43", "1.0.44", "1.0.45", "1.0.46", "1.0.47", "1.0.48", "1.0.49", "1.0.50", "1.0.51", "1.0.52", "1.0.53", "1.0.54" ], "osv_entries": [ { "osv_id": "MAL-2026-10104", "osv_published_at": "2026-07-09T23:08:44Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:39:21Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:39:21Z", "osv_earliest_published_at": "2026-07-09T23:08:44Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-17T01:05:54Z" }, { "id": "optimize-regex-2026-07-10", "display_name": "optimize-regex", "campaign": null, "detection_source": "osv", "packages": [ { "package": "optimize-regex", "ecosystem": "npm", "versions": [ "1.2.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10103", "osv_published_at": "2026-07-09T23:01:55Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:39:19Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:39:19Z", "osv_earliest_published_at": "2026-07-09T23:01:55Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:40:31Z" }, { "id": "dc-repro-2026-07-10", "display_name": "dc-repro", "campaign": null, "detection_source": "osv", "packages": [ { "package": "dc-repro", "ecosystem": "npm", "versions": [ "2.1.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10102", "osv_published_at": "2026-07-09T23:10:31Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:39:18Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:39:18Z", "osv_earliest_published_at": "2026-07-09T23:10:31Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:40:24Z" }, { "id": "date-kit-lite-2026-07-10", "display_name": "date-kit-lite", "campaign": null, "detection_source": "osv", "packages": [ { "package": "date-kit-lite", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10101", "osv_published_at": "2026-07-09T23:10:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:39:17Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:39:17Z", "osv_earliest_published_at": "2026-07-09T23:10:21Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:40:17Z" }, { "id": "polipoli-pak-2026-07-10", "display_name": "polipoli-pak", "campaign": null, "detection_source": "osv", "packages": [ { "package": "polipoli-pak", "ecosystem": "npm", "versions": [ "1.0.1", "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10099", "osv_published_at": "2026-07-09T22:52:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:39:16Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:39:16Z", "osv_earliest_published_at": "2026-07-09T22:52:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:40:09Z" }, { "id": "fastify-addone-2026-07-10", "display_name": "fastify-addone", "campaign": null, "detection_source": "osv", "packages": [ { "package": "fastify-addone", "ecosystem": "npm", "versions": [ "5.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10098", "osv_published_at": "2026-07-09T22:16:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:39:15Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:39:15Z", "osv_earliest_published_at": "2026-07-09T22:16:42Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:40:02Z" }, { "id": "guest-app-ui-2026-07-10", "display_name": "guest-app-ui", "campaign": null, "detection_source": "osv", "packages": [ { "package": "guest-app-ui", "ecosystem": "npm", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10096", "osv_published_at": "2026-07-09T20:43:04Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:38:49Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:38:49Z", "osv_earliest_published_at": "2026-07-09T20:43:04Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:39:55Z" }, { "id": "fury-frontend-andes-ui-2026-07-10", "display_name": "fury_frontend-andes-ui", "campaign": null, "detection_source": "osv", "packages": [ { "package": "fury_frontend-andes-ui", "ecosystem": "npm", "versions": [ "99.9.5", "99.9.6" ], "osv_entries": [ { "osv_id": "MAL-2026-10095", "osv_published_at": "2026-07-09T20:40:26Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:38:47Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:38:47Z", "osv_earliest_published_at": "2026-07-09T20:40:26Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T15:40:48Z" }, { "id": "equansservices-setup-2026-07-10", "display_name": "@equansservices/setup", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@equansservices/setup", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2", "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-10094", "osv_published_at": "2026-07-09T20:21:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:38:46Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:38:46Z", "osv_earliest_published_at": "2026-07-09T20:21:25Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:39:41Z" }, { "id": "andrewstory18-is-real-odd-2026-07-10", "display_name": "@andrewstory18/is-real-odd", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@andrewstory18/is-real-odd", "ecosystem": "npm", "versions": [ "2.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-10093", "osv_published_at": "2026-07-09T19:18:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:38:44Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:38:44Z", "osv_earliest_published_at": "2026-07-09T19:18:33Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:39:35Z" }, { "id": "vite-pwa-config-2026-07-10", "display_name": "vite-pwa-config", "campaign": null, "detection_source": "osv", "packages": [ { "package": "vite-pwa-config", "ecosystem": "npm", "versions": [ "1.1.1", "1.1.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10092", "osv_published_at": "2026-07-09T18:49:09Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:38:43Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:38:43Z", "osv_earliest_published_at": "2026-07-09T18:49:09Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:39:28Z" }, { "id": "txs-builder-lib-2026-07-10", "display_name": "txs-builder-lib", "campaign": null, "detection_source": "osv", "packages": [ { "package": "txs-builder-lib", "ecosystem": "npm", "versions": [ "1.0.1", "1.0.2", "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-10021", "osv_published_at": "2026-07-09T14:39:28Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:38:35Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:38:35Z", "osv_earliest_published_at": "2026-07-09T14:39:28Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:38:47Z" }, { "id": "qlkube-2026-07-10", "display_name": "qlkube", "campaign": null, "detection_source": "osv", "packages": [ { "package": "qlkube", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10016", "osv_published_at": "2026-07-09T11:17:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:38:33Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:38:33Z", "osv_earliest_published_at": "2026-07-09T11:17:49Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:38:41Z" }, { "id": "chain-api-sdk-2026-07-10", "display_name": "chain-api-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chain-api-sdk", "ecosystem": "npm", "versions": [ "0.2.10", "0.2.11", "0.2.12" ], "osv_entries": [ { "osv_id": "MAL-2026-10009", "osv_published_at": "2026-07-09T11:26:45Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:38:32Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:38:32Z", "osv_earliest_published_at": "2026-07-09T11:26:45Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:38:34Z" }, { "id": "proxy-check-i-2026-07-10", "display_name": "proxy-check-i", "campaign": null, "detection_source": "osv", "packages": [ { "package": "proxy-check-i", "ecosystem": "pypi", "versions": [ "0.1.0", "0.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10100", "osv_published_at": "2026-07-09T22:16:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-10T00:34:29Z", "flagged_at": null, "confirmed_at": "2026-07-10T00:34:29Z", "osv_earliest_published_at": "2026-07-09T22:16:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:34:32Z" }, { "id": "zreactjs-2026-07-09", "display_name": "zreactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "zreactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7447", "osv_published_at": "2026-07-07T13:18:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:01:14Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:01:14Z", "osv_earliest_published_at": "2026-07-07T13:18:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:41:51Z" }, { "id": "zircuit-vault-2026-07-09", "display_name": "zircuit-vault", "campaign": null, "detection_source": "osv", "packages": [ { "package": "zircuit-vault", "ecosystem": "npm", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7446", "osv_published_at": "2026-07-07T13:18:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:01:13Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:01:13Z", "osv_earliest_published_at": "2026-07-07T13:18:37Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:41:44Z" }, { "id": "zircuit-reporter-2026-07-09", "display_name": "zircuit-reporter", "campaign": null, "detection_source": "osv", "packages": [ { "package": "zircuit-reporter", "ecosystem": "npm", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7445", "osv_published_at": "2026-07-07T13:18:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:01:12Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:01:12Z", "osv_earliest_published_at": "2026-07-07T13:18:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:41:37Z" }, { "id": "zircuit-oracle-2026-07-09", "display_name": "zircuit-oracle", "campaign": null, "detection_source": "osv", "packages": [ { "package": "zircuit-oracle", "ecosystem": "npm", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7444", "osv_published_at": "2026-07-07T13:18:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:01:11Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:01:11Z", "osv_earliest_published_at": "2026-07-07T13:18:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:41:30Z" }, { "id": "zircuit-keeper-2026-07-09", "display_name": "zircuit-keeper", "campaign": null, "detection_source": "osv", "packages": [ { "package": "zircuit-keeper", "ecosystem": "npm", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7443", "osv_published_at": "2026-07-07T13:18:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:01:10Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:01:10Z", "osv_earliest_published_at": "2026-07-07T13:18:35Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:41:22Z" }, { "id": "yreactjs-2026-07-09", "display_name": "yreactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "yreactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7442", "osv_published_at": "2026-07-07T13:18:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:01:09Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:01:09Z", "osv_earliest_published_at": "2026-07-07T13:18:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:41:16Z" }, { "id": "wreactjs-2026-07-09", "display_name": "wreactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "wreactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7441", "osv_published_at": "2026-07-07T13:17:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:01:07Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:01:07Z", "osv_earliest_published_at": "2026-07-07T13:17:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:41:08Z" }, { "id": "winston-middleware-2026-07-09", "display_name": "winston-middleware", "campaign": null, "detection_source": "osv", "packages": [ { "package": "winston-middleware", "ecosystem": "npm", "versions": [ "0.1.0", "0.1.1", "0.1.2", "0.1.3", "0.2.0", "0.2.1", "0.2.2", "0.2.3", "0.2.4", "0.3.1", "1.0.0", "1.1.0", "1.2.0", "1.3.0", "1.3.1", "1.4.0", "2.0.0", "3.0.0", "3.0.1", "4.0.0", "4.0.1", "4.0.2", "4.0.3", "4.0.4", "4.1.0", "4.2.0", "4.3.0", "4.3.1", "4.3.2", "4.3.3", "4.3.4", "4.3.5", "4.3.6", "4.3.7", "4.3.8", "4.4.0", "4.5.0", "4.5.3", "4.6.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7440", "osv_published_at": "2026-07-07T13:17:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:01:06Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:01:06Z", "osv_earliest_published_at": "2026-07-07T13:17:06Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:41:01Z" }, { "id": "win-env-setup-2026-07-09", "display_name": "win-env-setup", "campaign": null, "detection_source": "osv", "packages": [ { "package": "win-env-setup", "ecosystem": "npm", "versions": [ "3.0.5", "3.0.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7439", "osv_published_at": "2026-07-07T13:16:56Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:01:00Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:01:00Z", "osv_earliest_published_at": "2026-07-07T13:16:56Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:40:54Z" }, { "id": "whaleco-assets-json-2026-07-09", "display_name": "whaleco-assets-json", "campaign": null, "detection_source": "osv", "packages": [ { "package": "whaleco-assets-json", "ecosystem": "npm", "versions": [ "100.0.5", "99.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-7438", "osv_published_at": "2026-07-07T13:16:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:00:59Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:00:59Z", "osv_earliest_published_at": "2026-07-07T13:16:50Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:40:47Z" }, { "id": "web3-runtime-engine-2026-07-09", "display_name": "web3-runtime-engine", "campaign": null, "detection_source": "osv", "packages": [ { "package": "web3-runtime-engine", "ecosystem": "npm", "versions": [ "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-7437", "osv_published_at": "2026-07-07T13:16:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:00:58Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:00:58Z", "osv_earliest_published_at": "2026-07-07T13:16:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:40:40Z" }, { "id": "wazirx-localtestnpm-2026-07-09", "display_name": "wazirx-localtestnpm", "campaign": null, "detection_source": "osv", "packages": [ { "package": "wazirx-localtestnpm", "ecosystem": "npm", "versions": [ "9.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-7436", "osv_published_at": "2026-07-07T13:16:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:00:57Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:00:57Z", "osv_earliest_published_at": "2026-07-07T13:16:21Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:40:33Z" }, { "id": "wazir-xlocaletstnpm-2026-07-09", "display_name": "wazir-xlocaletstnpm", "campaign": null, "detection_source": "osv", "packages": [ { "package": "wazir-xlocaletstnpm", "ecosystem": "npm", "versions": [ "9.9.2", "9.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-7435", "osv_published_at": "2026-07-07T13:16:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:00:56Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:00:56Z", "osv_earliest_published_at": "2026-07-07T13:16:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:40:27Z" }, { "id": "wallarm-design-system-2026-07-09", "display_name": "wallarm-design-system", "campaign": null, "detection_source": "osv", "packages": [ { "package": "wallarm-design-system", "ecosystem": "npm", "versions": [ "1.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7434", "osv_published_at": "2026-07-07T13:16:09Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:00:55Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:00:55Z", "osv_earliest_published_at": "2026-07-07T13:16:09Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:40:19Z" }, { "id": "vubiquity-website-2026-07-09", "display_name": "vubiquity-website", "campaign": null, "detection_source": "osv", "packages": [ { "package": "vubiquity-website", "ecosystem": "npm", "versions": [ "3.9.10" ], "osv_entries": [ { "osv_id": "MAL-2026-7433", "osv_published_at": "2026-07-07T13:15:56Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:00:54Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:00:54Z", "osv_earliest_published_at": "2026-07-07T13:15:56Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:40:11Z" }, { "id": "vscode-component-explorer-2026-07-09", "display_name": "vscode-component-explorer", "campaign": null, "detection_source": "osv", "packages": [ { "package": "vscode-component-explorer", "ecosystem": "npm", "versions": [ "99.9.15", "99.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-7432", "osv_published_at": "2026-07-07T13:15:54Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:00:53Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:00:53Z", "osv_earliest_published_at": "2026-07-07T13:15:54Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:40:04Z" }, { "id": "vreactjs-2026-07-09", "display_name": "vreactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "vreactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7431", "osv_published_at": "2026-07-07T13:15:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:00:52Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:00:52Z", "osv_earliest_published_at": "2026-07-07T13:15:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:39:57Z" }, { "id": "ureactjs-2026-07-09", "display_name": "ureactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ureactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7430", "osv_published_at": "2026-07-07T13:15:10Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:00:50Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:00:50Z", "osv_earliest_published_at": "2026-07-07T13:15:10Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:39:50Z" }, { "id": "treactjs-2026-07-09", "display_name": "treactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "treactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7429", "osv_published_at": "2026-07-07T13:14:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:00:49Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:00:49Z", "osv_earliest_published_at": "2026-07-07T13:14:07Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:39:43Z" }, { "id": "timelycare-2026-07-09", "display_name": "timelycare", "campaign": null, "detection_source": "osv", "packages": [ { "package": "timelycare", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7428", "osv_published_at": "2026-07-07T13:13:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:00:48Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:00:48Z", "osv_earliest_published_at": "2026-07-07T13:13:50Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:39:36Z" }, { "id": "swiper-css-normalize-2026-07-09", "display_name": "swiper-css-normalize", "campaign": null, "detection_source": "osv", "packages": [ { "package": "swiper-css-normalize", "ecosystem": "npm", "versions": [ "1.0.10", "1.0.11", "1.0.12", "1.0.13", "1.0.14", "1.0.15", "1.0.16", "1.0.17", "1.0.18", "1.0.3", "1.0.4", "1.0.5", "1.0.6", "1.0.7", "1.0.8", "1.0.9" ], "osv_entries": [ { "osv_id": "MAL-2026-7427", "osv_published_at": "2026-07-07T13:12:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:00:47Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:00:47Z", "osv_earliest_published_at": "2026-07-07T13:12:23Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:39:30Z" }, { "id": "suit-base-2026-07-09", "display_name": "suit-base", "campaign": null, "detection_source": "osv", "packages": [ { "package": "suit-base", "ecosystem": "npm", "versions": [ "45.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7426", "osv_published_at": "2026-07-07T13:12:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:00:44Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:00:44Z", "osv_earliest_published_at": "2026-07-07T13:12:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:39:23Z" }, { "id": "style-to-objact-2026-07-09", "display_name": "style-to-objact", "campaign": null, "detection_source": "osv", "packages": [ { "package": "style-to-objact", "ecosystem": "npm", "versions": [ "99.9.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7425", "osv_published_at": "2026-07-07T13:12:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:00:43Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:00:43Z", "osv_earliest_published_at": "2026-07-07T13:12:07Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:39:17Z" }, { "id": "strapi-plugin-pocvk-2026-07-09", "display_name": "strapi-plugin-pocvk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "strapi-plugin-pocvk", "ecosystem": "npm", "versions": [ "0.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-7424", "osv_published_at": "2026-07-07T13:12:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:00:42Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:00:42Z", "osv_earliest_published_at": "2026-07-07T13:12:05Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:39:10Z" }, { "id": "stellar-stablecoin-scripts-2026-07-09", "display_name": "stellar-stablecoin-scripts", "campaign": null, "detection_source": "osv", "packages": [ { "package": "stellar-stablecoin-scripts", "ecosystem": "npm", "versions": [ "99.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7423", "osv_published_at": "2026-07-07T13:11:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:00:41Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:00:41Z", "osv_earliest_published_at": "2026-07-07T13:11:52Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:39:03Z" }, { "id": "sitefinitywebapp-2026-07-09", "display_name": "sitefinitywebapp", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sitefinitywebapp", "ecosystem": "npm", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7421", "osv_published_at": "2026-07-07T13:10:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:00:39Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:00:39Z", "osv_earliest_published_at": "2026-07-07T13:10:51Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:38:55Z" }, { "id": "sim-apis-chatbot-2026-07-09", "display_name": "sim-apis-chatbot", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sim-apis-chatbot", "ecosystem": "npm", "versions": [ "1.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7420", "osv_published_at": "2026-07-07T13:10:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:00:38Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:00:38Z", "osv_earliest_published_at": "2026-07-07T13:10:38Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:38:49Z" }, { "id": "shiphero-dashboard-2026-07-09", "display_name": "shiphero-dashboard", "campaign": null, "detection_source": "osv", "packages": [ { "package": "shiphero-dashboard", "ecosystem": "npm", "versions": [ "1.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7419", "osv_published_at": "2026-07-07T13:10:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:00:37Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:00:37Z", "osv_earliest_published_at": "2026-07-07T13:10:35Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:38:41Z" }, { "id": "serverless-twi-testing-2026-07-09", "display_name": "serverless-twi-testing", "campaign": null, "detection_source": "osv", "packages": [ { "package": "serverless-twi-testing", "ecosystem": "npm", "versions": [ "1.0.7" ], "osv_entries": [ { "osv_id": "MAL-2026-7418", "osv_published_at": "2026-07-07T13:10:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:00:36Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:00:36Z", "osv_earliest_published_at": "2026-07-07T13:10:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:38:34Z" }, { "id": "rzeactjs-2026-07-09", "display_name": "rzeactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rzeactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7417", "osv_published_at": "2026-07-07T13:09:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:00:35Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:00:35Z", "osv_earliest_published_at": "2026-07-07T13:09:38Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:38:26Z" }, { "id": "ryeactjs-2026-07-09", "display_name": "ryeactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ryeactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7416", "osv_published_at": "2026-07-07T13:09:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:00:34Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:00:34Z", "osv_earliest_published_at": "2026-07-07T13:09:37Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:38:20Z" }, { "id": "rxeactjs-2026-07-09", "display_name": "rxeactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rxeactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7415", "osv_published_at": "2026-07-07T13:09:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:00:32Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:00:32Z", "osv_earliest_published_at": "2026-07-07T13:09:37Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:38:11Z" }, { "id": "rweactjs-2026-07-09", "display_name": "rweactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rweactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7414", "osv_published_at": "2026-07-07T13:09:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:00:31Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:00:31Z", "osv_earliest_published_at": "2026-07-07T13:09:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:38:05Z" }, { "id": "rveactjs-2026-07-09", "display_name": "rveactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rveactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7413", "osv_published_at": "2026-07-07T13:09:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:00:30Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:00:30Z", "osv_earliest_published_at": "2026-07-07T13:09:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:37:57Z" }, { "id": "rueactjs-2026-07-09", "display_name": "rueactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rueactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7412", "osv_published_at": "2026-07-07T13:09:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:00:29Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:00:29Z", "osv_earliest_published_at": "2026-07-07T13:09:35Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:37:51Z" }, { "id": "rteactjs-2026-07-09", "display_name": "rteactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rteactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7411", "osv_published_at": "2026-07-07T13:09:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:00:27Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:00:27Z", "osv_earliest_published_at": "2026-07-07T13:09:23Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:37:33Z" }, { "id": "rseactjs-2026-07-09", "display_name": "rseactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rseactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7410", "osv_published_at": "2026-07-07T13:09:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:00:26Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:00:26Z", "osv_earliest_published_at": "2026-07-07T13:09:23Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:37:23Z" }, { "id": "rreactjs-2026-07-09", "display_name": "rreactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rreactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7409", "osv_published_at": "2026-07-07T13:09:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:00:25Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:00:25Z", "osv_earliest_published_at": "2026-07-07T13:09:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:37:12Z" }, { "id": "rqeactjs-2026-07-09", "display_name": "rqeactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rqeactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7408", "osv_published_at": "2026-07-07T13:09:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:00:23Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:00:23Z", "osv_earliest_published_at": "2026-07-07T13:09:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:37:06Z" }, { "id": "rpeactjs-2026-07-09", "display_name": "rpeactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rpeactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7407", "osv_published_at": "2026-07-07T13:09:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:00:22Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:00:22Z", "osv_earliest_published_at": "2026-07-07T13:09:21Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:37:00Z" }, { "id": "roeactjs-2026-07-09", "display_name": "roeactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "roeactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7406", "osv_published_at": "2026-07-07T13:09:09Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:00:21Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:00:21Z", "osv_earliest_published_at": "2026-07-07T13:09:09Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:36:52Z" }, { "id": "roblox-lua-promise-2026-07-09", "display_name": "roblox-lua-promise", "campaign": null, "detection_source": "osv", "packages": [ { "package": "roblox-lua-promise", "ecosystem": "npm", "versions": [ "99.9.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7405", "osv_published_at": "2026-07-07T13:09:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:00:20Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:00:20Z", "osv_earliest_published_at": "2026-07-07T13:09:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:36:45Z" }, { "id": "rngularjs-2026-07-09", "display_name": "rngularjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rngularjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7404", "osv_published_at": "2026-07-07T13:09:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:00:19Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:00:19Z", "osv_earliest_published_at": "2026-07-07T13:09:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:36:38Z" }, { "id": "rneactjs-2026-07-09", "display_name": "rneactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rneactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7403", "osv_published_at": "2026-07-07T13:09:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:00:17Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:00:17Z", "osv_earliest_published_at": "2026-07-07T13:09:07Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:36:32Z" }, { "id": "rn-bitu-user-2026-07-09", "display_name": "rn-bitu-user", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rn-bitu-user", "ecosystem": "npm", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7402", "osv_published_at": "2026-07-07T13:09:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:00:16Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:00:16Z", "osv_earliest_published_at": "2026-07-07T13:09:07Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:36:21Z" }, { "id": "rn-bitu-2026-07-09", "display_name": "rn-bitu", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rn-bitu", "ecosystem": "npm", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7401", "osv_published_at": "2026-07-07T13:09:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:00:15Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:00:15Z", "osv_earliest_published_at": "2026-07-07T13:09:06Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:36:13Z" }, { "id": "rmeactjs-2026-07-09", "display_name": "rmeactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rmeactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7400", "osv_published_at": "2026-07-07T13:09:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:00:14Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:00:14Z", "osv_earliest_published_at": "2026-07-07T13:09:06Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:36:05Z" }, { "id": "rleactjs-2026-07-09", "display_name": "rleactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rleactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7399", "osv_published_at": "2026-07-07T13:09:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:00:13Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:00:13Z", "osv_earliest_published_at": "2026-07-07T13:09:06Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:35:59Z" }, { "id": "rkeactjs-2026-07-09", "display_name": "rkeactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rkeactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7398", "osv_published_at": "2026-07-07T13:09:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:00:11Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:00:11Z", "osv_earliest_published_at": "2026-07-07T13:09:05Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:35:47Z" }, { "id": "rjeactjs-2026-07-09", "display_name": "rjeactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rjeactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7397", "osv_published_at": "2026-07-07T13:09:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:00:10Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:00:10Z", "osv_earliest_published_at": "2026-07-07T13:09:05Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:35:41Z" }, { "id": "rieactjs-2026-07-09", "display_name": "rieactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rieactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7396", "osv_published_at": "2026-07-07T13:08:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:00:09Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:00:09Z", "osv_earliest_published_at": "2026-07-07T13:08:51Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:35:32Z" }, { "id": "rheactjs-2026-07-09", "display_name": "rheactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rheactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7395", "osv_published_at": "2026-07-07T13:08:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:00:07Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:00:07Z", "osv_earliest_published_at": "2026-07-07T13:08:51Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:35:18Z" }, { "id": "rgeactjs-2026-07-09", "display_name": "rgeactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rgeactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7394", "osv_published_at": "2026-07-07T13:08:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:00:06Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:00:06Z", "osv_earliest_published_at": "2026-07-07T13:08:50Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:35:09Z" }, { "id": "rfeactjs-2026-07-09", "display_name": "rfeactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rfeactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7393", "osv_published_at": "2026-07-07T13:08:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:00:05Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:00:05Z", "osv_earliest_published_at": "2026-07-07T13:08:38Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:35:02Z" }, { "id": "rezactjs-2026-07-09", "display_name": "rezactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rezactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7392", "osv_published_at": "2026-07-07T13:08:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:00:04Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:00:04Z", "osv_earliest_published_at": "2026-07-07T13:08:38Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:34:54Z" }, { "id": "rewactjs-2026-07-09", "display_name": "rewactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rewactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7391", "osv_published_at": "2026-07-07T13:08:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:00:02Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:00:02Z", "osv_earliest_published_at": "2026-07-07T13:08:37Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:34:33Z" }, { "id": "revactjs-2026-07-09", "display_name": "revactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "revactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7390", "osv_published_at": "2026-07-07T13:08:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:00:01Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:00:01Z", "osv_earliest_published_at": "2026-07-07T13:08:37Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:34:26Z" }, { "id": "reuactjs-2026-07-09", "display_name": "reuactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "reuactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7389", "osv_published_at": "2026-07-07T13:08:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T19:00:00Z", "flagged_at": null, "confirmed_at": "2026-07-09T19:00:00Z", "osv_earliest_published_at": "2026-07-07T13:08:37Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:34:11Z" }, { "id": "retactjs-2026-07-09", "display_name": "retactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "retactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7388", "osv_published_at": "2026-07-07T13:08:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:59Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:59Z", "osv_earliest_published_at": "2026-07-07T13:08:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:33:59Z" }, { "id": "resource-library-engine-2026-07-09", "display_name": "resource-library-engine", "campaign": null, "detection_source": "osv", "packages": [ { "package": "resource-library-engine", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-7387", "osv_published_at": "2026-07-07T13:08:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:57Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:57Z", "osv_earliest_published_at": "2026-07-07T13:08:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:33:53Z" }, { "id": "resolve-uri-internal-2026-07-09", "display_name": "resolve-uri-internal", "campaign": null, "detection_source": "osv", "packages": [ { "package": "resolve-uri-internal", "ecosystem": "npm", "versions": [ "99.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7386", "osv_published_at": "2026-07-07T13:08:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:56Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:56Z", "osv_earliest_published_at": "2026-07-07T13:08:35Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:33:42Z" }, { "id": "resactjs-2026-07-09", "display_name": "resactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "resactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7385", "osv_published_at": "2026-07-07T13:08:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:55Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:55Z", "osv_earliest_published_at": "2026-07-07T13:08:23Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:33:34Z" }, { "id": "remactjs-2026-07-09", "display_name": "remactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "remactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7384", "osv_published_at": "2026-07-07T13:08:09Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:54Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:54Z", "osv_earliest_published_at": "2026-07-07T13:08:09Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:33:28Z" }, { "id": "reiactjs-2026-07-09", "display_name": "reiactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "reiactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7383", "osv_published_at": "2026-07-07T13:08:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:53Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:53Z", "osv_earliest_published_at": "2026-07-07T13:08:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:33:17Z" }, { "id": "rei-internal-logger-2026-07-09", "display_name": "rei-internal-logger", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rei-internal-logger", "ecosystem": "npm", "versions": [ "100.0.0", "99.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-7382", "osv_published_at": "2026-07-07T13:08:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:51Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:51Z", "osv_earliest_published_at": "2026-07-07T13:08:07Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:33:10Z" }, { "id": "regactjs-2026-07-09", "display_name": "regactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "regactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7381", "osv_published_at": "2026-07-07T13:08:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:50Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:50Z", "osv_earliest_published_at": "2026-07-07T13:08:06Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:33:03Z" }, { "id": "reeactjs-2026-07-09", "display_name": "reeactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "reeactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7380", "osv_published_at": "2026-07-07T13:08:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:49Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:49Z", "osv_earliest_published_at": "2026-07-07T13:08:06Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:32:56Z" }, { "id": "rebactjs-2026-07-09", "display_name": "rebactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rebactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7379", "osv_published_at": "2026-07-07T13:07:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:48Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:48Z", "osv_earliest_published_at": "2026-07-07T13:07:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:32:49Z" }, { "id": "reayctjs-2026-07-09", "display_name": "reayctjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "reayctjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7378", "osv_published_at": "2026-07-07T13:07:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:46Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:46Z", "osv_earliest_published_at": "2026-07-07T13:07:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:32:42Z" }, { "id": "reavctjs-2026-07-09", "display_name": "reavctjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "reavctjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7377", "osv_published_at": "2026-07-07T13:07:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:45Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:45Z", "osv_earliest_published_at": "2026-07-07T13:07:52Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:32:35Z" }, { "id": "reauctjs-2026-07-09", "display_name": "reauctjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "reauctjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7376", "osv_published_at": "2026-07-07T13:07:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:44Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:44Z", "osv_earliest_published_at": "2026-07-07T13:07:51Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:32:24Z" }, { "id": "reatctjs-2026-07-09", "display_name": "reatctjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "reatctjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7375", "osv_published_at": "2026-07-07T13:07:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:43Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:43Z", "osv_earliest_published_at": "2026-07-07T13:07:51Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:32:13Z" }, { "id": "rearctjs-2026-07-09", "display_name": "rearctjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rearctjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7374", "osv_published_at": "2026-07-07T13:07:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:41Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:41Z", "osv_earliest_published_at": "2026-07-07T13:07:51Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:32:03Z" }, { "id": "reamctjs-2026-07-09", "display_name": "reamctjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "reamctjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7373", "osv_published_at": "2026-07-07T13:07:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:40Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:40Z", "osv_earliest_published_at": "2026-07-07T13:07:50Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:31:54Z" }, { "id": "realtime-voice-component-2026-07-09", "display_name": "realtime-voice-component", "campaign": null, "detection_source": "osv", "packages": [ { "package": "realtime-voice-component", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-7372", "osv_published_at": "2026-07-07T13:07:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:39Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:39Z", "osv_earliest_published_at": "2026-07-07T13:07:50Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:31:38Z" }, { "id": "reafctjs-2026-07-09", "display_name": "reafctjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "reafctjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7371", "osv_published_at": "2026-07-07T13:07:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:38Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:38Z", "osv_earliest_published_at": "2026-07-07T13:07:38Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:31:26Z" }, { "id": "reacytjs-2026-07-09", "display_name": "reacytjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "reacytjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7370", "osv_published_at": "2026-07-07T13:07:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:36Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:36Z", "osv_earliest_published_at": "2026-07-07T13:07:38Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:31:19Z" }, { "id": "reacxtjs-2026-07-09", "display_name": "reacxtjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "reacxtjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7369", "osv_published_at": "2026-07-07T13:07:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:35Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:35Z", "osv_earliest_published_at": "2026-07-07T13:07:37Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:31:12Z" }, { "id": "reacvtjs-2026-07-09", "display_name": "reacvtjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "reacvtjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7368", "osv_published_at": "2026-07-07T13:07:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:34Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:34Z", "osv_earliest_published_at": "2026-07-07T13:07:37Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:31:06Z" }, { "id": "react-tiny-popover-next-2026-07-09", "display_name": "react-tiny-popover-next", "campaign": null, "detection_source": "osv", "packages": [ { "package": "react-tiny-popover-next", "ecosystem": "npm", "versions": [ "93.98.5" ], "osv_entries": [ { "osv_id": "MAL-2026-7367", "osv_published_at": "2026-07-07T13:07:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:33Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:33Z", "osv_earliest_published_at": "2026-07-07T13:07:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:30:59Z" }, { "id": "react-native-paysafe-apple-pay-2026-07-09", "display_name": "react-native-paysafe-apple-pay", "campaign": null, "detection_source": "osv", "packages": [ { "package": "react-native-paysafe-apple-pay", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7366", "osv_published_at": "2026-07-07T13:07:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:32Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:32Z", "osv_earliest_published_at": "2026-07-07T13:07:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:30:47Z" }, { "id": "react-datepicker-next-2026-07-09", "display_name": "react-datepicker-next", "campaign": null, "detection_source": "osv", "packages": [ { "package": "react-datepicker-next", "ecosystem": "npm", "versions": [ "93.98.5" ], "osv_entries": [ { "osv_id": "MAL-2026-7365", "osv_published_at": "2026-07-07T13:06:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:31Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:31Z", "osv_earliest_published_at": "2026-07-07T13:06:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:30:40Z" }, { "id": "reacrtjs-2026-07-09", "display_name": "reacrtjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "reacrtjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7364", "osv_published_at": "2026-07-07T13:06:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:29Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:29Z", "osv_earliest_published_at": "2026-07-07T13:06:23Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:30:32Z" }, { "id": "reacptjs-2026-07-09", "display_name": "reacptjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "reacptjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7363", "osv_published_at": "2026-07-07T13:06:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:28Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:28Z", "osv_earliest_published_at": "2026-07-07T13:06:23Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:30:25Z" }, { "id": "reacktjs-2026-07-09", "display_name": "reacktjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "reacktjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7362", "osv_published_at": "2026-07-07T13:06:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:27Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:27Z", "osv_earliest_published_at": "2026-07-07T13:06:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:30:17Z" }, { "id": "reachtjs-2026-07-09", "display_name": "reachtjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "reachtjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7361", "osv_published_at": "2026-07-07T13:06:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:26Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:26Z", "osv_earliest_published_at": "2026-07-07T13:06:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:30:04Z" }, { "id": "reacetjs-2026-07-09", "display_name": "reacetjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "reacetjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7360", "osv_published_at": "2026-07-07T13:06:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:24Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:24Z", "osv_earliest_published_at": "2026-07-07T13:06:21Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:29:56Z" }, { "id": "reabctjs-2026-07-09", "display_name": "reabctjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "reabctjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7359", "osv_published_at": "2026-07-07T13:06:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:23Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:23Z", "osv_earliest_published_at": "2026-07-07T13:06:21Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:29:49Z" }, { "id": "reaactjs-2026-07-09", "display_name": "reaactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "reaactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7358", "osv_published_at": "2026-07-07T13:06:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:22Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:22Z", "osv_earliest_published_at": "2026-07-07T13:06:21Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:29:43Z" }, { "id": "rdeactjs-2026-07-09", "display_name": "rdeactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rdeactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7357", "osv_published_at": "2026-07-07T13:06:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:21Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:21Z", "osv_earliest_published_at": "2026-07-07T13:06:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:29:32Z" }, { "id": "rceactjs-2026-07-09", "display_name": "rceactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rceactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7356", "osv_published_at": "2026-07-07T13:06:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:19Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:19Z", "osv_earliest_published_at": "2026-07-07T13:06:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:29:25Z" }, { "id": "rbeactjs-2026-07-09", "display_name": "rbeactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rbeactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7355", "osv_published_at": "2026-07-07T13:06:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:18Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:18Z", "osv_earliest_published_at": "2026-07-07T13:06:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:29:17Z" }, { "id": "raeactjs-2026-07-09", "display_name": "raeactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "raeactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7354", "osv_published_at": "2026-07-07T13:06:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:17Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:17Z", "osv_earliest_published_at": "2026-07-07T13:06:06Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:29:06Z" }, { "id": "qreactjs-2026-07-09", "display_name": "qreactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "qreactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7353", "osv_published_at": "2026-07-07T13:05:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:15Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:15Z", "osv_earliest_published_at": "2026-07-07T13:05:50Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:28:52Z" }, { "id": "pull-request-comment-branch-2026-07-09", "display_name": "pull-request-comment-branch", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pull-request-comment-branch", "ecosystem": "npm", "versions": [ "9.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-7352", "osv_published_at": "2026-07-07T13:05:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:14Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:14Z", "osv_earliest_published_at": "2026-07-07T13:05:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:28:46Z" }, { "id": "private-packages-sharingsession-2026-07-09", "display_name": "private-packages-sharingsession", "campaign": null, "detection_source": "osv", "packages": [ { "package": "private-packages-sharingsession", "ecosystem": "npm", "versions": [ "9.9.8" ], "osv_entries": [ { "osv_id": "MAL-2026-7351", "osv_published_at": "2026-07-07T13:05:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:13Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:13Z", "osv_earliest_published_at": "2026-07-07T13:05:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:28:40Z" }, { "id": "private-packages-sharing-sessionz-2026-07-09", "display_name": "private-packages-sharing-sessionz", "campaign": null, "detection_source": "osv", "packages": [ { "package": "private-packages-sharing-sessionz", "ecosystem": "npm", "versions": [ "1.9.8" ], "osv_entries": [ { "osv_id": "MAL-2026-7350", "osv_published_at": "2026-07-07T13:05:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:12Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:12Z", "osv_earliest_published_at": "2026-07-07T13:05:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:28:23Z" }, { "id": "postgres-docker-utils-2026-07-09", "display_name": "postgres-docker-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "postgres-docker-utils", "ecosystem": "npm", "versions": [ "99.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-7349", "osv_published_at": "2026-07-07T13:04:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:11Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:11Z", "osv_earliest_published_at": "2026-07-07T13:04:37Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:28:16Z" }, { "id": "plugin-proposal-2026-07-09", "display_name": "plugin-proposal", "campaign": null, "detection_source": "osv", "packages": [ { "package": "plugin-proposal", "ecosystem": "npm", "versions": [ "99.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-7348", "osv_published_at": "2026-07-07T13:04:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:10Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:10Z", "osv_earliest_published_at": "2026-07-07T13:04:23Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:28:02Z" }, { "id": "picnic-work-app-terms-of-use-nl-2026-07-09", "display_name": "picnic-work-app-terms-of-use-nl", "campaign": null, "detection_source": "osv", "packages": [ { "package": "picnic-work-app-terms-of-use-nl", "ecosystem": "npm", "versions": [ "9999.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7347", "osv_published_at": "2026-07-07T13:04:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:09Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:09Z", "osv_earliest_published_at": "2026-07-07T13:04:06Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:27:55Z" }, { "id": "picnic-work-app-terms-of-use-fr-2026-07-09", "display_name": "picnic-work-app-terms-of-use-fr", "campaign": null, "detection_source": "osv", "packages": [ { "package": "picnic-work-app-terms-of-use-fr", "ecosystem": "npm", "versions": [ "9999.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7346", "osv_published_at": "2026-07-07T13:04:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:08Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:08Z", "osv_earliest_published_at": "2026-07-07T13:04:06Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:27:48Z" }, { "id": "picnic-work-app-terms-of-use-de-2026-07-09", "display_name": "picnic-work-app-terms-of-use-de", "campaign": null, "detection_source": "osv", "packages": [ { "package": "picnic-work-app-terms-of-use-de", "ecosystem": "npm", "versions": [ "9999.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7345", "osv_published_at": "2026-07-07T13:04:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:07Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:07Z", "osv_earliest_published_at": "2026-07-07T13:04:06Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:27:41Z" }, { "id": "picnic-store-page-platform-2026-07-09", "display_name": "picnic-store-page-platform", "campaign": null, "detection_source": "osv", "packages": [ { "package": "picnic-store-page-platform", "ecosystem": "npm", "versions": [ "9999.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7344", "osv_published_at": "2026-07-07T13:04:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:06Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:06Z", "osv_earliest_published_at": "2026-07-07T13:04:05Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:27:34Z" }, { "id": "picnic-store-design-system-2026-07-09", "display_name": "picnic-store-design-system", "campaign": null, "detection_source": "osv", "packages": [ { "package": "picnic-store-design-system", "ecosystem": "npm", "versions": [ "9999.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7343", "osv_published_at": "2026-07-07T13:04:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:05Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:05Z", "osv_earliest_published_at": "2026-07-07T13:04:05Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:27:27Z" }, { "id": "picnic-store-delivery-miniapp-2026-07-09", "display_name": "picnic-store-delivery-miniapp", "campaign": null, "detection_source": "osv", "packages": [ { "package": "picnic-store-delivery-miniapp", "ecosystem": "npm", "versions": [ "9999.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7342", "osv_published_at": "2026-07-07T13:03:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:04Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:04Z", "osv_earliest_published_at": "2026-07-07T13:03:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:27:20Z" }, { "id": "picnic-store-basket-miniapp-2026-07-09", "display_name": "picnic-store-basket-miniapp", "campaign": null, "detection_source": "osv", "packages": [ { "package": "picnic-store-basket-miniapp", "ecosystem": "npm", "versions": [ "9999.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7341", "osv_published_at": "2026-07-07T13:03:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:03Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:03Z", "osv_earliest_published_at": "2026-07-07T13:03:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:27:08Z" }, { "id": "picnic-decoder-generator-2026-07-09", "display_name": "picnic-decoder-generator", "campaign": null, "detection_source": "osv", "packages": [ { "package": "picnic-decoder-generator", "ecosystem": "npm", "versions": [ "9999.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7340", "osv_published_at": "2026-07-07T13:03:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:02Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:02Z", "osv_earliest_published_at": "2026-07-07T13:03:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:27:01Z" }, { "id": "penny-core-2026-07-09", "display_name": "penny-core", "campaign": null, "detection_source": "osv", "packages": [ { "package": "penny-core", "ecosystem": "npm", "versions": [ "99.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-7339", "osv_published_at": "2026-07-07T13:03:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:01Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:01Z", "osv_earliest_published_at": "2026-07-07T13:03:50Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:26:53Z" }, { "id": "pe3-ihm-plateforme-2026-07-09", "display_name": "pe3-ihm-plateforme", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pe3-ihm-plateforme", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-7338", "osv_published_at": "2026-07-07T13:03:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:59:00Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:59:00Z", "osv_earliest_published_at": "2026-07-07T13:03:50Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:26:40Z" }, { "id": "paypal-legal-components-2026-07-09", "display_name": "paypal-legal-components", "campaign": null, "detection_source": "osv", "packages": [ { "package": "paypal-legal-components", "ecosystem": "npm", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7337", "osv_published_at": "2026-07-07T13:03:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:58:59Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:58:59Z", "osv_earliest_published_at": "2026-07-07T13:03:37Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:26:32Z" }, { "id": "oztxrk-mfa-2026-07-09", "display_name": "oztxrk-mfa", "campaign": null, "detection_source": "osv", "packages": [ { "package": "oztxrk-mfa", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7336", "osv_published_at": "2026-07-07T13:03:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:58:58Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:58:58Z", "osv_earliest_published_at": "2026-07-07T13:03:06Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:26:25Z" }, { "id": "ovault-evm-2026-07-09", "display_name": "ovault-evm", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ovault-evm", "ecosystem": "npm", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7335", "osv_published_at": "2026-07-07T13:03:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:58:57Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:58:57Z", "osv_earliest_published_at": "2026-07-07T13:03:05Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:26:18Z" }, { "id": "outer-package-2026-07-09", "display_name": "outer-package", "campaign": null, "detection_source": "osv", "packages": [ { "package": "outer-package", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7334", "osv_published_at": "2026-07-07T13:03:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:58:56Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:58:56Z", "osv_earliest_published_at": "2026-07-07T13:03:05Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:26:11Z" }, { "id": "oreactjs-2026-07-09", "display_name": "oreactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "oreactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7333", "osv_published_at": "2026-07-07T13:02:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:58:54Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:58:54Z", "osv_earliest_published_at": "2026-07-07T13:02:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:25:45Z" }, { "id": "options-msg-2026-07-09", "display_name": "options-msg", "campaign": null, "detection_source": "osv", "packages": [ { "package": "options-msg", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2", "1.0.3", "1.0.4", "1.0.5" ], "osv_entries": [ { "osv_id": "MAL-2026-7332", "osv_published_at": "2026-07-07T13:02:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:58:53Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:58:53Z", "osv_earliest_published_at": "2026-07-07T13:02:39Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:25:38Z" }, { "id": "oidcsessioncheck-enduser-2026-07-09", "display_name": "oidcsessioncheck-enduser", "campaign": null, "detection_source": "osv", "packages": [ { "package": "oidcsessioncheck-enduser", "ecosystem": "npm", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7331", "osv_published_at": "2026-07-07T13:01:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:58:52Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:58:52Z", "osv_earliest_published_at": "2026-07-07T13:01:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:25:31Z" }, { "id": "nreactjs-2026-07-09", "display_name": "nreactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nreactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7330", "osv_published_at": "2026-07-07T13:01:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:58:51Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:58:51Z", "osv_earliest_published_at": "2026-07-07T13:01:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:25:17Z" }, { "id": "notepad-monorepo-2026-07-09", "display_name": "notepad-monorepo", "campaign": null, "detection_source": "osv", "packages": [ { "package": "notepad-monorepo", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-7329", "osv_published_at": "2026-07-07T13:01:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:58:49Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:58:49Z", "osv_earliest_published_at": "2026-07-07T13:01:21Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:25:10Z" }, { "id": "notepad-frontend-2026-07-09", "display_name": "notepad-frontend", "campaign": null, "detection_source": "osv", "packages": [ { "package": "notepad-frontend", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-7328", "osv_published_at": "2026-07-07T13:01:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:58:48Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:58:48Z", "osv_earliest_published_at": "2026-07-07T13:01:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:25:03Z" }, { "id": "chai-redirection-2026-07-09", "display_name": "chai-redirection", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-redirection", "ecosystem": "npm", "versions": [ "0.0.3", "0.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-6995", "osv_published_at": "2026-07-08T16:35:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:56:07Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:56:07Z", "osv_earliest_published_at": "2026-07-08T16:35:33Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:15:27Z" }, { "id": "chai-presentation-2026-07-09", "display_name": "chai-presentation", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-presentation", "ecosystem": "npm", "versions": [ "0.0.2", "0.0.3", "0.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-6994", "osv_published_at": "2026-07-08T16:35:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:56:06Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:56:06Z", "osv_earliest_published_at": "2026-07-08T16:35:25Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:15:18Z" }, { "id": "airkey-mfa-react-2026-07-09", "display_name": "airkey-mfa-react", "campaign": null, "detection_source": "osv", "packages": [ { "package": "airkey-mfa-react", "ecosystem": "npm", "versions": [ "29.1.1", "35.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6991", "osv_published_at": "2026-07-08T16:30:56Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:56:05Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:56:05Z", "osv_earliest_published_at": "2026-07-08T16:30:56Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:15:07Z" }, { "id": "daanvandenbergh-blogkit-2026-07-09", "display_name": "@daanvandenbergh/blogkit", "campaign": "vite-ln", "detection_source": "npm_registry", "packages": [ { "package": "@daanvandenbergh/blogkit", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:55:05Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:55:05Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40daanvandenbergh%2Fblogkit", "ledger_commit_at": "2026-07-09T19:15:00Z" }, { "id": "vite-ln-build-ts-2026-07-09", "display_name": "@vite-ln/build-ts", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@vite-ln/build-ts", "ecosystem": "npm", "versions": [ "5.15.10", "5.17.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6984", "osv_published_at": "2026-07-08T15:04:55Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:54:44Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:54:44Z", "osv_earliest_published_at": "2026-07-08T15:04:55Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:48:49Z" }, { "id": "paperclip-adapter-helpers-2026-07-09", "display_name": "paperclip-adapter-helpers", "campaign": null, "detection_source": "osv", "packages": [ { "package": "paperclip-adapter-helpers", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.10", "1.0.11", "1.0.13", "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6981", "osv_published_at": "2026-07-08T14:32:11Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:54:43Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:54:43Z", "osv_earliest_published_at": "2026-07-08T14:32:11Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:14:45Z" }, { "id": "gitlens-2026-07-09", "display_name": "gitlens", "campaign": null, "detection_source": "osv", "packages": [ { "package": "gitlens", "ecosystem": "npm", "versions": [ "9.4.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6973", "osv_published_at": "2026-07-08T09:21:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:54:40Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:54:40Z", "osv_earliest_published_at": "2026-07-08T09:21:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:14:37Z" }, { "id": "na-rony-2026-07-09", "display_name": "na-rony", "campaign": null, "detection_source": "osv", "packages": [ { "package": "na-rony", "ecosystem": "npm", "versions": [ "1.1.3", "1.1.4", "1.1.5" ], "osv_entries": [ { "osv_id": "MAL-2026-6964", "osv_published_at": "2026-07-08T08:26:02Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:54:38Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:54:38Z", "osv_earliest_published_at": "2026-07-08T08:26:02Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:14:12Z" }, { "id": "gas-log-2026-07-09", "display_name": "gas-log", "campaign": null, "detection_source": "osv", "packages": [ { "package": "gas-log", "ecosystem": "npm", "versions": [ "1.1.0", "1.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6962", "osv_published_at": "2026-07-08T08:21:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:54:36Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:54:36Z", "osv_earliest_published_at": "2026-07-08T08:21:06Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:14:05Z" }, { "id": "rio-design-tokens-2026-07-09", "display_name": "rio-design-tokens", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rio-design-tokens", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-6956", "osv_published_at": "2026-07-08T00:20:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:54:35Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:54:35Z", "osv_earliest_published_at": "2026-07-08T00:20:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:13:59Z" }, { "id": "whs4-pnm-2026-07-09", "display_name": "whs4_pnm", "campaign": null, "detection_source": "osv", "packages": [ { "package": "whs4_pnm", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6953", "osv_published_at": "2026-07-07T16:19:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:54:34Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:54:34Z", "osv_earliest_published_at": "2026-07-07T16:19:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:13:45Z" }, { "id": "whs4-nmp-2026-07-09", "display_name": "whs4_nmp", "campaign": null, "detection_source": "osv", "packages": [ { "package": "whs4_nmp", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6950", "osv_published_at": "2026-07-07T16:19:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:54:33Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:54:33Z", "osv_earliest_published_at": "2026-07-07T16:19:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:13:36Z" }, { "id": "runtimedev-link-2026-07-09", "display_name": "runtimedev-link", "campaign": null, "detection_source": "osv", "packages": [ { "package": "runtimedev-link", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.10", "1.0.11", "1.0.12", "1.0.14", "1.0.2", "1.0.3", "1.0.5", "1.0.6", "1.0.8", "1.0.9" ], "osv_entries": [ { "osv_id": "MAL-2026-6948", "osv_published_at": "2026-07-07T16:12:58Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:54:32Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:54:32Z", "osv_earliest_published_at": "2026-07-07T16:12:58Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:48:43Z" }, { "id": "paperclip-host-utils-2026-07-09", "display_name": "paperclip-host-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "paperclip-host-utils", "ecosystem": "npm", "versions": [ "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6947", "osv_published_at": "2026-07-07T16:16:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:54:31Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:54:31Z", "osv_earliest_published_at": "2026-07-07T16:16:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:13:09Z" }, { "id": "tx-guard-snap-2026-07-09", "display_name": "tx-guard-snap", "campaign": null, "detection_source": "osv", "packages": [ { "package": "tx-guard-snap", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6943", "osv_published_at": "2026-07-07T15:29:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:54:30Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:54:30Z", "osv_earliest_published_at": "2026-07-07T15:29:37Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:13:02Z" }, { "id": "polytrade-2026-07-09", "display_name": "polytrade", "campaign": null, "detection_source": "osv", "packages": [ { "package": "polytrade", "ecosystem": "npm", "versions": [ "2.4.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6939", "osv_published_at": "2026-07-07T16:07:02Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:54:29Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:54:29Z", "osv_earliest_published_at": "2026-07-07T16:07:02Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:12:52Z" }, { "id": "evm-typechain-2026-07-09", "display_name": "evm-typechain", "campaign": null, "detection_source": "osv", "packages": [ { "package": "evm-typechain", "ecosystem": "npm", "versions": [ "0.5.4" ], "osv_entries": [ { "osv_id": "MAL-2026-6932", "osv_published_at": "2026-07-07T15:46:10Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:54:28Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:54:28Z", "osv_earliest_published_at": "2026-07-07T15:46:10Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:12:40Z" }, { "id": "chai-sdk-2026-07-09", "display_name": "chai-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-sdk", "ecosystem": "npm", "versions": [ "1.4.7", "1.4.8" ], "osv_entries": [ { "osv_id": "MAL-2026-6931", "osv_published_at": "2026-07-07T15:20:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:54:27Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:54:27Z", "osv_earliest_published_at": "2026-07-07T15:20:49Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:12:23Z" }, { "id": "notifier-utils-2026-07-09", "display_name": "notifier-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "notifier-utils", "ecosystem": "npm", "versions": [ "1.3.7", "1.3.9", "1.4.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6923", "osv_published_at": "2026-07-07T15:13:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:54:26Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:54:26Z", "osv_earliest_published_at": "2026-07-07T15:13:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:12:16Z" }, { "id": "mcp-server-pg-2026-07-09", "display_name": "mcp-server-pg", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mcp-server-pg", "ecosystem": "npm", "versions": [ "0.1.0", "0.1.1", "0.1.2", "0.1.3", "0.2.0", "0.2.1", "0.3.0", "0.3.1", "0.4.0", "0.5.0", "0.6.0", "0.7.0", "0.8.0", "0.9.0", "1.0.0", "1.0.1", "1.1.0", "1.1.1", "1.2.0", "1.2.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6922", "osv_published_at": "2026-07-07T13:59:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:54:24Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:54:24Z", "osv_earliest_published_at": "2026-07-07T13:59:38Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:12:09Z" }, { "id": "jsf-utils-2026-07-09", "display_name": "jsf-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "jsf-utils", "ecosystem": "npm", "versions": [ "0.3.1", "1.3.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6921", "osv_published_at": "2026-07-07T15:13:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:54:21Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:54:21Z", "osv_earliest_published_at": "2026-07-07T15:13:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:11:53Z" }, { "id": "chai-chain-dom-2026-07-09", "display_name": "chai-chain-dom", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-chain-dom", "ecosystem": "npm", "versions": [ "1.3.7", "1.3.8", "1.3.9" ], "osv_entries": [ { "osv_id": "MAL-2026-6919", "osv_published_at": "2026-07-07T15:13:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:54:20Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:54:20Z", "osv_earliest_published_at": "2026-07-07T15:13:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:11:36Z" }, { "id": "rollup-plugin-polyfill-handler-2026-07-09", "display_name": "rollup-plugin-polyfill-handler", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rollup-plugin-polyfill-handler", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6826", "osv_published_at": "2026-07-06T18:02:57Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:54:02Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:54:02Z", "osv_earliest_published_at": "2026-07-06T18:02:57Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:10:22Z" }, { "id": "mongoose-lean-hooks-2026-07-09", "display_name": "mongoose-lean-hooks", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mongoose-lean-hooks", "ecosystem": "npm", "versions": [ "0.5.4", "0.5.5", "0.5.6", "0.5.7" ], "osv_entries": [ { "osv_id": "MAL-2026-6797", "osv_published_at": "2026-07-06T18:01:34Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:53:54Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:53:54Z", "osv_earliest_published_at": "2026-07-06T18:01:34Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:09:56Z" }, { "id": "npm-show-date-proof-strings-2026-07-09", "display_name": "npm-show-date-proof-strings", "campaign": null, "detection_source": "osv", "packages": [ { "package": "npm-show-date-proof-strings", "ecosystem": "npm", "versions": [ "1.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-6791", "osv_published_at": "2026-07-01T16:11:17Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:53:53Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:53:53Z", "osv_earliest_published_at": "2026-07-01T16:11:17Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:09:49Z" }, { "id": "vps-maintenance-paperclip-adapter-2026-07-09", "display_name": "vps-maintenance-paperclip-adapter", "campaign": null, "detection_source": "osv", "packages": [ { "package": "vps-maintenance-paperclip-adapter", "ecosystem": "npm", "versions": [ "0.1.0", "0.1.4" ], "osv_entries": [ { "osv_id": "MAL-2026-6757", "osv_published_at": "2026-07-04T13:43:02Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:53:51Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:53:51Z", "osv_earliest_published_at": "2026-07-04T13:43:02Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:09:39Z" }, { "id": "db-convertor-2026-07-09", "display_name": "db-convertor", "campaign": null, "detection_source": "osv", "packages": [ { "package": "db-convertor", "ecosystem": "npm", "versions": [ "1.0.5" ], "osv_entries": [ { "osv_id": "MAL-2026-6726", "osv_published_at": "2026-07-02T13:17:43Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:53:49Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:53:49Z", "osv_earliest_published_at": "2026-07-02T13:17:43Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:09:27Z" }, { "id": "polymarket-trading-developer-tool-2026-07-09", "display_name": "polymarket-trading-developer-tool", "campaign": null, "detection_source": "osv", "packages": [ { "package": "polymarket-trading-developer-tool", "ecosystem": "npm", "versions": [ "0.1.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6714", "osv_published_at": "2026-07-01T20:37:24Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:53:47Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:53:47Z", "osv_earliest_published_at": "2026-07-01T20:37:24Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:09:16Z" }, { "id": "ts-bn-proto-2026-07-09", "display_name": "ts-bn-proto", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ts-bn-proto", "ecosystem": "npm", "versions": [ "5.8.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6695", "osv_published_at": "2026-06-30T00:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:53:46Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:53:46Z", "osv_earliest_published_at": "2026-06-30T00:00:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://safedep.io/defi-infostealer-fake-arbitrage-bot-npm/", "ledger_commit_at": "2026-07-09T19:09:09Z" }, { "id": "rs-biginteger-2026-07-09", "display_name": "rs-biginteger", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rs-biginteger", "ecosystem": "npm", "versions": [ "6.1.3", "6.1.5" ], "osv_entries": [ { "osv_id": "MAL-2026-6675", "osv_published_at": "2026-06-30T14:10:13Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:53:41Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:53:41Z", "osv_earliest_published_at": "2026-06-30T14:10:13Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:47:32Z" }, { "id": "authsessionbridge-2026-07-09", "display_name": "authsessionbridge", "campaign": null, "detection_source": "osv", "packages": [ { "package": "authsessionbridge", "ecosystem": "npm", "versions": [ "1.6.29" ], "osv_entries": [ { "osv_id": "MAL-2026-6657", "osv_published_at": "2026-06-29T14:00:15Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:53:37Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:53:37Z", "osv_earliest_published_at": "2026-06-29T14:00:15Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:08:32Z" }, { "id": "authmatrix-2026-07-09", "display_name": "authmatrix", "campaign": null, "detection_source": "osv", "packages": [ { "package": "authmatrix", "ecosystem": "npm", "versions": [ "1.0.30", "1.1.7" ], "osv_entries": [ { "osv_id": "MAL-2026-6656", "osv_published_at": "2026-06-29T14:00:15Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:53:36Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:53:36Z", "osv_earliest_published_at": "2026-06-29T14:00:15Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:08:20Z" }, { "id": "auth-state-service-2026-07-09", "display_name": "auth-state-service", "campaign": null, "detection_source": "osv", "packages": [ { "package": "auth-state-service", "ecosystem": "npm", "versions": [ "1.6.16" ], "osv_entries": [ { "osv_id": "MAL-2026-6655", "osv_published_at": "2026-06-29T14:00:15Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:53:35Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:53:35Z", "osv_earliest_published_at": "2026-06-29T14:00:15Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:08:12Z" }, { "id": "vkzmn-2026-07-09", "display_name": "vkzmn", "campaign": null, "detection_source": "osv", "packages": [ { "package": "vkzmn", "ecosystem": "npm", "versions": [ "1.0.2", "1.0.5", "1.0.7", "1.0.8" ], "osv_entries": [ { "osv_id": "MAL-2026-6594", "osv_published_at": "2026-06-29T10:49:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:53:17Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:53:17Z", "osv_earliest_published_at": "2026-06-29T10:49:33Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:06:56Z" }, { "id": "ledgerflow-deploy-utils-2026-07-09", "display_name": "ledgerflow-deploy-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ledgerflow-deploy-utils", "ecosystem": "npm", "versions": [ "1.0.3", "1.0.4", "1.0.5" ], "osv_entries": [ { "osv_id": "MAL-2026-6591", "osv_published_at": "2026-06-29T07:09:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:53:15Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:53:15Z", "osv_earliest_published_at": "2026-06-29T07:09:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:47:19Z" }, { "id": "clob-client-math-2026-07-09", "display_name": "clob-client-math", "campaign": null, "detection_source": "osv", "packages": [ { "package": "clob-client-math", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6587", "osv_published_at": "2026-06-29T07:18:45Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:53:14Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:53:14Z", "osv_earliest_published_at": "2026-06-29T07:18:45Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:06:32Z" }, { "id": "stake-math-2026-07-09", "display_name": "stake-math", "campaign": null, "detection_source": "osv", "packages": [ { "package": "stake-math", "ecosystem": "npm", "versions": [ "3.1.0", "3.2.0", "3.3.0", "3.5.5" ], "osv_entries": [ { "osv_id": "MAL-2026-6585", "osv_published_at": "2026-06-29T05:33:56Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:53:13Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:53:13Z", "osv_earliest_published_at": "2026-06-29T05:33:56Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:06:11Z" }, { "id": "poly-kelly-2026-07-09", "display_name": "poly-kelly", "campaign": null, "detection_source": "osv", "packages": [ { "package": "poly-kelly", "ecosystem": "npm", "versions": [ "3.5.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6584", "osv_published_at": "2026-06-29T06:04:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:53:11Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:53:11Z", "osv_earliest_published_at": "2026-06-29T06:04:33Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:06:04Z" }, { "id": "pino-debugging-2026-07-09", "display_name": "pino-debugging", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pino-debugging", "ecosystem": "npm", "versions": [ "1.1.5" ], "osv_entries": [ { "osv_id": "MAL-2026-6583", "osv_published_at": "2026-06-29T06:27:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:53:10Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:53:10Z", "osv_earliest_published_at": "2026-06-29T06:27:23Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:05:57Z" }, { "id": "openai-agents-helpers-2026-07-09", "display_name": "openai-agents-helpers", "campaign": null, "detection_source": "osv", "packages": [ { "package": "openai-agents-helpers", "ecosystem": "npm", "versions": [ "0.1.0", "0.1.1", "0.2.0", "0.2.1", "0.3.0", "0.3.1", "0.4.0", "0.5.0", "0.5.1", "0.6.0", "0.6.1", "0.7.0", "0.8.0", "0.8.1", "0.9.0", "1.0.0", "1.0.1", "1.1.0", "1.1.1", "1.2.0", "1.2.1", "1.3.0", "1.3.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6582", "osv_published_at": "2026-06-29T06:12:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:53:09Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:53:09Z", "osv_earliest_published_at": "2026-06-29T06:12:06Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:05:49Z" }, { "id": "checkmarx-claude-cache-2026-07-09", "display_name": "checkmarx-claude-cache", "campaign": null, "detection_source": "osv", "packages": [ { "package": "checkmarx-claude-cache", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6576", "osv_published_at": "2026-06-29T05:59:14Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:53:05Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:53:05Z", "osv_earliest_published_at": "2026-06-29T05:59:14Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:05:39Z" }, { "id": "date-uuid-2026-07-09", "display_name": "date-uuid", "campaign": null, "detection_source": "osv", "packages": [ { "package": "date-uuid", "ecosystem": "npm", "versions": [ "1.0.2", "1.0.3", "1.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-6566", "osv_published_at": "2026-06-29T04:09:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:53:04Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:53:04Z", "osv_earliest_published_at": "2026-06-29T04:09:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:05:32Z" }, { "id": "db-query-log-2026-07-09", "display_name": "db-query-log", "campaign": null, "detection_source": "osv", "packages": [ { "package": "db-query-log", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6539", "osv_published_at": "2026-06-26T21:19:18Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:53:03Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:53:03Z", "osv_earliest_published_at": "2026-06-26T21:19:18Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:05:26Z" }, { "id": "sypoi1-2026-07-09", "display_name": "sypoi1", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sypoi1", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6405", "osv_published_at": "2026-06-24T22:18:30Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:53:02Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:53:02Z", "osv_earliest_published_at": "2026-06-24T22:18:30Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:05:15Z" }, { "id": "syco1-2026-07-09", "display_name": "syco1", "campaign": null, "detection_source": "osv", "packages": [ { "package": "syco1", "ecosystem": "npm", "versions": [ "1.0.5" ], "osv_entries": [ { "osv_id": "MAL-2026-6404", "osv_published_at": "2026-06-24T22:18:31Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:53:00Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:53:00Z", "osv_earliest_published_at": "2026-06-24T22:18:31Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:05:07Z" }, { "id": "libsignal-node-travatiger-2026-07-09", "display_name": "libsignal-node-travatiger", "campaign": null, "detection_source": "osv", "packages": [ { "package": "libsignal-node-travatiger", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6281", "osv_published_at": "2026-06-23T11:57:45Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:52:57Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:52:57Z", "osv_earliest_published_at": "2026-06-23T11:57:45Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:04:53Z" }, { "id": "web3-token-helper-2026-07-09", "display_name": "web3-token-helper", "campaign": null, "detection_source": "osv", "packages": [ { "package": "web3-token-helper", "ecosystem": "npm", "versions": [ "1.0.0", "1.1.3", "2.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6274", "osv_published_at": "2026-06-22T22:38:59Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:52:56Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:52:56Z", "osv_earliest_published_at": "2026-06-22T22:38:59Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:04:41Z" }, { "id": "ts-esys-2026-07-09", "display_name": "ts-esys", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ts-esys", "ecosystem": "npm", "versions": [ "0.0.5" ], "osv_entries": [ { "osv_id": "MAL-2026-6205", "osv_published_at": "2026-06-19T08:28:32Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:52:55Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:52:55Z", "osv_earliest_published_at": "2026-06-19T08:28:32Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:04:34Z" }, { "id": "eth-util-2026-07-09", "display_name": "eth-util", "campaign": null, "detection_source": "osv", "packages": [ { "package": "eth-util", "ecosystem": "npm", "versions": [ "7.1.5" ], "osv_entries": [ { "osv_id": "MAL-2026-6201", "osv_published_at": "2026-06-19T08:08:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:52:54Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:52:54Z", "osv_earliest_published_at": "2026-06-19T08:08:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:04:27Z" }, { "id": "db-connector-log-2026-07-09", "display_name": "db-connector-log", "campaign": null, "detection_source": "osv", "packages": [ { "package": "db-connector-log", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6142", "osv_published_at": "2026-06-18T22:29:10Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:52:53Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:52:53Z", "osv_earliest_published_at": "2026-06-18T22:29:10Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:04:19Z" }, { "id": "uol-simple-api-futebol-2026-07-09", "display_name": "uol-simple-api-futebol", "campaign": null, "detection_source": "osv", "packages": [ { "package": "uol-simple-api-futebol", "ecosystem": "npm", "versions": [ "4.8.0", "4.8.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6087", "osv_published_at": "2026-06-17T22:23:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:52:52Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:52:52Z", "osv_earliest_published_at": "2026-06-17T22:23:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:04:11Z" }, { "id": "sort-btree-2026-07-09", "display_name": "sort-btree", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sort-btree", "ecosystem": "npm", "versions": [ "2.1.6", "2.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6063", "osv_published_at": "2026-06-17T12:57:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:52:50Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:52:50Z", "osv_earliest_published_at": "2026-06-17T12:57:21Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:04:03Z" }, { "id": "ts-webplug-2026-07-09", "display_name": "ts-webplug", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ts-webplug", "ecosystem": "npm", "versions": [ "3.0.6", "3.0.7", "3.0.8" ], "osv_entries": [ { "osv_id": "MAL-2026-5994", "osv_published_at": "2026-06-17T04:23:11Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:52:49Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:52:49Z", "osv_earliest_published_at": "2026-06-17T04:23:11Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:03:53Z" }, { "id": "vemos-sdk-2026-07-09", "display_name": "vemos-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "vemos-sdk", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5855", "osv_published_at": "2026-06-15T23:56:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:52:40Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:52:40Z", "osv_earliest_published_at": "2026-06-15T23:56:49Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:03:08Z" }, { "id": "webpack-patch-2026-07-09", "display_name": "webpack-patch", "campaign": null, "detection_source": "osv", "packages": [ { "package": "webpack-patch", "ecosystem": "npm", "versions": [ "1.1.8", "1.1.9", "1.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5581", "osv_published_at": "2026-06-11T05:06:30Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:52:24Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:52:24Z", "osv_earliest_published_at": "2026-06-11T05:06:30Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T16:28:41Z" }, { "id": "ai-sdk-helpers-2026-07-09", "display_name": "ai-sdk-helpers", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ai-sdk-helpers", "ecosystem": "npm", "versions": [ "1.4.3", "1.4.5" ], "osv_entries": [ { "osv_id": "MAL-2026-5565", "osv_published_at": "2026-06-11T05:17:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:52:22Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:52:22Z", "osv_earliest_published_at": "2026-06-11T05:17:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:02:17Z" }, { "id": "sql-trigger-nodesql-2026-07-09", "display_name": "@sql-trigger/nodesql", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@sql-trigger/nodesql", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5395", "osv_published_at": "2026-06-09T15:46:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:50:22Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:50:22Z", "osv_earliest_published_at": "2026-06-09T15:46:48Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:01:35Z" }, { "id": "pp-react-v5-2026-07-09", "display_name": "pp-react-v5", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pp-react-v5", "ecosystem": "npm", "versions": [ "30.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-3509", "osv_published_at": "2026-05-11T00:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:48:42Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:48:42Z", "osv_earliest_published_at": "2026-05-11T00:00:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:59:22Z" }, { "id": "nonenull1-2026-07-09", "display_name": "nonenull1", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nonenull1", "ecosystem": "npm", "versions": [ "1.0.0", "1.2.0", "1.3.0", "1.4.0", "1.5.0", "1.5.2", "1.5.4", "1.5.5", "1.6.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10090", "osv_published_at": "2026-07-09T16:34:31Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:47:27Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:47:27Z", "osv_earliest_published_at": "2026-07-09T16:34:31Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:39:21Z" }, { "id": "neon-poly-utls-2026-07-09", "display_name": "neon-poly-utls", "campaign": null, "detection_source": "osv", "packages": [ { "package": "neon-poly-utls", "ecosystem": "npm", "versions": [ "1.3.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10089", "osv_published_at": "2026-07-09T17:02:47Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:47:25Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:47:25Z", "osv_earliest_published_at": "2026-07-09T17:02:47Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:56:13Z" }, { "id": "lovable-tager-2026-07-09", "display_name": "lovable-tager", "campaign": null, "detection_source": "osv", "packages": [ { "package": "lovable-tager", "ecosystem": "npm", "versions": [ "1.4.0", "1.4.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10088", "osv_published_at": "2026-07-09T17:00:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:47:24Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:47:24Z", "osv_earliest_published_at": "2026-07-09T17:00:49Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:56:06Z" }, { "id": "eslint-plus-2026-07-09", "display_name": "eslint-plus", "campaign": null, "detection_source": "osv", "packages": [ { "package": "eslint-plus", "ecosystem": "npm", "versions": [ "6.0.4", "6.0.5" ], "osv_entries": [ { "osv_id": "MAL-2026-10087", "osv_published_at": "2026-07-09T16:50:45Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:47:23Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:47:23Z", "osv_earliest_published_at": "2026-07-09T16:50:45Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:55:59Z" }, { "id": "dl-pp-latm-2026-07-09", "display_name": "dl-pp-latm", "campaign": null, "detection_source": "osv", "packages": [ { "package": "dl-pp-latm", "ecosystem": "npm", "versions": [ "80.4.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10086", "osv_published_at": "2026-07-09T17:03:02Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:47:22Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:47:22Z", "osv_earliest_published_at": "2026-07-09T17:03:02Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:55:52Z" }, { "id": "dependency-confusions-2026-07-09", "display_name": "dependency_confusions", "campaign": null, "detection_source": "osv", "packages": [ { "package": "dependency_confusions", "ecosystem": "npm", "versions": [ "99.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-10085", "osv_published_at": "2026-07-09T16:34:18Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:47:21Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:47:21Z", "osv_earliest_published_at": "2026-07-09T16:34:18Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:55:46Z" }, { "id": "conversionvaluemanager-2026-07-09", "display_name": "conversionvaluemanager", "campaign": null, "detection_source": "osv", "packages": [ { "package": "conversionvaluemanager", "ecosystem": "npm", "versions": [ "3.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10084", "osv_published_at": "2026-07-09T17:00:59Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:47:20Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:47:20Z", "osv_earliest_published_at": "2026-07-09T17:00:59Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:55:39Z" }, { "id": "clob-math-v2-2026-07-09", "display_name": "clob-math-v2", "campaign": null, "detection_source": "osv", "packages": [ { "package": "clob-math-v2", "ecosystem": "npm", "versions": [ "2.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10083", "osv_published_at": "2026-07-09T17:01:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:47:19Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:47:19Z", "osv_earliest_published_at": "2026-07-09T17:01:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:55:32Z" }, { "id": "chain-async-dom-2026-07-09", "display_name": "chain-async-dom", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chain-async-dom", "ecosystem": "npm", "versions": [ "1.3.6" ], "osv_entries": [ { "osv_id": "MAL-2026-10082", "osv_published_at": "2026-07-09T17:02:16Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:47:18Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:47:18Z", "osv_earliest_published_at": "2026-07-09T17:02:16Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:55:20Z" }, { "id": "webrix-docs1-2026-07-09", "display_name": "webrix-docs1", "campaign": null, "detection_source": "osv", "packages": [ { "package": "webrix-docs1", "ecosystem": "npm", "versions": [ "10.2.11" ], "osv_entries": [ { "osv_id": "MAL-2026-10081", "osv_published_at": "2026-07-09T15:45:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:47:17Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:47:17Z", "osv_earliest_published_at": "2026-07-09T15:45:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:55:13Z" }, { "id": "webrix-docs-2026-07-09", "display_name": "webrix-docs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "webrix-docs", "ecosystem": "npm", "versions": [ "20.2.11" ], "osv_entries": [ { "osv_id": "MAL-2026-10080", "osv_published_at": "2026-07-09T15:45:45Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:47:16Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:47:16Z", "osv_earliest_published_at": "2026-07-09T15:45:45Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:55:07Z" }, { "id": "vybscan-testbed-obfuscated-postinstall-2026-07-09", "display_name": "vybscan-testbed-obfuscated-postinstall", "campaign": null, "detection_source": "osv", "packages": [ { "package": "vybscan-testbed-obfuscated-postinstall", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10079", "osv_published_at": "2026-07-09T15:45:29Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:47:15Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:47:15Z", "osv_earliest_published_at": "2026-07-09T15:45:29Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:55:00Z" }, { "id": "vybscan-testbed-inert-postinstall-2026-07-09", "display_name": "vybscan-testbed-inert-postinstall", "campaign": null, "detection_source": "osv", "packages": [ { "package": "vybscan-testbed-inert-postinstall", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10078", "osv_published_at": "2026-07-09T15:44:47Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:47:13Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:47:13Z", "osv_earliest_published_at": "2026-07-09T15:44:47Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:54:53Z" }, { "id": "type-slint-2026-07-09", "display_name": "type-slint", "campaign": null, "detection_source": "osv", "packages": [ { "package": "type-slint", "ecosystem": "npm", "versions": [ "3.3.7", "3.3.8" ], "osv_entries": [ { "osv_id": "MAL-2026-10077", "osv_published_at": "2026-07-09T15:55:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:47:12Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:47:12Z", "osv_earliest_published_at": "2026-07-09T15:55:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T16:28:27Z" }, { "id": "ts-eslint-jest-2026-07-09", "display_name": "ts-eslint-jest", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ts-eslint-jest", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10076", "osv_published_at": "2026-07-09T15:41:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:47:11Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:47:11Z", "osv_earliest_published_at": "2026-07-09T15:41:21Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:54:39Z" }, { "id": "testudo-pack-2026-07-09", "display_name": "testudo-pack", "campaign": null, "detection_source": "osv", "packages": [ { "package": "testudo-pack", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10075", "osv_published_at": "2026-07-09T15:38:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:47:10Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:47:10Z", "osv_earliest_published_at": "2026-07-09T15:38:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:54:32Z" }, { "id": "testis-pack-2026-07-09", "display_name": "testis-pack", "campaign": null, "detection_source": "osv", "packages": [ { "package": "testis-pack", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10074", "osv_published_at": "2026-07-09T15:39:01Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:47:09Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:47:09Z", "osv_earliest_published_at": "2026-07-09T15:39:01Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:54:25Z" }, { "id": "tailwind-animate-v4-2026-07-09", "display_name": "tailwind-animate-v4", "campaign": null, "detection_source": "osv", "packages": [ { "package": "tailwind-animate-v4", "ecosystem": "npm", "versions": [ "1.1.0", "2.1.0", "2.1.1", "2.1.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10073", "osv_published_at": "2026-07-09T15:28:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:47:08Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:47:08Z", "osv_earliest_published_at": "2026-07-09T15:28:38Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:39:14Z" }, { "id": "polymarket-trader-apis-2026-07-09", "display_name": "polymarket-trader-apis", "campaign": null, "detection_source": "osv", "packages": [ { "package": "polymarket-trader-apis", "ecosystem": "npm", "versions": [ "0.1.0", "2.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10072", "osv_published_at": "2026-07-09T15:48:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:47:07Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:47:07Z", "osv_earliest_published_at": "2026-07-09T15:48:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:54:11Z" }, { "id": "polymarket-kit-2026-07-09", "display_name": "polymarket-kit", "campaign": null, "detection_source": "osv", "packages": [ { "package": "polymarket-kit", "ecosystem": "npm", "versions": [ "2.4.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10071", "osv_published_at": "2026-07-09T15:47:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:47:06Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:47:06Z", "osv_earliest_published_at": "2026-07-09T15:47:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:54:03Z" }, { "id": "polymarket-kelly-stake-math-2026-07-09", "display_name": "polymarket-kelly-stake-math", "campaign": null, "detection_source": "osv", "packages": [ { "package": "polymarket-kelly-stake-math", "ecosystem": "npm", "versions": [ "3.6.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10070", "osv_published_at": "2026-07-09T15:48:02Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:47:05Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:47:05Z", "osv_earliest_published_at": "2026-07-09T15:48:02Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:53:56Z" }, { "id": "polymarket-kelly-maths-2026-07-09", "display_name": "polymarket-kelly-maths", "campaign": null, "detection_source": "osv", "packages": [ { "package": "polymarket-kelly-maths", "ecosystem": "npm", "versions": [ "3.5.3" ], "osv_entries": [ { "osv_id": "MAL-2026-10069", "osv_published_at": "2026-07-09T15:47:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:47:04Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:47:04Z", "osv_earliest_published_at": "2026-07-09T15:47:37Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:53:48Z" }, { "id": "polymarket-kelly-math-2026-07-09", "display_name": "polymarket-kelly-math", "campaign": null, "detection_source": "osv", "packages": [ { "package": "polymarket-kelly-math", "ecosystem": "npm", "versions": [ "3.5.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10068", "osv_published_at": "2026-07-09T15:48:13Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:47:03Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:47:03Z", "osv_earliest_published_at": "2026-07-09T15:48:13Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:53:41Z" }, { "id": "polymarket-apis-2026-07-09", "display_name": "polymarket-apis", "campaign": null, "detection_source": "osv", "packages": [ { "package": "polymarket-apis", "ecosystem": "npm", "versions": [ "1.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10067", "osv_published_at": "2026-07-09T15:48:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:47:02Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:47:02Z", "osv_earliest_published_at": "2026-07-09T15:48:38Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:53:34Z" }, { "id": "nps-retrieval-diagnostics-2026-07-09", "display_name": "nps-retrieval-diagnostics", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nps-retrieval-diagnostics", "ecosystem": "npm", "versions": [ "9.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-10066", "osv_published_at": "2026-07-09T15:54:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:47:01Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:47:01Z", "osv_earliest_published_at": "2026-07-09T15:54:52Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:53:27Z" }, { "id": "nodemon-gulp-2026-07-09", "display_name": "nodemon-gulp", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nodemon-gulp", "ecosystem": "npm", "versions": [ "3.1.14", "3.1.15", "3.1.16" ], "osv_entries": [ { "osv_id": "MAL-2026-10065", "osv_published_at": "2026-07-09T15:38:09Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:47:00Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:47:00Z", "osv_earliest_published_at": "2026-07-09T15:38:09Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T15:40:54Z" }, { "id": "multer-orm-2026-07-09", "display_name": "multer-orm", "campaign": null, "detection_source": "osv", "packages": [ { "package": "multer-orm", "ecosystem": "npm", "versions": [ "2.0.2", "2.0.3", "2.0.4", "2.0.5", "2.0.6", "2.0.7" ], "osv_entries": [ { "osv_id": "MAL-2026-10064", "osv_published_at": "2026-07-09T15:55:43Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:46:59Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:46:59Z", "osv_earliest_published_at": "2026-07-09T15:55:43Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:39:07Z" }, { "id": "express-router-engine-2026-07-09", "display_name": "express-router-engine", "campaign": null, "detection_source": "osv", "packages": [ { "package": "express-router-engine", "ecosystem": "npm", "versions": [ "3.6.5", "3.6.6", "3.6.7", "3.6.8" ], "osv_entries": [ { "osv_id": "MAL-2026-10063", "osv_published_at": "2026-07-09T15:55:17Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:46:58Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:46:58Z", "osv_earliest_published_at": "2026-07-09T15:55:17Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:39:00Z" }, { "id": "es6-codify-2026-07-09", "display_name": "es6-codify", "campaign": null, "detection_source": "osv", "packages": [ { "package": "es6-codify", "ecosystem": "npm", "versions": [ "1.0.1", "1.1.0", "1.2.0", "1.3.0", "1.4.0", "2.0.0", "2.1.0", "2.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10062", "osv_published_at": "2026-07-09T15:46:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:46:56Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:46:56Z", "osv_earliest_published_at": "2026-07-09T15:46:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:52:53Z" }, { "id": "cursed-ecto-d3ab00-2026-07-09", "display_name": "cursed-ecto-d3ab00", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cursed-ecto-d3ab00", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "2.0.0", "2.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10061", "osv_published_at": "2026-07-09T15:54:19Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:46:54Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:46:54Z", "osv_earliest_published_at": "2026-07-09T15:54:19Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:52:47Z" }, { "id": "cookie-parser-js-2026-07-09", "display_name": "cookie-parser-js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cookie-parser-js", "ecosystem": "npm", "versions": [ "1.0.8", "1.4.8", "1.4.9", "1.5.0", "1.5.1", "1.5.2", "1.5.3" ], "osv_entries": [ { "osv_id": "MAL-2026-10060", "osv_published_at": "2026-07-09T16:19:27Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:46:53Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:46:53Z", "osv_earliest_published_at": "2026-07-09T16:19:27Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T17:15:44Z" }, { "id": "cookie-parser-es-2026-07-09", "display_name": "cookie-parser-es", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cookie-parser-es", "ecosystem": "npm", "versions": [ "1.0.7" ], "osv_entries": [ { "osv_id": "MAL-2026-10059", "osv_published_at": "2026-07-09T16:19:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:46:52Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:46:52Z", "osv_earliest_published_at": "2026-07-09T16:19:35Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:52:31Z" }, { "id": "cookie-js-ease-2026-07-09", "display_name": "cookie-js-ease", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cookie-js-ease", "ecosystem": "npm", "versions": [ "2.1.7" ], "osv_entries": [ { "osv_id": "MAL-2026-10058", "osv_published_at": "2026-07-09T16:20:14Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:46:51Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:46:51Z", "osv_earliest_published_at": "2026-07-09T16:20:14Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:52:25Z" }, { "id": "chunk-parser-2026-07-09", "display_name": "chunk-parser", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chunk-parser", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10057", "osv_published_at": "2026-07-09T15:55:10Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:46:50Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:46:50Z", "osv_earliest_published_at": "2026-07-09T15:55:10Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:52:17Z" }, { "id": "chain-chai-await-2026-07-09", "display_name": "chain-chai-await", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chain-chai-await", "ecosystem": "npm", "versions": [ "1.3.5", "1.3.6", "1.3.7" ], "osv_entries": [ { "osv_id": "MAL-2026-10056", "osv_published_at": "2026-07-09T15:32:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:46:49Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:46:49Z", "osv_earliest_published_at": "2026-07-09T15:32:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:52:05Z" }, { "id": "chain-chai-async-2026-07-09", "display_name": "chain-chai-async", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chain-chai-async", "ecosystem": "npm", "versions": [ "1.3.5" ], "osv_entries": [ { "osv_id": "MAL-2026-10055", "osv_published_at": "2026-07-09T15:33:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:46:47Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:46:47Z", "osv_earliest_published_at": "2026-07-09T15:33:49Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:51:58Z" }, { "id": "chai-smart-2026-07-09", "display_name": "chai-smart", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-smart", "ecosystem": "npm", "versions": [ "2.3.5" ], "osv_entries": [ { "osv_id": "MAL-2026-10054", "osv_published_at": "2026-07-09T15:31:31Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:46:46Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:46:46Z", "osv_earliest_published_at": "2026-07-09T15:31:31Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:51:48Z" }, { "id": "chai-secure-2026-07-09", "display_name": "chai-secure", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-secure", "ecosystem": "npm", "versions": [ "1.2.3", "1.2.5" ], "osv_entries": [ { "osv_id": "MAL-2026-10053", "osv_published_at": "2026-07-09T15:31:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:46:45Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:46:45Z", "osv_earliest_published_at": "2026-07-09T15:31:39Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:51:41Z" }, { "id": "chai-deflect-2026-07-09", "display_name": "chai-deflect", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-deflect", "ecosystem": "npm", "versions": [ "1.1.5", "1.1.6" ], "osv_entries": [ { "osv_id": "MAL-2026-10051", "osv_published_at": "2026-07-09T15:32:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:46:43Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:46:43Z", "osv_earliest_published_at": "2026-07-09T15:32:06Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:51:33Z" }, { "id": "chai-defender-2026-07-09", "display_name": "chai-defender", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-defender", "ecosystem": "npm", "versions": [ "1.0.0-beta.1", "1.0.1", "1.0.1-beta", "1.0.2", "1.1.0", "1.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10050", "osv_published_at": "2026-07-09T15:29:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:46:42Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:46:42Z", "osv_earliest_published_at": "2026-07-09T15:29:51Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:38:54Z" }, { "id": "chai-await-dom-2026-07-09", "display_name": "chai-await-dom", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-await-dom", "ecosystem": "npm", "versions": [ "1.3.7" ], "osv_entries": [ { "osv_id": "MAL-2026-10049", "osv_published_at": "2026-07-09T15:34:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:46:41Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:46:41Z", "osv_earliest_published_at": "2026-07-09T15:34:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:51:15Z" }, { "id": "chai-as-thread-2026-07-09", "display_name": "chai-as-thread", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-thread", "ecosystem": "npm", "versions": [ "7.0.8" ], "osv_entries": [ { "osv_id": "MAL-2026-10048", "osv_published_at": "2026-07-09T15:32:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:46:40Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:46:40Z", "osv_earliest_published_at": "2026-07-09T15:32:23Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:51:03Z" }, { "id": "chai-as-staged-2026-07-09", "display_name": "chai-as-staged", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-staged", "ecosystem": "npm", "versions": [ "6.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-10047", "osv_published_at": "2026-07-09T15:34:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:46:39Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:46:39Z", "osv_earliest_published_at": "2026-07-09T15:34:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:50:56Z" }, { "id": "chai-as-smart-2026-07-09", "display_name": "chai-as-smart", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-smart", "ecosystem": "npm", "versions": [ "2.3.5" ], "osv_entries": [ { "osv_id": "MAL-2026-10046", "osv_published_at": "2026-07-09T15:28:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:46:38Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:46:38Z", "osv_earliest_published_at": "2026-07-09T15:28:07Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:50:49Z" }, { "id": "chai-as-sharpened-2026-07-09", "display_name": "chai-as-sharpened", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-sharpened", "ecosystem": "npm", "versions": [ "7.0.9" ], "osv_entries": [ { "osv_id": "MAL-2026-10045", "osv_published_at": "2026-07-09T15:31:55Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:46:37Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:46:37Z", "osv_earliest_published_at": "2026-07-09T15:31:55Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:50:36Z" }, { "id": "chai-as-serialized-2026-07-09", "display_name": "chai-as-serialized", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-serialized", "ecosystem": "npm", "versions": [ "7.0.8" ], "osv_entries": [ { "osv_id": "MAL-2026-10044", "osv_published_at": "2026-07-09T15:32:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:46:36Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:46:36Z", "osv_earliest_published_at": "2026-07-09T15:32:33Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:50:29Z" }, { "id": "chai-as-modified-2026-07-09", "display_name": "chai-as-modified", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-modified", "ecosystem": "npm", "versions": [ "6.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-10043", "osv_published_at": "2026-07-09T15:34:58Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:46:35Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:46:35Z", "osv_earliest_published_at": "2026-07-09T15:34:58Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:50:22Z" }, { "id": "chai-as-disarmed-2026-07-09", "display_name": "chai-as-disarmed", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-disarmed", "ecosystem": "npm", "versions": [ "3.2.3" ], "osv_entries": [ { "osv_id": "MAL-2026-10042", "osv_published_at": "2026-07-09T15:31:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:46:33Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:46:33Z", "osv_earliest_published_at": "2026-07-09T15:31:23Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:50:13Z" }, { "id": "chai-as-buffered-2026-07-09", "display_name": "chai-as-buffered", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-buffered", "ecosystem": "npm", "versions": [ "3.7.24" ], "osv_entries": [ { "osv_id": "MAL-2026-10041", "osv_published_at": "2026-07-09T15:34:29Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:46:32Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:46:32Z", "osv_earliest_published_at": "2026-07-09T15:34:29Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:50:06Z" }, { "id": "chai-as-balanced-2026-07-09", "display_name": "chai-as-balanced", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-balanced", "ecosystem": "npm", "versions": [ "2.2.3" ], "osv_entries": [ { "osv_id": "MAL-2026-10040", "osv_published_at": "2026-07-09T15:32:15Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:46:31Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:46:31Z", "osv_earliest_published_at": "2026-07-09T15:32:15Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:49:55Z" }, { "id": "chai-as-align-2026-07-09", "display_name": "chai-as-align", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-align", "ecosystem": "npm", "versions": [ "7.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10039", "osv_published_at": "2026-07-09T15:33:32Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:46:30Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:46:30Z", "osv_earliest_published_at": "2026-07-09T15:33:32Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:49:48Z" }, { "id": "antsrcsrctest-2026-07-09", "display_name": "antsrcsrctest", "campaign": null, "detection_source": "osv", "packages": [ { "package": "antsrcsrctest", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10038", "osv_published_at": "2026-07-09T15:28:28Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:46:29Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:46:29Z", "osv_earliest_published_at": "2026-07-09T15:28:28Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:49:42Z" }, { "id": "wagni-bot-web3-toolkit-2026-07-09", "display_name": "@wagni_bot/web3-toolkit", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@wagni_bot/web3-toolkit", "ecosystem": "npm", "versions": [ "1.0.0", "1.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10037", "osv_published_at": "2026-07-09T15:14:27Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:46:28Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:46:28Z", "osv_earliest_published_at": "2026-07-09T15:14:27Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:49:29Z" }, { "id": "wagni-bot-web3-agent-2026-07-09", "display_name": "@wagni_bot/web3-agent", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@wagni_bot/web3-agent", "ecosystem": "npm", "versions": [ "1.0.0", "1.1.0", "1.1.1", "1.1.3", "1.1.4", "1.1.5" ], "osv_entries": [ { "osv_id": "MAL-2026-10036", "osv_published_at": "2026-07-09T15:14:46Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:46:26Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:46:26Z", "osv_earliest_published_at": "2026-07-09T15:14:46Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:49:22Z" }, { "id": "wagni-bot-solana-sdk-2026-07-09", "display_name": "@wagni_bot/solana-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@wagni_bot/solana-sdk", "ecosystem": "npm", "versions": [ "1.0.0", "1.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10035", "osv_published_at": "2026-07-09T15:15:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:46:24Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:46:24Z", "osv_earliest_published_at": "2026-07-09T15:15:23Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:49:15Z" }, { "id": "wagni-bot-pumpfun-sdk-2026-07-09", "display_name": "@wagni_bot/pumpfun-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@wagni_bot/pumpfun-sdk", "ecosystem": "npm", "versions": [ "1.0.0", "1.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10034", "osv_published_at": "2026-07-09T15:18:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:46:23Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:46:23Z", "osv_earliest_published_at": "2026-07-09T15:18:25Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:49:04Z" }, { "id": "wagni-bot-polymarket-sdk-2026-07-09", "display_name": "@wagni_bot/polymarket-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@wagni_bot/polymarket-sdk", "ecosystem": "npm", "versions": [ "1.0.0", "1.1.0", "1.1.1", "1.1.3", "1.1.4", "1.1.5", "1.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10033", "osv_published_at": "2026-07-09T15:17:11Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:46:22Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:46:22Z", "osv_earliest_published_at": "2026-07-09T15:17:11Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:48:54Z" }, { "id": "wagni-bot-polygon-sdk-2026-07-09", "display_name": "@wagni_bot/polygon-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@wagni_bot/polygon-sdk", "ecosystem": "npm", "versions": [ "1.0.0", "1.1.0", "1.1.1", "1.1.3", "1.1.4", "1.1.5", "1.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10032", "osv_published_at": "2026-07-09T15:15:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:46:19Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:46:19Z", "osv_earliest_published_at": "2026-07-09T15:15:03Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:48:43Z" }, { "id": "wagni-bot-orca-sdk-2026-07-09", "display_name": "@wagni_bot/orca-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@wagni_bot/orca-sdk", "ecosystem": "npm", "versions": [ "1.0.0", "1.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10031", "osv_published_at": "2026-07-09T15:18:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:46:17Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:46:17Z", "osv_earliest_published_at": "2026-07-09T15:18:06Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:48:33Z" }, { "id": "wagni-bot-opensea-sdk-2026-07-09", "display_name": "@wagni_bot/opensea-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@wagni_bot/opensea-sdk", "ecosystem": "npm", "versions": [ "1.0.0", "1.1.0", "1.1.1", "1.1.3", "1.1.4", "1.1.5", "1.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10030", "osv_published_at": "2026-07-09T15:16:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:46:16Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:46:16Z", "osv_earliest_published_at": "2026-07-09T15:16:48Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:48:22Z" }, { "id": "wagni-bot-meteora-sdk-2026-07-09", "display_name": "@wagni_bot/meteora-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@wagni_bot/meteora-sdk", "ecosystem": "npm", "versions": [ "1.0.0", "1.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10029", "osv_published_at": "2026-07-09T15:15:13Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:46:14Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:46:14Z", "osv_earliest_published_at": "2026-07-09T15:15:13Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:48:09Z" }, { "id": "wagni-bot-metemask-sdk-2026-07-09", "display_name": "@wagni_bot/metemask-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@wagni_bot/metemask-sdk", "ecosystem": "npm", "versions": [ "1.0.0", "1.1.0", "1.1.1", "1.1.3", "1.1.4", "1.1.5", "1.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10028", "osv_published_at": "2026-07-09T15:14:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:46:12Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:46:12Z", "osv_earliest_published_at": "2026-07-09T15:14:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:48:02Z" }, { "id": "wagni-bot-jupiter-sdk-2026-07-09", "display_name": "@wagni_bot/jupiter-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@wagni_bot/jupiter-sdk", "ecosystem": "npm", "versions": [ "1.0.0", "1.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10027", "osv_published_at": "2026-07-09T15:19:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:46:10Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:46:10Z", "osv_earliest_published_at": "2026-07-09T15:19:21Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:47:52Z" }, { "id": "wagni-bot-hyperliquid-sdk-2026-07-09", "display_name": "@wagni_bot/hyperliquid-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@wagni_bot/hyperliquid-sdk", "ecosystem": "npm", "versions": [ "1.0.0", "1.1.0", "1.1.1", "1.1.3", "1.1.4", "1.1.5", "1.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10026", "osv_published_at": "2026-07-09T15:17:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:46:09Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:46:09Z", "osv_earliest_published_at": "2026-07-09T15:17:49Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:47:44Z" }, { "id": "wagni-bot-ethereum-wallet-2026-07-09", "display_name": "@wagni_bot/ethereum-wallet", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@wagni_bot/ethereum-wallet", "ecosystem": "npm", "versions": [ "1.0.0", "1.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10025", "osv_published_at": "2026-07-09T15:14:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:46:07Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:46:07Z", "osv_earliest_published_at": "2026-07-09T15:14:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:47:37Z" }, { "id": "wagni-bot-eth-agent-2026-07-09", "display_name": "@wagni_bot/eth-agent", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@wagni_bot/eth-agent", "ecosystem": "npm", "versions": [ "1.0.0", "1.1.0", "1.1.1", "1.1.3", "1.1.4", "1.1.5", "1.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10024", "osv_published_at": "2026-07-09T15:15:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:46:05Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:46:05Z", "osv_earliest_published_at": "2026-07-09T15:15:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:47:20Z" }, { "id": "wagni-bot-bsc-sdk-2026-07-09", "display_name": "@wagni_bot/bsc-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@wagni_bot/bsc-sdk", "ecosystem": "npm", "versions": [ "1.0.0", "1.1.0", "1.1.1", "1.1.3", "1.1.4", "1.1.5", "1.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10023", "osv_published_at": "2026-07-09T15:17:19Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:46:03Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:46:03Z", "osv_earliest_published_at": "2026-07-09T15:17:19Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:47:13Z" }, { "id": "wagni-bot-binance-sdk-2026-07-09", "display_name": "@wagni_bot/binance-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@wagni_bot/binance-sdk", "ecosystem": "npm", "versions": [ "1.0.0", "1.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10022", "osv_published_at": "2026-07-09T15:15:31Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:46:01Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:46:01Z", "osv_earliest_published_at": "2026-07-09T15:15:31Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:47:06Z" }, { "id": "client-cookies-agent-2026-07-09", "display_name": "client-cookies-agent", "campaign": null, "detection_source": "osv", "packages": [ { "package": "client-cookies-agent", "ecosystem": "npm", "versions": [ "99.9.5", "99.9.6" ], "osv_entries": [ { "osv_id": "MAL-2026-10019", "osv_published_at": "2026-07-09T12:25:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:45:59Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:45:59Z", "osv_earliest_published_at": "2026-07-09T12:25:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:46:53Z" }, { "id": "nodemon-sudo-2026-07-09", "display_name": "nodemon-sudo", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nodemon-sudo", "ecosystem": "npm", "versions": [ "3.1.16" ], "osv_entries": [ { "osv_id": "MAL-2026-10014", "osv_published_at": "2026-07-09T12:35:13Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:45:56Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:45:56Z", "osv_earliest_published_at": "2026-07-09T12:35:13Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:46:34Z" }, { "id": "n8n-nodes-mcputils-2026-07-09", "display_name": "n8n-nodes-mcputils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "n8n-nodes-mcputils", "ecosystem": "npm", "versions": [ "0.1.5" ], "osv_entries": [ { "osv_id": "MAL-2026-10013", "osv_published_at": "2026-07-09T11:54:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:45:55Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:45:55Z", "osv_earliest_published_at": "2026-07-09T11:54:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:46:27Z" }, { "id": "mchain-sdk-2026-07-09", "display_name": "mchain-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mchain-sdk", "ecosystem": "npm", "versions": [ "4.2.5" ], "osv_entries": [ { "osv_id": "MAL-2026-10012", "osv_published_at": "2026-07-09T11:26:45Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:45:54Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:45:54Z", "osv_earliest_published_at": "2026-07-09T11:26:45Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:46:18Z" }, { "id": "qlinforge-2026-07-09", "display_name": "qlinforge", "campaign": null, "detection_source": "osv", "packages": [ { "package": "qlinforge", "ecosystem": "pypi", "versions": [ "0.3.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10091", "osv_published_at": "2026-07-09T17:05:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:41:53Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:41:53Z", "osv_earliest_published_at": "2026-07-09T17:05:37Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:41:59Z" }, { "id": "playwrightr-2026-07-09", "display_name": "playwrightr", "campaign": null, "detection_source": "osv", "packages": [ { "package": "playwrightr", "ecosystem": "pypi", "versions": [ "1.0.0", "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10020", "osv_published_at": "2026-07-09T12:15:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T18:41:52Z", "flagged_at": null, "confirmed_at": "2026-07-09T18:41:52Z", "osv_earliest_published_at": "2026-07-09T12:15:39Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T18:41:53Z" }, { "id": "newsroom-2022-2026-07-09", "display_name": "newsroom-2022", "campaign": null, "detection_source": "osv", "packages": [ { "package": "newsroom-2022", "ecosystem": "npm", "versions": [ "0.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7326", "osv_published_at": "2026-07-07T13:00:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:09:43Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:09:43Z", "osv_earliest_published_at": "2026-07-07T13:00:38Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:45:55Z" }, { "id": "mx-frontend-2026-07-09", "display_name": "mx-frontend", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mx-frontend", "ecosystem": "npm", "versions": [ "99.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-7325", "osv_published_at": "2026-07-07T13:00:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:09:42Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:09:42Z", "osv_earliest_published_at": "2026-07-07T13:00:07Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:45:49Z" }, { "id": "mwf-accounts-lib-native-call-language-preference-2026-07-09", "display_name": "mwf-accounts-lib-native-call-language-preference", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mwf-accounts-lib-native-call-language-preference", "ecosystem": "npm", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7324", "osv_published_at": "2026-07-07T13:00:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:09:41Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:09:41Z", "osv_earliest_published_at": "2026-07-07T13:00:06Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:45:42Z" }, { "id": "mreactjs-2026-07-09", "display_name": "mreactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mreactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7323", "osv_published_at": "2026-07-07T12:59:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:09:40Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:09:40Z", "osv_earliest_published_at": "2026-07-07T12:59:51Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:45:36Z" }, { "id": "motion-ani-2026-07-09", "display_name": "motion-ani", "campaign": null, "detection_source": "osv", "packages": [ { "package": "motion-ani", "ecosystem": "npm", "versions": [ "2.3.5" ], "osv_entries": [ { "osv_id": "MAL-2026-7322", "osv_published_at": "2026-07-07T12:59:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:09:38Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:09:38Z", "osv_earliest_published_at": "2026-07-07T12:59:38Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:45:29Z" }, { "id": "modustack-2026-07-09", "display_name": "modustack", "campaign": null, "detection_source": "osv", "packages": [ { "package": "modustack", "ecosystem": "npm", "versions": [ "1.0.1", "1.0.3", "1.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-7321", "osv_published_at": "2026-07-07T12:59:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:09:37Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:09:37Z", "osv_earliest_published_at": "2026-07-07T12:59:23Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:45:18Z" }, { "id": "mngularjs-2026-07-09", "display_name": "mngularjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mngularjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7320", "osv_published_at": "2026-07-07T12:59:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:09:36Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:09:36Z", "osv_earliest_published_at": "2026-07-07T12:59:21Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:45:11Z" }, { "id": "meta-templates-2026-07-09", "display_name": "meta-templates", "campaign": null, "detection_source": "osv", "packages": [ { "package": "meta-templates", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-7319", "osv_published_at": "2026-07-07T12:59:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:09:34Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:09:34Z", "osv_earliest_published_at": "2026-07-07T12:59:07Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:45:04Z" }, { "id": "mcp-ci-runner-poc-2026-07-09", "display_name": "mcp-ci-runner-poc", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mcp-ci-runner-poc", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7318", "osv_published_at": "2026-07-07T12:58:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:09:33Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:09:33Z", "osv_earliest_published_at": "2026-07-07T12:58:50Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:44:58Z" }, { "id": "manage-subscription-app-2026-07-09", "display_name": "manage-subscription-app", "campaign": null, "detection_source": "osv", "packages": [ { "package": "manage-subscription-app", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7317", "osv_published_at": "2026-07-07T12:58:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:09:32Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:09:32Z", "osv_earliest_published_at": "2026-07-07T12:58:35Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:44:52Z" }, { "id": "lunkr-2026-07-09", "display_name": "lunkr", "campaign": null, "detection_source": "osv", "packages": [ { "package": "lunkr", "ecosystem": "npm", "versions": [ "1.1.1", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7316", "osv_published_at": "2026-07-07T12:58:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:09:30Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:09:30Z", "osv_earliest_published_at": "2026-07-07T12:58:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:44:45Z" }, { "id": "lreactjs-2026-07-09", "display_name": "lreactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "lreactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7315", "osv_published_at": "2026-07-07T12:58:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:09:29Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:09:29Z", "osv_earliest_published_at": "2026-07-07T12:58:06Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:44:39Z" }, { "id": "logfuse-2026-07-09", "display_name": "logfuse", "campaign": null, "detection_source": "osv", "packages": [ { "package": "logfuse", "ecosystem": "npm", "versions": [ "2.1.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7314", "osv_published_at": "2026-07-07T12:57:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:09:28Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:09:28Z", "osv_earliest_published_at": "2026-07-07T12:57:52Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:44:33Z" }, { "id": "liportal-web-app-2026-07-09", "display_name": "liportal-web-app", "campaign": null, "detection_source": "osv", "packages": [ { "package": "liportal-web-app", "ecosystem": "npm", "versions": [ "99.1.9", "99.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-7313", "osv_published_at": "2026-07-07T12:57:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:09:26Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:09:26Z", "osv_earliest_published_at": "2026-07-07T12:57:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:44:26Z" }, { "id": "lint-prettier-2026-07-09", "display_name": "lint-prettier", "campaign": null, "detection_source": "osv", "packages": [ { "package": "lint-prettier", "ecosystem": "npm", "versions": [ "1.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-7312", "osv_published_at": "2026-07-07T12:57:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:09:25Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:09:25Z", "osv_earliest_published_at": "2026-07-07T12:57:35Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:44:19Z" }, { "id": "launchdarkly-ai-tooling-2026-07-09", "display_name": "launchdarkly-ai-tooling", "campaign": null, "detection_source": "osv", "packages": [ { "package": "launchdarkly-ai-tooling", "ecosystem": "npm", "versions": [ "6.10.11" ], "osv_entries": [ { "osv_id": "MAL-2026-7311", "osv_published_at": "2026-07-07T12:57:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:09:24Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:09:24Z", "osv_earliest_published_at": "2026-07-07T12:57:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:44:11Z" }, { "id": "latency-tracking-internal-2026-07-09", "display_name": "latency-tracking-internal", "campaign": null, "detection_source": "osv", "packages": [ { "package": "latency-tracking-internal", "ecosystem": "npm", "versions": [ "99.9.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7310", "osv_published_at": "2026-07-07T12:57:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:09:23Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:09:23Z", "osv_earliest_published_at": "2026-07-07T12:57:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:44:04Z" }, { "id": "latency-tracking-2026-07-09", "display_name": "latency-tracking", "campaign": null, "detection_source": "osv", "packages": [ { "package": "latency-tracking", "ecosystem": "npm", "versions": [ "99.9.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7309", "osv_published_at": "2026-07-07T12:57:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:09:21Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:09:21Z", "osv_earliest_published_at": "2026-07-07T12:57:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:43:58Z" }, { "id": "lage-npm-2026-07-09", "display_name": "lage-npm", "campaign": null, "detection_source": "osv", "packages": [ { "package": "lage-npm", "ecosystem": "npm", "versions": [ "99.12.9" ], "osv_entries": [ { "osv_id": "MAL-2026-7308", "osv_published_at": "2026-07-07T12:57:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:09:20Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:09:20Z", "osv_earliest_published_at": "2026-07-07T12:57:07Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:43:51Z" }, { "id": "kreactjs-2026-07-09", "display_name": "kreactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "kreactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7307", "osv_published_at": "2026-07-07T12:56:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:09:19Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:09:19Z", "osv_earliest_published_at": "2026-07-07T12:56:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:43:44Z" }, { "id": "jwt-path-2026-07-09", "display_name": "jwt-path", "campaign": null, "detection_source": "osv", "packages": [ { "package": "jwt-path", "ecosystem": "npm", "versions": [ "3.1.3" ], "osv_entries": [ { "osv_id": "MAL-2026-7306", "osv_published_at": "2026-07-07T12:56:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:09:18Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:09:18Z", "osv_earliest_published_at": "2026-07-07T12:56:38Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:43:37Z" }, { "id": "jreactjs-2026-07-09", "display_name": "jreactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "jreactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7305", "osv_published_at": "2026-07-07T12:56:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:09:16Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:09:16Z", "osv_earliest_published_at": "2026-07-07T12:56:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:43:30Z" }, { "id": "ixpresso-core-2026-07-09", "display_name": "ixpresso-core", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ixpresso-core", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-7304", "osv_published_at": "2026-07-07T12:55:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:09:15Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:09:15Z", "osv_earliest_published_at": "2026-07-07T12:55:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:43:24Z" }, { "id": "ireactjs-2026-07-09", "display_name": "ireactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ireactjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7303", "osv_published_at": "2026-07-07T12:55:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:09:14Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:09:14Z", "osv_earliest_published_at": "2026-07-07T12:55:23Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:43:18Z" }, { "id": "insomnia-plugin-poctest-null0001-2026-07-09", "display_name": "insomnia-plugin-poctest-null0001", "campaign": null, "detection_source": "osv", "packages": [ { "package": "insomnia-plugin-poctest-null0001", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7302", "osv_published_at": "2026-07-07T12:55:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:09:12Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:09:12Z", "osv_earliest_published_at": "2026-07-07T12:55:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:43:10Z" }, { "id": "ingularjs-2026-07-09", "display_name": "ingularjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ingularjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7301", "osv_published_at": "2026-07-07T12:55:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:09:11Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:09:11Z", "osv_earliest_published_at": "2026-07-07T12:55:07Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:43:04Z" }, { "id": "ict-ui-carbon-2026-07-09", "display_name": "ict-ui-carbon", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ict-ui-carbon", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-7300", "osv_published_at": "2026-07-07T12:54:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:09:09Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:09:09Z", "osv_earliest_published_at": "2026-07-07T12:54:52Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:42:55Z" }, { "id": "ict-api-foundations-2026-07-09", "display_name": "ict-api-foundations", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ict-api-foundations", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-7299", "osv_published_at": "2026-07-07T12:54:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:09:08Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:09:08Z", "osv_earliest_published_at": "2026-07-07T12:54:52Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:42:49Z" }, { "id": "icons-generated-2026-07-09", "display_name": "icons.generated", "campaign": null, "detection_source": "osv", "packages": [ { "package": "icons.generated", "ecosystem": "npm", "versions": [ "99.9.13" ], "osv_entries": [ { "osv_id": "MAL-2026-7298", "osv_published_at": "2026-07-07T12:54:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:09:07Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:09:07Z", "osv_earliest_published_at": "2026-07-07T12:54:51Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:42:41Z" }, { "id": "ibotta-ts-2026-07-09", "display_name": "ibotta-ts", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ibotta-ts", "ecosystem": "npm", "versions": [ "45.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7297", "osv_published_at": "2026-07-07T12:54:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:09:06Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:09:06Z", "osv_earliest_published_at": "2026-07-07T12:54:51Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:42:34Z" }, { "id": "iam-scripts-2026-07-09", "display_name": "iam-scripts", "campaign": null, "detection_source": "osv", "packages": [ { "package": "iam-scripts", "ecosystem": "npm", "versions": [ "99.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-7296", "osv_published_at": "2026-07-07T12:54:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:09:05Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:09:05Z", "osv_earliest_published_at": "2026-07-07T12:54:50Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:42:28Z" }, { "id": "hreactjs-2026-07-09", "display_name": "hreactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "hreactjs", "ecosystem": "npm", "versions": [ "1.1.1", "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7295", "osv_published_at": "2026-07-07T12:54:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:09:04Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:09:04Z", "osv_earliest_published_at": "2026-07-07T12:54:37Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:42:21Z" }, { "id": "google-tag-manager-integration-sample-2026-07-09", "display_name": "google-tag-manager-integration-sample", "campaign": null, "detection_source": "osv", "packages": [ { "package": "google-tag-manager-integration-sample", "ecosystem": "npm", "versions": [ "100.0.0", "99.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-7294", "osv_published_at": "2026-07-07T12:53:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:09:02Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:09:02Z", "osv_earliest_published_at": "2026-07-07T12:53:35Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:42:12Z" }, { "id": "gontawesome-2026-07-09", "display_name": "gontawesome", "campaign": null, "detection_source": "osv", "packages": [ { "package": "gontawesome", "ecosystem": "npm", "versions": [ "1.1.1", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7293", "osv_published_at": "2026-07-07T12:53:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:09:01Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:09:01Z", "osv_earliest_published_at": "2026-07-07T12:53:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:42:03Z" }, { "id": "gitpath-package-2026-07-09", "display_name": "gitpath-package", "campaign": null, "detection_source": "osv", "packages": [ { "package": "gitpath-package", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-7292", "osv_published_at": "2026-07-07T12:53:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:08:59Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:08:59Z", "osv_earliest_published_at": "2026-07-07T12:53:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:41:57Z" }, { "id": "generate-iam-token-2026-07-09", "display_name": "generate-iam-token", "campaign": null, "detection_source": "osv", "packages": [ { "package": "generate-iam-token", "ecosystem": "npm", "versions": [ "99.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-7291", "osv_published_at": "2026-07-07T12:52:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:08:58Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:08:58Z", "osv_earliest_published_at": "2026-07-07T12:52:38Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:41:49Z" }, { "id": "fnnote-monorepo-2026-07-09", "display_name": "fnnote-monorepo", "campaign": null, "detection_source": "osv", "packages": [ { "package": "fnnote-monorepo", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-7290", "osv_published_at": "2026-07-07T12:51:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:08:57Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:08:57Z", "osv_earliest_published_at": "2026-07-07T12:51:52Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:41:42Z" }, { "id": "fnnote-frontend-2026-07-09", "display_name": "fnnote-frontend", "campaign": null, "detection_source": "osv", "packages": [ { "package": "fnnote-frontend", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-7289", "osv_published_at": "2026-07-07T12:51:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:08:55Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:08:55Z", "osv_earliest_published_at": "2026-07-07T12:51:52Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:41:35Z" }, { "id": "fnnote-combined-2026-07-09", "display_name": "fnnote-combined", "campaign": null, "detection_source": "osv", "packages": [ { "package": "fnnote-combined", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-7288", "osv_published_at": "2026-07-07T12:51:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:08:54Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:08:54Z", "osv_earliest_published_at": "2026-07-07T12:51:51Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:41:28Z" }, { "id": "fngularjs-2026-07-09", "display_name": "fngularjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "fngularjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7287", "osv_published_at": "2026-07-07T12:51:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:08:53Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:08:53Z", "osv_earliest_published_at": "2026-07-07T12:51:51Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:41:22Z" }, { "id": "fiat-token-admin-2026-07-09", "display_name": "fiat-token-admin", "campaign": null, "detection_source": "osv", "packages": [ { "package": "fiat-token-admin", "ecosystem": "npm", "versions": [ "99.1.0", "99.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-7286", "osv_published_at": "2026-07-07T12:51:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:08:52Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:08:52Z", "osv_earliest_published_at": "2026-07-07T12:51:21Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:41:16Z" }, { "id": "fabric-grachics-2026-07-09", "display_name": "fabric-grachics", "campaign": null, "detection_source": "osv", "packages": [ { "package": "fabric-grachics", "ecosystem": "npm", "versions": [ "2.1.7" ], "osv_entries": [ { "osv_id": "MAL-2026-7285", "osv_published_at": "2026-07-07T12:50:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:08:50Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:08:50Z", "osv_earliest_published_at": "2026-07-07T12:50:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:41:08Z" }, { "id": "express-flowlimit-2026-07-09", "display_name": "express-flowlimit", "campaign": null, "detection_source": "osv", "packages": [ { "package": "express-flowlimit", "ecosystem": "npm", "versions": [ "2.2.7", "2.2.8", "2.2.9" ], "osv_entries": [ { "osv_id": "MAL-2026-7284", "osv_published_at": "2026-07-07T12:50:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:08:49Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:08:49Z", "osv_earliest_published_at": "2026-07-07T12:50:50Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:41:02Z" }, { "id": "express-denv-2026-07-09", "display_name": "express-denv", "campaign": null, "detection_source": "osv", "packages": [ { "package": "express-denv", "ecosystem": "npm", "versions": [ "1.3.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7283", "osv_published_at": "2026-07-07T12:50:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:08:48Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:08:48Z", "osv_earliest_published_at": "2026-07-07T12:50:38Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:40:56Z" }, { "id": "evil-helper-pkg-2026-07-09", "display_name": "evil-helper-pkg", "campaign": null, "detection_source": "osv", "packages": [ { "package": "evil-helper-pkg", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-7282", "osv_published_at": "2026-07-07T12:50:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:08:46Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:08:46Z", "osv_earliest_published_at": "2026-07-07T12:50:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:40:49Z" }, { "id": "eslint-plugin-dagster-rules-2026-07-09", "display_name": "eslint-plugin-dagster-rules", "campaign": null, "detection_source": "osv", "packages": [ { "package": "eslint-plugin-dagster-rules", "ecosystem": "npm", "versions": [ "1000.0.0", "1000.0.2", "1000.0.7" ], "osv_entries": [ { "osv_id": "MAL-2026-7281", "osv_published_at": "2026-07-07T12:49:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:08:45Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:08:45Z", "osv_earliest_published_at": "2026-07-07T12:49:37Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:40:43Z" }, { "id": "eslint-plugin-click-ui-2026-07-09", "display_name": "eslint-plugin-click-ui", "campaign": null, "detection_source": "osv", "packages": [ { "package": "eslint-plugin-click-ui", "ecosystem": "npm", "versions": [ "15.5.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7280", "osv_published_at": "2026-07-07T12:49:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:08:44Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:08:44Z", "osv_earliest_published_at": "2026-07-07T12:49:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:40:37Z" }, { "id": "ereactjs-2026-07-09", "display_name": "ereactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ereactjs", "ecosystem": "npm", "versions": [ "1.1.1", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7279", "osv_published_at": "2026-07-07T12:49:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:08:43Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:08:43Z", "osv_earliest_published_at": "2026-07-07T12:49:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:40:30Z" }, { "id": "elf-stats-storybook-workshop-935-2026-07-09", "display_name": "elf-stats-storybook-workshop-935", "campaign": null, "detection_source": "osv", "packages": [ { "package": "elf-stats-storybook-workshop-935", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7278", "osv_published_at": "2026-07-07T12:48:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:08:41Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:08:41Z", "osv_earliest_published_at": "2026-07-07T12:48:51Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:40:24Z" }, { "id": "elf-stats-storybook-snowman-513-2026-07-09", "display_name": "elf-stats-storybook-snowman-513", "campaign": null, "detection_source": "osv", "packages": [ { "package": "elf-stats-storybook-snowman-513", "ecosystem": "npm", "versions": [ "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7277", "osv_published_at": "2026-07-07T12:48:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:08:40Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:08:40Z", "osv_earliest_published_at": "2026-07-07T12:48:51Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:40:17Z" }, { "id": "elf-stats-starlit-snowglobe-806-2026-07-09", "display_name": "elf-stats-starlit-snowglobe-806", "campaign": null, "detection_source": "osv", "packages": [ { "package": "elf-stats-starlit-snowglobe-806", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7276", "osv_published_at": "2026-07-07T12:48:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:08:39Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:08:39Z", "osv_earliest_published_at": "2026-07-07T12:48:50Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:40:10Z" }, { "id": "elf-stats-snowdusted-bauble-546-2026-07-09", "display_name": "elf-stats-snowdusted-bauble-546", "campaign": null, "detection_source": "osv", "packages": [ { "package": "elf-stats-snowdusted-bauble-546", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7275", "osv_published_at": "2026-07-07T12:48:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:08:38Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:08:38Z", "osv_earliest_published_at": "2026-07-07T12:48:38Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:40:04Z" }, { "id": "elf-stats-silvered-sled-455-2026-07-09", "display_name": "elf-stats-silvered-sled-455", "campaign": null, "detection_source": "osv", "packages": [ { "package": "elf-stats-silvered-sled-455", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7274", "osv_published_at": "2026-07-07T12:48:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:08:36Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:08:36Z", "osv_earliest_published_at": "2026-07-07T12:48:38Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:39:57Z" }, { "id": "elf-stats-shimmering-cushion-351-2026-07-09", "display_name": "elf-stats-shimmering-cushion-351", "campaign": null, "detection_source": "osv", "packages": [ { "package": "elf-stats-shimmering-cushion-351", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7273", "osv_published_at": "2026-07-07T12:48:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:08:35Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:08:35Z", "osv_earliest_published_at": "2026-07-07T12:48:38Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:39:51Z" }, { "id": "elf-stats-peppermint-northstar-168-2026-07-09", "display_name": "elf-stats-peppermint-northstar-168", "campaign": null, "detection_source": "osv", "packages": [ { "package": "elf-stats-peppermint-northstar-168", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7272", "osv_published_at": "2026-07-07T12:48:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:08:34Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:08:34Z", "osv_earliest_published_at": "2026-07-07T12:48:37Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:39:44Z" }, { "id": "elf-stats-merry-snowflake-893-2026-07-09", "display_name": "elf-stats-merry-snowflake-893", "campaign": null, "detection_source": "osv", "packages": [ { "package": "elf-stats-merry-snowflake-893", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7271", "osv_published_at": "2026-07-07T12:48:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:08:33Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:08:33Z", "osv_earliest_published_at": "2026-07-07T12:48:37Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:39:38Z" }, { "id": "elf-stats-merry-hollyberry-699-2026-07-09", "display_name": "elf-stats-merry-hollyberry-699", "campaign": null, "detection_source": "osv", "packages": [ { "package": "elf-stats-merry-hollyberry-699", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7270", "osv_published_at": "2026-07-07T12:48:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:08:32Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:08:32Z", "osv_earliest_published_at": "2026-07-07T12:48:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:39:32Z" }, { "id": "elf-stats-merry-fir-592-2026-07-09", "display_name": "elf-stats-merry-fir-592", "campaign": null, "detection_source": "osv", "packages": [ { "package": "elf-stats-merry-fir-592", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7269", "osv_published_at": "2026-07-07T12:48:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:08:31Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:08:31Z", "osv_earliest_published_at": "2026-07-07T12:48:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:39:26Z" }, { "id": "elf-stats-marzipan-sled-824-2026-07-09", "display_name": "elf-stats-marzipan-sled-824", "campaign": null, "detection_source": "osv", "packages": [ { "package": "elf-stats-marzipan-sled-824", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7268", "osv_published_at": "2026-07-07T12:48:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:08:29Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:08:29Z", "osv_earliest_published_at": "2026-07-07T12:48:35Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:39:19Z" }, { "id": "elf-stats-marzipan-saddlebag-291-2026-07-09", "display_name": "elf-stats-marzipan-saddlebag-291", "campaign": null, "detection_source": "osv", "packages": [ { "package": "elf-stats-marzipan-saddlebag-291", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7267", "osv_published_at": "2026-07-07T12:48:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:08:28Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:08:28Z", "osv_earliest_published_at": "2026-07-07T12:48:35Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:39:12Z" }, { "id": "elf-stats-lanternlit-giftbox-663-2026-07-09", "display_name": "elf-stats-lanternlit-giftbox-663", "campaign": null, "detection_source": "osv", "packages": [ { "package": "elf-stats-lanternlit-giftbox-663", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7266", "osv_published_at": "2026-07-07T12:48:24Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:08:27Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:08:27Z", "osv_earliest_published_at": "2026-07-07T12:48:24Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:39:05Z" }, { "id": "elf-stats-jolly-saddlebag-184-2026-07-09", "display_name": "elf-stats-jolly-saddlebag-184", "campaign": null, "detection_source": "osv", "packages": [ { "package": "elf-stats-jolly-saddlebag-184", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7265", "osv_published_at": "2026-07-07T12:48:24Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:08:26Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:08:26Z", "osv_earliest_published_at": "2026-07-07T12:48:24Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:38:59Z" }, { "id": "elf-stats-holly-bauble-986-2026-07-09", "display_name": "elf-stats-holly-bauble-986", "campaign": null, "detection_source": "osv", "packages": [ { "package": "elf-stats-holly-bauble-986", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7264", "osv_published_at": "2026-07-07T12:48:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:08:25Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:08:25Z", "osv_earliest_published_at": "2026-07-07T12:48:23Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:38:53Z" }, { "id": "elf-stats-glittering-cushion-945-2026-07-09", "display_name": "elf-stats-glittering-cushion-945", "campaign": null, "detection_source": "osv", "packages": [ { "package": "elf-stats-glittering-cushion-945", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7263", "osv_published_at": "2026-07-07T12:48:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:08:24Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:08:24Z", "osv_earliest_published_at": "2026-07-07T12:48:23Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:38:44Z" }, { "id": "elf-stats-fuzzy-ribbon-874-2026-07-09", "display_name": "elf-stats-fuzzy-ribbon-874", "campaign": null, "detection_source": "osv", "packages": [ { "package": "elf-stats-fuzzy-ribbon-874", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7262", "osv_published_at": "2026-07-07T12:48:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:08:22Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:08:22Z", "osv_earliest_published_at": "2026-07-07T12:48:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:38:38Z" }, { "id": "elf-stats-frosty-hammer-191-2026-07-09", "display_name": "elf-stats-frosty-hammer-191", "campaign": null, "detection_source": "osv", "packages": [ { "package": "elf-stats-frosty-hammer-191", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7261", "osv_published_at": "2026-07-07T12:48:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:08:21Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:08:21Z", "osv_earliest_published_at": "2026-07-07T12:48:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:38:31Z" }, { "id": "elf-stats-festive-pantry-640-2026-07-09", "display_name": "elf-stats-festive-pantry-640", "campaign": null, "detection_source": "osv", "packages": [ { "package": "elf-stats-festive-pantry-640", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-7260", "osv_published_at": "2026-07-07T12:48:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:08:20Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:08:20Z", "osv_earliest_published_at": "2026-07-07T12:48:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:38:24Z" }, { "id": "elf-stats-cosy-drum-671-2026-07-09", "display_name": "elf-stats-cosy-drum-671", "campaign": null, "detection_source": "osv", "packages": [ { "package": "elf-stats-cosy-drum-671", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7259", "osv_published_at": "2026-07-07T12:48:09Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:08:19Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:08:19Z", "osv_earliest_published_at": "2026-07-07T12:48:09Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:38:16Z" }, { "id": "elf-stats-candlelit-pantry-649-2026-07-09", "display_name": "elf-stats-candlelit-pantry-649", "campaign": null, "detection_source": "osv", "packages": [ { "package": "elf-stats-candlelit-pantry-649", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7258", "osv_published_at": "2026-07-07T12:48:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:08:17Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:08:17Z", "osv_earliest_published_at": "2026-07-07T12:48:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:38:09Z" }, { "id": "elf-stats-bright-workbench-558-2026-07-09", "display_name": "elf-stats-bright-workbench-558", "campaign": null, "detection_source": "osv", "packages": [ { "package": "elf-stats-bright-workbench-558", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7257", "osv_published_at": "2026-07-07T12:48:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:08:16Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:08:16Z", "osv_earliest_published_at": "2026-07-07T12:48:07Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:38:03Z" }, { "id": "elf-stats-bright-star-581-2026-07-09", "display_name": "elf-stats-bright-star-581", "campaign": null, "detection_source": "osv", "packages": [ { "package": "elf-stats-bright-star-581", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7256", "osv_published_at": "2026-07-07T12:48:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:08:15Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:08:15Z", "osv_earliest_published_at": "2026-07-07T12:48:07Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:37:55Z" }, { "id": "elf-stats-bright-nutcracker-546-2026-07-09", "display_name": "elf-stats-bright-nutcracker-546", "campaign": null, "detection_source": "osv", "packages": [ { "package": "elf-stats-bright-nutcracker-546", "ecosystem": "npm", "versions": [ "1.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7255", "osv_published_at": "2026-07-07T12:48:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:08:14Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:08:14Z", "osv_earliest_published_at": "2026-07-07T12:48:06Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:37:48Z" }, { "id": "dwagger-express-router-2026-07-09", "display_name": "dwagger-express-router", "campaign": null, "detection_source": "osv", "packages": [ { "package": "dwagger-express-router", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7254", "osv_published_at": "2026-07-07T12:47:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:08:13Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:08:13Z", "osv_earliest_published_at": "2026-07-07T12:47:38Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:37:42Z" }, { "id": "dreactjs-2026-07-09", "display_name": "dreactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "dreactjs", "ecosystem": "npm", "versions": [ "1.1.1", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7253", "osv_published_at": "2026-07-07T12:47:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:08:11Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:08:11Z", "osv_earliest_published_at": "2026-07-07T12:47:38Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:37:35Z" }, { "id": "dpd-security-poc-2026-07-09", "display_name": "dpd-security-poc", "campaign": null, "detection_source": "osv", "packages": [ { "package": "dpd-security-poc", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7252", "osv_published_at": "2026-07-07T12:47:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:08:10Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:08:10Z", "osv_earliest_published_at": "2026-07-07T12:47:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:37:28Z" }, { "id": "dontawesome-2026-07-09", "display_name": "dontawesome", "campaign": null, "detection_source": "osv", "packages": [ { "package": "dontawesome", "ecosystem": "npm", "versions": [ "1.1.1", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7251", "osv_published_at": "2026-07-07T12:47:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:08:09Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:08:09Z", "osv_earliest_published_at": "2026-07-07T12:47:23Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:37:20Z" }, { "id": "divvy-web-2026-07-09", "display_name": "divvy-web", "campaign": null, "detection_source": "osv", "packages": [ { "package": "divvy-web", "ecosystem": "npm", "versions": [ "9.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-7250", "osv_published_at": "2026-07-07T12:47:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:08:07Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:08:07Z", "osv_earliest_published_at": "2026-07-07T12:47:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:37:12Z" }, { "id": "csec-form-helpers-2026-07-09", "display_name": "csec-form-helpers", "campaign": null, "detection_source": "osv", "packages": [ { "package": "csec-form-helpers", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7249", "osv_published_at": "2026-07-07T12:45:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:08:06Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:08:06Z", "osv_earliest_published_at": "2026-07-07T12:45:52Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:37:06Z" }, { "id": "csec-crypto-utils-2026-07-09", "display_name": "csec-crypto-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "csec-crypto-utils", "ecosystem": "npm", "versions": [ "4.2.1" ], "osv_entries": [ { "osv_id": "MAL-2026-7248", "osv_published_at": "2026-07-07T12:45:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:08:05Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:08:05Z", "osv_earliest_published_at": "2026-07-07T12:45:52Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:37:00Z" }, { "id": "cookie-parseflow-2026-07-09", "display_name": "cookie-parseflow", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cookie-parseflow", "ecosystem": "npm", "versions": [ "1.5.8" ], "osv_entries": [ { "osv_id": "MAL-2026-7247", "osv_published_at": "2026-07-07T12:45:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:08:04Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:08:04Z", "osv_earliest_published_at": "2026-07-07T12:45:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:36:54Z" }, { "id": "cli-pretty-logger-2026-07-09", "display_name": "cli-pretty-logger", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cli-pretty-logger", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7246", "osv_published_at": "2026-07-07T12:44:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:08:03Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:08:03Z", "osv_earliest_published_at": "2026-07-07T12:44:35Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:36:47Z" }, { "id": "chalk-standard-2026-07-09", "display_name": "chalk-standard", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chalk-standard", "ecosystem": "npm", "versions": [ "5.6.2" ], "osv_entries": [ { "osv_id": "MAL-2026-7245", "osv_published_at": "2026-07-07T12:44:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:08:01Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:08:01Z", "osv_earliest_published_at": "2026-07-07T12:44:05Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:36:41Z" }, { "id": "chai-fetchs-2026-07-09", "display_name": "chai-fetchs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-fetchs", "ecosystem": "npm", "versions": [ "3.1.9" ], "osv_entries": [ { "osv_id": "MAL-2026-7244", "osv_published_at": "2026-07-07T12:43:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:08:00Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:08:00Z", "osv_earliest_published_at": "2026-07-07T12:43:50Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:36:35Z" }, { "id": "chai-extention-utils-2026-07-09", "display_name": "chai-extention-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-extention-utils", "ecosystem": "npm", "versions": [ "1.4.1" ], "osv_entries": [ { "osv_id": "MAL-2026-7243", "osv_published_at": "2026-07-07T12:43:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:07:59Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:07:59Z", "osv_earliest_published_at": "2026-07-07T12:43:38Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:36:29Z" }, { "id": "chai-as-upgraded-2026-07-09", "display_name": "chai-as-upgraded", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-upgraded", "ecosystem": "npm", "versions": [ "7.0.5" ], "osv_entries": [ { "osv_id": "MAL-2026-7241", "osv_published_at": "2026-07-07T12:43:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:07:57Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:07:57Z", "osv_earliest_published_at": "2026-07-07T12:43:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:36:19Z" }, { "id": "chai-as-sai-2026-07-09", "display_name": "chai-as-sai", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-sai", "ecosystem": "npm", "versions": [ "2.3.5" ], "osv_entries": [ { "osv_id": "MAL-2026-7239", "osv_published_at": "2026-07-07T12:43:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:07:55Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:07:55Z", "osv_earliest_published_at": "2026-07-07T12:43:23Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:36:11Z" }, { "id": "chai-as-purified-2026-07-09", "display_name": "chai-as-purified", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-purified", "ecosystem": "npm", "versions": [ "7.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-7238", "osv_published_at": "2026-07-07T12:43:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:07:54Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:07:54Z", "osv_earliest_published_at": "2026-07-07T12:43:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:36:04Z" }, { "id": "chai-as-patched-2026-07-09", "display_name": "chai-as-patched", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-patched", "ecosystem": "npm", "versions": [ "7.0.5", "7.0.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7237", "osv_published_at": "2026-07-07T12:43:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:07:53Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:07:53Z", "osv_earliest_published_at": "2026-07-07T12:43:21Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:35:58Z" }, { "id": "chai-as-legit-2026-07-09", "display_name": "chai-as-legit", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-legit", "ecosystem": "npm", "versions": [ "7.2.3" ], "osv_entries": [ { "osv_id": "MAL-2026-7236", "osv_published_at": "2026-07-07T12:43:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:07:51Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:07:51Z", "osv_earliest_published_at": "2026-07-07T12:43:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:35:52Z" }, { "id": "chai-as-launched-2026-07-09", "display_name": "chai-as-launched", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-launched", "ecosystem": "npm", "versions": [ "3.51.1" ], "osv_entries": [ { "osv_id": "MAL-2026-7235", "osv_published_at": "2026-07-07T12:43:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:07:50Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:07:50Z", "osv_earliest_published_at": "2026-07-07T12:43:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:35:42Z" }, { "id": "chai-as-informed-2026-07-09", "display_name": "chai-as-informed", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-informed", "ecosystem": "npm", "versions": [ "1.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7234", "osv_published_at": "2026-07-07T12:43:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:07:49Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:07:49Z", "osv_earliest_published_at": "2026-07-07T12:43:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:35:36Z" }, { "id": "chai-as-consisted-2026-07-09", "display_name": "chai-as-consisted", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-consisted", "ecosystem": "npm", "versions": [ "2.2.9" ], "osv_entries": [ { "osv_id": "MAL-2026-7233", "osv_published_at": "2026-07-07T12:43:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:07:48Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:07:48Z", "osv_earliest_published_at": "2026-07-07T12:43:06Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:35:30Z" }, { "id": "chai-as-commited-2026-07-09", "display_name": "chai-as-commited", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-commited", "ecosystem": "npm", "versions": [ "2.38.8", "2.38.9" ], "osv_entries": [ { "osv_id": "MAL-2026-7232", "osv_published_at": "2026-07-07T12:43:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:07:47Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:07:47Z", "osv_earliest_published_at": "2026-07-07T12:43:06Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:35:23Z" }, { "id": "chai-as-belonged-2026-07-09", "display_name": "chai-as-belonged", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-belonged", "ecosystem": "npm", "versions": [ "4.3.8" ], "osv_entries": [ { "osv_id": "MAL-2026-7231", "osv_published_at": "2026-07-07T12:42:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:07:45Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:07:45Z", "osv_earliest_published_at": "2026-07-07T12:42:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:35:16Z" }, { "id": "chai-as-absorbed-2026-07-09", "display_name": "chai-as-absorbed", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-absorbed", "ecosystem": "npm", "versions": [ "3.4.1" ], "osv_entries": [ { "osv_id": "MAL-2026-7230", "osv_published_at": "2026-07-07T12:42:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:07:44Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:07:44Z", "osv_earliest_published_at": "2026-07-07T12:42:52Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:35:09Z" }, { "id": "breactjs-2026-07-09", "display_name": "breactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "breactjs", "ecosystem": "npm", "versions": [ "1.1.1", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7229", "osv_published_at": "2026-07-07T12:42:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:07:43Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:07:43Z", "osv_earliest_published_at": "2026-07-07T12:42:07Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:35:02Z" }, { "id": "box-ui-elements-usm-2026-07-09", "display_name": "box-ui-elements-usm", "campaign": null, "detection_source": "osv", "packages": [ { "package": "box-ui-elements-usm", "ecosystem": "npm", "versions": [ "99.3.1" ], "osv_entries": [ { "osv_id": "MAL-2026-7228", "osv_published_at": "2026-07-07T12:42:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:07:42Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:07:42Z", "osv_earliest_published_at": "2026-07-07T12:42:07Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:34:56Z" }, { "id": "bode-which-2026-07-09", "display_name": "bode-which", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bode-which", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7227", "osv_published_at": "2026-07-07T12:42:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:07:40Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:07:40Z", "osv_earliest_published_at": "2026-07-07T12:42:05Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:34:50Z" }, { "id": "bmg-user-interaction-tracker-2026-07-09", "display_name": "bmg-user-interaction-tracker", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bmg-user-interaction-tracker", "ecosystem": "npm", "versions": [ "999.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-7226", "osv_published_at": "2026-07-07T12:41:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:07:39Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:07:39Z", "osv_earliest_published_at": "2026-07-07T12:41:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:34:43Z" }, { "id": "bitu-wallet-2026-07-09", "display_name": "bitu-wallet", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bitu-wallet", "ecosystem": "npm", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7225", "osv_published_at": "2026-07-07T12:41:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:07:38Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:07:38Z", "osv_earliest_published_at": "2026-07-07T12:41:50Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:34:37Z" }, { "id": "bitu-user-2026-07-09", "display_name": "bitu-user", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bitu-user", "ecosystem": "npm", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7224", "osv_published_at": "2026-07-07T12:41:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:07:36Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:07:36Z", "osv_earliest_published_at": "2026-07-07T12:41:50Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:34:31Z" }, { "id": "bitu-trade-2026-07-09", "display_name": "bitu-trade", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bitu-trade", "ecosystem": "npm", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7223", "osv_published_at": "2026-07-07T12:41:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:07:35Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:07:35Z", "osv_earliest_published_at": "2026-07-07T12:41:38Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:34:24Z" }, { "id": "bitu-sdk-2026-07-09", "display_name": "bitu-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bitu-sdk", "ecosystem": "npm", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7222", "osv_published_at": "2026-07-07T12:41:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:07:34Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:07:34Z", "osv_earliest_published_at": "2026-07-07T12:41:38Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:34:15Z" }, { "id": "bitu-protocol-2026-07-09", "display_name": "bitu-protocol", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bitu-protocol", "ecosystem": "npm", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7221", "osv_published_at": "2026-07-07T12:41:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:07:33Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:07:33Z", "osv_earliest_published_at": "2026-07-07T12:41:37Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:34:08Z" }, { "id": "bitu-core-2026-07-09", "display_name": "bitu-core", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bitu-core", "ecosystem": "npm", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7220", "osv_published_at": "2026-07-07T12:41:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:07:32Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:07:32Z", "osv_earliest_published_at": "2026-07-07T12:41:37Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:34:02Z" }, { "id": "bitu-app-2026-07-09", "display_name": "bitu-app", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bitu-app", "ecosystem": "npm", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7219", "osv_published_at": "2026-07-07T12:41:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:07:31Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:07:31Z", "osv_earliest_published_at": "2026-07-07T12:41:37Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:33:56Z" }, { "id": "bitopro-trade-guard-2026-07-09", "display_name": "bitopro-trade-guard", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bitopro-trade-guard", "ecosystem": "npm", "versions": [ "1.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7218", "osv_published_at": "2026-07-07T12:41:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:07:29Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:07:29Z", "osv_earliest_published_at": "2026-07-07T12:41:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:33:49Z" }, { "id": "backoff-table-2026-07-09", "display_name": "backoff-table", "campaign": null, "detection_source": "osv", "packages": [ { "package": "backoff-table", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-7217", "osv_published_at": "2026-07-07T12:40:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:07:28Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:07:28Z", "osv_earliest_published_at": "2026-07-07T12:40:50Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:33:42Z" }, { "id": "babelcode-js-2026-07-09", "display_name": "babelcode_js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "babelcode_js", "ecosystem": "npm", "versions": [ "99.12.9" ], "osv_entries": [ { "osv_id": "MAL-2026-7216", "osv_published_at": "2026-07-07T12:40:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:07:27Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:07:27Z", "osv_earliest_published_at": "2026-07-07T12:40:37Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:33:34Z" }, { "id": "axgularjs-2026-07-09", "display_name": "axgularjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "axgularjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7215", "osv_published_at": "2026-07-07T12:40:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:07:26Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:07:26Z", "osv_earliest_published_at": "2026-07-07T12:40:23Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:33:28Z" }, { "id": "autoprethixer-2026-07-09", "display_name": "autoprethixer", "campaign": null, "detection_source": "osv", "packages": [ { "package": "autoprethixer", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7214", "osv_published_at": "2026-07-07T12:40:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:07:24Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:07:24Z", "osv_earliest_published_at": "2026-07-07T12:40:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:33:17Z" }, { "id": "autoprafixar-2026-07-09", "display_name": "autoprafixar", "campaign": null, "detection_source": "osv", "packages": [ { "package": "autoprafixar", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7213", "osv_published_at": "2026-07-07T12:40:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:07:23Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:07:23Z", "osv_earliest_published_at": "2026-07-07T12:40:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:33:11Z" }, { "id": "atgularjs-2026-07-09", "display_name": "atgularjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "atgularjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7212", "osv_published_at": "2026-07-07T12:39:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:07:22Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:07:22Z", "osv_earliest_published_at": "2026-07-07T12:39:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:33:04Z" }, { "id": "ashcare-ui-ember-2026-07-09", "display_name": "ashcare-ui-ember", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ashcare-ui-ember", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-7211", "osv_published_at": "2026-07-07T12:39:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:07:20Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:07:20Z", "osv_earliest_published_at": "2026-07-07T12:39:50Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:32:58Z" }, { "id": "ash-session-tracker-2026-07-09", "display_name": "ash-session-tracker", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ash-session-tracker", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-7210", "osv_published_at": "2026-07-07T12:39:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:07:19Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:07:19Z", "osv_earliest_published_at": "2026-07-07T12:39:50Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:32:50Z" }, { "id": "areactjs-2026-07-09", "display_name": "areactjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "areactjs", "ecosystem": "npm", "versions": [ "1.1.1", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7209", "osv_published_at": "2026-07-07T12:39:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:07:18Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:07:18Z", "osv_earliest_published_at": "2026-07-07T12:39:23Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:32:44Z" }, { "id": "apple-mycelium-internal-research-2026-07-09", "display_name": "apple-mycelium-internal-research", "campaign": null, "detection_source": "osv", "packages": [ { "package": "apple-mycelium-internal-research", "ecosystem": "npm", "versions": [ "99.9.11" ], "osv_entries": [ { "osv_id": "MAL-2026-7208", "osv_published_at": "2026-07-07T12:39:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:07:16Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:07:16Z", "osv_earliest_published_at": "2026-07-07T12:39:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:32:38Z" }, { "id": "appauthhelper-enduser-2026-07-09", "display_name": "appauthhelper-enduser", "campaign": null, "detection_source": "osv", "packages": [ { "package": "appauthhelper-enduser", "ecosystem": "npm", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7207", "osv_published_at": "2026-07-07T12:39:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:07:15Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:07:15Z", "osv_earliest_published_at": "2026-07-07T12:39:05Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:32:32Z" }, { "id": "apache-arrow-17-2026-07-09", "display_name": "apache-arrow-17", "campaign": null, "detection_source": "osv", "packages": [ { "package": "apache-arrow-17", "ecosystem": "npm", "versions": [ "9.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-7206", "osv_published_at": "2026-07-07T12:38:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:07:14Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:07:14Z", "osv_earliest_published_at": "2026-07-07T12:38:37Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:32:25Z" }, { "id": "anjularjs-2026-07-09", "display_name": "anjularjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "anjularjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7205", "osv_published_at": "2026-07-07T12:38:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:07:13Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:07:13Z", "osv_earliest_published_at": "2026-07-07T12:38:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:32:15Z" }, { "id": "angzlarjs-2026-07-09", "display_name": "angzlarjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angzlarjs", "ecosystem": "npm", "versions": [ "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7204", "osv_published_at": "2026-07-07T12:38:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:07:11Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:07:11Z", "osv_earliest_published_at": "2026-07-07T12:38:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:32:09Z" }, { "id": "angylarjs-2026-07-09", "display_name": "angylarjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angylarjs", "ecosystem": "npm", "versions": [ "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7203", "osv_published_at": "2026-07-07T12:38:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:07:10Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:07:10Z", "osv_earliest_published_at": "2026-07-07T12:38:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:32:02Z" }, { "id": "angxlarjs-2026-07-09", "display_name": "angxlarjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angxlarjs", "ecosystem": "npm", "versions": [ "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7202", "osv_published_at": "2026-07-07T12:38:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:07:09Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:07:09Z", "osv_earliest_published_at": "2026-07-07T12:38:21Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:31:55Z" }, { "id": "angwlarjs-2026-07-09", "display_name": "angwlarjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angwlarjs", "ecosystem": "npm", "versions": [ "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7201", "osv_published_at": "2026-07-07T12:38:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:07:07Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:07:07Z", "osv_earliest_published_at": "2026-07-07T12:38:21Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:31:49Z" }, { "id": "angvlarjs-2026-07-09", "display_name": "angvlarjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angvlarjs", "ecosystem": "npm", "versions": [ "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7200", "osv_published_at": "2026-07-07T12:38:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:07:06Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:07:06Z", "osv_earliest_published_at": "2026-07-07T12:38:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:31:43Z" }, { "id": "anguzarjs-2026-07-09", "display_name": "anguzarjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "anguzarjs", "ecosystem": "npm", "versions": [ "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7199", "osv_published_at": "2026-07-07T12:38:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:07:05Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:07:05Z", "osv_earliest_published_at": "2026-07-07T12:38:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:31:29Z" }, { "id": "anguyarjs-2026-07-09", "display_name": "anguyarjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "anguyarjs", "ecosystem": "npm", "versions": [ "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7198", "osv_published_at": "2026-07-07T12:38:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:07:03Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:07:03Z", "osv_earliest_published_at": "2026-07-07T12:38:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:31:23Z" }, { "id": "anguxarjs-2026-07-09", "display_name": "anguxarjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "anguxarjs", "ecosystem": "npm", "versions": [ "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7197", "osv_published_at": "2026-07-07T12:38:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:07:02Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:07:02Z", "osv_earliest_published_at": "2026-07-07T12:38:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:31:16Z" }, { "id": "anguwarjs-2026-07-09", "display_name": "anguwarjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "anguwarjs", "ecosystem": "npm", "versions": [ "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7196", "osv_published_at": "2026-07-07T12:38:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:07:01Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:07:01Z", "osv_earliest_published_at": "2026-07-07T12:38:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:31:10Z" }, { "id": "anguvarjs-2026-07-09", "display_name": "anguvarjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "anguvarjs", "ecosystem": "npm", "versions": [ "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7195", "osv_published_at": "2026-07-07T12:38:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:06:59Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:06:59Z", "osv_earliest_published_at": "2026-07-07T12:38:07Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:31:03Z" }, { "id": "anguuarjs-2026-07-09", "display_name": "anguuarjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "anguuarjs", "ecosystem": "npm", "versions": [ "1.1.4" ], "osv_entries": [ { "osv_id": "MAL-2026-7194", "osv_published_at": "2026-07-07T12:38:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:06:58Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:06:58Z", "osv_earliest_published_at": "2026-07-07T12:38:07Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:30:57Z" }, { "id": "angutarjs-2026-07-09", "display_name": "angutarjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angutarjs", "ecosystem": "npm", "versions": [ "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7193", "osv_published_at": "2026-07-07T12:38:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:06:57Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:06:57Z", "osv_earliest_published_at": "2026-07-07T12:38:07Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:30:51Z" }, { "id": "angusarjs-2026-07-09", "display_name": "angusarjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angusarjs", "ecosystem": "npm", "versions": [ "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7192", "osv_published_at": "2026-07-07T12:38:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:06:56Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:06:56Z", "osv_earliest_published_at": "2026-07-07T12:38:06Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:30:44Z" }, { "id": "angurarjs-2026-07-09", "display_name": "angurarjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angurarjs", "ecosystem": "npm", "versions": [ "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7191", "osv_published_at": "2026-07-07T12:38:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:06:54Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:06:54Z", "osv_earliest_published_at": "2026-07-07T12:38:06Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:30:33Z" }, { "id": "anguparjs-2026-07-09", "display_name": "anguparjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "anguparjs", "ecosystem": "npm", "versions": [ "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7190", "osv_published_at": "2026-07-07T12:38:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:06:53Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:06:53Z", "osv_earliest_published_at": "2026-07-07T12:38:05Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:30:25Z" }, { "id": "anguoarjs-2026-07-09", "display_name": "anguoarjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "anguoarjs", "ecosystem": "npm", "versions": [ "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7189", "osv_published_at": "2026-07-07T12:38:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:06:52Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:06:52Z", "osv_earliest_published_at": "2026-07-07T12:38:05Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:30:16Z" }, { "id": "angunarjs-2026-07-09", "display_name": "angunarjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angunarjs", "ecosystem": "npm", "versions": [ "1.1.4" ], "osv_entries": [ { "osv_id": "MAL-2026-7188", "osv_published_at": "2026-07-07T12:38:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:06:50Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:06:50Z", "osv_earliest_published_at": "2026-07-07T12:38:05Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:30:09Z" }, { "id": "angumarjs-2026-07-09", "display_name": "angumarjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angumarjs", "ecosystem": "npm", "versions": [ "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7187", "osv_published_at": "2026-07-07T12:37:54Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:06:49Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:06:49Z", "osv_earliest_published_at": "2026-07-07T12:37:54Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:30:02Z" }, { "id": "angulzrjs-2026-07-09", "display_name": "angulzrjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angulzrjs", "ecosystem": "npm", "versions": [ "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7186", "osv_published_at": "2026-07-07T12:37:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:06:48Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:06:48Z", "osv_earliest_published_at": "2026-07-07T12:37:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:29:56Z" }, { "id": "angulyrjs-2026-07-09", "display_name": "angulyrjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angulyrjs", "ecosystem": "npm", "versions": [ "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7185", "osv_published_at": "2026-07-07T12:37:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:06:47Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:06:47Z", "osv_earliest_published_at": "2026-07-07T12:37:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:29:50Z" }, { "id": "angulxrjs-2026-07-09", "display_name": "angulxrjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angulxrjs", "ecosystem": "npm", "versions": [ "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7184", "osv_published_at": "2026-07-07T12:37:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:06:46Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:06:46Z", "osv_earliest_published_at": "2026-07-07T12:37:52Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:29:44Z" }, { "id": "angulwrjs-2026-07-09", "display_name": "angulwrjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angulwrjs", "ecosystem": "npm", "versions": [ "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7183", "osv_published_at": "2026-07-07T12:37:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:06:44Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:06:44Z", "osv_earliest_published_at": "2026-07-07T12:37:52Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:29:37Z" }, { "id": "angulvrjs-2026-07-09", "display_name": "angulvrjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angulvrjs", "ecosystem": "npm", "versions": [ "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7182", "osv_published_at": "2026-07-07T12:37:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:06:43Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:06:43Z", "osv_earliest_published_at": "2026-07-07T12:37:51Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:29:31Z" }, { "id": "angulurjs-2026-07-09", "display_name": "angulurjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angulurjs", "ecosystem": "npm", "versions": [ "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7181", "osv_published_at": "2026-07-07T12:37:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:06:42Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:06:42Z", "osv_earliest_published_at": "2026-07-07T12:37:51Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:29:25Z" }, { "id": "angultrjs-2026-07-09", "display_name": "angultrjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angultrjs", "ecosystem": "npm", "versions": [ "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7180", "osv_published_at": "2026-07-07T12:37:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:06:41Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:06:41Z", "osv_earliest_published_at": "2026-07-07T12:37:50Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:29:17Z" }, { "id": "angulsrjs-2026-07-09", "display_name": "angulsrjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angulsrjs", "ecosystem": "npm", "versions": [ "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7179", "osv_published_at": "2026-07-07T12:37:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:06:40Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:06:40Z", "osv_earliest_published_at": "2026-07-07T12:37:50Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:29:09Z" }, { "id": "angulrrjs-2026-07-09", "display_name": "angulrrjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angulrrjs", "ecosystem": "npm", "versions": [ "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7178", "osv_published_at": "2026-07-07T12:37:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:06:38Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:06:38Z", "osv_earliest_published_at": "2026-07-07T12:37:50Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:29:03Z" }, { "id": "angulprjs-2026-07-09", "display_name": "angulprjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angulprjs", "ecosystem": "npm", "versions": [ "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7177", "osv_published_at": "2026-07-07T12:37:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:06:37Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:06:37Z", "osv_earliest_published_at": "2026-07-07T12:37:38Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:28:56Z" }, { "id": "angulorjs-2026-07-09", "display_name": "angulorjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angulorjs", "ecosystem": "npm", "versions": [ "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7176", "osv_published_at": "2026-07-07T12:37:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:06:36Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:06:36Z", "osv_earliest_published_at": "2026-07-07T12:37:38Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:28:50Z" }, { "id": "angulnrjs-2026-07-09", "display_name": "angulnrjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angulnrjs", "ecosystem": "npm", "versions": [ "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7175", "osv_published_at": "2026-07-07T12:37:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:06:35Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:06:35Z", "osv_earliest_published_at": "2026-07-07T12:37:38Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:28:41Z" }, { "id": "angulmrjs-2026-07-09", "display_name": "angulmrjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angulmrjs", "ecosystem": "npm", "versions": [ "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7174", "osv_published_at": "2026-07-07T12:37:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:06:34Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:06:34Z", "osv_earliest_published_at": "2026-07-07T12:37:37Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:28:34Z" }, { "id": "angullrjs-2026-07-09", "display_name": "angullrjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angullrjs", "ecosystem": "npm", "versions": [ "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7173", "osv_published_at": "2026-07-07T12:37:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:06:33Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:06:33Z", "osv_earliest_published_at": "2026-07-07T12:37:37Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:28:24Z" }, { "id": "angulkrjs-2026-07-09", "display_name": "angulkrjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angulkrjs", "ecosystem": "npm", "versions": [ "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7172", "osv_published_at": "2026-07-07T12:37:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:06:31Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:06:31Z", "osv_earliest_published_at": "2026-07-07T12:37:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:28:14Z" }, { "id": "anguljrjs-2026-07-09", "display_name": "anguljrjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "anguljrjs", "ecosystem": "npm", "versions": [ "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7171", "osv_published_at": "2026-07-07T12:37:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:06:30Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:06:30Z", "osv_earliest_published_at": "2026-07-07T12:37:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:28:08Z" }, { "id": "angulirjs-2026-07-09", "display_name": "angulirjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angulirjs", "ecosystem": "npm", "versions": [ "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7170", "osv_published_at": "2026-07-07T12:37:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:06:29Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:06:29Z", "osv_earliest_published_at": "2026-07-07T12:37:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:28:01Z" }, { "id": "angulhrjs-2026-07-09", "display_name": "angulhrjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angulhrjs", "ecosystem": "npm", "versions": [ "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7169", "osv_published_at": "2026-07-07T12:37:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:06:28Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:06:28Z", "osv_earliest_published_at": "2026-07-07T12:37:35Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:27:55Z" }, { "id": "angulgrjs-2026-07-09", "display_name": "angulgrjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angulgrjs", "ecosystem": "npm", "versions": [ "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7168", "osv_published_at": "2026-07-07T12:37:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:06:27Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:06:27Z", "osv_earliest_published_at": "2026-07-07T12:37:35Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:27:49Z" }, { "id": "angulfrjs-2026-07-09", "display_name": "angulfrjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angulfrjs", "ecosystem": "npm", "versions": [ "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7167", "osv_published_at": "2026-07-07T12:37:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:06:25Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:06:25Z", "osv_earliest_published_at": "2026-07-07T12:37:23Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:27:37Z" }, { "id": "angulerjs-2026-07-09", "display_name": "angulerjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angulerjs", "ecosystem": "npm", "versions": [ "1.1.1", "1.1.2", "1.1.3", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7166", "osv_published_at": "2026-07-07T12:37:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:06:24Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:06:24Z", "osv_earliest_published_at": "2026-07-07T12:37:23Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:27:31Z" }, { "id": "anguldrjs-2026-07-09", "display_name": "anguldrjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "anguldrjs", "ecosystem": "npm", "versions": [ "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7165", "osv_published_at": "2026-07-07T12:37:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:06:22Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:06:22Z", "osv_earliest_published_at": "2026-07-07T12:37:23Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:27:24Z" }, { "id": "angulcrjs-2026-07-09", "display_name": "angulcrjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angulcrjs", "ecosystem": "npm", "versions": [ "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7164", "osv_published_at": "2026-07-07T12:37:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:06:21Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:06:21Z", "osv_earliest_published_at": "2026-07-07T12:37:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:27:18Z" }, { "id": "angulbrjs-2026-07-09", "display_name": "angulbrjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angulbrjs", "ecosystem": "npm", "versions": [ "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7163", "osv_published_at": "2026-07-07T12:37:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:06:20Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:06:20Z", "osv_earliest_published_at": "2026-07-07T12:37:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:27:11Z" }, { "id": "angulazjs-2026-07-09", "display_name": "angulazjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angulazjs", "ecosystem": "npm", "versions": [ "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7162", "osv_published_at": "2026-07-07T12:37:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:06:18Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:06:18Z", "osv_earliest_published_at": "2026-07-07T12:37:21Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:27:04Z" }, { "id": "angulayjs-2026-07-09", "display_name": "angulayjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angulayjs", "ecosystem": "npm", "versions": [ "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7161", "osv_published_at": "2026-07-07T12:37:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:06:17Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:06:17Z", "osv_earliest_published_at": "2026-07-07T12:37:21Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:26:57Z" }, { "id": "angulaxjs-2026-07-09", "display_name": "angulaxjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angulaxjs", "ecosystem": "npm", "versions": [ "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7160", "osv_published_at": "2026-07-07T12:37:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:06:16Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:06:16Z", "osv_earliest_published_at": "2026-07-07T12:37:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:26:51Z" }, { "id": "angulawjs-2026-07-09", "display_name": "angulawjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angulawjs", "ecosystem": "npm", "versions": [ "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7159", "osv_published_at": "2026-07-07T12:37:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:06:15Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:06:15Z", "osv_earliest_published_at": "2026-07-07T12:37:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:26:41Z" }, { "id": "angulavjs-2026-07-09", "display_name": "angulavjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angulavjs", "ecosystem": "npm", "versions": [ "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7158", "osv_published_at": "2026-07-07T12:37:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:06:14Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:06:14Z", "osv_earliest_published_at": "2026-07-07T12:37:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:26:35Z" }, { "id": "angulaujs-2026-07-09", "display_name": "angulaujs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angulaujs", "ecosystem": "npm", "versions": [ "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7157", "osv_published_at": "2026-07-07T12:37:09Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:06:13Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:06:13Z", "osv_earliest_published_at": "2026-07-07T12:37:09Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:26:29Z" }, { "id": "angulatjs-2026-07-09", "display_name": "angulatjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angulatjs", "ecosystem": "npm", "versions": [ "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7156", "osv_published_at": "2026-07-07T12:37:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:06:11Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:06:11Z", "osv_earliest_published_at": "2026-07-07T12:37:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:26:23Z" }, { "id": "angulasjs-2026-07-09", "display_name": "angulasjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angulasjs", "ecosystem": "npm", "versions": [ "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7155", "osv_published_at": "2026-07-07T12:37:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:06:10Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:06:10Z", "osv_earliest_published_at": "2026-07-07T12:37:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:26:17Z" }, { "id": "angularvs-2026-07-09", "display_name": "angularvs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angularvs", "ecosystem": "npm", "versions": [ "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7154", "osv_published_at": "2026-07-07T12:37:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:06:09Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:06:09Z", "osv_earliest_published_at": "2026-07-07T12:37:07Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:26:10Z" }, { "id": "angularus-2026-07-09", "display_name": "angularus", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angularus", "ecosystem": "npm", "versions": [ "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7153", "osv_published_at": "2026-07-07T12:37:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:06:08Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:06:08Z", "osv_earliest_published_at": "2026-07-07T12:37:07Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:26:04Z" }, { "id": "angularss-2026-07-09", "display_name": "angularss", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angularss", "ecosystem": "npm", "versions": [ "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7152", "osv_published_at": "2026-07-07T12:37:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:06:06Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:06:06Z", "osv_earliest_published_at": "2026-07-07T12:37:07Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:25:57Z" }, { "id": "angularrs-2026-07-09", "display_name": "angularrs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angularrs", "ecosystem": "npm", "versions": [ "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7151", "osv_published_at": "2026-07-07T12:37:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:06:05Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:06:05Z", "osv_earliest_published_at": "2026-07-07T12:37:06Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:25:52Z" }, { "id": "angularps-2026-07-09", "display_name": "angularps", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angularps", "ecosystem": "npm", "versions": [ "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7150", "osv_published_at": "2026-07-07T12:37:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:06:04Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:06:04Z", "osv_earliest_published_at": "2026-07-07T12:37:06Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:25:45Z" }, { "id": "angularos-2026-07-09", "display_name": "angularos", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angularos", "ecosystem": "npm", "versions": [ "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7149", "osv_published_at": "2026-07-07T12:37:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:06:03Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:06:03Z", "osv_earliest_published_at": "2026-07-07T12:37:05Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:25:37Z" }, { "id": "angularns-2026-07-09", "display_name": "angularns", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angularns", "ecosystem": "npm", "versions": [ "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7148", "osv_published_at": "2026-07-07T12:37:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:06:01Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:06:01Z", "osv_earliest_published_at": "2026-07-07T12:37:05Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:25:31Z" }, { "id": "angularls-2026-07-09", "display_name": "angularls", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angularls", "ecosystem": "npm", "versions": [ "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7147", "osv_published_at": "2026-07-07T12:36:54Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:06:00Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:06:00Z", "osv_earliest_published_at": "2026-07-07T12:36:54Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:25:25Z" }, { "id": "angularks-2026-07-09", "display_name": "angularks", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angularks", "ecosystem": "npm", "versions": [ "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7146", "osv_published_at": "2026-07-07T12:36:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:05:59Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:05:59Z", "osv_earliest_published_at": "2026-07-07T12:36:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:25:18Z" }, { "id": "angularhs-2026-07-09", "display_name": "angularhs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angularhs", "ecosystem": "npm", "versions": [ "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7145", "osv_published_at": "2026-07-07T12:36:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:05:58Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:05:58Z", "osv_earliest_published_at": "2026-07-07T12:36:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:25:11Z" }, { "id": "angulargs-2026-07-09", "display_name": "angulargs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angulargs", "ecosystem": "npm", "versions": [ "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7144", "osv_published_at": "2026-07-07T12:36:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:05:57Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:05:57Z", "osv_earliest_published_at": "2026-07-07T12:36:52Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:25:05Z" }, { "id": "angularfs-2026-07-09", "display_name": "angularfs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angularfs", "ecosystem": "npm", "versions": [ "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7143", "osv_published_at": "2026-07-07T12:36:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:05:55Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:05:55Z", "osv_earliest_published_at": "2026-07-07T12:36:52Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:09:37Z" }, { "id": "angulards-2026-07-09", "display_name": "angulards", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angulards", "ecosystem": "npm", "versions": [ "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7142", "osv_published_at": "2026-07-07T12:36:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:05:54Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:05:54Z", "osv_earliest_published_at": "2026-07-07T12:36:51Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:09:30Z" }, { "id": "angularbs-2026-07-09", "display_name": "angularbs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angularbs", "ecosystem": "npm", "versions": [ "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7141", "osv_published_at": "2026-07-07T12:36:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:05:53Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:05:53Z", "osv_earliest_published_at": "2026-07-07T12:36:51Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:09:23Z" }, { "id": "angularas-2026-07-09", "display_name": "angularas", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angularas", "ecosystem": "npm", "versions": [ "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7140", "osv_published_at": "2026-07-07T12:36:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:05:52Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:05:52Z", "osv_earliest_published_at": "2026-07-07T12:36:50Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:09:17Z" }, { "id": "angulapjs-2026-07-09", "display_name": "angulapjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angulapjs", "ecosystem": "npm", "versions": [ "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7139", "osv_published_at": "2026-07-07T12:36:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:05:51Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:05:51Z", "osv_earliest_published_at": "2026-07-07T12:36:38Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:09:08Z" }, { "id": "angulaojs-2026-07-09", "display_name": "angulaojs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angulaojs", "ecosystem": "npm", "versions": [ "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7138", "osv_published_at": "2026-07-07T12:36:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:05:49Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:05:49Z", "osv_earliest_published_at": "2026-07-07T12:36:38Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:09:02Z" }, { "id": "angulanjs-2026-07-09", "display_name": "angulanjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angulanjs", "ecosystem": "npm", "versions": [ "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7137", "osv_published_at": "2026-07-07T12:36:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:05:48Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:05:48Z", "osv_earliest_published_at": "2026-07-07T12:36:38Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:08:55Z" }, { "id": "angulamjs-2026-07-09", "display_name": "angulamjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angulamjs", "ecosystem": "npm", "versions": [ "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7136", "osv_published_at": "2026-07-07T12:36:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:05:47Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:05:47Z", "osv_earliest_published_at": "2026-07-07T12:36:37Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:08:49Z" }, { "id": "angulaljs-2026-07-09", "display_name": "angulaljs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angulaljs", "ecosystem": "npm", "versions": [ "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7135", "osv_published_at": "2026-07-07T12:36:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:05:46Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:05:46Z", "osv_earliest_published_at": "2026-07-07T12:36:37Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:08:40Z" }, { "id": "angulakjs-2026-07-09", "display_name": "angulakjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angulakjs", "ecosystem": "npm", "versions": [ "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7134", "osv_published_at": "2026-07-07T12:36:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:05:45Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:05:45Z", "osv_earliest_published_at": "2026-07-07T12:36:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:08:33Z" }, { "id": "angulajjs-2026-07-09", "display_name": "angulajjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angulajjs", "ecosystem": "npm", "versions": [ "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7133", "osv_published_at": "2026-07-07T12:36:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:05:43Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:05:43Z", "osv_earliest_published_at": "2026-07-07T12:36:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:08:27Z" }, { "id": "angulaijs-2026-07-09", "display_name": "angulaijs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angulaijs", "ecosystem": "npm", "versions": [ "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7132", "osv_published_at": "2026-07-07T12:36:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:05:42Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:05:42Z", "osv_earliest_published_at": "2026-07-07T12:36:35Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:08:21Z" }, { "id": "angulahjs-2026-07-09", "display_name": "angulahjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angulahjs", "ecosystem": "npm", "versions": [ "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7131", "osv_published_at": "2026-07-07T12:36:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:05:41Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:05:41Z", "osv_earliest_published_at": "2026-07-07T12:36:35Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:08:14Z" }, { "id": "angulagjs-2026-07-09", "display_name": "angulagjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angulagjs", "ecosystem": "npm", "versions": [ "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7130", "osv_published_at": "2026-07-07T12:36:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:05:40Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:05:40Z", "osv_earliest_published_at": "2026-07-07T12:36:35Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:08:08Z" }, { "id": "angulafjs-2026-07-09", "display_name": "angulafjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angulafjs", "ecosystem": "npm", "versions": [ "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7129", "osv_published_at": "2026-07-07T12:36:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:05:39Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:05:39Z", "osv_earliest_published_at": "2026-07-07T12:36:23Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:08:01Z" }, { "id": "angulaejs-2026-07-09", "display_name": "angulaejs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angulaejs", "ecosystem": "npm", "versions": [ "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7128", "osv_published_at": "2026-07-07T12:36:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:05:37Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:05:37Z", "osv_earliest_published_at": "2026-07-07T12:36:23Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:07:55Z" }, { "id": "anguladjs-2026-07-09", "display_name": "anguladjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "anguladjs", "ecosystem": "npm", "versions": [ "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7127", "osv_published_at": "2026-07-07T12:36:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:05:36Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:05:36Z", "osv_earliest_published_at": "2026-07-07T12:36:23Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:07:49Z" }, { "id": "angulacjs-2026-07-09", "display_name": "angulacjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angulacjs", "ecosystem": "npm", "versions": [ "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7126", "osv_published_at": "2026-07-07T12:36:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:05:35Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:05:35Z", "osv_earliest_published_at": "2026-07-07T12:36:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:07:41Z" }, { "id": "angulabjs-2026-07-09", "display_name": "angulabjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angulabjs", "ecosystem": "npm", "versions": [ "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7125", "osv_published_at": "2026-07-07T12:36:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:05:34Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:05:34Z", "osv_earliest_published_at": "2026-07-07T12:36:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:07:34Z" }, { "id": "angulaajs-2026-07-09", "display_name": "angulaajs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angulaajs", "ecosystem": "npm", "versions": [ "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7124", "osv_published_at": "2026-07-07T12:36:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:05:33Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:05:33Z", "osv_earliest_published_at": "2026-07-07T12:36:21Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:07:28Z" }, { "id": "angukarjs-2026-07-09", "display_name": "angukarjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angukarjs", "ecosystem": "npm", "versions": [ "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7123", "osv_published_at": "2026-07-07T12:36:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:05:32Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:05:32Z", "osv_earliest_published_at": "2026-07-07T12:36:21Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:07:20Z" }, { "id": "angujarjs-2026-07-09", "display_name": "angujarjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angujarjs", "ecosystem": "npm", "versions": [ "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7122", "osv_published_at": "2026-07-07T12:36:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:05:30Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:05:30Z", "osv_earliest_published_at": "2026-07-07T12:36:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:07:14Z" }, { "id": "anguiarjs-2026-07-09", "display_name": "anguiarjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "anguiarjs", "ecosystem": "npm", "versions": [ "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7121", "osv_published_at": "2026-07-07T12:36:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:05:29Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:05:29Z", "osv_earliest_published_at": "2026-07-07T12:36:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:07:06Z" }, { "id": "anguharjs-2026-07-09", "display_name": "anguharjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "anguharjs", "ecosystem": "npm", "versions": [ "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7120", "osv_published_at": "2026-07-07T12:36:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:05:28Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:05:28Z", "osv_earliest_published_at": "2026-07-07T12:36:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:07:00Z" }, { "id": "angugarjs-2026-07-09", "display_name": "angugarjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angugarjs", "ecosystem": "npm", "versions": [ "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7119", "osv_published_at": "2026-07-07T12:36:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:05:26Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:05:26Z", "osv_earliest_published_at": "2026-07-07T12:36:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:06:52Z" }, { "id": "angufarjs-2026-07-09", "display_name": "angufarjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angufarjs", "ecosystem": "npm", "versions": [ "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7118", "osv_published_at": "2026-07-07T12:36:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:05:25Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:05:25Z", "osv_earliest_published_at": "2026-07-07T12:36:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:06:46Z" }, { "id": "anguearjs-2026-07-09", "display_name": "anguearjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "anguearjs", "ecosystem": "npm", "versions": [ "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7117", "osv_published_at": "2026-07-07T12:36:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:05:24Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:05:24Z", "osv_earliest_published_at": "2026-07-07T12:36:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:06:39Z" }, { "id": "angudarjs-2026-07-09", "display_name": "angudarjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angudarjs", "ecosystem": "npm", "versions": [ "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7116", "osv_published_at": "2026-07-07T12:36:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:05:22Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:05:22Z", "osv_earliest_published_at": "2026-07-07T12:36:07Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:06:29Z" }, { "id": "angucarjs-2026-07-09", "display_name": "angucarjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angucarjs", "ecosystem": "npm", "versions": [ "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7115", "osv_published_at": "2026-07-07T12:36:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:05:21Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:05:21Z", "osv_earliest_published_at": "2026-07-07T12:36:07Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:06:22Z" }, { "id": "angubarjs-2026-07-09", "display_name": "angubarjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angubarjs", "ecosystem": "npm", "versions": [ "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7114", "osv_published_at": "2026-07-07T12:36:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:05:20Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:05:20Z", "osv_earliest_published_at": "2026-07-07T12:36:06Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:06:14Z" }, { "id": "anguaarjs-2026-07-09", "display_name": "anguaarjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "anguaarjs", "ecosystem": "npm", "versions": [ "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7113", "osv_published_at": "2026-07-07T12:36:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:05:18Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:05:18Z", "osv_earliest_published_at": "2026-07-07T12:36:06Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:06:07Z" }, { "id": "amgularjs-2026-07-09", "display_name": "amgularjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "amgularjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7112", "osv_published_at": "2026-07-07T12:35:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:05:17Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:05:17Z", "osv_earliest_published_at": "2026-07-07T12:35:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:05:58Z" }, { "id": "amazon-data-2026-07-09", "display_name": "amazon-data", "campaign": null, "detection_source": "osv", "packages": [ { "package": "amazon-data", "ecosystem": "npm", "versions": [ "99.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-7111", "osv_published_at": "2026-07-07T12:35:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:05:16Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:05:16Z", "osv_earliest_published_at": "2026-07-07T12:35:52Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:05:52Z" }, { "id": "amazon-core-2026-07-09", "display_name": "amazon-core", "campaign": null, "detection_source": "osv", "packages": [ { "package": "amazon-core", "ecosystem": "npm", "versions": [ "99.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-7110", "osv_published_at": "2026-07-07T12:35:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:05:15Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:05:15Z", "osv_earliest_published_at": "2026-07-07T12:35:52Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:05:45Z" }, { "id": "ajgularjs-2026-07-09", "display_name": "ajgularjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ajgularjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7109", "osv_published_at": "2026-07-07T12:35:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:05:13Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:05:13Z", "osv_earliest_published_at": "2026-07-07T12:35:37Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:05:39Z" }, { "id": "aigularjs-2026-07-09", "display_name": "aigularjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "aigularjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7108", "osv_published_at": "2026-07-07T12:35:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:05:12Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:05:12Z", "osv_earliest_published_at": "2026-07-07T12:35:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:05:29Z" }, { "id": "ai-devops-helper-2026-07-09", "display_name": "ai-devops-helper", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ai-devops-helper", "ecosystem": "npm", "versions": [ "1.0.0", "2.0.0", "2.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-7107", "osv_published_at": "2026-07-07T12:35:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:05:11Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:05:11Z", "osv_earliest_published_at": "2026-07-07T12:35:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:05:23Z" }, { "id": "adminui-deps-2026-07-09", "display_name": "adminui-deps", "campaign": null, "detection_source": "osv", "packages": [ { "package": "adminui-deps", "ecosystem": "npm", "versions": [ "1.0.0", "11.10.11" ], "osv_entries": [ { "osv_id": "MAL-2026-7106", "osv_published_at": "2026-07-07T12:34:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:05:09Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:05:09Z", "osv_earliest_published_at": "2026-07-07T12:34:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:05:16Z" }, { "id": "aangularjs-2026-07-09", "display_name": "aangularjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "aangularjs", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.4", "8.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7105", "osv_published_at": "2026-07-07T12:34:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:05:08Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:05:08Z", "osv_earliest_published_at": "2026-07-07T12:34:37Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:05:10Z" }, { "id": "xp-utilities-web-2026-07-09", "display_name": "@xp-utilities/web", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@xp-utilities/web", "ecosystem": "npm", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7104", "osv_published_at": "2026-07-07T12:34:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:04:32Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:04:32Z", "osv_earliest_published_at": "2026-07-07T12:34:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:04:34Z" }, { "id": "xp-utilities-utilities-2026-07-09", "display_name": "@xp-utilities/utilities", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@xp-utilities/utilities", "ecosystem": "npm", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7103", "osv_published_at": "2026-07-07T12:34:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:03:22Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:03:22Z", "osv_earliest_published_at": "2026-07-07T12:34:07Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:03:24Z" }, { "id": "walkme-ng-shared-ui-2026-07-09", "display_name": "@walkme-ng/shared-ui", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@walkme-ng/shared-ui", "ecosystem": "npm", "versions": [ "9.9.10", "9.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-7102", "osv_published_at": "2026-07-07T12:33:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:01:59Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:01:59Z", "osv_earliest_published_at": "2026-07-07T12:33:50Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:02:01Z" }, { "id": "vwfs-uix-core-2026-07-09", "display_name": "@vwfs-uix/core", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@vwfs-uix/core", "ecosystem": "npm", "versions": [ "99.9.12", "99.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-7101", "osv_published_at": "2026-07-07T12:33:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:01:21Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:01:21Z", "osv_earliest_published_at": "2026-07-07T12:33:42Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:01:23Z" }, { "id": "vmo-community-video-player-2026-07-09", "display_name": "@vmo-community/video-player", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@vmo-community/video-player", "ecosystem": "npm", "versions": [ "9.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-7100", "osv_published_at": "2026-07-07T12:32:26Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:00:04Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:00:04Z", "osv_earliest_published_at": "2026-07-07T12:32:26Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:00:12Z" }, { "id": "tslogger-pino-pretty-logger-2026-07-09", "display_name": "@tslogger/pino-pretty-logger", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@tslogger/pino-pretty-logger", "ecosystem": "npm", "versions": [ "1.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7099", "osv_published_at": "2026-07-07T12:31:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T15:00:03Z", "flagged_at": null, "confirmed_at": "2026-07-09T15:00:03Z", "osv_earliest_published_at": "2026-07-07T12:31:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T15:00:05Z" }, { "id": "trp-ii-ii-component-library-ii-components-2026-07-09", "display_name": "@trp-ii-ii-component-library/ii-components", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@trp-ii-ii-component-library/ii-components", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-7098", "osv_published_at": "2026-07-07T12:31:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:58:26Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:58:26Z", "osv_earliest_published_at": "2026-07-07T12:31:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:58:37Z" }, { "id": "tostringtag-nsettostringtag-2026-07-09", "display_name": "@tostringtag/nsettostringtag", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@tostringtag/nsettostringtag", "ecosystem": "npm", "versions": [ "99.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-7097", "osv_published_at": "2026-07-07T12:31:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:58:24Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:58:24Z", "osv_earliest_published_at": "2026-07-07T12:31:06Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:58:31Z" }, { "id": "toprimitive-nif-2026-07-09", "display_name": "@toprimitive/nif", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@toprimitive/nif", "ecosystem": "npm", "versions": [ "99.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-7096", "osv_published_at": "2026-07-07T12:31:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:58:23Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:58:23Z", "osv_earliest_published_at": "2026-07-07T12:31:05Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:58:25Z" }, { "id": "tc-core-sso-service-2026-07-09", "display_name": "@tc-core/sso-service", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@tc-core/sso-service", "ecosystem": "npm", "versions": [ "0.0.0-defensive-callback" ], "osv_entries": [ { "osv_id": "MAL-2026-7095", "osv_published_at": "2026-07-07T12:30:43Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:57:47Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:57:47Z", "osv_earliest_published_at": "2026-07-07T12:30:43Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:57:49Z" }, { "id": "tc-core-member-service-2026-07-09", "display_name": "@tc-core/member-service", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@tc-core/member-service", "ecosystem": "npm", "versions": [ "0.0.0-defensive-callback" ], "osv_entries": [ { "osv_id": "MAL-2026-7094", "osv_published_at": "2026-07-07T12:30:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:57:12Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:57:12Z", "osv_earliest_published_at": "2026-07-07T12:30:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:57:14Z" }, { "id": "tc-core-auth-service-2026-07-09", "display_name": "@tc-core/auth-service", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@tc-core/auth-service", "ecosystem": "npm", "versions": [ "0.0.0-defensive-callback" ], "osv_entries": [ { "osv_id": "MAL-2026-7093", "osv_published_at": "2026-07-07T12:30:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:56:06Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:56:06Z", "osv_earliest_published_at": "2026-07-07T12:30:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:56:27Z" }, { "id": "spinstorm-typescript-config-2026-07-09", "display_name": "@spinstorm/typescript-config", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@spinstorm/typescript-config", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-7092", "osv_published_at": "2026-07-07T12:30:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:56:04Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:56:04Z", "osv_earliest_published_at": "2026-07-07T12:30:25Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:56:21Z" }, { "id": "spinstorm-eslint-config-2026-07-09", "display_name": "@spinstorm/eslint-config", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@spinstorm/eslint-config", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-7091", "osv_published_at": "2026-07-07T12:30:24Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:56:03Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:56:03Z", "osv_earliest_published_at": "2026-07-07T12:30:24Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:56:14Z" }, { "id": "spinstorm-derng-2026-07-09", "display_name": "@spinstorm/derng", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@spinstorm/derng", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-7090", "osv_published_at": "2026-07-07T12:30:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:56:01Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:56:01Z", "osv_earliest_published_at": "2026-07-07T12:30:23Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:56:08Z" }, { "id": "sbb-rsu-ui-banners-2026-07-09", "display_name": "@sbb-rsu/ui-banners", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@sbb-rsu/ui-banners", "ecosystem": "npm", "versions": [ "9999.9999.9999" ], "osv_entries": [ { "osv_id": "MAL-2026-7089", "osv_published_at": "2026-07-07T12:29:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:55:56Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:55:56Z", "osv_earliest_published_at": "2026-07-07T12:29:39Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:56:02Z" }, { "id": "rocket-chat-mkb-emitter-2026-07-09", "display_name": "@rocket.chat_mkb/emitter", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@rocket.chat_mkb/emitter", "ecosystem": "npm", "versions": [ "9.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-7088", "osv_published_at": "2026-07-07T12:29:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:55:54Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:55:54Z", "osv_earliest_published_at": "2026-07-07T12:29:25Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:55:56Z" }, { "id": "pyme-shared-auth-2026-07-09", "display_name": "@pyme-shared/auth", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@pyme-shared/auth", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-7087", "osv_published_at": "2026-07-07T12:28:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:54:49Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:54:49Z", "osv_earliest_published_at": "2026-07-07T12:28:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:55:23Z" }, { "id": "mts-pay-web-sdk-2026-07-09", "display_name": "@mts-pay/web-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mts-pay/web-sdk", "ecosystem": "npm", "versions": [ "99.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-7086", "osv_published_at": "2026-07-07T12:26:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:54:48Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:54:48Z", "osv_earliest_published_at": "2026-07-07T12:26:06Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:55:16Z" }, { "id": "microsop-apple-mycelium-integrity-check-2026-07-09", "display_name": "@microsop/apple-mycelium-integrity-check", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@microsop/apple-mycelium-integrity-check", "ecosystem": "npm", "versions": [ "1.0.1778331373" ], "osv_entries": [ { "osv_id": "MAL-2026-7085", "osv_published_at": "2026-07-07T12:25:55Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:54:46Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:54:46Z", "osv_earliest_published_at": "2026-07-07T12:25:55Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:55:09Z" }, { "id": "maximvs1538-os-npm-2026-07-09", "display_name": "@maximvs1538/os-npm", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@maximvs1538/os-npm", "ecosystem": "npm", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7084", "osv_published_at": "2026-07-07T12:25:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:54:45Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:54:45Z", "osv_earliest_published_at": "2026-07-07T12:25:50Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:55:03Z" }, { "id": "magcd-pino-pretty-logger-2026-07-09", "display_name": "@magcd/pino-pretty-logger", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@magcd/pino-pretty-logger", "ecosystem": "npm", "versions": [ "1.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7083", "osv_published_at": "2026-07-07T12:25:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:54:43Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:54:43Z", "osv_earliest_published_at": "2026-07-07T12:25:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:54:57Z" }, { "id": "lovenight-voice-2026-07-09", "display_name": "@lovenight/voice", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@lovenight/voice", "ecosystem": "npm", "versions": [ "1.0.1", "1.0.2", "1.0.3", "1.0.4", "1.0.5" ], "osv_entries": [ { "osv_id": "MAL-2026-7082", "osv_published_at": "2026-07-07T12:25:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:54:41Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:54:41Z", "osv_earliest_published_at": "2026-07-07T12:25:35Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:54:51Z" }, { "id": "louisvuitton-configurator-common-lib-2026-07-09", "display_name": "@louisvuitton/configurator-common-lib", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@louisvuitton/configurator-common-lib", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-7081", "osv_published_at": "2026-07-07T12:25:26Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:54:39Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:54:39Z", "osv_earliest_published_at": "2026-07-07T12:25:26Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:54:45Z" }, { "id": "keydev-pino-pretty-logger-2026-07-09", "display_name": "@keydev/pino-pretty-logger", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@keydev/pino-pretty-logger", "ecosystem": "npm", "versions": [ "1.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7080", "osv_published_at": "2026-07-07T12:24:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:54:38Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:54:38Z", "osv_earliest_published_at": "2026-07-07T12:24:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:54:39Z" }, { "id": "karakuri-web-fgsfgehfg-common-2026-07-09", "display_name": "@karakuri-web-fgsfgehfg/common", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@karakuri-web-fgsfgehfg/common", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-7079", "osv_published_at": "2026-07-07T12:24:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:53:35Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:53:35Z", "osv_earliest_published_at": "2026-07-07T12:24:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:53:47Z" }, { "id": "jesusvizcaino2021-app-push-base-2026-07-09", "display_name": "@jesusvizcaino2021/app-push-base", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@jesusvizcaino2021/app-push-base", "ecosystem": "npm", "versions": [ "99.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-7078", "osv_published_at": "2026-07-07T12:24:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:53:34Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:53:34Z", "osv_earliest_published_at": "2026-07-07T12:24:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:53:40Z" }, { "id": "inheritdoc-n-2026-07-09", "display_name": "@inheritdoc/n", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@inheritdoc/n", "ecosystem": "npm", "versions": [ "99.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-7077", "osv_published_at": "2026-07-07T12:24:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:53:32Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:53:32Z", "osv_earliest_published_at": "2026-07-07T12:24:25Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:53:33Z" }, { "id": "indriver-tools-whisperwind-2026-07-09", "display_name": "@indriver-tools/whisperwind", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@indriver-tools/whisperwind", "ecosystem": "npm", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7076", "osv_published_at": "2026-07-07T12:24:24Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:52:22Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:52:22Z", "osv_earliest_published_at": "2026-07-07T12:24:24Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:52:38Z" }, { "id": "housecallpro-marketing-site-2026-07-09", "display_name": "@housecallpro/marketing-site", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@housecallpro/marketing-site", "ecosystem": "npm", "versions": [ "0.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-7075", "osv_published_at": "2026-07-07T12:24:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:52:21Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:52:21Z", "osv_earliest_published_at": "2026-07-07T12:24:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:52:30Z" }, { "id": "gutierre0x80-ads-components-button-2026-07-09", "display_name": "@gutierre0x80/ads.components.button", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@gutierre0x80/ads.components.button", "ecosystem": "npm", "versions": [ "1.999.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7074", "osv_published_at": "2026-07-07T12:23:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:52:19Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:52:19Z", "osv_earliest_published_at": "2026-07-07T12:23:50Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:52:21Z" }, { "id": "gs-select-savings-client-application-2026-07-09", "display_name": "@gs-select/savings-client-application", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@gs-select/savings-client-application", "ecosystem": "npm", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7073", "osv_published_at": "2026-07-07T12:23:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:51:44Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:51:44Z", "osv_earliest_published_at": "2026-07-07T12:23:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:51:45Z" }, { "id": "gs-select-client-sbl-application-2026-07-09", "display_name": "@gs-select/client-sbl-application", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@gs-select/client-sbl-application", "ecosystem": "npm", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7072", "osv_published_at": "2026-07-07T12:23:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:50:26Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:50:26Z", "osv_earliest_published_at": "2026-07-07T12:23:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:50:28Z" }, { "id": "kong-ui-public-dashboard-renderer-2026-07-09", "display_name": "@kong-ui-public/dashboard-renderer", "campaign": "gpbw-fcop-ui-packages", "detection_source": "npm_registry", "packages": [ { "package": "@kong-ui-public/dashboard-renderer", "ecosystem": "npm", "versions": [ "8.12.19-pr.3539.4caa02792.0", "8.12.19-pr.3539.933e69a42.0", "8.12.19-pr.3539.a28d0f469.0", "8.12.19-pr.3539.c2cede4ab.0", "8.12.19-pr.3539.c58281a86.0", "8.12.19-pr.3539.ea0713573.0", "8.12.20-pr.3538.918589162.0", "8.12.20-pr.3538.dfc5ede76.0", "8.12.22-pr.3542.4e45e4928.0", "8.12.23-pr.3055.ac653774c.0", "8.12.23-pr.3544.0ab4271fd.0", "8.12.23-pr.3544.63deab802.0", "8.12.23-pr.3544.f8aac08ac.0", "8.12.24-pr.3055.f601a045b.0", "8.12.24-pr.3539.cc39260c0.0", "8.12.24-pr.3543.1df3c7e2b.0", "8.12.24-pr.3547.2cbfcdd31.0", "8.12.24-pr.3548.4f88f52d5.0", "8.12.24-pr.3548.53d3a08c5.0", "8.12.24-pr.3548.7ada50d9f.0", "8.12.24-pr.3548.9bb3456ef.0", "8.12.25-pr.3547.021296cc6.0", "8.12.25-pr.3547.e903deafa.0", "8.12.26-pr.3547.c4561edd0.0", "8.12.26-pr.3547.de855da7a.0" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:49:29Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:49:29Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40kong-ui-public%2Fdashboard-renderer", "ledger_commit_at": "2026-07-09T14:49:58Z" }, { "id": "gpbw-fcop-ui-packages-theme-2026-07-09", "display_name": "@gpbw-fcop-ui-packages/theme", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@gpbw-fcop-ui-packages/theme", "ecosystem": "npm", "versions": [ "10.0.9" ], "osv_entries": [ { "osv_id": "MAL-2026-7071", "osv_published_at": "2026-07-07T12:23:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:48:45Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:48:45Z", "osv_earliest_published_at": "2026-07-07T12:23:37Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:49:53Z" }, { "id": "frontembed-testtest-2026-07-09", "display_name": "@frontembed/testtest", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@frontembed/testtest", "ecosystem": "npm", "versions": [ "99.99.100" ], "osv_entries": [ { "osv_id": "MAL-2026-7070", "osv_published_at": "2026-07-07T12:23:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:48:44Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:48:44Z", "osv_earliest_published_at": "2026-07-07T12:23:23Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:49:47Z" }, { "id": "frontembed-lib-2026-07-09", "display_name": "@frontembed/lib", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@frontembed/lib", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-7069", "osv_published_at": "2026-07-07T12:23:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:48:42Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:48:42Z", "osv_earliest_published_at": "2026-07-07T12:23:23Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:49:40Z" }, { "id": "endurosat-stellar-ui-2026-07-09", "display_name": "@endurosat/stellar-ui", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@endurosat/stellar-ui", "ecosystem": "npm", "versions": [ "12.5.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7068", "osv_published_at": "2026-07-07T12:21:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:48:41Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:48:41Z", "osv_earliest_published_at": "2026-07-07T12:21:51Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:49:34Z" }, { "id": "driivz-component-library-2026-07-09", "display_name": "@driivz/component-library", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@driivz/component-library", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-7067", "osv_published_at": "2026-07-07T12:21:24Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:48:39Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:48:39Z", "osv_earliest_published_at": "2026-07-07T12:21:24Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:49:27Z" }, { "id": "deathpoolxrs-dependency-confusion-poc-2026-07-09", "display_name": "@deathpoolxrs/dependency-confusion-poc", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@deathpoolxrs/dependency-confusion-poc", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7066", "osv_published_at": "2026-07-07T12:21:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:48:37Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:48:37Z", "osv_earliest_published_at": "2026-07-07T12:21:05Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:49:21Z" }, { "id": "datatrain-passenger-2026-07-09", "display_name": "@datatrain/passenger", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@datatrain/passenger", "ecosystem": "npm", "versions": [ "9.9.10", "9.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-7065", "osv_published_at": "2026-07-07T12:20:55Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:48:36Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:48:36Z", "osv_earliest_published_at": "2026-07-07T12:20:55Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:49:14Z" }, { "id": "dany47-csec-form-helpers-2026-07-09", "display_name": "@dany47/csec-form-helpers", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@dany47/csec-form-helpers", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7064", "osv_published_at": "2026-07-07T12:20:54Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:48:34Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:48:34Z", "osv_earliest_published_at": "2026-07-07T12:20:54Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:49:07Z" }, { "id": "dany47-csec-crypto-utils-2026-07-09", "display_name": "@dany47/csec-crypto-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@dany47/csec-crypto-utils", "ecosystem": "npm", "versions": [ "4.2.1" ], "osv_entries": [ { "osv_id": "MAL-2026-7063", "osv_published_at": "2026-07-07T12:20:54Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:48:32Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:48:32Z", "osv_earliest_published_at": "2026-07-07T12:20:54Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:49:01Z" }, { "id": "combinezone-theme-2026-07-09", "display_name": "@combinezone/theme", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@combinezone/theme", "ecosystem": "npm", "versions": [ "99.9.10", "99.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-7062", "osv_published_at": "2026-07-07T12:20:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:48:31Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:48:31Z", "osv_earliest_published_at": "2026-07-07T12:20:25Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:48:55Z" }, { "id": "combinezone-core-2026-07-09", "display_name": "@combinezone/core", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@combinezone/core", "ecosystem": "npm", "versions": [ "99.9.10", "99.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-7061", "osv_published_at": "2026-07-07T12:20:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:48:29Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:48:29Z", "osv_earliest_published_at": "2026-07-07T12:20:25Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:48:49Z" }, { "id": "cashback-postal-premium-2026-07-09", "display_name": "@cashback/postal-premium", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@cashback/postal-premium", "ecosystem": "npm", "versions": [ "99.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-7060", "osv_published_at": "2026-07-07T12:19:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:48:28Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:48:28Z", "osv_earliest_published_at": "2026-07-07T12:19:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:48:43Z" }, { "id": "cashback-how-it-works-widget-2026-07-09", "display_name": "@cashback/how-it-works-widget", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@cashback/how-it-works-widget", "ecosystem": "npm", "versions": [ "99.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-7059", "osv_published_at": "2026-07-07T12:19:10Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:48:26Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:48:26Z", "osv_earliest_published_at": "2026-07-07T12:19:10Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:48:37Z" }, { "id": "cashback-auth-2026-07-09", "display_name": "@cashback/auth", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@cashback/auth", "ecosystem": "npm", "versions": [ "99.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-7058", "osv_published_at": "2026-07-07T12:19:10Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:48:24Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:48:24Z", "osv_earliest_published_at": "2026-07-07T12:19:10Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:48:31Z" }, { "id": "buglab-pino-pretty-logger-2026-07-09", "display_name": "@buglab/pino-pretty-logger", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@buglab/pino-pretty-logger", "ecosystem": "npm", "versions": [ "1.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7057", "osv_published_at": "2026-07-07T12:19:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:48:23Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:48:23Z", "osv_earliest_published_at": "2026-07-07T12:19:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:48:24Z" }, { "id": "bmg-web-bmg-styles-2026-07-09", "display_name": "@bmg-web/bmg-styles", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@bmg-web/bmg-styles", "ecosystem": "npm", "versions": [ "9999.9999.99" ], "osv_entries": [ { "osv_id": "MAL-2026-7056", "osv_published_at": "2026-07-07T12:19:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:47:47Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:47:47Z", "osv_earliest_published_at": "2026-07-07T12:19:05Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:47:49Z" }, { "id": "bmg-web-bmg-spinner-2026-07-09", "display_name": "@bmg-web/bmg-spinner", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@bmg-web/bmg-spinner", "ecosystem": "npm", "versions": [ "999.9999.99" ], "osv_entries": [ { "osv_id": "MAL-2026-7055", "osv_published_at": "2026-07-07T12:18:55Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:47:12Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:47:12Z", "osv_earliest_published_at": "2026-07-07T12:18:55Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:47:14Z" }, { "id": "bmg-web-bmg-snackbar-2026-07-09", "display_name": "@bmg-web/bmg-snackbar", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@bmg-web/bmg-snackbar", "ecosystem": "npm", "versions": [ "999.9.9", "999.9999.99" ], "osv_entries": [ { "osv_id": "MAL-2026-7054", "osv_published_at": "2026-07-07T12:18:55Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:46:37Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:46:37Z", "osv_earliest_published_at": "2026-07-07T12:18:55Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:46:38Z" }, { "id": "bmg-web-bmg-review-basket-2026-07-09", "display_name": "@bmg-web/bmg-review-basket", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@bmg-web/bmg-review-basket", "ecosystem": "npm", "versions": [ "999.9.9", "999.9999.99" ], "osv_entries": [ { "osv_id": "MAL-2026-7053", "osv_published_at": "2026-07-07T12:18:54Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:46:01Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:46:01Z", "osv_earliest_published_at": "2026-07-07T12:18:54Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:46:03Z" }, { "id": "bmg-web-bmg-multiselect-2026-07-09", "display_name": "@bmg-web/bmg-multiselect", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@bmg-web/bmg-multiselect", "ecosystem": "npm", "versions": [ "999.9.9", "999.9999.99" ], "osv_entries": [ { "osv_id": "MAL-2026-7052", "osv_published_at": "2026-07-07T12:18:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:45:26Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:45:26Z", "osv_earliest_published_at": "2026-07-07T12:18:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:45:27Z" }, { "id": "bmg-web-bmg-key-value-2026-07-09", "display_name": "@bmg-web/bmg-key-value", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@bmg-web/bmg-key-value", "ecosystem": "npm", "versions": [ "999.9.9", "999.9999.99" ], "osv_entries": [ { "osv_id": "MAL-2026-7051", "osv_published_at": "2026-07-07T12:18:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:44:50Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:44:50Z", "osv_earliest_published_at": "2026-07-07T12:18:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:44:52Z" }, { "id": "bmg-web-bmg-core-2026-07-09", "display_name": "@bmg-web/bmg-core", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@bmg-web/bmg-core", "ecosystem": "npm", "versions": [ "999.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-7050", "osv_published_at": "2026-07-07T12:18:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:43:47Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:43:47Z", "osv_earliest_published_at": "2026-07-07T12:18:52Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:43:48Z" }, { "id": "athena-ui-components-utils-2026-07-09", "display_name": "@athena-ui-components/utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@athena-ui-components/utils", "ecosystem": "npm", "versions": [ "99.99.100", "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-7049", "osv_published_at": "2026-07-07T12:18:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:43:11Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:43:11Z", "osv_earliest_published_at": "2026-07-07T12:18:38Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:43:13Z" }, { "id": "athena-ui-components-user-activity-2026-07-09", "display_name": "@athena-ui-components/user-activity", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@athena-ui-components/user-activity", "ecosystem": "npm", "versions": [ "1.9.35", "1.9.36" ], "osv_entries": [ { "osv_id": "MAL-2026-7048", "osv_published_at": "2026-07-07T12:18:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:42:35Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:42:35Z", "osv_earliest_published_at": "2026-07-07T12:18:37Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:42:37Z" }, { "id": "athena-ui-components-pubsub-bridge-2026-07-09", "display_name": "@athena-ui-components/pubsub-bridge", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@athena-ui-components/pubsub-bridge", "ecosystem": "npm", "versions": [ "0.0.16", "0.0.17" ], "osv_entries": [ { "osv_id": "MAL-2026-7047", "osv_published_at": "2026-07-07T12:18:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:42:00Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:42:00Z", "osv_earliest_published_at": "2026-07-07T12:18:37Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:42:01Z" }, { "id": "athena-ui-components-layout-2026-07-09", "display_name": "@athena-ui-components/layout", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@athena-ui-components/layout", "ecosystem": "npm", "versions": [ "1.2.23", "1.2.24" ], "osv_entries": [ { "osv_id": "MAL-2026-7046", "osv_published_at": "2026-07-07T12:18:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:41:24Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:41:24Z", "osv_earliest_published_at": "2026-07-07T12:18:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:41:26Z" }, { "id": "athena-ui-components-lang-2026-07-09", "display_name": "@athena-ui-components/lang", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@athena-ui-components/lang", "ecosystem": "npm", "versions": [ "0.1.17", "0.1.18" ], "osv_entries": [ { "osv_id": "MAL-2026-7045", "osv_published_at": "2026-07-07T12:18:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:40:49Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:40:49Z", "osv_earliest_published_at": "2026-07-07T12:18:35Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:40:51Z" }, { "id": "athena-ui-components-hooks-2026-07-09", "display_name": "@athena-ui-components/hooks", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@athena-ui-components/hooks", "ecosystem": "npm", "versions": [ "0.2.13", "0.2.14" ], "osv_entries": [ { "osv_id": "MAL-2026-7044", "osv_published_at": "2026-07-07T12:18:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:40:13Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:40:13Z", "osv_earliest_published_at": "2026-07-07T12:18:35Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:40:15Z" }, { "id": "athena-ui-components-helpers-2026-07-09", "display_name": "@athena-ui-components/helpers", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@athena-ui-components/helpers", "ecosystem": "npm", "versions": [ "1.1.23", "1.1.24" ], "osv_entries": [ { "osv_id": "MAL-2026-7043", "osv_published_at": "2026-07-07T12:18:24Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:39:38Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:39:38Z", "osv_earliest_published_at": "2026-07-07T12:18:24Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:39:40Z" }, { "id": "kong-ui-public-documentation-2026-07-09", "display_name": "@kong-ui-public/documentation", "campaign": "athena-ui-components", "detection_source": "npm_registry", "packages": [ { "package": "@kong-ui-public/documentation", "ecosystem": "npm", "versions": [ "1.5.73-pr.3538.918589162.0", "1.5.73-pr.3538.dfc5ede76.0", "1.5.75-pr.3542.4e45e4928.0", "1.5.76-pr.3544.0ab4271fd.0", "1.5.76-pr.3544.63deab802.0", "1.5.76-pr.3544.f8aac08ac.0", "1.5.77-pr.3543.1df3c7e2b.0", "1.5.77-pr.3548.4f88f52d5.0", "1.5.77-pr.3548.53d3a08c5.0", "1.5.77-pr.3548.7ada50d9f.0", "1.5.77-pr.3548.9bb3456ef.0" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:38:43Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:38:43Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40kong-ui-public%2Fdocumentation", "ledger_commit_at": "2026-07-09T14:38:44Z" }, { "id": "athena-ui-components-graceful-degradation-2026-07-09", "display_name": "@athena-ui-components/graceful-degradation", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@athena-ui-components/graceful-degradation", "ecosystem": "npm", "versions": [ "1.1.26", "1.1.27" ], "osv_entries": [ { "osv_id": "MAL-2026-7042", "osv_published_at": "2026-07-07T12:18:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:38:02Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:38:02Z", "osv_earliest_published_at": "2026-07-07T12:18:23Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:38:03Z" }, { "id": "asurion-core-eventualize-react-b-2026-07-09", "display_name": "@asurion-core/eventualize-react-b", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@asurion-core/eventualize-react-b", "ecosystem": "npm", "versions": [ "99.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-7041", "osv_published_at": "2026-07-07T12:17:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:37:26Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:37:26Z", "osv_earliest_published_at": "2026-07-07T12:17:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:37:28Z" }, { "id": "asurion-core-eventualize-react-2026-07-09", "display_name": "@asurion-core/eventualize-react-", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@asurion-core/eventualize-react-", "ecosystem": "npm", "versions": [ "99.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-7040", "osv_published_at": "2026-07-07T12:17:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:36:21Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:36:21Z", "osv_earliest_published_at": "2026-07-07T12:17:35Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:36:22Z" }, { "id": "apps-locations-events-2026-07-09", "display_name": "@apps-locations/events", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@apps-locations/events", "ecosystem": "npm", "versions": [ "12.11.9" ], "osv_entries": [ { "osv_id": "MAL-2026-7039", "osv_published_at": "2026-07-07T12:17:24Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:34:51Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:34:51Z", "osv_earliest_published_at": "2026-07-07T12:17:24Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:34:53Z" }, { "id": "apps-legacy-reports-events-2026-07-09", "display_name": "@apps-legacy-reports/events", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@apps-legacy-reports/events", "ecosystem": "npm", "versions": [ "9.10.8" ], "osv_entries": [ { "osv_id": "MAL-2026-7038", "osv_published_at": "2026-07-07T12:17:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:33:41Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:33:41Z", "osv_earliest_published_at": "2026-07-07T12:17:23Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:33:48Z" }, { "id": "applicationbuildingcenter-xcube-schema-2026-07-09", "display_name": "@applicationbuildingcenter/xcube-schema", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@applicationbuildingcenter/xcube-schema", "ecosystem": "npm", "versions": [ "99.9.12", "99.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-7037", "osv_published_at": "2026-07-07T12:17:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:33:39Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:33:39Z", "osv_earliest_published_at": "2026-07-07T12:17:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:33:41Z" }, { "id": "app-tray-ui-stencil-component-2026-07-09", "display_name": "@app-tray-ui/stencil-component", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@app-tray-ui/stencil-component", "ecosystem": "npm", "versions": [ "10.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7036", "osv_published_at": "2026-07-07T12:17:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:32:18Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:32:18Z", "osv_earliest_published_at": "2026-07-07T12:17:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:32:48Z" }, { "id": "aoflcorp-freighter-2026-07-09", "display_name": "@aoflcorp/freighter", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@aoflcorp/freighter", "ecosystem": "npm", "versions": [ "0.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-7035", "osv_published_at": "2026-07-07T12:17:09Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:32:17Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:32:17Z", "osv_earliest_published_at": "2026-07-07T12:17:09Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:32:42Z" }, { "id": "alphasedboy-game-2026-07-09", "display_name": "@alphasedboy/game", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@alphasedboy/game", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-7034", "osv_published_at": "2026-07-07T12:16:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:32:15Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:32:15Z", "osv_earliest_published_at": "2026-07-07T12:16:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:32:36Z" }, { "id": "2011-08-19-n-2026-07-09", "display_name": "@2011-08-19/n", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@2011-08-19/n", "ecosystem": "npm", "versions": [ "99.9.10", "99.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-7033", "osv_published_at": "2026-07-07T12:16:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:31:10Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:31:10Z", "osv_earliest_published_at": "2026-07-07T12:16:05Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:32:30Z" }, { "id": "pino-pretty-logs-2026-07-09", "display_name": "pino-pretty-logs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pino-pretty-logs", "ecosystem": "npm", "versions": [ "1.0.7", "1.0.8" ], "osv_entries": [ { "osv_id": "MAL-2026-6862", "osv_published_at": "2026-07-06T18:56:24Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:30:56Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:30:56Z", "osv_earliest_published_at": "2026-07-06T18:56:24Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:31:48Z" }, { "id": "jsonupper-2026-07-09", "display_name": "jsonupper", "campaign": null, "detection_source": "osv", "packages": [ { "package": "jsonupper", "ecosystem": "npm", "versions": [ "5.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6841", "osv_published_at": "2026-07-06T18:53:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:30:50Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:30:50Z", "osv_earliest_published_at": "2026-07-06T18:53:21Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:31:33Z" }, { "id": "chalk-logger-prettier-2026-07-09", "display_name": "chalk-logger-prettier", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chalk-logger-prettier", "ecosystem": "npm", "versions": [ "1.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-6809", "osv_published_at": "2026-07-06T18:51:56Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:30:42Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:30:42Z", "osv_earliest_published_at": "2026-07-06T18:51:56Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:30:58Z" }, { "id": "lodash-en-lodash-en-2026-07-09", "display_name": "@lodash-en/lodash-en", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@lodash-en/lodash-en", "ecosystem": "npm", "versions": [ "1.4.11", "1.5.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6739", "osv_published_at": "2026-07-03T15:44:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:30:05Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:30:05Z", "osv_earliest_published_at": "2026-07-03T15:44:35Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:30:48Z" }, { "id": "terminal-prettier-2026-07-09", "display_name": "terminal-prettier", "campaign": null, "detection_source": "osv", "packages": [ { "package": "terminal-prettier", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2", "1.0.3", "1.0.4", "1.0.5", "1.0.6", "1.0.7", "1.0.8", "1.0.9", "1.1.0", "1.1.1", "1.1.2", "1.1.3", "1.1.4", "1.1.5", "1.1.6", "1.1.7", "1.1.8", "1.1.9", "1.2.0", "1.2.1", "1.2.2", "1.2.3", "1.2.4", "1.2.5", "1.2.6", "1.2.7", "1.2.8", "1.2.9", "1.3.0", "1.3.1", "1.3.2", "1.3.3", "1.3.4", "1.3.5", "1.3.6", "1.3.7", "1.3.8", "1.3.9", "1.4.0", "1.4.1", "1.4.2", "1.4.3", "1.4.4", "1.4.5", "1.4.6", "1.4.7", "1.4.8", "1.4.9", "1.5.0", "1.5.1", "1.5.2", "1.5.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6676", "osv_published_at": "2026-06-30T14:10:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:30:04Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:30:04Z", "osv_earliest_published_at": "2026-06-30T14:10:12Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:30:42Z" }, { "id": "wac-atl-context-2026-07-09", "display_name": "wac-atl-context", "campaign": null, "detection_source": "osv", "packages": [ { "package": "wac-atl-context", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6671", "osv_published_at": "2026-06-29T16:44:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:29:56Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:29:56Z", "osv_earliest_published_at": "2026-06-29T16:44:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:30:28Z" }, { "id": "pvd3-2026-07-09", "display_name": "pvd3", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pvd3", "ecosystem": "npm", "versions": [ "99.9.0", "99.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-6669", "osv_published_at": "2026-06-29T16:44:19Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:29:55Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:29:55Z", "osv_earliest_published_at": "2026-06-29T16:44:19Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:30:15Z" }, { "id": "cmp-api-stub-2026-07-09", "display_name": "cmp-api-stub", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cmp-api-stub", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6662", "osv_published_at": "2026-06-29T16:44:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:29:53Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:29:53Z", "osv_earliest_published_at": "2026-06-29T16:44:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:30:09Z" }, { "id": "bundrix-2026-07-09", "display_name": "bundrix", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bundrix", "ecosystem": "npm", "versions": [ "1.2.5" ], "osv_entries": [ { "osv_id": "MAL-2026-6658", "osv_published_at": "2026-06-29T16:32:13Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:29:52Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:29:52Z", "osv_earliest_published_at": "2026-06-29T16:32:13Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:30:03Z" }, { "id": "app-hotmart-blog-headless-2026-07-09", "display_name": "app-hotmart-blog-headless", "campaign": null, "detection_source": "osv", "packages": [ { "package": "app-hotmart-blog-headless", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6654", "osv_published_at": "2026-06-29T16:44:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:29:51Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:29:51Z", "osv_earliest_published_at": "2026-06-29T16:44:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:29:54Z" }, { "id": "rakuten-rewards-messaging-sdk-js-2026-07-09", "display_name": "@rakuten-rewards/messaging-sdk-js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@rakuten-rewards/messaging-sdk-js", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6641", "osv_published_at": "2026-06-29T16:50:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:29:32Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:29:32Z", "osv_earliest_published_at": "2026-06-29T16:50:48Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:29:35Z" }, { "id": "rakuten-rewards-messaging-sdk-2026-07-09", "display_name": "@rakuten-rewards/messaging-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@rakuten-rewards/messaging-sdk", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6640", "osv_published_at": "2026-06-29T16:50:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:27:58Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:27:58Z", "osv_earliest_published_at": "2026-06-29T16:50:48Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:28:00Z" }, { "id": "partner-apps-ui-2026-07-09", "display_name": "@partner-apps/ui", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@partner-apps/ui", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6636", "osv_published_at": "2026-06-29T16:50:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:26:59Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:26:59Z", "osv_earliest_published_at": "2026-06-29T16:50:48Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:27:02Z" }, { "id": "orbis-lr-sdk-orbis-lr-sdk-2026-07-09", "display_name": "@orbis-lr-sdk/orbis-lr-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@orbis-lr-sdk/orbis-lr-sdk", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6635", "osv_published_at": "2026-06-29T16:53:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:26:08Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:26:08Z", "osv_earliest_published_at": "2026-06-29T16:53:12Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:26:15Z" }, { "id": "multformats-multiaddr-2026-07-09", "display_name": "@multformats/multiaddr", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@multformats/multiaddr", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6634", "osv_published_at": "2026-06-29T16:50:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:26:07Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:26:07Z", "osv_earliest_published_at": "2026-06-29T16:50:48Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:26:09Z" }, { "id": "ms-ows-logging-2026-07-09", "display_name": "@ms-ows/logging", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@ms-ows/logging", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6633", "osv_published_at": "2026-06-29T16:53:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:25:20Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:25:20Z", "osv_earliest_published_at": "2026-06-29T16:53:12Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:25:23Z" }, { "id": "mxtommy-kip-2026-07-09", "display_name": "@mxtommy/kip", "campaign": "meego-progressive", "detection_source": "npm_registry", "packages": [ { "package": "@mxtommy/kip", "ecosystem": "npm", "versions": [ "4.8.3" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:24:57Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:24:57Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40mxtommy%2Fkip", "ledger_commit_at": "2026-07-09T14:24:59Z" }, { "id": "meego-progressive-cdk-2026-07-09", "display_name": "@meego-progressive/cdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@meego-progressive/cdk", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6632", "osv_published_at": "2026-06-29T16:53:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:23:43Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:23:43Z", "osv_earliest_published_at": "2026-06-29T16:53:12Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:23:45Z" }, { "id": "live-backstage-im-communication-chat-2026-07-09", "display_name": "@live-backstage-im/communication-chat", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@live-backstage-im/communication-chat", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6630", "osv_published_at": "2026-06-29T16:50:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:22:22Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:22:22Z", "osv_earliest_published_at": "2026-06-29T16:50:48Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:22:30Z" }, { "id": "lexisnexisrisk-insider-threat-platform-2026-07-09", "display_name": "@lexisnexisrisk/insider-threat-platform", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@lexisnexisrisk/insider-threat-platform", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6629", "osv_published_at": "2026-06-29T16:50:47Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:22:21Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:22:21Z", "osv_earliest_published_at": "2026-06-29T16:50:47Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:22:23Z" }, { "id": "classytic-react-media-2026-07-09", "display_name": "@classytic/react-media", "campaign": "img-hls", "detection_source": "npm_registry", "packages": [ { "package": "@classytic/react-media", "ecosystem": "npm", "versions": [ "0.3.0", "0.3.1" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:21:25Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:21:25Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40classytic%2Freact-media", "ledger_commit_at": "2026-07-09T14:21:27Z" }, { "id": "img-hls-vtt-js-2026-07-09", "display_name": "@img-hls/vtt.js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@img-hls/vtt.js", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6628", "osv_published_at": "2026-06-29T16:53:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:21:02Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:21:02Z", "osv_earliest_published_at": "2026-06-29T16:53:12Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:21:04Z" }, { "id": "huobi-ui-activity-components-2026-07-09", "display_name": "@huobi-ui/activity-components", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@huobi-ui/activity-components", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6627", "osv_published_at": "2026-06-29T16:50:47Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:20:04Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:20:04Z", "osv_earliest_published_at": "2026-06-29T16:50:47Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:20:06Z" }, { "id": "hg-aka-prml-tapas-common-2026-07-09", "display_name": "@hg-aka-prml/tapas-common", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@hg-aka-prml/tapas-common", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6626", "osv_published_at": "2026-06-29T16:53:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:18:59Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:18:59Z", "osv_earliest_published_at": "2026-06-29T16:53:12Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:19:28Z" }, { "id": "grappi-automations-2026-07-09", "display_name": "@grappi/automations", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@grappi/automations", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6625", "osv_published_at": "2026-06-29T16:44:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:18:58Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:18:58Z", "osv_earliest_published_at": "2026-06-29T16:44:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:19:19Z" }, { "id": "gm-rvg-root-config-2026-07-09", "display_name": "@gm-rvg/root-config", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@gm-rvg/root-config", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6624", "osv_published_at": "2026-06-29T16:50:47Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:18:54Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:18:54Z", "osv_earliest_published_at": "2026-06-29T16:50:47Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:19:13Z" }, { "id": "gallup-pc-utils-2026-07-09", "display_name": "@gallup/pc-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@gallup/pc-utils", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6622", "osv_published_at": "2026-06-29T16:50:47Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:18:53Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:18:53Z", "osv_earliest_published_at": "2026-06-29T16:50:47Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:19:07Z" }, { "id": "finantix-webcomponents-2026-07-09", "display_name": "@finantix/webcomponents", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@finantix/webcomponents", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6620", "osv_published_at": "2026-06-29T16:50:47Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:18:51Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:18:51Z", "osv_earliest_published_at": "2026-06-29T16:50:47Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:18:56Z" }, { "id": "fed-sofia-jetify-2026-07-09", "display_name": "@fed-sofia/jetify", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@fed-sofia/jetify", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6619", "osv_published_at": "2026-06-29T16:53:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:18:12Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:18:12Z", "osv_earliest_published_at": "2026-06-29T16:53:12Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:18:15Z" }, { "id": "experian-shared-services-2026-07-09", "display_name": "@experian-shared/services", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@experian-shared/services", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6618", "osv_published_at": "2026-06-29T16:50:47Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:17:06Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:17:06Z", "osv_earliest_published_at": "2026-06-29T16:50:47Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:17:30Z" }, { "id": "e50-utils-2026-07-09", "display_name": "@e50/utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@e50/utils", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6617", "osv_published_at": "2026-06-29T16:53:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:17:04Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:17:04Z", "osv_earliest_published_at": "2026-06-29T16:53:12Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:17:24Z" }, { "id": "druidsoft-botframework-directlinejs-2026-07-09", "display_name": "@druidsoft/botframework-directlinejs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@druidsoft/botframework-directlinejs", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6616", "osv_published_at": "2026-06-29T16:53:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:17:03Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:17:03Z", "osv_earliest_published_at": "2026-06-29T16:53:12Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:17:10Z" }, { "id": "digitalpharmacist-http-error-util-2026-07-09", "display_name": "@digitalpharmacist/http-error-util", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@digitalpharmacist/http-error-util", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6615", "osv_published_at": "2026-06-29T16:53:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:17:01Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:17:01Z", "osv_earliest_published_at": "2026-06-29T16:53:33Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:17:04Z" }, { "id": "deel-ui-animation-2026-07-09", "display_name": "@deel-ui/animation", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@deel-ui/animation", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6614", "osv_published_at": "2026-06-29T16:53:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:16:00Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:16:00Z", "osv_earliest_published_at": "2026-06-29T16:53:33Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:16:03Z" }, { "id": "deel-core-client-payroll-onboarding-types-2026-07-09", "display_name": "@deel-core/client-payroll-onboarding-types", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@deel-core/client-payroll-onboarding-types", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6613", "osv_published_at": "2026-06-29T16:53:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:15:10Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:15:10Z", "osv_earliest_published_at": "2026-06-29T16:53:33Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:15:16Z" }, { "id": "cxp-shared-string-utilities-2026-07-09", "display_name": "@cxp-shared/string-utilities", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@cxp-shared/string-utilities", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6611", "osv_published_at": "2026-06-29T16:53:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:14:14Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:14:14Z", "osv_earliest_published_at": "2026-06-29T16:53:12Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:14:16Z" }, { "id": "contentprod-authoring-block-manager-2026-07-09", "display_name": "@contentprod-authoring/block-manager", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@contentprod-authoring/block-manager", "ecosystem": "npm", "versions": [ "99.9.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6609", "osv_published_at": "2026-06-29T16:53:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:12:58Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:12:58Z", "osv_earliest_published_at": "2026-06-29T16:53:33Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:13:02Z" }, { "id": "contenteditor-shared-content-editor-common-2026-07-09", "display_name": "@contenteditor-shared/content-editor-common", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@contenteditor-shared/content-editor-common", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6608", "osv_published_at": "2026-06-29T16:53:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:11:53Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:11:53Z", "osv_earliest_published_at": "2026-06-29T16:53:12Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:12:12Z" }, { "id": "content-editor-common-2026-07-09", "display_name": "@content-editor/common", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@content-editor/common", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6607", "osv_published_at": "2026-06-29T16:53:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:11:19Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:11:19Z", "osv_earliest_published_at": "2026-06-29T16:53:12Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:12:06Z" }, { "id": "concerns-i18n-2026-07-09", "display_name": "@concerns/i18n", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@concerns/i18n", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6606", "osv_published_at": "2026-06-29T16:53:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:11:18Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:11:18Z", "osv_earliest_published_at": "2026-06-29T16:53:33Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:11:59Z" }, { "id": "bscom-styling-2026-07-09", "display_name": "@bscom/styling", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@bscom/styling", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6605", "osv_published_at": "2026-06-29T16:53:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:11:16Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:11:16Z", "osv_earliest_published_at": "2026-06-29T16:53:33Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:11:49Z" }, { "id": "appsource-utils-2026-07-09", "display_name": "@appsource/utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@appsource/utils", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6601", "osv_published_at": "2026-06-29T16:53:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:11:15Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:11:15Z", "osv_earliest_published_at": "2026-06-29T16:53:33Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:11:38Z" }, { "id": "anna-money-anna-web-lib-2026-07-09", "display_name": "@anna-money/anna-web-lib", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@anna-money/anna-web-lib", "ecosystem": "npm", "versions": [ "99.9.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6600", "osv_published_at": "2026-06-29T16:48:57Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:09:52Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:09:52Z", "osv_earliest_published_at": "2026-06-29T16:48:57Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:11:32Z" }, { "id": "alerts-components-2026-07-09", "display_name": "@alerts/components", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@alerts/components", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6599", "osv_published_at": "2026-06-29T16:53:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:09:51Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:09:51Z", "osv_earliest_published_at": "2026-06-29T16:53:33Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:11:23Z" }, { "id": "macos-ci-utils-2026-07-09", "display_name": "macos-ci-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "macos-ci-utils", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6378", "osv_published_at": "2026-06-24T07:21:28Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:09:50Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:09:50Z", "osv_earliest_published_at": "2026-06-24T07:21:28Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:11:16Z" }, { "id": "pampipes-2026-07-09", "display_name": "pampipes", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pampipes", "ecosystem": "npm", "versions": [ "1.1.9", "1.2.0", "1.2.9", "1.3.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5872", "osv_published_at": "2026-06-16T06:09:11Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:09:46Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:09:46Z", "osv_earliest_published_at": "2026-06-16T06:09:11Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:11:03Z" }, { "id": "hot-validation-sdk-2026-07-09", "display_name": "hot-validation-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "hot-validation-sdk", "ecosystem": "npm", "versions": [ "99.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-5870", "osv_published_at": "2026-06-16T06:12:47Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:09:44Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:09:44Z", "osv_earliest_published_at": "2026-06-16T06:12:47Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:10:52Z" }, { "id": "fabric-graphics-2026-07-09", "display_name": "fabric-graphics", "campaign": null, "detection_source": "osv", "packages": [ { "package": "fabric-graphics", "ecosystem": "npm", "versions": [ "1.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5869", "osv_published_at": "2026-06-16T06:09:11Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:09:43Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:09:43Z", "osv_earliest_published_at": "2026-06-16T06:09:11Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:10:45Z" }, { "id": "terminal-structured-logger-2026-07-09", "display_name": "terminal-structured-logger", "campaign": null, "detection_source": "osv", "packages": [ { "package": "terminal-structured-logger", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5867", "osv_published_at": "2026-06-16T06:03:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:09:42Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:09:42Z", "osv_earliest_published_at": "2026-06-16T06:03:38Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:10:39Z" }, { "id": "terminal-pretty-logger-2026-07-09", "display_name": "terminal-pretty-logger", "campaign": null, "detection_source": "osv", "packages": [ { "package": "terminal-pretty-logger", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2", "1.0.3", "1.0.4", "1.0.5", "2.0.0", "2.0.1", "2.0.2", "2.0.3", "2.0.4", "2.0.5", "2.0.6", "2.0.7", "2.1.0", "2.1.1", "2.1.2", "2.1.3", "2.1.4", "2.1.5", "2.1.6" ], "osv_entries": [ { "osv_id": "MAL-2026-5866", "osv_published_at": "2026-06-16T06:03:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:09:40Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:09:40Z", "osv_earliest_published_at": "2026-06-16T06:03:38Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:10:33Z" }, { "id": "vite-enhancer-config-2026-07-09", "display_name": "vite-enhancer-config", "campaign": null, "detection_source": "osv", "packages": [ { "package": "vite-enhancer-config", "ecosystem": "npm", "versions": [ "1.0.0", "1.1.4", "1.1.5", "1.1.6", "1.1.7", "1.1.8", "1.1.9", "1.2.0", "1.2.1", "1.2.2", "1.2.3", "1.2.4", "1.2.5", "1.2.6", "1.3.0", "1.3.1", "1.3.2", "1.3.3", "1.3.4", "1.3.5", "1.3.6" ], "osv_entries": [ { "osv_id": "MAL-2026-5850", "osv_published_at": "2026-06-15T23:33:01Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:09:37Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:09:37Z", "osv_earliest_published_at": "2026-06-15T23:33:01Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-23T08:48:03Z", "observed_at": "2026-07-09T14:09:37Z", "ingested_at": "2026-07-09T14:09:37Z", "source_published_at": "2026-06-15T23:33:01Z", "ledger_committed_at": "2026-07-23T08:48:03Z" }, { "id": "slow-surf-2026-07-09", "display_name": "slow-surf", "campaign": null, "detection_source": "osv", "packages": [ { "package": "slow-surf", "ecosystem": "npm", "versions": [ "10.0.0", "9.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-5848", "osv_published_at": "2026-06-15T23:39:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:09:34Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:09:34Z", "osv_earliest_published_at": "2026-06-15T23:39:12Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:10:15Z" }, { "id": "transportator-2026-07-09", "display_name": "transportator", "campaign": null, "detection_source": "osv", "packages": [ { "package": "transportator", "ecosystem": "npm", "versions": [ "1.0.1", "1.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5700", "osv_published_at": "2026-06-12T16:11:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:09:32Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:09:32Z", "osv_earliest_published_at": "2026-06-12T16:11:50Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-23T08:47:10Z", "observed_at": "2026-07-09T14:09:32Z", "ingested_at": "2026-07-09T14:09:32Z", "source_published_at": "2026-06-12T16:11:50Z", "ledger_committed_at": "2026-07-23T08:47:10Z" }, { "id": "sitecore-mm-component-style-2026-07-09", "display_name": "sitecore-mm-component-style", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sitecore-mm-component-style", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5671", "osv_published_at": "2026-06-11T13:54:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:09:31Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:09:31Z", "osv_earliest_published_at": "2026-06-11T13:54:39Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:09:57Z" }, { "id": "pui-diagnostics-2026-07-09", "display_name": "pui-diagnostics", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pui-diagnostics", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5670", "osv_published_at": "2026-06-11T13:54:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:09:30Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:09:30Z", "osv_earliest_published_at": "2026-06-11T13:54:39Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:09:51Z" }, { "id": "fed-callnative-2026-07-09", "display_name": "fed-callnative", "campaign": null, "detection_source": "osv", "packages": [ { "package": "fed-callnative", "ecosystem": "npm", "versions": [ "99.9.1", "99.9.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5668", "osv_published_at": "2026-06-11T13:54:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:09:29Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:09:29Z", "osv_earliest_published_at": "2026-06-11T13:54:39Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:09:41Z" }, { "id": "experian-analytics-components-2026-07-09", "display_name": "experian-analytics-components", "campaign": null, "detection_source": "osv", "packages": [ { "package": "experian-analytics-components", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5667", "osv_published_at": "2026-06-11T13:54:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:09:28Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:09:28Z", "osv_earliest_published_at": "2026-06-11T13:54:39Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:09:30Z" }, { "id": "visma-net-platform-module-navigator-2026-07-09", "display_name": "@visma-net-platform/module-navigator", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@visma-net-platform/module-navigator", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5665", "osv_published_at": "2026-06-11T13:54:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:08:16Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:08:16Z", "osv_earliest_published_at": "2026-06-11T13:54:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:08:19Z" }, { "id": "digital-science-dsl-dimensions-analytics-mcp-2026-07-09", "display_name": "@digital-science-dsl/dimensions-analytics-mcp", "campaign": "tribe-digital", "detection_source": "npm_registry", "packages": [ { "package": "@digital-science-dsl/dimensions-analytics-mcp", "ecosystem": "npm", "versions": [ "0.5.0", "0.5.1", "0.5.2" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:07:13Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:07:13Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40digital-science-dsl%2Fdimensions-analytics-mcp", "ledger_commit_at": "2026-07-09T14:07:19Z" }, { "id": "tribe-digital-shopify-starter-theme-2026-07-09", "display_name": "@tribe-digital/shopify-starter-theme", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@tribe-digital/shopify-starter-theme", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5664", "osv_published_at": "2026-06-11T13:54:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:06:36Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:06:36Z", "osv_earliest_published_at": "2026-06-11T13:54:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:06:48Z" }, { "id": "tenforce-toolbox-fontmap-2026-07-09", "display_name": "@tenforce/toolbox-fontmap", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@tenforce/toolbox-fontmap", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5663", "osv_published_at": "2026-06-11T13:54:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:06:35Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:06:35Z", "osv_earliest_published_at": "2026-06-11T13:54:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:06:42Z" }, { "id": "snowsight-debug-tooling-2026-07-09", "display_name": "@snowsight/debug-tooling", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@snowsight/debug-tooling", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5662", "osv_published_at": "2026-06-11T13:54:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:06:33Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:06:33Z", "osv_earliest_published_at": "2026-06-11T13:54:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:06:36Z" }, { "id": "marketplace-shared-components-2026-07-09", "display_name": "@marketplace-shared/components", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@marketplace-shared/components", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5658", "osv_published_at": "2026-06-11T13:54:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:05:26Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:05:26Z", "osv_earliest_published_at": "2026-06-11T13:54:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:05:29Z" }, { "id": "hatcha-captcha-core-2026-07-09", "display_name": "@hatcha-captcha/core", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@hatcha-captcha/core", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5655", "osv_published_at": "2026-06-11T13:54:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:04:11Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:04:11Z", "osv_earliest_published_at": "2026-06-11T13:54:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:04:46Z" }, { "id": "theta-sdk-2026-07-09", "display_name": "theta-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "theta-sdk", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.10", "1.0.12", "1.0.13", "1.0.14", "1.0.15", "1.0.16", "1.0.2", "1.0.3", "1.0.4", "1.0.7", "1.0.8", "1.0.9" ], "osv_entries": [ { "osv_id": "MAL-2026-5652", "osv_published_at": "2026-06-11T12:36:30Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:04:10Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:04:10Z", "osv_earliest_published_at": "2026-06-11T12:36:30Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:04:33Z" }, { "id": "ozonex-sdk-2026-07-09", "display_name": "ozonex-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ozonex-sdk", "ecosystem": "npm", "versions": [ "1.0.2", "1.0.5", "1.0.6", "1.0.7", "1.0.8" ], "osv_entries": [ { "osv_id": "MAL-2026-5651", "osv_published_at": "2026-06-11T12:40:01Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:04:08Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:04:08Z", "osv_earliest_published_at": "2026-06-11T12:40:01Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:04:27Z" }, { "id": "argoncrypt-2026-07-09", "display_name": "argoncrypt", "campaign": null, "detection_source": "osv", "packages": [ { "package": "argoncrypt", "ecosystem": "npm", "versions": [ "1.2.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5506", "osv_published_at": "2026-06-10T14:09:55Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:04:00Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:04:00Z", "osv_earliest_published_at": "2026-06-10T14:09:55Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:04:16Z" }, { "id": "anaylze-json-2026-07-09", "display_name": "anaylze-json", "campaign": null, "detection_source": "osv", "packages": [ { "package": "anaylze-json", "ecosystem": "npm", "versions": [ "3.10.14" ], "osv_entries": [ { "osv_id": "MAL-2026-5505", "osv_published_at": "2026-06-10T14:53:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:03:58Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:03:58Z", "osv_earliest_published_at": "2026-06-10T14:53:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:04:10Z" }, { "id": "graphbase-js-2026-07-09", "display_name": "graphbase-js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "graphbase-js", "ecosystem": "npm", "versions": [ "2.1.3", "2.1.4", "2.1.5", "2.1.6", "2.2.0", "2.2.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5502", "osv_published_at": "2026-06-10T12:18:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:03:57Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:03:57Z", "osv_earliest_published_at": "2026-06-10T12:18:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:04:04Z" }, { "id": "ethers-jss-2026-07-09", "display_name": "ethers-jss", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ethers-jss", "ecosystem": "npm", "versions": [ "6.13.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5501", "osv_published_at": "2026-06-10T11:40:56Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:03:56Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:03:56Z", "osv_earliest_published_at": "2026-06-10T11:40:56Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:03:58Z" }, { "id": "validator-sdk-pubkey-2026-07-09", "display_name": "@validator-sdk/pubkey", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@validator-sdk/pubkey", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.2", "1.0.3", "1.0.4", "1.0.5", "1.0.6", "1.0.7", "1.0.8" ], "osv_entries": [ { "osv_id": "MAL-2026-5498", "osv_published_at": "2026-06-10T12:16:45Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:03:07Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:03:07Z", "osv_earliest_published_at": "2026-06-10T12:16:45Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:03:09Z" }, { "id": "validate-sdk-v2-2026-07-09", "display_name": "@validate-sdk/v2", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@validate-sdk/v2", "ecosystem": "npm", "versions": [ "1.22.11", "1.22.12", "1.22.13", "1.22.14", "1.22.15", "1.22.16", "1.22.17", "1.22.18", "1.22.19", "1.22.21", "1.22.22", "1.22.23", "1.22.24", "1.22.25", "1.22.26", "1.22.27", "1.22.28", "1.22.29", "1.22.30", "1.22.31" ], "osv_entries": [ { "osv_id": "MAL-2026-5497", "osv_published_at": "2026-06-10T12:02:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:02:17Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:02:17Z", "osv_earliest_published_at": "2026-06-10T12:02:35Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:02:19Z" }, { "id": "validate-ethereum-address-core-2026-07-09", "display_name": "@validate-ethereum-address/core", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@validate-ethereum-address/core", "ecosystem": "npm", "versions": [ "1.0.3", "1.0.4", "1.0.5", "1.0.6" ], "osv_entries": [ { "osv_id": "MAL-2026-5496", "osv_published_at": "2026-06-10T12:16:45Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:01:10Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:01:10Z", "osv_earliest_published_at": "2026-06-10T12:16:45Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:01:23Z" }, { "id": "kronsdk-kron-sdk-2026-07-09", "display_name": "@kronsdk/kron-sdk", "campaign": "solana-launchpad", "detection_source": "npm_registry", "packages": [ { "package": "@kronsdk/kron-sdk", "ecosystem": "npm", "versions": [ "0.1.0" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T14:00:23Z", "flagged_at": null, "confirmed_at": "2026-07-09T14:00:23Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40kronsdk%2Fkron-sdk", "ledger_commit_at": "2026-07-09T14:01:17Z" }, { "id": "solana-launchpad-sdk-2026-07-09", "display_name": "@solana-launchpad/sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@solana-launchpad/sdk", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.10", "1.0.11", "1.0.12", "1.0.13", "1.0.2", "1.0.3", "1.0.4", "1.0.5", "1.0.6", "1.0.7", "1.0.8", "1.0.9" ], "osv_entries": [ { "osv_id": "MAL-2026-5495", "osv_published_at": "2026-06-10T12:10:59Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:59:41Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:59:41Z", "osv_earliest_published_at": "2026-06-10T12:10:59Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:01:12Z" }, { "id": "meme-sdk-trade-2026-07-09", "display_name": "@meme-sdk/trade", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@meme-sdk/trade", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5494", "osv_published_at": "2026-06-10T12:10:59Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:58:51Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:58:51Z", "osv_earliest_published_at": "2026-06-10T12:10:59Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:01:02Z" }, { "id": "comos-sdk-2026-07-09", "display_name": "comos-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "comos-sdk", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5405", "osv_published_at": "2026-06-09T16:48:18Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:58:47Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:58:47Z", "osv_earliest_published_at": "2026-06-09T16:48:18Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:00:50Z" }, { "id": "jingmeideshishi-2026-07-09", "display_name": "jingmeideshishi", "campaign": null, "detection_source": "osv", "packages": [ { "package": "jingmeideshishi", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2", "1.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-5110", "osv_published_at": "2026-06-01T12:03:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:58:46Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:58:46Z", "osv_earliest_published_at": "2026-06-01T12:03:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:00:44Z" }, { "id": "raven-i18n-react-2026-07-09", "display_name": "raven-i18n-react", "campaign": null, "detection_source": "osv", "packages": [ { "package": "raven-i18n-react", "ecosystem": "npm", "versions": [ "99.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-5078", "osv_published_at": "2026-05-29T22:02:58Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:58:45Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:58:45Z", "osv_earliest_published_at": "2026-05-29T22:02:58Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:00:39Z" }, { "id": "one-view-chat-ui-module-2026-07-09", "display_name": "one-view-chat-ui-module", "campaign": null, "detection_source": "osv", "packages": [ { "package": "one-view-chat-ui-module", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-5074", "osv_published_at": "2026-05-29T22:03:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:58:43Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:58:43Z", "osv_earliest_published_at": "2026-05-29T22:03:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:00:27Z" }, { "id": "gcp-api-enabler-2026-07-09", "display_name": "gcp-api-enabler", "campaign": null, "detection_source": "osv", "packages": [ { "package": "gcp-api-enabler", "ecosystem": "npm", "versions": [ "99.8.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5071", "osv_published_at": "2026-05-29T22:02:46Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:58:42Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:58:42Z", "osv_earliest_published_at": "2026-05-29T22:02:46Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:00:21Z" }, { "id": "chai-extensions-extras-2026-07-09", "display_name": "chai-extensions-extras", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-extensions-extras", "ecosystem": "npm", "versions": [ "1.2.5", "1.3.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5060", "osv_published_at": "2026-05-29T22:02:58Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:58:41Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:58:41Z", "osv_earliest_published_at": "2026-05-29T22:02:58Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:00:14Z" }, { "id": "chai-bundle-2026-07-09", "display_name": "chai-bundle", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-bundle", "ecosystem": "npm", "versions": [ "1.1.9" ], "osv_entries": [ { "osv_id": "MAL-2026-5059", "osv_published_at": "2026-05-29T22:09:24Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:58:39Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:58:39Z", "osv_earliest_published_at": "2026-05-29T22:09:24Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T14:00:08Z" }, { "id": "mastra-tavily-2026-07-09", "display_name": "@mastra/tavily", "campaign": "trp-individual-investor-adv-disc", "detection_source": "npm_registry", "packages": [ { "package": "@mastra/tavily", "ecosystem": "npm", "versions": [ "1.0.3" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:58:15Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:58:15Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40mastra%2Ftavily", "ledger_commit_at": "2026-07-09T14:00:01Z" }, { "id": "kong-ui-public-page-layout-2026-07-09", "display_name": "@kong-ui-public/page-layout", "campaign": "trp-individual-investor-adv-disc", "detection_source": "npm_registry", "packages": [ { "package": "@kong-ui-public/page-layout", "ecosystem": "npm", "versions": [ "0.2.30-pr.3366.faed4728d.0", "0.2.31-pr.3365.d97891dff.0", "0.2.31-pr.3367.5885a7f56.0", "0.2.32-pr.3369.0c7df5dd4.0", "0.2.32-pr.3369.634abe679.0", "0.2.32-pr.3374.531fd8d20.0", "0.2.32-pr.3374.943d0a080.0", "0.2.32-pr.3374.ce2935a7a.0", "0.2.32-pr.3375.b9741842d.0", "0.2.34-pr.3359.699076e04.0", "0.2.35-pr.3399.a60102b91.0", "0.2.35-pr.3405.f5dcdb244.0", "0.2.36-pr.3406.9648c6421.0", "0.2.37-pr.3418.31f0bad83.0", "0.2.37-pr.3418.98c963c2b.0", "0.2.37-pr.3418.d673dd7e0.0", "0.2.37-pr.3447.013e97d91.0", "0.2.37-pr.3447.198129ea4.0", "0.2.37-pr.3447.4f2c7cd52.0", "0.2.37-pr.3447.6b2116a1b.0", "0.2.37-pr.3447.878bddda6.0", "0.2.37-pr.3447.9253490cf.0", "0.2.37-pr.3447.cce76e5c9.0", "0.2.37-pr.3447.d5f38c69e.0", "0.2.37-pr.3448.33b6c34e7.0", "0.2.37-pr.3448.442dad970.0", "0.2.37-pr.3450.30831860c.0", "0.2.38-pr.3430.a43440ebb.0", "0.2.38-pr.3432.b9ce0b47b.0", "0.2.38-pr.3433.53c6d54ea.0", "0.2.38-pr.3433.ac7561884.0", "0.2.39-pr.3427.6c3a3576f.0", "0.2.39-pr.3427.6cc7d12d7.0", "0.2.39-pr.3427.8158493e4.0", "0.2.39-pr.3427.9fb2f6828.0", "0.2.42-pr.3447.1bfd50f79.0", "0.2.42-pr.3447.ad53a8928.0", "0.2.42-pr.3447.fdf66d7b4.0", "0.2.43-pr.3470.843c31ecb.0", "0.2.43-pr.3470.e7b1fcb4c.0", "0.2.43-pr.3477.a6d47be95.0", "0.2.44-pr.3470.3c44bbd11.0", "0.2.44-pr.3470.87bb970d7.0", "0.2.44-pr.3476.1f1c75889.0", "0.2.44-pr.3476.3a61c0254.0", "0.3.1-pr.3499.0f6ded5ec.0", "0.3.1-pr.3499.1328d461c.0", "0.3.1-pr.3499.4b7a7867b.0", "0.3.1-pr.3499.577a67036.0", "0.3.1-pr.3499.6229f3f05.0", "0.3.1-pr.3499.66dbb8de1.0", "0.3.1-pr.3499.843a2af7a.0", "0.3.1-pr.3499.b5ac4fa4a.0", "0.3.1-pr.3499.b64ecdc7c.0", "0.3.1-pr.3499.d9a00bc68.0", "0.3.1-pr.3514.edb3195a7.0", "0.3.2-pr.3501.a440ad144.0", "0.3.2-pr.3506.4c43d337a.0", "0.3.3-pr.3376.177955a30.0", "0.3.3-pr.3508.7842b723a.0", "0.3.3-pr.3512.406a7510d.0", "0.3.5-pr.3537.6beb8c4be.0", "0.3.6-pr.3538.918589162.0", "0.3.8-pr.3543.1df3c7e2b.0", "0.3.8-pr.3545.5ed737b87.0", "0.3.9-pr.3546.0df8de39b.0", "0.3.9-pr.3546.183f5fc15.0" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:58:13Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:58:13Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40kong-ui-public%2Fpage-layout", "ledger_commit_at": "2026-07-09T13:59:56Z" }, { "id": "kong-ui-public-entities-upstreams-targets-2026-07-09", "display_name": "@kong-ui-public/entities-upstreams-targets", "campaign": "trp-individual-investor-adv-disc", "detection_source": "npm_registry", "packages": [ { "package": "@kong-ui-public/entities-upstreams-targets", "ecosystem": "npm", "versions": [ "3.14.12-pr.3366.faed4728d.0", "3.14.13-pr.3365.d97891dff.0", "3.14.13-pr.3370.58152a230.0", "3.14.14-pr.3374.531fd8d20.0", "3.14.14-pr.3374.943d0a080.0", "3.14.14-pr.3374.ce2935a7a.0", "3.14.14-pr.3375.b9741842d.0", "3.14.15-pr.3359.699076e04.0", "3.14.15-pr.3393.5d1f44c59.0", "3.14.15-pr.3393.7556615c9.0", "3.14.16-pr.3399.a60102b91.0", "3.14.16-pr.3425.4bfca822e.0", "3.14.16-pr.3425.aec135686.0", "3.14.17-pr.3447.013e97d91.0", "3.14.17-pr.3447.198129ea4.0", "3.14.17-pr.3447.4f2c7cd52.0", "3.14.17-pr.3447.6b2116a1b.0", "3.14.17-pr.3447.878bddda6.0", "3.14.17-pr.3447.9253490cf.0", "3.14.17-pr.3447.cce76e5c9.0", "3.14.17-pr.3447.d5f38c69e.0", "3.14.17-pr.3448.33b6c34e7.0", "3.14.17-pr.3448.442dad970.0", "3.14.17-pr.3450.30831860c.0", "3.14.18-pr.3428.0d586e416.0", "3.14.18-pr.3428.12ff67d9e.0", "3.14.19-pr.3430.a43440ebb.0", "3.14.19-pr.3432.b9ce0b47b.0", "3.14.19-pr.3433.53c6d54ea.0", "3.14.19-pr.3433.ac7561884.0", "3.14.20-pr.3427.6c3a3576f.0", "3.14.20-pr.3427.6cc7d12d7.0", "3.14.20-pr.3427.8158493e4.0", "3.14.20-pr.3427.9fb2f6828.0", "3.14.21-pr.3440.d83dedea1.0", "3.14.22-pr.3440.5c3987f0f.0", "3.14.22-pr.3441.879b1e832.0", "3.14.25-pr.3447.1bfd50f79.0", "3.14.25-pr.3447.ad53a8928.0", "3.14.25-pr.3447.fdf66d7b4.0", "3.14.26-pr.3477.a6d47be95.0", "3.14.27-pr.3470.3c44bbd11.0", "3.14.27-pr.3470.87bb970d7.0", "3.14.27-pr.3479.ac353d5d2.0", "3.14.28-pr.3476.3a61c0254.0", "3.14.29-pr.3488.777501b24.0", "3.14.29-pr.3490.cbacdf6b8.0", "3.14.30-pr.3476.1f1c75889.0", "3.14.30-pr.3491.103e53d38.0", "3.14.31-pr.3492.00c8ee77b.0", "3.14.32-pr.3376.177955a30.0", "3.14.32-pr.3501.a440ad144.0", "3.14.32-pr.3507.0db561eb5.0", "3.14.32-pr.3507.3ca882016.0", "3.14.32-pr.3507.cf3e2cca9.0", "3.14.32-pr.3511.3df4697ac.0", "3.14.32-pr.3512.406a7510d.0", "3.14.35-pr.3517.06c048653.0", "3.14.35-pr.3517.24f3ddbff.0", "3.14.35-pr.3517.708157219.0", "3.14.35-pr.3517.82d81d298.0", "3.14.35-pr.3517.a277615a3.0", "3.14.35-pr.3517.e38e7066d.0", "3.14.36-pr.3538.918589162.0", "3.14.36-pr.3538.dfc5ede76.0", "3.14.38-pr.3542.4e45e4928.0", "3.14.39-pr.3544.0ab4271fd.0", "3.14.39-pr.3544.63deab802.0", "3.14.39-pr.3544.f8aac08ac.0", "3.14.40-pr.3543.1df3c7e2b.0", "3.14.40-pr.3548.4f88f52d5.0", "3.14.40-pr.3548.53d3a08c5.0", "3.14.40-pr.3548.7ada50d9f.0", "3.14.40-pr.3548.9bb3456ef.0" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:58:07Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:58:07Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40kong-ui-public%2Fentities-upstreams-targets", "ledger_commit_at": "2026-07-09T13:59:52Z" }, { "id": "kong-ui-public-entities-snis-2026-07-09", "display_name": "@kong-ui-public/entities-snis", "campaign": "trp-individual-investor-adv-disc", "detection_source": "npm_registry", "packages": [ { "package": "@kong-ui-public/entities-snis", "ecosystem": "npm", "versions": [ "3.12.11-pr.3366.faed4728d.0", "3.12.12-pr.3365.d97891dff.0", "3.12.12-pr.3370.58152a230.0", "3.12.13-pr.3374.531fd8d20.0", "3.12.13-pr.3374.943d0a080.0", "3.12.13-pr.3374.ce2935a7a.0", "3.12.13-pr.3375.b9741842d.0", "3.12.14-pr.3359.699076e04.0", "3.12.14-pr.3393.5d1f44c59.0", "3.12.14-pr.3393.7556615c9.0", "3.12.15-pr.3399.a60102b91.0", "3.12.15-pr.3425.4bfca822e.0", "3.12.15-pr.3425.aec135686.0", "3.12.16-pr.3447.013e97d91.0", "3.12.16-pr.3447.198129ea4.0", "3.12.16-pr.3447.4f2c7cd52.0", "3.12.16-pr.3447.6b2116a1b.0", "3.12.16-pr.3447.878bddda6.0", "3.12.16-pr.3447.9253490cf.0", "3.12.16-pr.3447.cce76e5c9.0", "3.12.16-pr.3447.d5f38c69e.0", "3.12.16-pr.3448.33b6c34e7.0", "3.12.16-pr.3448.442dad970.0", "3.12.16-pr.3450.30831860c.0", "3.12.17-pr.3428.0d586e416.0", "3.12.17-pr.3428.12ff67d9e.0", "3.12.18-pr.3430.a43440ebb.0", "3.12.18-pr.3432.b9ce0b47b.0", "3.12.18-pr.3433.53c6d54ea.0", "3.12.18-pr.3433.ac7561884.0", "3.12.19-pr.3427.6c3a3576f.0", "3.12.19-pr.3427.6cc7d12d7.0", "3.12.19-pr.3427.8158493e4.0", "3.12.19-pr.3427.9fb2f6828.0", "3.12.20-pr.3440.d83dedea1.0", "3.12.21-pr.3440.5c3987f0f.0", "3.12.21-pr.3441.879b1e832.0", "3.12.24-pr.3447.1bfd50f79.0", "3.12.24-pr.3447.ad53a8928.0", "3.12.24-pr.3447.fdf66d7b4.0", "3.12.25-pr.3477.a6d47be95.0", "3.12.26-pr.3470.3c44bbd11.0", "3.12.26-pr.3470.87bb970d7.0", "3.12.26-pr.3479.ac353d5d2.0", "3.12.27-pr.3476.3a61c0254.0", "3.12.28-pr.3488.777501b24.0", "3.12.28-pr.3490.cbacdf6b8.0", "3.12.29-pr.3476.1f1c75889.0", "3.12.29-pr.3491.103e53d38.0", "3.12.30-pr.3492.00c8ee77b.0", "3.12.31-pr.3376.177955a30.0", "3.12.31-pr.3501.a440ad144.0", "3.12.31-pr.3507.0db561eb5.0", "3.12.31-pr.3507.3ca882016.0", "3.12.31-pr.3507.cf3e2cca9.0", "3.12.31-pr.3511.3df4697ac.0", "3.12.31-pr.3512.406a7510d.0", "3.12.34-pr.3517.06c048653.0", "3.12.34-pr.3517.24f3ddbff.0", "3.12.34-pr.3517.708157219.0", "3.12.34-pr.3517.82d81d298.0", "3.12.34-pr.3517.a277615a3.0", "3.12.34-pr.3517.e38e7066d.0", "3.12.35-pr.3538.918589162.0", "3.12.35-pr.3538.dfc5ede76.0", "3.12.37-pr.3542.4e45e4928.0", "3.12.38-pr.3544.0ab4271fd.0", "3.12.38-pr.3544.63deab802.0", "3.12.38-pr.3544.f8aac08ac.0", "3.12.39-pr.3543.1df3c7e2b.0", "3.12.39-pr.3548.4f88f52d5.0", "3.12.39-pr.3548.53d3a08c5.0", "3.12.39-pr.3548.7ada50d9f.0", "3.12.39-pr.3548.9bb3456ef.0" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:58:02Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:58:02Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40kong-ui-public%2Fentities-snis", "ledger_commit_at": "2026-07-09T13:59:47Z" }, { "id": "kong-ui-public-entities-plugins-2026-07-09", "display_name": "@kong-ui-public/entities-plugins", "campaign": "trp-individual-investor-adv-disc", "detection_source": "npm_registry", "packages": [ { "package": "@kong-ui-public/entities-plugins", "ecosystem": "npm", "versions": [ "9.205.4-pr.3270.2888d60f3.0", "9.205.4-pr.3270.3d6f8f5b5.0", "9.205.4-pr.3270.504f9f4b2.0", "9.205.4-pr.3270.c17fb93da.0", "9.205.4-pr.3270.f00b5dfb5.0", "9.208.3-pr.3365.401698df5.0", "9.208.3-pr.3366.faed4728d.0", "9.208.4-pr.3365.d97891dff.0", "9.208.5-pr.3359.084e726b7.0", "9.208.5-pr.3359.1b57d230d.0", "9.208.5-pr.3359.6da316b71.0", "9.208.5-pr.3370.58152a230.0", "9.208.5-pr.3373.6ba6da9ba.0", "9.208.5-pr.3373.8c869f605.0", "9.208.6-pr.3374.531fd8d20.0", "9.208.6-pr.3374.943d0a080.0", "9.208.6-pr.3374.ce2935a7a.0", "9.208.6-pr.3375.b9741842d.0", "9.209.1-pr.3377.5ea2d2bb1.0", "9.209.1-pr.3393.5d1f44c59.0", "9.209.1-pr.3393.7556615c9.0", "9.209.2-pr.3359.699076e04.0", "9.210.1-pr.3398.01f18cf4f.0", "9.210.1-pr.3398.16e39b2ae.0", "9.210.1-pr.3398.2172cb8eb.0", "9.210.1-pr.3398.3e7e6f34b.0", "9.210.1-pr.3398.62160fa19.0", "9.210.1-pr.3398.894c01e6e.0", "9.210.1-pr.3398.e2e3c16b1.0", "9.210.1-pr.3398.e74b974ad.0", "9.210.1-pr.3398.fee1aa91e.0", "9.210.1-pr.3399.a60102b91.0", "9.210.1-pr.3403.26dc8083b.0", "9.210.1-pr.3407.1e473d5a3.0", "9.210.1-pr.3407.7e5e77cb5.0", "9.210.1-pr.3407.a5da5a759.0", "9.210.1-pr.3407.fc6e12f94.0", "9.210.1-pr.3410.b7fab214a.0", "9.210.10-pr.3427.6c3a3576f.0", "9.210.10-pr.3427.6cc7d12d7.0", "9.210.10-pr.3427.8158493e4.0", "9.210.10-pr.3427.9fb2f6828.0", "9.210.11-pr.3440.d83dedea1.0", "9.210.12-pr.3440.5c3987f0f.0", "9.210.2-pr.3407.458374666.0", "9.210.2-pr.3407.97751c0f6.0", "9.210.2-pr.3407.c459762ce.0", "9.210.2-pr.3411.00a222144.0", "9.210.2-pr.3411.fca15a60d.0", "9.210.2-pr.3414.c53634bfe.0", "9.210.2-pr.3417.1b5baef74.0", "9.210.3-pr.3407.a6d9df29d.0", "9.210.3-pr.3422.cc22dfff7.0", "9.210.3-pr.3426.1afc9c93a.0", "9.210.3-pr.3426.6e31f384c.0", "9.210.3-pr.3426.95ec5e85e.0", "9.210.4-pr.3425.4bfca822e.0", "9.210.4-pr.3425.aec135686.0", "9.210.5-pr.3447.013e97d91.0", "9.210.5-pr.3447.198129ea4.0", "9.210.5-pr.3447.4f2c7cd52.0", "9.210.5-pr.3447.6b2116a1b.0", "9.210.5-pr.3447.878bddda6.0", "9.210.5-pr.3447.9253490cf.0", "9.210.5-pr.3447.cce76e5c9.0", "9.210.5-pr.3447.d5f38c69e.0", "9.210.5-pr.3448.33b6c34e7.0", "9.210.5-pr.3448.442dad970.0", "9.210.5-pr.3450.30831860c.0", "9.210.6-pr.3427.309857e1e.0", "9.210.6-pr.3428.0d586e416.0", "9.210.6-pr.3428.12ff67d9e.0", "9.210.6-pr.3430.244e27e99.0", "9.210.7-pr.3426.2fed78af3.0", "9.210.8-pr.3430.a43440ebb.0", "9.210.8-pr.3431.024db87b3.0", "9.210.8-pr.3431.7f43e524d.0", "9.210.8-pr.3431.c487bd6b1.0", "9.210.8-pr.3432.b9ce0b47b.0", "9.210.8-pr.3433.53c6d54ea.0", "9.210.8-pr.3433.ac7561884.0", "9.211.1-pr.3441.879b1e832.0", "9.211.3-pr.3413.027de619b.0", "9.211.3-pr.3413.053a6721c.0", "9.213.2-pr.3442.6eb1c2a51.0", "9.213.3-pr.3403.0bad647e5.0", "9.213.3-pr.3403.4a8c824fd.0", "9.213.3-pr.3403.d31f51ce8.0", "9.213.3-pr.3472.ec36a2ab2.0", "9.214.1-pr.3446.eefbaa7ed.0", "9.214.1-pr.3458.307440fe4.0", "9.216.1-pr.3447.1bfd50f79.0", "9.216.1-pr.3447.ad53a8928.0", "9.216.1-pr.3447.fdf66d7b4.0", "9.216.2-pr.3472.1e2ee9be7.0", "9.216.2-pr.3472.27a34f774.0", "9.216.2-pr.3472.6e495b31a.0", "9.216.2-pr.3472.76c196ea4.0", "9.216.2-pr.3472.b418aeb77.0", "9.216.2-pr.3472.eeea0bf7d.0", "9.216.2-pr.3472.fec857c99.0", "9.216.2-pr.3473.7b48bccc0.0", "9.216.2-pr.3473.fac7c6d3d.0", "9.216.3-pr.3476.0a8ad592e.0", "9.216.3-pr.3476.245adfa03.0", "9.216.3-pr.3477.a6d47be95.0", "9.216.4-pr.3470.3c44bbd11.0", "9.216.4-pr.3470.87bb970d7.0", "9.216.4-pr.3479.ac353d5d2.0", "9.218.1-pr.3476.3a61c0254.0", "9.218.1-pr.3483.2b59a123e.0", "9.218.1-pr.3483.98bb557e6.0", "9.218.1-pr.3483.d895f7ee7.0", "9.218.3-pr.3485.be847216c.0", "9.218.3-pr.3489.3471f16b1.0", "9.218.4-pr.3488.777501b24.0", "9.218.4-pr.3490.cbacdf6b8.0", "9.219.1-pr.3476.1f1c75889.0", "9.219.1-pr.3491.103e53d38.0", "9.220.1-pr.3492.00c8ee77b.0", "9.220.1-pr.3495.987b95a6c.0", "9.220.1-pr.3497.0ddba840e.0", "9.220.1-pr.3497.30361b05f.0", "9.220.1-pr.3500.f2a012111.0", "9.220.1-pr.3501.504484e69.0", "9.221.1-pr.3505.6a9019eb6.0", "9.221.1-pr.3505.a03744609.0", "9.221.3-pr.3376.177955a30.0", "9.221.3-pr.3501.a440ad144.0", "9.221.3-pr.3507.0db561eb5.0", "9.221.3-pr.3507.3ca882016.0", "9.221.3-pr.3507.cf3e2cca9.0", "9.222.1-pr.3510.54c97b91d.0", "9.222.1-pr.3510.6d835f923.0", "9.222.1-pr.3510.892cf765f.0", "9.222.1-pr.3510.93b6613d2.0", "9.222.1-pr.3513.152f6ffc9.0", "9.222.1-pr.3513.346cae8ff.0", "9.222.2-pr.3511.3df4697ac.0", "9.222.2-pr.3512.406a7510d.0", "9.222.6-pr.3515.691065726.0", "9.222.6-pr.3515.b3124d5e7.0", "9.222.7-pr.3516.76caa127b.0", "9.222.8-pr.3517.06c048653.0", "9.222.8-pr.3517.24f3ddbff.0", "9.222.8-pr.3517.708157219.0", "9.222.8-pr.3517.a277615a3.0", "9.222.8-pr.3517.e38e7066d.0", "9.222.8-pr.3519.3ca293c4f.0", "9.222.8-pr.3519.5863da077.0", "9.222.8-pr.3519.988ca62f6.0", "9.222.8-pr.3519.af6f96139.0", "9.222.8-pr.3519.d1d317b27.0", "9.222.8-pr.3520.0daf6861f.0", "9.222.8-pr.3520.58c364ceb.0", "9.222.8-pr.3520.d66442edb.0", "9.222.8-pr.3543.8a2e39fb0.0", "9.222.9-pr.3510.e5bca7916.0", "9.223.1-pr.3133.979a41f19.0", "9.223.1-pr.3517.82d81d298.0", "9.223.5-pr.3422.fa74d4816.0", "9.224.1-pr.3531.d1aa19003.0", "9.224.1-pr.3536.075c0462d.0", "9.224.1-pr.3536.7efa06b51.0", "9.224.1-pr.3536.a2eb21670.0", "9.224.1-pr.3536.a4fc2e870.0", "9.224.1-pr.3536.def1591bd.0", "9.224.1-pr.3536.f0caecaa7.0", "9.224.2-pr.3532.23c8efa92.0", "9.224.4-pr.3538.918589162.0", "9.224.4-pr.3538.dfc5ede76.0", "9.224.6-pr.3542.4e45e4928.0", "9.224.7-pr.3544.0ab4271fd.0", "9.224.7-pr.3544.63deab802.0", "9.224.7-pr.3544.f8aac08ac.0", "9.225.1-pr.3543.1df3c7e2b.0", "9.225.1-pr.3543.849242e5e.0", "9.225.1-pr.3543.d4ef60f37.0", "9.225.1-pr.3543.d6b329cf2.0", "9.225.1-pr.3548.4f88f52d5.0", "9.225.1-pr.3548.53d3a08c5.0", "9.225.1-pr.3548.7ada50d9f.0", "9.225.1-pr.3548.9bb3456ef.0" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:57:55Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:57:55Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40kong-ui-public%2Fentities-plugins", "ledger_commit_at": "2026-07-09T13:59:43Z" }, { "id": "kong-ui-public-entities-keys-2026-07-09", "display_name": "@kong-ui-public/entities-keys", "campaign": "trp-individual-investor-adv-disc", "detection_source": "npm_registry", "packages": [ { "package": "@kong-ui-public/entities-keys", "ecosystem": "npm", "versions": [ "3.13.12-pr.3366.faed4728d.0", "3.13.13-pr.3365.d97891dff.0", "3.13.13-pr.3370.58152a230.0", "3.13.14-pr.3374.531fd8d20.0", "3.13.14-pr.3374.943d0a080.0", "3.13.14-pr.3374.ce2935a7a.0", "3.13.14-pr.3375.b9741842d.0", "3.13.15-pr.3359.699076e04.0", "3.13.15-pr.3393.5d1f44c59.0", "3.13.15-pr.3393.7556615c9.0", "3.13.16-pr.3399.a60102b91.0", "3.13.16-pr.3425.4bfca822e.0", "3.13.16-pr.3425.aec135686.0", "3.13.17-pr.3447.013e97d91.0", "3.13.17-pr.3447.198129ea4.0", "3.13.17-pr.3447.4f2c7cd52.0", "3.13.17-pr.3447.6b2116a1b.0", "3.13.17-pr.3447.878bddda6.0", "3.13.17-pr.3447.9253490cf.0", "3.13.17-pr.3447.cce76e5c9.0", "3.13.17-pr.3447.d5f38c69e.0", "3.13.17-pr.3448.33b6c34e7.0", "3.13.17-pr.3448.442dad970.0", "3.13.17-pr.3450.30831860c.0", "3.13.18-pr.3428.0d586e416.0", "3.13.18-pr.3428.12ff67d9e.0", "3.13.19-pr.3430.a43440ebb.0", "3.13.19-pr.3432.b9ce0b47b.0", "3.13.19-pr.3433.53c6d54ea.0", "3.13.19-pr.3433.ac7561884.0", "3.13.20-pr.3427.6c3a3576f.0", "3.13.20-pr.3427.6cc7d12d7.0", "3.13.20-pr.3427.8158493e4.0", "3.13.20-pr.3427.9fb2f6828.0", "3.13.21-pr.3440.d83dedea1.0", "3.13.22-pr.3440.5c3987f0f.0", "3.13.22-pr.3441.879b1e832.0", "3.13.25-pr.3447.1bfd50f79.0", "3.13.25-pr.3447.ad53a8928.0", "3.13.25-pr.3447.fdf66d7b4.0", "3.13.26-pr.3477.a6d47be95.0", "3.13.27-pr.3470.3c44bbd11.0", "3.13.27-pr.3470.87bb970d7.0", "3.13.27-pr.3479.ac353d5d2.0", "3.13.28-pr.3476.3a61c0254.0", "3.13.29-pr.3488.777501b24.0", "3.13.29-pr.3490.cbacdf6b8.0", "3.13.30-pr.3476.1f1c75889.0", "3.13.30-pr.3491.103e53d38.0", "3.13.31-pr.3492.00c8ee77b.0", "3.13.32-pr.3376.177955a30.0", "3.13.32-pr.3501.a440ad144.0", "3.13.32-pr.3507.0db561eb5.0", "3.13.32-pr.3507.3ca882016.0", "3.13.32-pr.3507.cf3e2cca9.0", "3.13.32-pr.3511.3df4697ac.0", "3.13.32-pr.3512.406a7510d.0", "3.13.35-pr.3517.06c048653.0", "3.13.35-pr.3517.24f3ddbff.0", "3.13.35-pr.3517.708157219.0", "3.13.35-pr.3517.82d81d298.0", "3.13.35-pr.3517.a277615a3.0", "3.13.35-pr.3517.e38e7066d.0", "3.13.36-pr.3538.918589162.0", "3.13.36-pr.3538.dfc5ede76.0", "3.13.38-pr.3542.4e45e4928.0", "3.13.39-pr.3544.0ab4271fd.0", "3.13.39-pr.3544.63deab802.0", "3.13.39-pr.3544.f8aac08ac.0", "3.13.40-pr.3543.1df3c7e2b.0", "3.13.40-pr.3548.4f88f52d5.0", "3.13.40-pr.3548.53d3a08c5.0", "3.13.40-pr.3548.7ada50d9f.0", "3.13.40-pr.3548.9bb3456ef.0" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:57:42Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:57:42Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40kong-ui-public%2Fentities-keys", "ledger_commit_at": "2026-07-09T13:59:39Z" }, { "id": "kong-ui-public-entities-key-sets-2026-07-09", "display_name": "@kong-ui-public/entities-key-sets", "campaign": "trp-individual-investor-adv-disc", "detection_source": "npm_registry", "packages": [ { "package": "@kong-ui-public/entities-key-sets", "ecosystem": "npm", "versions": [ "3.11.12-pr.3366.faed4728d.0", "3.11.13-pr.3365.d97891dff.0", "3.11.13-pr.3370.58152a230.0", "3.11.14-pr.3374.531fd8d20.0", "3.11.14-pr.3374.943d0a080.0", "3.11.14-pr.3374.ce2935a7a.0", "3.11.14-pr.3375.b9741842d.0", "3.11.15-pr.3359.699076e04.0", "3.11.15-pr.3393.5d1f44c59.0", "3.11.15-pr.3393.7556615c9.0", "3.11.16-pr.3399.a60102b91.0", "3.11.16-pr.3425.4bfca822e.0", "3.11.16-pr.3425.aec135686.0", "3.11.17-pr.3447.013e97d91.0", "3.11.17-pr.3447.198129ea4.0", "3.11.17-pr.3447.4f2c7cd52.0", "3.11.17-pr.3447.6b2116a1b.0", "3.11.17-pr.3447.878bddda6.0", "3.11.17-pr.3447.9253490cf.0", "3.11.17-pr.3447.cce76e5c9.0", "3.11.17-pr.3447.d5f38c69e.0", "3.11.17-pr.3448.33b6c34e7.0", "3.11.17-pr.3448.442dad970.0", "3.11.17-pr.3450.30831860c.0", "3.11.18-pr.3428.0d586e416.0", "3.11.18-pr.3428.12ff67d9e.0", "3.11.19-pr.3430.a43440ebb.0", "3.11.19-pr.3432.b9ce0b47b.0", "3.11.19-pr.3433.53c6d54ea.0", "3.11.19-pr.3433.ac7561884.0", "3.11.20-pr.3427.6c3a3576f.0", "3.11.20-pr.3427.6cc7d12d7.0", "3.11.20-pr.3427.8158493e4.0", "3.11.20-pr.3427.9fb2f6828.0", "3.11.21-pr.3440.d83dedea1.0", "3.11.22-pr.3440.5c3987f0f.0", "3.11.22-pr.3441.879b1e832.0", "3.11.25-pr.3447.1bfd50f79.0", "3.11.25-pr.3447.ad53a8928.0", "3.11.25-pr.3447.fdf66d7b4.0", "3.11.26-pr.3477.a6d47be95.0", "3.11.27-pr.3470.3c44bbd11.0", "3.11.27-pr.3470.87bb970d7.0", "3.11.27-pr.3479.ac353d5d2.0", "3.11.28-pr.3476.3a61c0254.0", "3.11.29-pr.3488.777501b24.0", "3.11.29-pr.3490.cbacdf6b8.0", "3.11.30-pr.3476.1f1c75889.0", "3.11.30-pr.3491.103e53d38.0", "3.11.31-pr.3492.00c8ee77b.0", "3.11.32-pr.3376.177955a30.0", "3.11.32-pr.3501.a440ad144.0", "3.11.32-pr.3507.0db561eb5.0", "3.11.32-pr.3507.3ca882016.0", "3.11.32-pr.3507.cf3e2cca9.0", "3.11.32-pr.3511.3df4697ac.0", "3.11.32-pr.3512.406a7510d.0", "3.11.35-pr.3517.06c048653.0", "3.11.35-pr.3517.24f3ddbff.0", "3.11.35-pr.3517.708157219.0", "3.11.35-pr.3517.82d81d298.0", "3.11.35-pr.3517.a277615a3.0", "3.11.35-pr.3517.e38e7066d.0", "3.11.36-pr.3538.918589162.0", "3.11.36-pr.3538.dfc5ede76.0", "3.11.38-pr.3542.4e45e4928.0", "3.11.39-pr.3544.0ab4271fd.0", "3.11.39-pr.3544.63deab802.0", "3.11.39-pr.3544.f8aac08ac.0", "3.11.40-pr.3543.1df3c7e2b.0", "3.11.40-pr.3548.4f88f52d5.0", "3.11.40-pr.3548.53d3a08c5.0", "3.11.40-pr.3548.7ada50d9f.0", "3.11.40-pr.3548.9bb3456ef.0" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:57:36Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:57:36Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40kong-ui-public%2Fentities-key-sets", "ledger_commit_at": "2026-07-09T13:59:35Z" }, { "id": "kong-ui-public-entities-data-plane-nodes-2026-07-09", "display_name": "@kong-ui-public/entities-data-plane-nodes", "campaign": "trp-individual-investor-adv-disc", "detection_source": "npm_registry", "packages": [ { "package": "@kong-ui-public/entities-data-plane-nodes", "ecosystem": "npm", "versions": [ "0.6.45-pr.3366.faed4728d.0", "0.6.46-pr.3365.d97891dff.0", "0.6.46-pr.3370.58152a230.0", "0.6.47-pr.3374.531fd8d20.0", "0.6.47-pr.3374.943d0a080.0", "0.6.47-pr.3374.ce2935a7a.0", "0.6.47-pr.3375.b9741842d.0", "0.6.48-pr.3359.699076e04.0", "0.6.48-pr.3393.5d1f44c59.0", "0.6.48-pr.3393.7556615c9.0", "0.6.49-pr.3399.a60102b91.0", "0.6.49-pr.3425.4bfca822e.0", "0.6.49-pr.3425.aec135686.0", "0.6.50-pr.3447.013e97d91.0", "0.6.50-pr.3447.198129ea4.0", "0.6.50-pr.3447.4f2c7cd52.0", "0.6.50-pr.3447.6b2116a1b.0", "0.6.50-pr.3447.878bddda6.0", "0.6.50-pr.3447.9253490cf.0", "0.6.50-pr.3447.cce76e5c9.0", "0.6.50-pr.3447.d5f38c69e.0", "0.6.50-pr.3448.33b6c34e7.0", "0.6.50-pr.3448.442dad970.0", "0.6.50-pr.3450.30831860c.0", "0.6.51-pr.3428.0d586e416.0", "0.6.51-pr.3428.12ff67d9e.0", "0.6.52-pr.3430.a43440ebb.0", "0.6.52-pr.3432.b9ce0b47b.0", "0.6.52-pr.3433.53c6d54ea.0", "0.6.52-pr.3433.ac7561884.0", "0.6.53-pr.3427.6c3a3576f.0", "0.6.53-pr.3427.6cc7d12d7.0", "0.6.53-pr.3427.8158493e4.0", "0.6.53-pr.3427.9fb2f6828.0", "0.6.54-pr.3440.d83dedea1.0", "0.6.55-pr.3440.5c3987f0f.0", "0.6.55-pr.3441.879b1e832.0", "0.6.58-pr.3447.1bfd50f79.0", "0.6.58-pr.3447.ad53a8928.0", "0.6.58-pr.3447.fdf66d7b4.0", "0.6.59-pr.3477.a6d47be95.0", "0.6.60-pr.3470.3c44bbd11.0", "0.6.60-pr.3470.87bb970d7.0", "0.6.60-pr.3479.ac353d5d2.0", "0.6.61-pr.3476.3a61c0254.0", "0.6.62-pr.3488.777501b24.0", "0.6.62-pr.3490.cbacdf6b8.0", "0.6.63-pr.3476.1f1c75889.0", "0.6.63-pr.3491.103e53d38.0", "0.6.64-pr.3492.00c8ee77b.0", "0.6.65-pr.3376.177955a30.0", "0.6.65-pr.3501.a440ad144.0", "0.6.65-pr.3507.0db561eb5.0", "0.6.65-pr.3507.3ca882016.0", "0.6.65-pr.3507.cf3e2cca9.0", "0.6.65-pr.3511.3df4697ac.0", "0.6.65-pr.3512.406a7510d.0", "0.6.68-pr.3517.06c048653.0", "0.6.68-pr.3517.24f3ddbff.0", "0.6.68-pr.3517.708157219.0", "0.6.68-pr.3517.82d81d298.0", "0.6.68-pr.3517.a277615a3.0", "0.6.68-pr.3517.e38e7066d.0", "0.6.69-pr.3538.918589162.0", "0.6.69-pr.3538.dfc5ede76.0", "0.6.71-pr.3542.4e45e4928.0", "0.6.72-pr.3544.0ab4271fd.0", "0.6.72-pr.3544.63deab802.0", "0.6.72-pr.3544.f8aac08ac.0", "0.6.73-pr.3543.1df3c7e2b.0", "0.6.73-pr.3548.4f88f52d5.0", "0.6.73-pr.3548.53d3a08c5.0", "0.6.73-pr.3548.7ada50d9f.0", "0.6.73-pr.3548.9bb3456ef.0" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:57:29Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:57:29Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40kong-ui-public%2Fentities-data-plane-nodes", "ledger_commit_at": "2026-07-09T13:59:31Z" }, { "id": "kong-ui-public-entities-consumer-credentials-2026-07-09", "display_name": "@kong-ui-public/entities-consumer-credentials", "campaign": "trp-individual-investor-adv-disc", "detection_source": "npm_registry", "packages": [ { "package": "@kong-ui-public/entities-consumer-credentials", "ecosystem": "npm", "versions": [ "3.8.14-pr.3366.faed4728d.0", "3.8.15-pr.3365.d97891dff.0", "3.8.15-pr.3370.58152a230.0", "3.8.16-pr.3374.531fd8d20.0", "3.8.16-pr.3374.943d0a080.0", "3.8.16-pr.3374.ce2935a7a.0", "3.8.16-pr.3375.b9741842d.0", "3.8.17-pr.3359.699076e04.0", "3.8.17-pr.3393.5d1f44c59.0", "3.8.17-pr.3393.7556615c9.0", "3.8.18-pr.3399.a60102b91.0", "3.8.18-pr.3425.4bfca822e.0", "3.8.18-pr.3425.aec135686.0", "3.8.19-pr.3447.013e97d91.0", "3.8.19-pr.3447.198129ea4.0", "3.8.19-pr.3447.4f2c7cd52.0", "3.8.19-pr.3447.6b2116a1b.0", "3.8.19-pr.3447.878bddda6.0", "3.8.19-pr.3447.9253490cf.0", "3.8.19-pr.3447.cce76e5c9.0", "3.8.19-pr.3447.d5f38c69e.0", "3.8.19-pr.3448.33b6c34e7.0", "3.8.19-pr.3448.442dad970.0", "3.8.19-pr.3450.30831860c.0", "3.8.20-pr.3428.0d586e416.0", "3.8.20-pr.3428.12ff67d9e.0", "3.8.21-pr.3430.a43440ebb.0", "3.8.21-pr.3432.b9ce0b47b.0", "3.8.21-pr.3433.53c6d54ea.0", "3.8.21-pr.3433.ac7561884.0", "3.8.22-pr.3427.6c3a3576f.0", "3.8.22-pr.3427.6cc7d12d7.0", "3.8.22-pr.3427.8158493e4.0", "3.8.22-pr.3427.9fb2f6828.0", "3.8.23-pr.3440.d83dedea1.0", "3.8.24-pr.3440.5c3987f0f.0", "3.8.24-pr.3441.879b1e832.0", "3.8.27-pr.3447.1bfd50f79.0", "3.8.27-pr.3447.ad53a8928.0", "3.8.27-pr.3447.fdf66d7b4.0", "3.8.28-pr.3477.a6d47be95.0", "3.8.29-pr.3470.3c44bbd11.0", "3.8.29-pr.3470.87bb970d7.0", "3.8.29-pr.3479.ac353d5d2.0", "3.8.30-pr.3476.3a61c0254.0", "3.8.31-pr.3488.777501b24.0", "3.8.31-pr.3490.cbacdf6b8.0", "3.8.32-pr.3476.1f1c75889.0", "3.8.32-pr.3491.103e53d38.0", "3.8.33-pr.3492.00c8ee77b.0", "3.8.34-pr.3376.177955a30.0", "3.8.34-pr.3501.a440ad144.0", "3.8.34-pr.3507.0db561eb5.0", "3.8.34-pr.3507.3ca882016.0", "3.8.34-pr.3507.cf3e2cca9.0", "3.8.34-pr.3511.3df4697ac.0", "3.8.34-pr.3512.406a7510d.0", "3.8.37-pr.3517.06c048653.0", "3.8.37-pr.3517.24f3ddbff.0", "3.8.37-pr.3517.708157219.0", "3.8.37-pr.3517.82d81d298.0", "3.8.37-pr.3517.a277615a3.0", "3.8.37-pr.3517.e38e7066d.0", "3.8.38-pr.3538.918589162.0", "3.8.38-pr.3538.dfc5ede76.0", "3.8.40-pr.3542.4e45e4928.0", "3.8.41-pr.3544.0ab4271fd.0", "3.8.41-pr.3544.63deab802.0", "3.8.41-pr.3544.f8aac08ac.0", "3.8.42-pr.3543.1df3c7e2b.0", "3.8.42-pr.3548.4f88f52d5.0", "3.8.42-pr.3548.53d3a08c5.0", "3.8.42-pr.3548.7ada50d9f.0", "3.8.42-pr.3548.9bb3456ef.0" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:57:23Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:57:23Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40kong-ui-public%2Fentities-consumer-credentials", "ledger_commit_at": "2026-07-09T13:59:26Z" }, { "id": "kong-ui-public-entities-certificates-2026-07-09", "display_name": "@kong-ui-public/entities-certificates", "campaign": "trp-individual-investor-adv-disc", "detection_source": "npm_registry", "packages": [ { "package": "@kong-ui-public/entities-certificates", "ecosystem": "npm", "versions": [ "3.14.10-pr.3430.a43440ebb.0", "3.14.10-pr.3432.b9ce0b47b.0", "3.14.10-pr.3433.53c6d54ea.0", "3.14.10-pr.3433.ac7561884.0", "3.14.11-pr.3427.6c3a3576f.0", "3.14.11-pr.3427.6cc7d12d7.0", "3.14.11-pr.3427.8158493e4.0", "3.14.11-pr.3427.9fb2f6828.0", "3.14.12-pr.3440.d83dedea1.0", "3.14.13-pr.3440.5c3987f0f.0", "3.14.13-pr.3441.879b1e832.0", "3.14.15-pr.3186.b4cbcff29.0", "3.14.15-pr.3186.db166d2cb.0", "3.14.17-pr.3447.1bfd50f79.0", "3.14.17-pr.3447.ad53a8928.0", "3.14.17-pr.3447.fdf66d7b4.0", "3.14.18-pr.3477.a6d47be95.0", "3.14.19-pr.3470.3c44bbd11.0", "3.14.19-pr.3470.87bb970d7.0", "3.14.19-pr.3479.ac353d5d2.0", "3.14.2-pr.3366.faed4728d.0", "3.14.20-pr.3476.3a61c0254.0", "3.14.21-pr.3485.be847216c.0", "3.14.22-pr.3488.777501b24.0", "3.14.22-pr.3490.cbacdf6b8.0", "3.14.23-pr.3476.1f1c75889.0", "3.14.23-pr.3491.103e53d38.0", "3.14.24-pr.3492.00c8ee77b.0", "3.14.24-pr.3497.0ddba840e.0", "3.14.24-pr.3497.30361b05f.0", "3.14.25-pr.3376.177955a30.0", "3.14.25-pr.3501.a440ad144.0", "3.14.25-pr.3507.0db561eb5.0", "3.14.25-pr.3507.3ca882016.0", "3.14.25-pr.3507.cf3e2cca9.0", "3.14.25-pr.3510.54c97b91d.0", "3.14.25-pr.3510.6d835f923.0", "3.14.25-pr.3510.892cf765f.0", "3.14.25-pr.3510.93b6613d2.0", "3.14.26-pr.3511.3df4697ac.0", "3.14.26-pr.3512.406a7510d.0", "3.14.29-pr.3517.06c048653.0", "3.14.29-pr.3517.24f3ddbff.0", "3.14.29-pr.3517.708157219.0", "3.14.29-pr.3517.a277615a3.0", "3.14.29-pr.3517.e38e7066d.0", "3.14.29-pr.3520.0daf6861f.0", "3.14.29-pr.3520.58c364ceb.0", "3.14.29-pr.3520.d66442edb.0", "3.14.3-pr.3365.d97891dff.0", "3.14.3-pr.3370.58152a230.0", "3.14.30-pr.3517.82d81d298.0", "3.14.31-pr.3538.918589162.0", "3.14.31-pr.3538.dfc5ede76.0", "3.14.33-pr.3542.4e45e4928.0", "3.14.34-pr.3544.0ab4271fd.0", "3.14.34-pr.3544.63deab802.0", "3.14.34-pr.3544.f8aac08ac.0", "3.14.35-pr.3543.1df3c7e2b.0", "3.14.35-pr.3548.4f88f52d5.0", "3.14.35-pr.3548.53d3a08c5.0", "3.14.35-pr.3548.7ada50d9f.0", "3.14.35-pr.3548.9bb3456ef.0", "3.14.4-pr.3374.531fd8d20.0", "3.14.4-pr.3374.943d0a080.0", "3.14.4-pr.3374.ce2935a7a.0", "3.14.4-pr.3375.b9741842d.0", "3.14.5-pr.3359.699076e04.0", "3.14.5-pr.3393.5d1f44c59.0", "3.14.5-pr.3393.7556615c9.0", "3.14.6-pr.3399.a60102b91.0", "3.14.6-pr.3407.1e473d5a3.0", "3.14.6-pr.3407.458374666.0", "3.14.6-pr.3407.7e5e77cb5.0", "3.14.6-pr.3407.97751c0f6.0", "3.14.6-pr.3407.a5da5a759.0", "3.14.6-pr.3407.a6d9df29d.0", "3.14.6-pr.3407.c459762ce.0", "3.14.6-pr.3407.fc6e12f94.0", "3.14.7-pr.3425.4bfca822e.0", "3.14.7-pr.3425.aec135686.0", "3.14.8-pr.3447.013e97d91.0", "3.14.8-pr.3447.198129ea4.0", "3.14.8-pr.3447.4f2c7cd52.0", "3.14.8-pr.3447.6b2116a1b.0", "3.14.8-pr.3447.878bddda6.0", "3.14.8-pr.3447.9253490cf.0", "3.14.8-pr.3447.cce76e5c9.0", "3.14.8-pr.3447.d5f38c69e.0", "3.14.8-pr.3448.33b6c34e7.0", "3.14.8-pr.3448.442dad970.0", "3.14.8-pr.3450.30831860c.0", "3.14.9-pr.3428.0d586e416.0", "3.14.9-pr.3428.12ff67d9e.0" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:57:17Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:57:17Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40kong-ui-public%2Fentities-certificates", "ledger_commit_at": "2026-07-09T13:59:21Z" }, { "id": "trp-individual-investor-adv-disc-adv-shared-2026-07-09", "display_name": "@trp-individual-investor-adv-disc/adv-shared", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@trp-individual-investor-adv-disc/adv-shared", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-5056", "osv_published_at": "2026-05-29T22:04:16Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:56:33Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:56:33Z", "osv_earliest_published_at": "2026-05-29T22:04:16Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:59:15Z" }, { "id": "rsi-community-hub-client-app-2026-07-09", "display_name": "@rsi-community/hub-client-app", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@rsi-community/hub-client-app", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-5050", "osv_published_at": "2026-05-29T22:02:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:55:38Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:55:38Z", "osv_earliest_published_at": "2026-05-29T22:02:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:59:08Z" }, { "id": "develit-services-bank-2026-07-09", "display_name": "@develit-services/bank", "campaign": "bcs-bank-complex-ui", "detection_source": "npm_registry", "packages": [ { "package": "@develit-services/bank", "ecosystem": "npm", "versions": [ "5.2.3" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:54:59Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:54:59Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40develit-services%2Fbank", "ledger_commit_at": "2026-07-09T13:59:03Z" }, { "id": "bcs-bank-complex-ui-deeplink-2026-07-09", "display_name": "@bcs-bank-complex-ui/deeplink", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@bcs-bank-complex-ui/deeplink", "ecosystem": "npm", "versions": [ "99.0.7" ], "osv_entries": [ { "osv_id": "MAL-2026-4840", "osv_published_at": "2026-05-28T13:39:43Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:54:30Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:54:30Z", "osv_earliest_published_at": "2026-05-28T13:39:43Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:58:58Z" }, { "id": "jsonlogbundler-2026-07-09", "display_name": "jsonlogbundler", "campaign": null, "detection_source": "osv", "packages": [ { "package": "jsonlogbundler", "ecosystem": "npm", "versions": [ "2.1.1", "2.1.2", "2.1.4" ], "osv_entries": [ { "osv_id": "MAL-2026-4798", "osv_published_at": "2026-05-26T12:04:58Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:54:28Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:54:28Z", "osv_earliest_published_at": "2026-05-26T12:04:58Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:58:52Z" }, { "id": "fastjsonlog-2026-07-09", "display_name": "fastjsonlog", "campaign": null, "detection_source": "osv", "packages": [ { "package": "fastjsonlog", "ecosystem": "npm", "versions": [ "1.1.12", "1.1.13" ], "osv_entries": [ { "osv_id": "MAL-2026-4796", "osv_published_at": "2026-05-26T12:04:58Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:54:27Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:54:27Z", "osv_earliest_published_at": "2026-05-26T12:04:58Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:58:47Z" }, { "id": "jsonbson-2026-07-09", "display_name": "jsonbson", "campaign": null, "detection_source": "osv", "packages": [ { "package": "jsonbson", "ecosystem": "npm", "versions": [ "2.1.3", "2.1.6" ], "osv_entries": [ { "osv_id": "MAL-2026-4591", "osv_published_at": "2026-05-20T00:44:24Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:54:23Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:54:23Z", "osv_earliest_published_at": "2026-05-20T00:44:24Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:58:35Z" }, { "id": "color-style-utils-2026-07-09", "display_name": "color-style-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "color-style-utils", "ecosystem": "npm", "versions": [ "1.0.6" ], "osv_entries": [ { "osv_id": "MAL-2026-4534", "osv_published_at": "2026-05-20T02:11:31Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:54:21Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:54:21Z", "osv_earliest_published_at": "2026-05-20T02:11:31Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:58:27Z" }, { "id": "wnba-parent-2026-07-09", "display_name": "wnba-parent", "campaign": null, "detection_source": "osv", "packages": [ { "package": "wnba-parent", "ecosystem": "npm", "versions": [ "999.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-4343", "osv_published_at": "2026-05-25T08:11:18Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:54:13Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:54:13Z", "osv_earliest_published_at": "2026-05-25T08:11:18Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:58:07Z" }, { "id": "wm-w5g-preview-2026-07-09", "display_name": "wm-w5g-preview", "campaign": null, "detection_source": "osv", "packages": [ { "package": "wm-w5g-preview", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.34", "21.10.0", "31.0.34" ], "osv_entries": [ { "osv_id": "MAL-2026-4342", "osv_published_at": "2026-05-25T08:09:47Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:54:12Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:54:12Z", "osv_earliest_published_at": "2026-05-25T08:09:47Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:58:01Z" }, { "id": "wm-plugin-set-walkme-language-2026-07-09", "display_name": "wm-plugin-set-walkme-language", "campaign": null, "detection_source": "osv", "packages": [ { "package": "wm-plugin-set-walkme-language", "ecosystem": "npm", "versions": [ "1.3.1", "12.3.1" ], "osv_entries": [ { "osv_id": "MAL-2026-4341", "osv_published_at": "2026-05-25T08:09:47Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:54:10Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:54:10Z", "osv_earliest_published_at": "2026-05-25T08:09:47Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:57:55Z" }, { "id": "wm-plugin-open-teach-me-after-deployable-played-2026-07-09", "display_name": "wm-plugin-open-teach-me-after-deployable-played", "campaign": null, "detection_source": "osv", "packages": [ { "package": "wm-plugin-open-teach-me-after-deployable-played", "ecosystem": "npm", "versions": [ "1.0.6", "12.0.6" ], "osv_entries": [ { "osv_id": "MAL-2026-4340", "osv_published_at": "2026-05-25T08:09:47Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:54:09Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:54:09Z", "osv_earliest_published_at": "2026-05-25T08:09:47Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:57:49Z" }, { "id": "wm-plugin-native-functions-restorer-2026-07-09", "display_name": "wm-plugin-native-functions-restorer", "campaign": null, "detection_source": "osv", "packages": [ { "package": "wm-plugin-native-functions-restorer", "ecosystem": "npm", "versions": [ "0.6.4", "30.6.4" ], "osv_entries": [ { "osv_id": "MAL-2026-4339", "osv_published_at": "2026-05-25T08:09:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:54:08Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:54:08Z", "osv_earliest_published_at": "2026-05-25T08:09:48Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:57:43Z" }, { "id": "wm-plugin-json-conditions-2026-07-09", "display_name": "wm-plugin-json-conditions", "campaign": null, "detection_source": "osv", "packages": [ { "package": "wm-plugin-json-conditions", "ecosystem": "npm", "versions": [ "1.0.0", "13.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-4338", "osv_published_at": "2026-05-25T08:09:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:54:07Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:54:07Z", "osv_earliest_published_at": "2026-05-25T08:09:48Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:57:38Z" }, { "id": "wm-plugin-create-iframe-capturing-2026-07-09", "display_name": "wm-plugin-create-iframe-capturing", "campaign": null, "detection_source": "osv", "packages": [ { "package": "wm-plugin-create-iframe-capturing", "ecosystem": "npm", "versions": [ "1.0.1", "21.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-4337", "osv_published_at": "2026-05-25T08:09:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:54:05Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:54:05Z", "osv_earliest_published_at": "2026-05-25T08:09:48Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:57:32Z" }, { "id": "vite-plugin-env-compat-plus-2026-07-09", "display_name": "vite-plugin-env-compat-plus", "campaign": null, "detection_source": "osv", "packages": [ { "package": "vite-plugin-env-compat-plus", "ecosystem": "npm", "versions": [ "5.2.3" ], "osv_entries": [ { "osv_id": "MAL-2026-4334", "osv_published_at": "2026-05-25T08:49:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:54:03Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:54:03Z", "osv_earliest_published_at": "2026-05-25T08:49:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:57:26Z" }, { "id": "nba-cdn-plugin-2026-07-09", "display_name": "nba-cdn-plugin", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nba-cdn-plugin", "ecosystem": "npm", "versions": [ "999.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-4323", "osv_published_at": "2026-05-25T08:11:18Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:54:02Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:54:02Z", "osv_earliest_published_at": "2026-05-25T08:11:18Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:57:20Z" }, { "id": "nba-blocker-plugin-2026-07-09", "display_name": "nba-blocker-plugin", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nba-blocker-plugin", "ecosystem": "npm", "versions": [ "999.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-4322", "osv_published_at": "2026-05-25T08:11:18Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:54:01Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:54:01Z", "osv_earliest_published_at": "2026-05-25T08:11:18Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:57:14Z" }, { "id": "mobile-international-2026-07-09", "display_name": "mobile-international", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mobile-international", "ecosystem": "npm", "versions": [ "999.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-4320", "osv_published_at": "2026-05-25T08:11:18Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:54:00Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:54:00Z", "osv_earliest_published_at": "2026-05-25T08:11:18Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:57:09Z" }, { "id": "chai-as-redeploy-2026-07-09", "display_name": "chai-as-redeploy", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-redeploy", "ecosystem": "npm", "versions": [ "4.2.3", "4.2.5", "4.2.8" ], "osv_entries": [ { "osv_id": "MAL-2026-4307", "osv_published_at": "2026-05-25T08:52:28Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:53:59Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:53:59Z", "osv_earliest_published_at": "2026-05-25T08:52:28Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:57:03Z" }, { "id": "mcp-dashboards-shared-2026-07-09", "display_name": "mcp-dashboards-shared", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mcp-dashboards-shared", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-4296", "osv_published_at": "2026-05-25T07:12:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:53:58Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:53:58Z", "osv_earliest_published_at": "2026-05-25T07:12:03Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:56:56Z" }, { "id": "git-en-boite-inventory-2026-07-09", "display_name": "git-en-boite-inventory", "campaign": null, "detection_source": "osv", "packages": [ { "package": "git-en-boite-inventory", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-4295", "osv_published_at": "2026-05-25T07:12:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:53:57Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:53:57Z", "osv_earliest_published_at": "2026-05-25T07:12:03Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:56:51Z" }, { "id": "flow-parser-oxidized-2026-07-09", "display_name": "flow-parser-oxidized", "campaign": null, "detection_source": "osv", "packages": [ { "package": "flow-parser-oxidized", "ecosystem": "npm", "versions": [ "0.0.1", "0.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-4294", "osv_published_at": "2026-05-25T07:12:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:53:55Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:53:55Z", "osv_earliest_published_at": "2026-05-25T07:12:03Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:56:45Z" }, { "id": "chai-as-float-2026-07-09", "display_name": "chai-as-float", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-float", "ecosystem": "npm", "versions": [ "2.3.1", "2.3.2" ], "osv_entries": [ { "osv_id": "MAL-2026-4293", "osv_published_at": "2026-05-25T07:06:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:53:54Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:53:54Z", "osv_earliest_published_at": "2026-05-25T07:06:52Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:56:40Z" }, { "id": "chai-as-buffer-2026-07-09", "display_name": "chai-as-buffer", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-buffer", "ecosystem": "npm", "versions": [ "1.4.3", "1.4.4" ], "osv_entries": [ { "osv_id": "MAL-2026-4292", "osv_published_at": "2026-05-25T07:06:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:53:53Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:53:53Z", "osv_earliest_published_at": "2026-05-25T07:06:52Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:56:34Z" }, { "id": "json-spectaculation-2026-07-09", "display_name": "json-spectaculation", "campaign": null, "detection_source": "osv", "packages": [ { "package": "json-spectaculation", "ecosystem": "npm", "versions": [ "3.10.14" ], "osv_entries": [ { "osv_id": "MAL-2026-4224", "osv_published_at": "2026-05-21T15:35:26Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:53:52Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:53:52Z", "osv_earliest_published_at": "2026-05-21T15:35:26Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:56:28Z" }, { "id": "ts-logger-pack-2026-07-09", "display_name": "ts-logger-pack", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ts-logger-pack", "ecosystem": "npm", "versions": [ "0.0.1", "0.1.0", "0.1.1", "1.1.1", "1.1.2" ], "osv_entries": [ { "osv_id": "MAL-2026-4199", "osv_published_at": "2026-05-20T06:52:04Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:53:51Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:53:51Z", "osv_earliest_published_at": "2026-05-20T06:52:04Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:56:22Z" }, { "id": "supabase-2026-07-09", "display_name": "supabase", "campaign": "doctolib-apps", "detection_source": "npm_registry", "packages": [ { "package": "supabase", "ecosystem": "npm", "versions": [ "2.105.0-beta.9" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:53:48Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:53:48Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/supabase", "ledger_commit_at": "2026-07-09T13:56:14Z" }, { "id": "doctolib-apps-native-personalized-services-2026-07-09", "display_name": "@doctolib-apps/native-personalized-services", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@doctolib-apps/native-personalized-services", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-4186", "osv_published_at": "2026-05-20T16:44:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:52:50Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:52:50Z", "osv_earliest_published_at": "2026-05-20T16:44:52Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-21T22:36:24Z" }, { "id": "psxjson-2026-07-09", "display_name": "psxjson", "campaign": null, "detection_source": "osv", "packages": [ { "package": "psxjson", "ecosystem": "npm", "versions": [ "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-4170", "osv_published_at": "2026-05-19T14:03:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:52:49Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:52:49Z", "osv_earliest_published_at": "2026-05-19T14:03:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:56:02Z" }, { "id": "chai-as-vec-2026-07-09", "display_name": "chai-as-vec", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-vec", "ecosystem": "npm", "versions": [ "2.3.5", "2.3.6", "2.3.7" ], "osv_entries": [ { "osv_id": "MAL-2026-4168", "osv_published_at": "2026-05-19T11:32:47Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:52:48Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:52:48Z", "osv_earliest_published_at": "2026-05-19T11:32:47Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-21T23:20:24Z" }, { "id": "jenkins-for-jira-2026-07-09", "display_name": "jenkins-for-jira", "campaign": null, "detection_source": "osv", "packages": [ { "package": "jenkins-for-jira", "ecosystem": "npm", "versions": [ "100.0.0", "99.0.0", "99.0.1", "99.9.9", "99.99.9" ], "osv_entries": [ { "osv_id": "MAL-2026-3788", "osv_published_at": "2026-05-15T10:43:16Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:52:46Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:52:46Z", "osv_earliest_published_at": "2026-05-15T10:43:16Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:55:49Z" }, { "id": "frank-at-alibaba-internal-2026-07-09", "display_name": "frank-at-alibaba-internal", "campaign": null, "detection_source": "osv", "packages": [ { "package": "frank-at-alibaba-internal", "ecosystem": "npm", "versions": [ "99.9.10", "99.9.11", "99.9.12", "99.9.13", "99.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-3787", "osv_published_at": "2026-05-15T10:40:54Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:52:45Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:52:45Z", "osv_earliest_published_at": "2026-05-15T10:40:54Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:55:40Z" }, { "id": "aliyun-internal-config-2026-07-09", "display_name": "aliyun-internal-config", "campaign": null, "detection_source": "osv", "packages": [ { "package": "aliyun-internal-config", "ecosystem": "npm", "versions": [ "99.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-3780", "osv_published_at": "2026-05-15T10:40:54Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:52:43Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:52:43Z", "osv_earliest_published_at": "2026-05-15T10:40:54Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:55:34Z" }, { "id": "mrgn-utils-2026-07-09", "display_name": "mrgn-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mrgn-utils", "ecosystem": "npm", "versions": [ "999.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-3733", "osv_published_at": "2026-05-14T15:49:01Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:52:42Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:52:42Z", "osv_earliest_published_at": "2026-05-14T15:49:01Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:55:28Z" }, { "id": "mrgn-common-2026-07-09", "display_name": "mrgn-common", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mrgn-common", "ecosystem": "npm", "versions": [ "999.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-3731", "osv_published_at": "2026-05-14T15:49:01Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:52:41Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:52:41Z", "osv_earliest_published_at": "2026-05-14T15:49:01Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:55:22Z" }, { "id": "marginfi-v2-ui-state-2026-07-09", "display_name": "marginfi-v2-ui-state", "campaign": null, "detection_source": "osv", "packages": [ { "package": "marginfi-v2-ui-state", "ecosystem": "npm", "versions": [ "999.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-3730", "osv_published_at": "2026-05-14T15:49:01Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:52:40Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:52:40Z", "osv_earliest_published_at": "2026-05-14T15:49:01Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:55:14Z" }, { "id": "marginfi-client-v2-2026-07-09", "display_name": "marginfi-client-v2", "campaign": null, "detection_source": "osv", "packages": [ { "package": "marginfi-client-v2", "ecosystem": "npm", "versions": [ "999.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-3729", "osv_published_at": "2026-05-14T15:49:01Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:52:39Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:52:39Z", "osv_earliest_published_at": "2026-05-14T15:49:01Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:55:08Z" }, { "id": "deltaprime-primeloans-2026-07-09", "display_name": "deltaprime-primeloans", "campaign": null, "detection_source": "osv", "packages": [ { "package": "deltaprime-primeloans", "ecosystem": "npm", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-3725", "osv_published_at": "2026-05-14T15:49:01Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:52:38Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:52:38Z", "osv_earliest_published_at": "2026-05-14T15:49:01Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:55:02Z" }, { "id": "chai-as-streamed-2026-07-09", "display_name": "chai-as-streamed", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-streamed", "ecosystem": "npm", "versions": [ "2.0.11" ], "osv_entries": [ { "osv_id": "MAL-2026-3657", "osv_published_at": "2026-05-13T14:03:47Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:52:36Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:52:36Z", "osv_earliest_published_at": "2026-05-13T14:03:47Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:54:54Z" }, { "id": "jwscube-2026-07-09", "display_name": "jwscube", "campaign": null, "detection_source": "osv", "packages": [ { "package": "jwscube", "ecosystem": "npm", "versions": [ "1.1.9" ], "osv_entries": [ { "osv_id": "MAL-2026-3612", "osv_published_at": "2026-05-12T11:23:10Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:52:35Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:52:35Z", "osv_earliest_published_at": "2026-05-12T11:23:10Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:54:48Z" }, { "id": "kinxcdn-commerce-player-2026-07-09", "display_name": "@kinxcdn/commerce-player", "campaign": "bold-commerce", "detection_source": "npm_registry", "packages": [ { "package": "@kinxcdn/commerce-player", "ecosystem": "npm", "versions": [ "1.6.7-alpha.1" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:51:58Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:51:58Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40kinxcdn%2Fcommerce-player", "ledger_commit_at": "2026-07-09T13:54:42Z" }, { "id": "bold-commerce-stacks-ui-2026-07-09", "display_name": "@bold-commerce/stacks-ui", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@bold-commerce/stacks-ui", "ecosystem": "npm", "versions": [ "99.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-3344", "osv_published_at": "2026-05-05T15:27:44Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:50:58Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:50:58Z", "osv_earliest_published_at": "2026-05-05T15:27:44Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:54:38Z" }, { "id": "google-pay-trust-start-2026-07-09", "display_name": "@google-pay-trust/start", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@google-pay-trust/start", "ecosystem": "npm", "versions": [ "99.0.2", "99.0.3", "99.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-3320", "osv_published_at": "2026-05-04T03:02:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:50:39Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:50:39Z", "osv_earliest_published_at": "2026-05-04T03:02:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:54:32Z" }, { "id": "google-pay-trust-init-google-pay-result-2026-07-09", "display_name": "@google-pay-trust/init-google-pay-result", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@google-pay-trust/init-google-pay-result", "ecosystem": "npm", "versions": [ "99.0.2", "99.0.3", "99.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-3319", "osv_published_at": "2026-05-04T03:02:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:49:39Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:49:39Z", "osv_earliest_published_at": "2026-05-04T03:02:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:54:26Z" }, { "id": "b2b-blocker-hide-activation-error-2026-07-09", "display_name": "@b2b_blocker/hide_activation_error", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@b2b_blocker/hide_activation_error", "ecosystem": "npm", "versions": [ "99.0.2", "99.0.3", "99.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-3318", "osv_published_at": "2026-05-04T03:02:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:49:37Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:49:37Z", "osv_earliest_published_at": "2026-05-04T03:02:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:54:17Z" }, { "id": "apple-pay-trust-destroy-2026-07-09", "display_name": "@apple-pay-trust/destroy", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@apple-pay-trust/destroy", "ecosystem": "npm", "versions": [ "99.0.1", "99.0.2", "99.0.3", "99.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-3317", "osv_published_at": "2026-05-04T03:02:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:49:18Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:49:18Z", "osv_earliest_published_at": "2026-05-04T03:02:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:54:12Z" }, { "id": "xmr-pay-2026-07-09", "display_name": "xmr-pay", "campaign": "apple-pay-trust", "detection_source": "npm_registry", "packages": [ { "package": "xmr-pay", "ecosystem": "npm", "versions": [ "0.1.0", "0.1.1" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:49:16Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:49:16Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/xmr-pay", "ledger_commit_at": "2026-07-09T13:54:07Z" }, { "id": "momo-kits-native-kits-2026-07-09", "display_name": "@momo-kits/native-kits", "campaign": "apple-pay-trust", "detection_source": "npm_registry", "packages": [ { "package": "@momo-kits/native-kits", "ecosystem": "npm", "versions": [ "0.160.1" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:48:42Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:48:42Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40momo-kits%2Fnative-kits", "ledger_commit_at": "2026-07-09T13:54:03Z" }, { "id": "apple-pay-trust-check-apple-pay-2026-07-09", "display_name": "@apple-pay-trust/check-apple-pay", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@apple-pay-trust/check-apple-pay", "ecosystem": "npm", "versions": [ "99.0.1", "99.0.2", "99.0.3", "99.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-3316", "osv_published_at": "2026-05-04T03:02:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:47:58Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:47:58Z", "osv_earliest_published_at": "2026-05-04T03:02:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:53:59Z" }, { "id": "path-internal-util-2026-07-09", "display_name": "path-internal-util", "campaign": null, "detection_source": "osv", "packages": [ { "package": "path-internal-util", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-3312", "osv_published_at": "2026-05-01T07:11:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:47:57Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:47:57Z", "osv_earliest_published_at": "2026-05-01T07:11:51Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:53:54Z" }, { "id": "path-addon-2026-07-09", "display_name": "path-addon", "campaign": null, "detection_source": "osv", "packages": [ { "package": "path-addon", "ecosystem": "npm", "versions": [ "1.0.2", "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-3311", "osv_published_at": "2026-05-01T07:11:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:47:55Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:47:55Z", "osv_earliest_published_at": "2026-05-01T07:11:33Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:53:48Z" }, { "id": "accesso-angular-cache-buster-2026-07-09", "display_name": "accesso-angular-cache-buster", "campaign": null, "detection_source": "osv", "packages": [ { "package": "accesso-angular-cache-buster", "ecosystem": "npm", "versions": [ "99.0.0", "99.9.0" ], "osv_entries": [ { "osv_id": "MAL-2026-3276", "osv_published_at": "2026-05-04T01:51:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:47:53Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:47:53Z", "osv_earliest_published_at": "2026-05-04T01:51:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:53:41Z" }, { "id": "internal-sys-audit-check-2026-07-09", "display_name": "internal-sys-audit-check", "campaign": null, "detection_source": "osv", "packages": [ { "package": "internal-sys-audit-check", "ecosystem": "npm", "versions": [ "1.0.7" ], "osv_entries": [ { "osv_id": "MAL-2026-3174", "osv_published_at": "2026-04-29T14:40:01Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:47:51Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:47:51Z", "osv_earliest_published_at": "2026-04-29T14:40:01Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:53:34Z" }, { "id": "frank-newton3-user-hunt-2026-07-09", "display_name": "frank-newton3-user-hunt", "campaign": null, "detection_source": "osv", "packages": [ { "package": "frank-newton3-user-hunt", "ecosystem": "npm", "versions": [ "1.0.8" ], "osv_entries": [ { "osv_id": "MAL-2026-3172", "osv_published_at": "2026-04-29T14:40:01Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:47:50Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:47:50Z", "osv_earliest_published_at": "2026-04-29T14:40:01Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:53:26Z" }, { "id": "apple-internal-config-2026-07-09", "display_name": "apple-internal-config", "campaign": null, "detection_source": "osv", "packages": [ { "package": "apple-internal-config", "ecosystem": "npm", "versions": [ "100.0.1", "100.0.2", "100.0.6", "100.0.7", "100.0.8", "100.0.9", "100.1.1", "100.1.2", "100.2.7", "100.3.2", "100.3.3", "100.3.5", "100.5.0", "100.6.0", "99.10.0", "99.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-3168", "osv_published_at": "2026-04-29T14:40:01Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:47:49Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:47:49Z", "osv_earliest_published_at": "2026-04-29T14:40:01Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:53:20Z" }, { "id": "apple-infra-stealth-audit-2026-07-09", "display_name": "apple-infra-stealth-audit", "campaign": null, "detection_source": "osv", "packages": [ { "package": "apple-infra-stealth-audit", "ecosystem": "npm", "versions": [ "1.3.6" ], "osv_entries": [ { "osv_id": "MAL-2026-3167", "osv_published_at": "2026-04-29T14:40:01Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:47:46Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:47:46Z", "osv_earliest_published_at": "2026-04-29T14:40:01Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:53:15Z" }, { "id": "chai-as-redeployed-2026-07-09", "display_name": "chai-as-redeployed", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-redeployed", "ecosystem": "npm", "versions": [ "3.5.7", "3.5.8" ], "osv_entries": [ { "osv_id": "MAL-2026-3165", "osv_published_at": "2026-04-29T12:29:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:47:45Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:47:45Z", "osv_earliest_published_at": "2026-04-29T12:29:50Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:53:09Z" }, { "id": "chai-as-char-2026-07-09", "display_name": "chai-as-char", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-char", "ecosystem": "npm", "versions": [ "2.3.1" ], "osv_entries": [ { "osv_id": "MAL-2026-3164", "osv_published_at": "2026-04-29T12:41:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:47:43Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:47:43Z", "osv_earliest_published_at": "2026-04-29T12:41:25Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:53:01Z" }, { "id": "apple-internal-pki-utils-2026-07-09", "display_name": "apple-internal-pki-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "apple-internal-pki-utils", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-3160", "osv_published_at": "2026-04-29T08:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:47:41Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:47:41Z", "osv_earliest_published_at": "2026-04-29T08:00:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:52:53Z" }, { "id": "apple-coredata-internal-service-2026-07-09", "display_name": "apple-coredata-internal-service", "campaign": null, "detection_source": "osv", "packages": [ { "package": "apple-coredata-internal-service", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-3152", "osv_published_at": "2026-04-29T08:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:47:39Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:47:39Z", "osv_earliest_published_at": "2026-04-29T08:00:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:52:45Z" }, { "id": "wrapped-logger-utils-2026-07-09", "display_name": "wrapped-logger-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "wrapped-logger-utils", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-3027", "osv_published_at": "2026-04-24T03:07:24Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:47:38Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:47:38Z", "osv_earliest_published_at": "2026-04-24T03:07:24Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:52:40Z" }, { "id": "json-spacer-2026-07-09", "display_name": "json-spacer", "campaign": null, "detection_source": "osv", "packages": [ { "package": "json-spacer", "ecosystem": "npm", "versions": [ "7.4.14", "7.4.15", "7.4.16" ], "osv_entries": [ { "osv_id": "MAL-2026-3008", "osv_published_at": "2026-04-23T04:42:45Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:47:37Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:47:37Z", "osv_earliest_published_at": "2026-04-23T04:42:45Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:52:35Z" }, { "id": "json-dec-2026-07-09", "display_name": "json-dec", "campaign": null, "detection_source": "osv", "packages": [ { "package": "json-dec", "ecosystem": "npm", "versions": [ "4.3.19" ], "osv_entries": [ { "osv_id": "MAL-2026-3007", "osv_published_at": "2026-04-23T04:42:45Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:47:35Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:47:35Z", "osv_earliest_published_at": "2026-04-23T04:42:45Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:52:29Z" }, { "id": "changelog-utils-structured-logger-2026-07-09", "display_name": "changelog-utils-structured-logger", "campaign": null, "detection_source": "osv", "packages": [ { "package": "changelog-utils-structured-logger", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-3006", "osv_published_at": "2026-04-23T04:24:15Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:47:34Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:47:34Z", "osv_earliest_published_at": "2026-04-23T04:24:15Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:52:24Z" }, { "id": "changelog-cli-logger-2026-07-09", "display_name": "changelog-cli-logger", "campaign": null, "detection_source": "osv", "packages": [ { "package": "changelog-cli-logger", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2", "1.0.3", "1.0.4", "1.0.5", "1.0.6", "1.0.7", "1.0.8", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-3005", "osv_published_at": "2026-04-23T04:24:15Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:47:33Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:47:33Z", "osv_earliest_published_at": "2026-04-23T04:24:15Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:52:19Z" }, { "id": "nklkas-hyperliquid-2026-07-09", "display_name": "@nklkas/hyperliquid", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@nklkas/hyperliquid", "ecosystem": "npm", "versions": [ "0.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-3004", "osv_published_at": "2026-04-23T04:24:15Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:47:30Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:47:30Z", "osv_earliest_published_at": "2026-04-23T04:24:15Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:52:13Z" }, { "id": "amsterdam-local-forms-component-library-2026-07-09", "display_name": "@amsterdam-local/forms-component-library", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@amsterdam-local/forms-component-library", "ecosystem": "npm", "versions": [ "1.0.1", "1.0.10", "1.0.11", "1.0.15", "1.0.2", "1.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-3003", "osv_published_at": "2026-04-23T03:52:34Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:46:44Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:46:44Z", "osv_earliest_published_at": "2026-04-23T03:52:34Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:52:08Z" }, { "id": "gleb-js-2026-07-09", "display_name": "gleb-js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "gleb-js", "ecosystem": "npm", "versions": [ "1.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-2976", "osv_published_at": "2026-04-22T01:49:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:46:42Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:46:42Z", "osv_earliest_published_at": "2026-04-22T01:49:52Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:52:02Z" }, { "id": "aven-types-2026-07-09", "display_name": "aven_types", "campaign": null, "detection_source": "osv", "packages": [ { "package": "aven_types", "ecosystem": "npm", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-2972", "osv_published_at": "2026-04-22T01:29:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:46:41Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:46:41Z", "osv_earliest_published_at": "2026-04-22T01:29:49Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:51:55Z" }, { "id": "usealloy-typegen-2026-07-09", "display_name": "@usealloy/typegen", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@usealloy/typegen", "ecosystem": "npm", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-2971", "osv_published_at": "2026-04-22T01:29:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:46:40Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:46:40Z", "osv_earliest_published_at": "2026-04-22T01:29:49Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:51:47Z" }, { "id": "usealloy-component-library-2026-07-09", "display_name": "@usealloy/component-library", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@usealloy/component-library", "ecosystem": "npm", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-2970", "osv_published_at": "2026-04-22T01:29:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:46:38Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:46:38Z", "osv_earliest_published_at": "2026-04-22T01:29:49Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:51:42Z" }, { "id": "usealloy-api-contract-2026-07-09", "display_name": "@usealloy/api-contract", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@usealloy/api-contract", "ecosystem": "npm", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-2969", "osv_published_at": "2026-04-22T01:29:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:46:37Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:46:37Z", "osv_earliest_published_at": "2026-04-22T01:29:49Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:51:37Z" }, { "id": "com-tencent-puerts-agent-2026-07-09", "display_name": "com.tencent.puerts.agent", "campaign": null, "detection_source": "osv", "packages": [ { "package": "com.tencent.puerts.agent", "ecosystem": "npm", "versions": [ "1000.0.15" ], "osv_entries": [ { "osv_id": "MAL-2026-2966", "osv_published_at": "2026-04-21T12:05:01Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:46:36Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:46:36Z", "osv_earliest_published_at": "2026-04-21T12:05:01Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:51:32Z" }, { "id": "apple-internal-security-poc-frank-2026-07-09", "display_name": "apple-internal-security-poc-frank", "campaign": null, "detection_source": "osv", "packages": [ { "package": "apple-internal-security-poc-frank", "ecosystem": "npm", "versions": [ "99.9.9-poc-frank" ], "osv_entries": [ { "osv_id": "MAL-2026-2961", "osv_published_at": "2026-04-21T01:17:28Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:46:34Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:46:34Z", "osv_earliest_published_at": "2026-04-21T01:17:28Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:51:27Z" }, { "id": "internal-insights-enabled-2026-07-09", "display_name": "internal_insights_enabled", "campaign": null, "detection_source": "osv", "packages": [ { "package": "internal_insights_enabled", "ecosystem": "npm", "versions": [ "99.11.0", "99.12.0", "99.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-2959", "osv_published_at": "2026-04-20T15:46:01Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:46:33Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:46:33Z", "osv_earliest_published_at": "2026-04-20T15:46:01Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:51:22Z" }, { "id": "turbo-leven-2026-07-09", "display_name": "turbo-leven", "campaign": null, "detection_source": "osv", "packages": [ { "package": "turbo-leven", "ecosystem": "npm", "versions": [ "1.0.0", "1.1.0", "1.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-2944", "osv_published_at": "2026-04-20T06:15:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:46:32Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:46:32Z", "osv_earliest_published_at": "2026-04-20T06:15:42Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:51:17Z" }, { "id": "turbo-he-2026-07-09", "display_name": "turbo-he", "campaign": null, "detection_source": "osv", "packages": [ { "package": "turbo-he", "ecosystem": "npm", "versions": [ "0.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-2943", "osv_published_at": "2026-04-20T06:15:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:46:30Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:46:30Z", "osv_earliest_published_at": "2026-04-20T06:15:42Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:51:08Z" }, { "id": "optimized-fastest-levenshtein-2026-07-09", "display_name": "optimized-fastest-levenshtein", "campaign": null, "detection_source": "osv", "packages": [ { "package": "optimized-fastest-levenshtein", "ecosystem": "npm", "versions": [ "0.1.0", "1.3.8", "1.3.9" ], "osv_entries": [ { "osv_id": "MAL-2026-2942", "osv_published_at": "2026-04-20T06:15:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:46:29Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:46:29Z", "osv_earliest_published_at": "2026-04-20T06:15:42Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:51:01Z" }, { "id": "npm-doc-deploy-2026-07-09", "display_name": "npm-doc-deploy", "campaign": null, "detection_source": "osv", "packages": [ { "package": "npm-doc-deploy", "ecosystem": "npm", "versions": [ "1.0.1", "1.0.2", "1.0.3", "1.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-2941", "osv_published_at": "2026-04-20T06:34:59Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:46:28Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:46:28Z", "osv_earliest_published_at": "2026-04-20T06:34:59Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:50:54Z" }, { "id": "path-internal-2026-07-09", "display_name": "path-internal", "campaign": null, "detection_source": "osv", "packages": [ { "package": "path-internal", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2", "1.0.3", "1.0.4", "1.0.5", "1.0.6", "1.0.7", "1.0.8", "1.0.9" ], "osv_entries": [ { "osv_id": "MAL-2026-2930", "osv_published_at": "2026-04-14T10:53:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:46:26Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:46:26Z", "osv_earliest_published_at": "2026-04-14T10:53:25Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:50:48Z" }, { "id": "path-extend-2026-07-09", "display_name": "path-extend", "campaign": null, "detection_source": "osv", "packages": [ { "package": "path-extend", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2", "1.0.3", "1.0.4", "1.0.5", "1.0.7", "1.0.8", "1.0.9" ], "osv_entries": [ { "osv_id": "MAL-2026-2929", "osv_published_at": "2026-04-14T09:46:58Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:46:24Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:46:24Z", "osv_earliest_published_at": "2026-04-14T09:46:58Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:50:40Z" }, { "id": "buffer-util-extend-2026-07-09", "display_name": "buffer-util-extend", "campaign": null, "detection_source": "osv", "packages": [ { "package": "buffer-util-extend", "ecosystem": "npm", "versions": [ "1.0.10", "1.0.2", "1.0.3", "1.0.4", "1.0.5", "1.0.6", "1.0.7", "1.0.9" ], "osv_entries": [ { "osv_id": "MAL-2026-2920", "osv_published_at": "2026-04-14T10:22:11Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:46:21Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:46:21Z", "osv_earliest_published_at": "2026-04-14T10:22:11Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:50:34Z" }, { "id": "modern-events-2026-07-09", "display_name": "modern-events", "campaign": null, "detection_source": "osv", "packages": [ { "package": "modern-events", "ecosystem": "npm", "versions": [ "1.3.0", "1.3.1", "1.3.2", "1.4.4" ], "osv_entries": [ { "osv_id": "MAL-2026-2914", "osv_published_at": "2026-04-16T15:24:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:46:19Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:46:19Z", "osv_earliest_published_at": "2026-04-16T15:24:25Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-23T08:44:19Z", "observed_at": "2026-07-09T13:46:19Z", "ingested_at": "2026-07-09T13:46:19Z", "source_published_at": "2026-04-16T15:24:25Z", "ledger_committed_at": "2026-07-23T08:44:19Z" }, { "id": "swplayer-react-sl-2026-07-09", "display_name": "swplayer-react-sl", "campaign": null, "detection_source": "osv", "packages": [ { "package": "swplayer-react-sl", "ecosystem": "npm", "versions": [ "1.0.5" ], "osv_entries": [ { "osv_id": "MAL-2026-2906", "osv_published_at": "2026-04-15T23:21:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:46:17Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:46:17Z", "osv_earliest_published_at": "2026-04-15T23:21:12Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://www.indece.com/en-US/blog/7df041ba-feb1-4d87-918b-7fc2c709d805", "ledger_commit_at": "2026-07-09T13:50:13Z" }, { "id": "simple-auth-basic-2026-07-09", "display_name": "simple-auth-basic", "campaign": null, "detection_source": "osv", "packages": [ { "package": "simple-auth-basic", "ecosystem": "npm", "versions": [ "2.0.1", "2.0.2", "2.0.3", "2.0.4", "2.0.6", "2.0.8" ], "osv_entries": [ { "osv_id": "MAL-2026-2905", "osv_published_at": "2026-04-15T23:21:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:46:16Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:46:16Z", "osv_earliest_published_at": "2026-04-15T23:21:12Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://www.indece.com/en-US/blog/7df041ba-feb1-4d87-918b-7fc2c709d805", "ledger_commit_at": "2026-07-09T13:50:04Z" }, { "id": "trackora-node-2026-07-09", "display_name": "trackora-node", "campaign": null, "detection_source": "osv", "packages": [ { "package": "trackora-node", "ecosystem": "npm", "versions": [ "2.4.5" ], "osv_entries": [ { "osv_id": "MAL-2026-2904", "osv_published_at": "2026-04-15T22:05:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:46:14Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:46:14Z", "osv_earliest_published_at": "2026-04-15T22:05:03Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://www.indece.com/en-US/blog/7df041ba-feb1-4d87-918b-7fc2c709d805", "ledger_commit_at": "2026-07-09T13:49:58Z" }, { "id": "trackora-chain-2026-07-09", "display_name": "trackora-chain", "campaign": null, "detection_source": "osv", "packages": [ { "package": "trackora-chain", "ecosystem": "npm", "versions": [ "2.4.5" ], "osv_entries": [ { "osv_id": "MAL-2026-2903", "osv_published_at": "2026-04-15T22:05:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:46:13Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:46:13Z", "osv_earliest_published_at": "2026-04-15T22:05:03Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://www.indece.com/en-US/blog/7df041ba-feb1-4d87-918b-7fc2c709d805", "ledger_commit_at": "2026-07-09T13:49:51Z" }, { "id": "lockedin-chai-chain-2026-07-09", "display_name": "lockedin-chai-chain", "campaign": null, "detection_source": "osv", "packages": [ { "package": "lockedin-chai-chain", "ecosystem": "npm", "versions": [ "1.2.6" ], "osv_entries": [ { "osv_id": "MAL-2026-2902", "osv_published_at": "2026-04-15T22:05:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:46:12Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:46:12Z", "osv_earliest_published_at": "2026-04-15T22:05:03Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://www.indece.com/en-US/blog/7df041ba-feb1-4d87-918b-7fc2c709d805", "ledger_commit_at": "2026-07-09T13:49:40Z" }, { "id": "env-express-2026-07-09", "display_name": "env_express", "campaign": null, "detection_source": "osv", "packages": [ { "package": "env_express", "ecosystem": "npm", "versions": [ "1.3.5" ], "osv_entries": [ { "osv_id": "MAL-2026-2901", "osv_published_at": "2026-04-15T22:05:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:46:11Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:46:11Z", "osv_earliest_published_at": "2026-04-15T22:05:03Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://www.indece.com/en-US/blog/7df041ba-feb1-4d87-918b-7fc2c709d805", "ledger_commit_at": "2026-07-09T13:49:33Z" }, { "id": "chai-use-chains-2026-07-09", "display_name": "chai-use-chains", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-use-chains", "ecosystem": "npm", "versions": [ "1.2.6", "1.2.7" ], "osv_entries": [ { "osv_id": "MAL-2026-2899", "osv_published_at": "2026-04-15T22:05:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:46:10Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:46:10Z", "osv_earliest_published_at": "2026-04-15T22:05:03Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://www.indece.com/en-US/blog/7df041ba-feb1-4d87-918b-7fc2c709d805", "ledger_commit_at": "2026-07-09T13:49:25Z" }, { "id": "chai-str-2026-07-09", "display_name": "chai-str", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-str", "ecosystem": "npm", "versions": [ "1.1.9" ], "osv_entries": [ { "osv_id": "MAL-2026-2898", "osv_published_at": "2026-04-15T22:05:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:46:08Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:46:08Z", "osv_earliest_published_at": "2026-04-15T22:05:03Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://www.indece.com/en-US/blog/7df041ba-feb1-4d87-918b-7fc2c709d805", "ledger_commit_at": "2026-07-09T13:49:18Z" }, { "id": "chai-beta-2026-07-09", "display_name": "chai-beta", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-beta", "ecosystem": "npm", "versions": [ "1.1.9" ], "osv_entries": [ { "osv_id": "MAL-2026-2897", "osv_published_at": "2026-04-15T22:05:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:46:07Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:46:07Z", "osv_earliest_published_at": "2026-04-15T22:05:03Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://www.indece.com/en-US/blog/7df041ba-feb1-4d87-918b-7fc2c709d805", "ledger_commit_at": "2026-07-09T13:49:10Z" }, { "id": "chai-as-mobj-2026-07-09", "display_name": "chai-as-mobj", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-mobj", "ecosystem": "npm", "versions": [ "2.3.5" ], "osv_entries": [ { "osv_id": "MAL-2026-2893", "osv_published_at": "2026-04-15T22:05:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:46:06Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:46:06Z", "osv_earliest_published_at": "2026-04-15T22:05:03Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://www.indece.com/en-US/blog/7df041ba-feb1-4d87-918b-7fc2c709d805", "ledger_commit_at": "2026-07-09T13:49:04Z" }, { "id": "chai-as-inserted-2026-07-09", "display_name": "chai-as-inserted", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-inserted", "ecosystem": "npm", "versions": [ "1.2.1" ], "osv_entries": [ { "osv_id": "MAL-2026-2892", "osv_published_at": "2026-04-15T22:05:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:46:05Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:46:05Z", "osv_earliest_published_at": "2026-04-15T22:05:03Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://www.indece.com/en-US/blog/7df041ba-feb1-4d87-918b-7fc2c709d805", "ledger_commit_at": "2026-07-09T13:48:55Z" }, { "id": "chai-as-evm-2026-07-09", "display_name": "chai-as-evm", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-evm", "ecosystem": "npm", "versions": [ "1.1.2" ], "osv_entries": [ { "osv_id": "MAL-2026-2889", "osv_published_at": "2026-04-15T22:05:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:46:04Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:46:04Z", "osv_earliest_published_at": "2026-04-15T22:05:03Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://www.indece.com/en-US/blog/7df041ba-feb1-4d87-918b-7fc2c709d805", "ledger_commit_at": "2026-07-09T13:48:48Z" }, { "id": "chai-as-encrypted-2026-07-09", "display_name": "chai-as-encrypted", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-encrypted", "ecosystem": "npm", "versions": [ "2.0.11", "2.0.6", "2.0.7", "2.0.8" ], "osv_entries": [ { "osv_id": "MAL-2026-2888", "osv_published_at": "2026-04-15T22:05:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:46:03Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:46:03Z", "osv_earliest_published_at": "2026-04-15T22:05:03Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://www.indece.com/en-US/blog/7df041ba-feb1-4d87-918b-7fc2c709d805", "ledger_commit_at": "2026-07-09T13:48:36Z" }, { "id": "chai-as-elevated-2026-07-09", "display_name": "chai-as-elevated", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-elevated", "ecosystem": "npm", "versions": [ "7.0.5", "7.0.6", "7.0.7" ], "osv_entries": [ { "osv_id": "MAL-2026-2887", "osv_published_at": "2026-04-15T22:05:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:46:01Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:46:01Z", "osv_earliest_published_at": "2026-04-15T22:05:03Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://www.indece.com/en-US/blog/7df041ba-feb1-4d87-918b-7fc2c709d805", "ledger_commit_at": "2026-07-21T23:20:04Z" }, { "id": "chai-as-chain-v2-2026-07-09", "display_name": "chai-as-chain-v2", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-chain-v2", "ecosystem": "npm", "versions": [ "1.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-2886", "osv_published_at": "2026-04-15T22:05:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:46:00Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:46:00Z", "osv_earliest_published_at": "2026-04-15T22:05:03Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://www.indece.com/en-US/blog/7df041ba-feb1-4d87-918b-7fc2c709d805", "ledger_commit_at": "2026-07-09T13:48:19Z" }, { "id": "chai-as-adapter-2026-07-09", "display_name": "chai-as-adapter", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-adapter", "ecosystem": "npm", "versions": [ "1.5.2" ], "osv_entries": [ { "osv_id": "MAL-2026-2885", "osv_published_at": "2026-04-15T22:05:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:45:59Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:45:59Z", "osv_earliest_published_at": "2026-04-15T22:05:03Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://www.indece.com/en-US/blog/7df041ba-feb1-4d87-918b-7fc2c709d805", "ledger_commit_at": "2026-07-09T13:48:13Z" }, { "id": "js-logger-pack-2026-07-09", "display_name": "js-logger-pack", "campaign": null, "detection_source": "osv", "packages": [ { "package": "js-logger-pack", "ecosystem": "npm", "versions": [ "0.0.1", "1.0.0", "1.1.0", "1.1.1", "1.1.10", "1.1.11", "1.1.12", "1.1.13", "1.1.14", "1.1.15", "1.1.16", "1.1.17", "1.1.18", "1.1.19", "1.1.2", "1.1.20", "1.1.21", "1.1.22", "1.1.23", "1.1.24", "1.1.25", "1.1.26", "1.1.27", "1.1.4", "1.1.5", "1.1.6", "1.1.7", "1.1.8", "1.1.9" ], "osv_entries": [ { "osv_id": "MAL-2026-2827", "osv_published_at": "2026-04-15T06:24:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:45:57Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:45:57Z", "osv_earliest_published_at": "2026-04-15T06:24:12Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://safedep.io/malicious-js-logger-pack-npm-stealer/", "ledger_commit_at": "2026-07-09T13:48:04Z" }, { "id": "request-easy-validator-2026-07-09", "display_name": "request-easy-validator", "campaign": null, "detection_source": "osv", "packages": [ { "package": "request-easy-validator", "ecosystem": "npm", "versions": [ "1.0.5" ], "osv_entries": [ { "osv_id": "MAL-2026-2798", "osv_published_at": "2026-04-16T10:15:30Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:45:53Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:45:53Z", "osv_earliest_published_at": "2026-04-16T10:15:30Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:47:57Z" }, { "id": "farikku-util-2026-07-09", "display_name": "farikku-util", "campaign": null, "detection_source": "osv", "packages": [ { "package": "farikku-util", "ecosystem": "npm", "versions": [ "1.0.10", "1.0.2", "1.0.6", "1.0.8" ], "osv_entries": [ { "osv_id": "MAL-2026-2762", "osv_published_at": "2026-04-16T09:56:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:45:51Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:45:51Z", "osv_earliest_published_at": "2026-04-16T09:56:35Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:47:51Z" }, { "id": "chai-use-chain-2026-07-09", "display_name": "chai-use-chain", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-use-chain", "ecosystem": "npm", "versions": [ "1.2.8", "1.3.0" ], "osv_entries": [ { "osv_id": "MAL-2026-2743", "osv_published_at": "2026-04-16T09:49:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:45:49Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:45:49Z", "osv_earliest_published_at": "2026-04-16T09:49:12Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-21T23:21:00Z" }, { "id": "com-baogong-app-push-permission-2026-07-09", "display_name": "com.baogong.app_push_permission", "campaign": null, "detection_source": "osv", "packages": [ { "package": "com.baogong.app_push_permission", "ecosystem": "npm", "versions": [ "100.0.5", "101.0.2", "99.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-2687", "osv_published_at": "2026-04-15T13:49:47Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:45:48Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:45:48Z", "osv_earliest_published_at": "2026-04-15T13:49:47Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:47:35Z" }, { "id": "ui-utils-udhay-alerts-2026-07-09", "display_name": "ui-utils-udhay-alerts", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ui-utils-udhay-alerts", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-2659", "osv_published_at": "2026-04-14T11:47:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:45:45Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:45:45Z", "osv_earliest_published_at": "2026-04-14T11:47:49Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:47:25Z" }, { "id": "pinstatsd-2026-07-09", "display_name": "pinstatsd", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pinstatsd", "ecosystem": "npm", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-2654", "osv_published_at": "2026-04-12T06:43:57Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:45:44Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:45:44Z", "osv_earliest_published_at": "2026-04-12T06:43:57Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://app.safedep.io/community/malysis/01KNYTQGX2AEBXPXYJGPWQBYQ8", "ledger_commit_at": "2026-07-09T13:47:18Z" }, { "id": "pinlogger-2026-07-09", "display_name": "pinlogger", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pinlogger", "ecosystem": "npm", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-2653", "osv_published_at": "2026-04-12T06:43:45Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:45:43Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:45:43Z", "osv_earliest_published_at": "2026-04-12T06:43:45Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://app.safedep.io/community/malysis/01KNYTQHDXAC00F1PJ817Y2JK8", "ledger_commit_at": "2026-07-09T13:47:11Z" }, { "id": "okxglobal-2026-07-09", "display_name": "okxglobal", "campaign": null, "detection_source": "osv", "packages": [ { "package": "okxglobal", "ecosystem": "npm", "versions": [ "9999.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-2649", "osv_published_at": "2026-04-14T11:47:13Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:45:40Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:45:40Z", "osv_earliest_published_at": "2026-04-14T11:47:13Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:46:58Z" }, { "id": "okx-data-2026-07-09", "display_name": "okx-data", "campaign": null, "detection_source": "osv", "packages": [ { "package": "okx-data", "ecosystem": "npm", "versions": [ "9999.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-2647", "osv_published_at": "2026-04-14T11:47:13Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:45:38Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:45:38Z", "osv_earliest_published_at": "2026-04-14T11:47:13Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:46:49Z" }, { "id": "okfe-serverless-conf-2026-07-09", "display_name": "okfe-serverless-conf", "campaign": null, "detection_source": "osv", "packages": [ { "package": "okfe-serverless-conf", "ecosystem": "npm", "versions": [ "9999.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-2646", "osv_published_at": "2026-04-14T11:47:13Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:45:37Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:45:37Z", "osv_earliest_published_at": "2026-04-14T11:47:13Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:46:37Z" }, { "id": "chai-as-refined-2026-07-09", "display_name": "chai-as-refined", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-refined", "ecosystem": "npm", "versions": [ "7.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-2641", "osv_published_at": "2026-04-14T11:48:44Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:45:34Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:45:34Z", "osv_earliest_published_at": "2026-04-14T11:48:44Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:46:26Z" }, { "id": "symphony-core-2026-07-09", "display_name": "symphony-core", "campaign": null, "detection_source": "osv", "packages": [ { "package": "symphony-core", "ecosystem": "npm", "versions": [ "99.9.0" ], "osv_entries": [ { "osv_id": "MAL-2026-2608", "osv_published_at": "2026-04-13T15:25:19Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:45:31Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:45:31Z", "osv_earliest_published_at": "2026-04-13T15:25:19Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:46:13Z" }, { "id": "dwaiter-company-web-2026-07-09", "display_name": "dwaiter-company-web", "campaign": null, "detection_source": "osv", "packages": [ { "package": "dwaiter-company-web", "ecosystem": "npm", "versions": [ "99.9.0" ], "osv_entries": [ { "osv_id": "MAL-2026-2601", "osv_published_at": "2026-04-13T15:25:19Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:45:29Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:45:29Z", "osv_earliest_published_at": "2026-04-13T15:25:19Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:45:55Z" }, { "id": "ccn-common-react-library-2026-07-09", "display_name": "ccn-common-react-library", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ccn-common-react-library", "ecosystem": "npm", "versions": [ "99.9.0" ], "osv_entries": [ { "osv_id": "MAL-2026-2599", "osv_published_at": "2026-04-13T15:25:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:45:28Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:45:28Z", "osv_earliest_published_at": "2026-04-13T15:25:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:45:49Z" }, { "id": "zgny-onboarding-consumer-2026-07-09", "display_name": "@zgny/onboarding-consumer", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@zgny/onboarding-consumer", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-2597", "osv_published_at": "2026-04-13T15:25:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:45:27Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:45:27Z", "osv_earliest_published_at": "2026-04-13T15:25:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:45:42Z" }, { "id": "spreadjs-js-calc-2026-07-09", "display_name": "@spreadjs/js-calc", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@spreadjs/js-calc", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-2596", "osv_published_at": "2026-04-13T15:25:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:45:25Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:45:25Z", "osv_earliest_published_at": "2026-04-13T15:25:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:45:34Z" }, { "id": "puppeteer-core-2026-07-09", "display_name": "puppeteer-core", "campaign": "sports-api", "detection_source": "npm_registry", "packages": [ { "package": "puppeteer-core", "ecosystem": "npm", "versions": [ "25.0.0", "25.0.1" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:45:21Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:45:21Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/puppeteer-core", "ledger_commit_at": "2026-07-09T13:45:28Z" }, { "id": "puppeteer-2026-07-09", "display_name": "puppeteer", "campaign": "sports-api", "detection_source": "npm_registry", "packages": [ { "package": "puppeteer", "ecosystem": "npm", "versions": [ "25.0.0", "25.0.1" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:45:20Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:45:20Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/puppeteer", "ledger_commit_at": "2026-07-09T13:45:22Z" }, { "id": "sports-api-api-sdk-2026-07-09", "display_name": "@sports-api/api-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@sports-api/api-sdk", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-2595", "osv_published_at": "2026-04-13T15:25:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:44:43Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:44:43Z", "osv_earliest_published_at": "2026-04-13T15:25:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:44:46Z" }, { "id": "sage-active-ui-2026-07-09", "display_name": "@sage-active/ui", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@sage-active/ui", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-2593", "osv_published_at": "2026-04-13T15:25:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:43:40Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:43:40Z", "osv_earliest_published_at": "2026-04-13T15:25:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:43:49Z" }, { "id": "relxui-react-2026-07-09", "display_name": "@relxui/react", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@relxui/react", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-2592", "osv_published_at": "2026-04-13T15:25:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:43:38Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:43:38Z", "osv_earliest_published_at": "2026-04-13T15:25:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:43:41Z" }, { "id": "pes-ui-components-2026-07-09", "display_name": "@pes-ui/components", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@pes-ui/components", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-2591", "osv_published_at": "2026-04-13T15:25:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:42:41Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:42:41Z", "osv_earliest_published_at": "2026-04-13T15:25:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:42:44Z" }, { "id": "mountly-2026-07-09", "display_name": "mountly", "campaign": "op-microfrontends", "detection_source": "npm_registry", "packages": [ { "package": "mountly", "ecosystem": "npm", "versions": [ "0.2.2" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:42:35Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:42:35Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/mountly", "ledger_commit_at": "2026-07-09T13:42:37Z" }, { "id": "polyfea-service-worker-2026-07-09", "display_name": "@polyfea/service-worker", "campaign": "op-microfrontends", "detection_source": "npm_registry", "packages": [ { "package": "@polyfea/service-worker", "ecosystem": "npm", "versions": [ "2.0.5", "2.0.6" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:42:18Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:42:18Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40polyfea%2Fservice-worker", "ledger_commit_at": "2026-07-09T13:42:22Z" }, { "id": "op-microfrontends-config-2026-07-09", "display_name": "@op-microfrontends/config", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@op-microfrontends/config", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-2590", "osv_published_at": "2026-04-13T15:25:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:41:03Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:41:03Z", "osv_earliest_published_at": "2026-04-13T15:25:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:41:12Z" }, { "id": "lamoda-seller-ui-kit-2026-07-09", "display_name": "@lamoda/seller-ui-kit", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@lamoda/seller-ui-kit", "ecosystem": "npm", "versions": [ "9999.0.0", "9999.0.1", "9999.0.2", "9999.0.4", "9999.0.5" ], "osv_entries": [ { "osv_id": "MAL-2026-2588", "osv_published_at": "2026-04-10T12:56:44Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:41:02Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:41:02Z", "osv_earliest_published_at": "2026-04-10T12:56:44Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://app.safedep.io/community/malysis/01KNVMV0FTFDM2MPEP5S1E9A4A", "ledger_commit_at": "2026-07-09T13:41:04Z" }, { "id": "kucoin-gbiz-next-tools-2026-07-09", "display_name": "@kucoin-gbiz-next/tools", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@kucoin-gbiz-next/tools", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-2587", "osv_published_at": "2026-04-13T15:25:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:40:10Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:40:10Z", "osv_earliest_published_at": "2026-04-13T15:25:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:40:13Z" }, { "id": "metabase-track-2026-07-09", "display_name": "@metabase/track", "campaign": "ids-alpha", "detection_source": "npm_registry", "packages": [ { "package": "@metabase/track", "ecosystem": "npm", "versions": [ "1.0.0-alpha.0" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:39:42Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:39:42Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40metabase%2Ftrack", "ledger_commit_at": "2026-07-09T13:39:44Z" }, { "id": "ids-alpha-theme-2026-07-09", "display_name": "@ids-alpha/theme", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@ids-alpha/theme", "ecosystem": "npm", "versions": [ "99.9.0" ], "osv_entries": [ { "osv_id": "MAL-2026-2586", "osv_published_at": "2026-04-13T15:25:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:38:45Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:38:45Z", "osv_earliest_published_at": "2026-04-13T15:25:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:38:48Z" }, { "id": "guards-lib-auth-2026-07-09", "display_name": "@guards-lib/auth", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@guards-lib/auth", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-2582", "osv_published_at": "2026-04-13T15:25:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:37:46Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:37:46Z", "osv_earliest_published_at": "2026-04-13T15:25:21Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:38:01Z" }, { "id": "bookiply-core-2026-07-09", "display_name": "@bookiply/core", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@bookiply/core", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-2579", "osv_published_at": "2026-04-13T15:25:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:37:44Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:37:44Z", "osv_earliest_published_at": "2026-04-13T15:25:21Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:37:54Z" }, { "id": "pi-stack-ops-2026-07-09", "display_name": "pi-stack-ops", "campaign": "ascend-ops", "detection_source": "npm_registry", "packages": [ { "package": "pi-stack-ops", "ecosystem": "npm", "versions": [ "0.1.0" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:37:41Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:37:41Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/pi-stack-ops", "ledger_commit_at": "2026-07-09T13:37:47Z" }, { "id": "ops-wiki-agent-kit-2026-07-09", "display_name": "ops-wiki-agent-kit", "campaign": "ascend-ops", "detection_source": "npm_registry", "packages": [ { "package": "ops-wiki-agent-kit", "ecosystem": "npm", "versions": [ "0.1.0", "0.1.1", "0.1.2", "0.1.3" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:37:39Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:37:39Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/ops-wiki-agent-kit", "ledger_commit_at": "2026-07-09T13:37:41Z" }, { "id": "antv-graphlib-2026-07-09", "display_name": "@antv/graphlib", "campaign": "ascend-ops", "detection_source": "npm_registry", "packages": [ { "package": "@antv/graphlib", "ecosystem": "npm", "versions": [ "2.1.4", "2.2.4" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:36:40Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:36:40Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40antv%2Fgraphlib", "ledger_commit_at": "2026-07-09T13:37:08Z" }, { "id": "ascend-ops-web-client-2026-07-09", "display_name": "@ascend-ops/web-client", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@ascend-ops/web-client", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-2575", "osv_published_at": "2026-04-13T15:25:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:36:21Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:36:21Z", "osv_earliest_published_at": "2026-04-13T15:25:21Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:37:03Z" }, { "id": "amplify-js-datastore-2026-07-09", "display_name": "@amplify-js/datastore", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@amplify-js/datastore", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-2574", "osv_published_at": "2026-04-13T15:25:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:35:47Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:35:47Z", "osv_earliest_published_at": "2026-04-13T15:25:21Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:36:55Z" }, { "id": "pt-sc-logger-2026-07-09", "display_name": "pt-sc-logger", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pt-sc-logger", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.3", "1.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-2568", "osv_published_at": "2026-04-12T21:36:18Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:35:46Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:35:46Z", "osv_earliest_published_at": "2026-04-12T21:36:18Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:36:48Z" }, { "id": "mgcrae-pino-pretty-logger-2026-07-09", "display_name": "@mgcrae/pino-pretty-logger", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mgcrae/pino-pretty-logger", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.5" ], "osv_entries": [ { "osv_id": "MAL-2026-2421", "osv_published_at": "2026-04-02T11:28:24Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:35:44Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:35:44Z", "osv_earliest_published_at": "2026-04-02T11:28:24Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:36:41Z" }, { "id": "chai-as-chains-2026-07-09", "display_name": "chai-as-chains", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-chains", "ecosystem": "npm", "versions": [ "1.2.7", "1.2.8" ], "osv_entries": [ { "osv_id": "MAL-2026-2339", "osv_published_at": "2026-03-24T15:39:59Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:35:43Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:35:43Z", "osv_earliest_published_at": "2026-03-24T15:39:59Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:36:34Z" }, { "id": "not-remix-2026-07-09", "display_name": "not-remix", "campaign": null, "detection_source": "osv", "packages": [ { "package": "not-remix", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-1804", "osv_published_at": "2026-03-18T13:01:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:35:41Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:35:41Z", "osv_earliest_published_at": "2026-03-18T13:01:35Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:36:26Z" }, { "id": "pino-logger-utils-2026-07-09", "display_name": "pino-logger-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pino-logger-utils", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-1493", "osv_published_at": "2026-03-17T04:46:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:35:39Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:35:39Z", "osv_earliest_published_at": "2026-03-17T04:46:23Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:36:17Z" }, { "id": "chain-promised-await-2026-07-09", "display_name": "chain-promised-await", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chain-promised-await", "ecosystem": "npm", "versions": [ "1.3.5", "3.5.5" ], "osv_entries": [ { "osv_id": "MAL-2026-1320", "osv_published_at": "2026-03-10T08:24:44Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:35:37Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:35:37Z", "osv_earliest_published_at": "2026-03-10T08:24:44Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://app.safedep.io/community/malysis/01KKBDBQ4Z6DCXMMKNDFKQ4M1M", "ledger_commit_at": "2026-07-09T13:36:09Z" }, { "id": "testing-d3do-2026-07-09", "display_name": "testing-d3do", "campaign": null, "detection_source": "osv", "packages": [ { "package": "testing-d3do", "ecosystem": "npm", "versions": [ "99.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-10006", "osv_published_at": "2026-07-09T11:20:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:35:36Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:35:36Z", "osv_earliest_published_at": "2026-07-09T11:20:48Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:36:02Z" }, { "id": "example-nestjs-api-2026-07-09", "display_name": "example-nestjs-api", "campaign": null, "detection_source": "osv", "packages": [ { "package": "example-nestjs-api", "ecosystem": "npm", "versions": [ "99.9.9" ], "osv_entries": [ { "osv_id": "MAL-2025-47666", "osv_published_at": "2025-09-26T09:31:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:35:29Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:35:29Z", "osv_earliest_published_at": "2025-09-26T09:31:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:35:47Z" }, { "id": "elf-stats-sparkly-train-831-2026-07-09", "display_name": "elf-stats-sparkly-train-831", "campaign": null, "detection_source": "osv", "packages": [ { "package": "elf-stats-sparkly-train-831", "ecosystem": "npm", "versions": [ "1.0.3", "1.0.5", "1.0.7" ], "osv_entries": [ { "osv_id": "MAL-2025-192788", "osv_published_at": "2025-12-23T08:10:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:35:28Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:35:28Z", "osv_earliest_published_at": "2025-12-23T08:10:48Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:35:40Z" }, { "id": "proton-pack-2026-07-09", "display_name": "proton-pack", "campaign": null, "detection_source": "osv", "packages": [ { "package": "proton-pack", "ecosystem": "npm", "versions": [ "1.0.0", "99.99.9999", "99.999.9999", "99.9999.9999" ], "osv_entries": [ { "osv_id": "MAL-2023-1274", "osv_published_at": "2023-05-02T06:43:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:35:21Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:35:21Z", "osv_earliest_published_at": "2023-05-02T06:43:33Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:35:28Z" }, { "id": "proton-account-2026-07-09", "display_name": "proton-account", "campaign": null, "detection_source": "osv", "packages": [ { "package": "proton-account", "ecosystem": "npm", "versions": [ "99.99.99", "99.99.9999" ], "osv_entries": [ { "osv_id": "MAL-2023-1273", "osv_published_at": "2023-05-02T06:41:45Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:35:19Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:35:19Z", "osv_earliest_published_at": "2023-05-02T06:41:45Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:35:22Z" }, { "id": "scanvia-2026-07-09", "display_name": "scanvia", "campaign": null, "detection_source": "osv", "packages": [ { "package": "scanvia", "ecosystem": "pypi", "versions": [ "0.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-7467", "osv_published_at": "2026-07-07T11:50:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:31:17Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:31:17Z", "osv_earliest_published_at": "2026-07-07T11:50:07Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:33:30Z" }, { "id": "scan-checker-2026-07-09", "display_name": "scan-checker", "campaign": null, "detection_source": "osv", "packages": [ { "package": "scan-checker", "ecosystem": "pypi", "versions": [ "0.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7466", "osv_published_at": "2026-07-07T11:50:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:31:16Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:31:16Z", "osv_earliest_published_at": "2026-07-07T11:50:07Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:33:23Z" }, { "id": "quatre-2026-07-09", "display_name": "quatre", "campaign": null, "detection_source": "osv", "packages": [ { "package": "quatre", "ecosystem": "pypi", "versions": [ "3.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7465", "osv_published_at": "2026-07-07T11:50:04Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:31:15Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:31:15Z", "osv_earliest_published_at": "2026-07-07T11:50:04Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:33:16Z" }, { "id": "pygremlinbox-malware-network-indicators-2026-07-09", "display_name": "pygremlinbox-malware-network-indicators", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pygremlinbox-malware-network-indicators", "ecosystem": "pypi", "versions": [ "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7464", "osv_published_at": "2026-07-07T11:49:58Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:31:13Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:31:13Z", "osv_earliest_published_at": "2026-07-07T11:49:58Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:33:09Z" }, { "id": "pygremlinbox-malware-install-execution-2026-07-09", "display_name": "pygremlinbox-malware-install-execution", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pygremlinbox-malware-install-execution", "ecosystem": "pypi", "versions": [ "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7463", "osv_published_at": "2026-07-07T11:49:57Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:31:12Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:31:12Z", "osv_earliest_published_at": "2026-07-07T11:49:57Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:33:01Z" }, { "id": "pygremlinbox-malware-cryptomining-indicators-2026-07-09", "display_name": "pygremlinbox-malware-cryptomining-indicators", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pygremlinbox-malware-cryptomining-indicators", "ecosystem": "pypi", "versions": [ "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7462", "osv_published_at": "2026-07-07T11:49:57Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:31:11Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:31:11Z", "osv_earliest_published_at": "2026-07-07T11:49:57Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:32:51Z" }, { "id": "pygremlinbox-malware-credential-harvesting-2026-07-09", "display_name": "pygremlinbox-malware-credential-harvesting", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pygremlinbox-malware-credential-harvesting", "ecosystem": "pypi", "versions": [ "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7461", "osv_published_at": "2026-07-07T11:49:56Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:31:10Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:31:10Z", "osv_earliest_published_at": "2026-07-07T11:49:56Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:32:44Z" }, { "id": "pygremlinbox-malware-code-obfuscation-2026-07-09", "display_name": "pygremlinbox-malware-code-obfuscation", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pygremlinbox-malware-code-obfuscation", "ecosystem": "pypi", "versions": [ "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7460", "osv_published_at": "2026-07-07T11:49:56Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:31:09Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:31:09Z", "osv_earliest_published_at": "2026-07-07T11:49:56Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:32:37Z" }, { "id": "pygremlinbox-malware-c2-beacon-2026-07-09", "display_name": "pygremlinbox-malware-c2-beacon", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pygremlinbox-malware-c2-beacon", "ecosystem": "pypi", "versions": [ "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7459", "osv_published_at": "2026-07-07T11:49:55Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:31:08Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:31:08Z", "osv_earliest_published_at": "2026-07-07T11:49:55Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:32:24Z" }, { "id": "pycryptoshuffle-2026-07-09", "display_name": "pycryptoshuffle", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pycryptoshuffle", "ecosystem": "pypi", "versions": [ "1.0.6", "1.0.7", "1.0.8", "1.0.9", "1.1.0", "1.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-7458", "osv_published_at": "2026-07-07T11:49:54Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:31:06Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:31:06Z", "osv_earliest_published_at": "2026-07-07T11:49:54Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-23T08:30:32Z", "observed_at": "2026-07-09T13:31:06Z", "ingested_at": "2026-07-09T13:31:06Z", "source_published_at": "2026-07-07T11:49:54Z", "ledger_committed_at": "2026-07-23T08:30:32Z" }, { "id": "piirgg-2026-07-09", "display_name": "piirgg", "campaign": null, "detection_source": "osv", "packages": [ { "package": "piirgg", "ecosystem": "pypi", "versions": [ "0.2", "0.3", "0.4", "0.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7457", "osv_published_at": "2026-07-07T11:49:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:31:05Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:31:05Z", "osv_earliest_published_at": "2026-07-07T11:49:49Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:32:03Z" }, { "id": "notrandompacketname-2026-07-09", "display_name": "notrandompacketname", "campaign": null, "detection_source": "osv", "packages": [ { "package": "notrandompacketname", "ecosystem": "pypi", "versions": [ "0.1.10", "0.1.11", "0.1.12" ], "osv_entries": [ { "osv_id": "MAL-2026-7456", "osv_published_at": "2026-07-07T11:49:47Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:31:03Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:31:03Z", "osv_earliest_published_at": "2026-07-07T11:49:47Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:31:56Z" }, { "id": "myproject234-2026-07-09", "display_name": "myproject234", "campaign": null, "detection_source": "osv", "packages": [ { "package": "myproject234", "ecosystem": "pypi", "versions": [ "0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-7455", "osv_published_at": "2026-07-07T11:49:46Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:31:02Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:31:02Z", "osv_earliest_published_at": "2026-07-07T11:49:46Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:31:49Z" }, { "id": "cyberday26szymon-payments-2026-07-09", "display_name": "cyberday26szymon-payments", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cyberday26szymon-payments", "ecosystem": "pypi", "versions": [ "0.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-7454", "osv_published_at": "2026-07-07T11:49:30Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:31:01Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:31:01Z", "osv_earliest_published_at": "2026-07-07T11:49:30Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:31:42Z" }, { "id": "cyberday26szymon-logging-2026-07-09", "display_name": "cyberday26szymon-logging", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cyberday26szymon-logging", "ecosystem": "pypi", "versions": [ "0.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-7453", "osv_published_at": "2026-07-07T11:49:29Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:30:59Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:30:59Z", "osv_earliest_published_at": "2026-07-07T11:49:29Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:31:35Z" }, { "id": "cyberday26szymon-auth-2026-07-09", "display_name": "cyberday26szymon-auth", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cyberday26szymon-auth", "ecosystem": "pypi", "versions": [ "0.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-7452", "osv_published_at": "2026-07-07T11:49:29Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:30:58Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:30:58Z", "osv_earliest_published_at": "2026-07-07T11:49:29Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:31:18Z" }, { "id": "web3-py-checksum-2026-07-09", "display_name": "web3-py-checksum", "campaign": null, "detection_source": "osv", "packages": [ { "package": "web3-py-checksum", "ecosystem": "pypi", "versions": [ "1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-3411", "osv_published_at": "2026-05-10T09:11:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T13:30:56Z", "flagged_at": null, "confirmed_at": "2026-07-09T13:30:56Z", "osv_earliest_published_at": "2026-05-10T09:11:33Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T13:31:02Z" }, { "id": "tailwind-core-2026-07-09", "display_name": "tailwind-core", "campaign": null, "detection_source": "agent", "packages": [ { "package": "tailwind-core", "ecosystem": "npm", "versions": [ "0.0.0", "4.3.0", "4.3.1", "4.3.2" ], "osv_entries": [ { "osv_id": "MAL-2026-7026", "osv_published_at": "2026-07-09T02:51:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T04:43:09Z", "flagged_at": null, "confirmed_at": "2026-07-09T04:43:09Z", "osv_earliest_published_at": "2026-07-09T02:51:12Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-09T04:45:51Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-7026" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-7026", "ledger_commit_at": "2026-07-09T06:35:55Z" }, { "id": "animatecss-postcss-plugin-2026-07-09", "display_name": "animatecss-postcss-plugin", "campaign": null, "detection_source": "agent", "packages": [ { "package": "animatecss-postcss-plugin", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T04:42:40Z", "flagged_at": null, "confirmed_at": "2026-07-09T04:42:40Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-09T04:44:55Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-6495" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-6495", "ledger_commit_at": "2026-07-09T04:44:55Z" }, { "id": "rapidsearch-2026-07-09", "display_name": "rapidsearch", "campaign": null, "detection_source": "agent", "packages": [ { "package": "rapidsearch", "ecosystem": "npm", "versions": [ "1.1.0" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T04:42:37Z", "flagged_at": null, "confirmed_at": "2026-07-09T04:42:37Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-09T04:44:43Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-6388" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-6388", "ledger_commit_at": "2026-07-09T04:44:43Z" }, { "id": "server-parket-2026-07-09", "display_name": "server-parket", "campaign": null, "detection_source": "agent", "packages": [ { "package": "server-parket", "ecosystem": "npm", "versions": [ "3.9.1" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T04:42:34Z", "flagged_at": null, "confirmed_at": "2026-07-09T04:42:34Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-09T04:44:32Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-6335" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-6335", "ledger_commit_at": "2026-07-09T04:44:32Z" }, { "id": "mjs-eslint-service-2026-07-09", "display_name": "mjs-eslint-service", "campaign": null, "detection_source": "agent", "packages": [ { "package": "mjs-eslint-service", "ecosystem": "npm", "versions": [ "7.0.5" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T04:42:31Z", "flagged_at": null, "confirmed_at": "2026-07-09T04:42:31Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-09T04:44:20Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-6333" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-6333", "ledger_commit_at": "2026-07-09T04:44:20Z" }, { "id": "nullzero-urlcat-2026-07-09", "display_name": "@nullzero/urlcat", "campaign": null, "detection_source": "agent", "packages": [ { "package": "@nullzero/urlcat", "ecosystem": "npm", "versions": [ "1.4.0", "1.4.1", "1.4.2", "1.4.3", "1.4.4", "1.4.5" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T04:42:28Z", "flagged_at": null, "confirmed_at": "2026-07-09T04:42:28Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-09T04:44:09Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-6309" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-6309", "ledger_commit_at": "2026-07-09T04:44:09Z" }, { "id": "zod-pino-2026-07-09", "display_name": "zod-pino", "campaign": null, "detection_source": "agent", "packages": [ { "package": "zod-pino", "ecosystem": "npm", "versions": [ "1.0.122", "1.0.123", "1.0.124", "1.0.125", "1.0.126", "1.0.127" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T04:42:24Z", "flagged_at": null, "confirmed_at": "2026-07-09T04:42:24Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-09T04:43:58Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-6273" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-6273", "ledger_commit_at": "2026-07-09T04:43:58Z" }, { "id": "antoncarlos1-nodelamp-2026-07-09", "display_name": "@antoncarlos1/nodelamp", "campaign": null, "detection_source": "agent", "packages": [ { "package": "@antoncarlos1/nodelamp", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T04:42:20Z", "flagged_at": null, "confirmed_at": "2026-07-09T04:42:20Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-09T04:43:47Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-6209" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-6209", "ledger_commit_at": "2026-07-09T04:43:47Z" }, { "id": "node-vfs-polyfill-2026-07-09", "display_name": "node-vfs-polyfill", "campaign": null, "detection_source": "agent", "packages": [ { "package": "node-vfs-polyfill", "ecosystem": "npm", "versions": [ "2.0.5", "2.0.7" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T04:42:17Z", "flagged_at": null, "confirmed_at": "2026-07-09T04:42:17Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-09T04:43:36Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-6143" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-6143", "ledger_commit_at": "2026-07-09T04:43:36Z" }, { "id": "chai-smart-assert-2026-07-09", "display_name": "chai-smart-assert", "campaign": null, "detection_source": "agent", "packages": [ { "package": "chai-smart-assert", "ecosystem": "npm", "versions": [ "1.1.5", "1.1.6", "1.1.7", "1.1.8", "1.1.9" ], "osv_entries": [ { "osv_id": "MAL-2026-5843", "osv_published_at": "2026-06-15T23:33:01Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T04:42:14Z", "flagged_at": null, "confirmed_at": "2026-07-09T04:42:14Z", "osv_earliest_published_at": "2026-06-15T23:33:01Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-09T04:43:24Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-5843" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-5843", "ledger_commit_at": "2026-07-21T23:20:46Z" }, { "id": "ioredis-typed-2026-07-09", "display_name": "ioredis-typed", "campaign": null, "detection_source": "agent", "packages": [ { "package": "ioredis-typed", "ecosystem": "npm", "versions": [ "1.0.6" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T04:42:10Z", "flagged_at": null, "confirmed_at": "2026-07-09T04:42:10Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-09T04:43:12Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-5676" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-5676", "ledger_commit_at": "2026-07-09T04:43:12Z" }, { "id": "sass-formats-2026-07-09", "display_name": "sass-formats", "campaign": null, "detection_source": "agent", "packages": [ { "package": "sass-formats", "ecosystem": "npm", "versions": [ "1.0.2", "1.0.4", "1.0.5" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T04:42:07Z", "flagged_at": null, "confirmed_at": "2026-07-09T04:42:07Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-09T04:43:01Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-5629" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-5629", "ledger_commit_at": "2026-07-09T04:43:01Z" }, { "id": "xnder-sdk-2026-07-09", "display_name": "xnder-sdk", "campaign": null, "detection_source": "agent", "packages": [ { "package": "xnder-sdk", "ecosystem": "npm", "versions": [ "11.0.2", "11.0.3" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T04:42:03Z", "flagged_at": null, "confirmed_at": "2026-07-09T04:42:03Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-09T04:42:50Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-5491" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-5491", "ledger_commit_at": "2026-07-09T04:42:50Z" }, { "id": "ulid-os-2026-07-09", "display_name": "ulid-os", "campaign": null, "detection_source": "agent", "packages": [ { "package": "ulid-os", "ecosystem": "npm", "versions": [ "3.0.2" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T04:42:00Z", "flagged_at": null, "confirmed_at": "2026-07-09T04:42:00Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-09T04:42:38Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-5268" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-5268", "ledger_commit_at": "2026-07-09T04:42:38Z" }, { "id": "emcd-vue-loans-2026-07-09", "display_name": "@emcd-vue/loans", "campaign": null, "detection_source": "agent", "packages": [ { "package": "@emcd-vue/loans", "ecosystem": "npm", "versions": [ "7.1.7", "7.1.8", "7.1.9", "7.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5165", "osv_published_at": "2026-06-01T07:05:43Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T04:41:57Z", "flagged_at": null, "confirmed_at": "2026-07-09T04:41:57Z", "osv_earliest_published_at": "2026-06-01T07:05:43Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-09T04:42:27Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-5165" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-5165", "ledger_commit_at": "2026-07-09T19:01:10Z" }, { "id": "emcd-vue-b2b-pay-form-2026-07-09", "display_name": "@emcd-vue/b2b-pay-form", "campaign": null, "detection_source": "agent", "packages": [ { "package": "@emcd-vue/b2b-pay-form", "ecosystem": "npm", "versions": [ "5.7.3", "5.7.4", "5.7.5", "5.8.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5164", "osv_published_at": "2026-06-01T07:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T04:41:53Z", "flagged_at": null, "confirmed_at": "2026-07-09T04:41:53Z", "osv_earliest_published_at": "2026-06-01T07:00:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-09T04:42:15Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-5164" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-5164", "ledger_commit_at": "2026-07-09T19:01:03Z" }, { "id": "unemail-2026-07-09", "display_name": "unemail", "campaign": null, "detection_source": "agent", "packages": [ { "package": "unemail", "ecosystem": "npm", "versions": [ "0.3.1", "0.5.0" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T04:41:49Z", "flagged_at": null, "confirmed_at": "2026-07-09T04:41:49Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-09T04:42:04Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2025-191440" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2025-191440", "ledger_commit_at": "2026-07-09T04:42:04Z" }, { "id": "nitroping-2026-07-09", "display_name": "nitroping", "campaign": null, "detection_source": "agent", "packages": [ { "package": "nitroping", "ecosystem": "npm", "versions": [ "0.1.1", "0.2.10", "0.2.11", "0.2.12", "0.2.13", "0.2.3", "0.2.4", "0.2.5", "0.2.6", "0.2.7", "0.2.8", "0.2.9" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T04:41:45Z", "flagged_at": null, "confirmed_at": "2026-07-09T04:41:45Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-09T04:41:53Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2025-191134" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2025-191134", "ledger_commit_at": "2026-07-09T04:41:53Z" }, { "id": "none123s-2026-07-09", "display_name": "none123s", "campaign": null, "detection_source": "osv", "packages": [ { "package": "none123s", "ecosystem": "npm", "versions": [ "0.1.0", "0.1.1", "0.1.2", "0.1.3", "0.1.4", "0.1.5", "0.1.6", "0.1.7", "0.1.8", "0.1.9", "1.1.1", "1.1.2", "1.1.3", "1.1.4", "1.1.5", "1.1.6", "1.1.7" ], "osv_entries": [ { "osv_id": "MAL-2026-7024", "osv_published_at": "2026-07-08T21:41:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:54:49Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:54:49Z", "osv_earliest_published_at": "2026-07-08T21:41:49Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:48:56Z" }, { "id": "tslint-conf-2026-07-09", "display_name": "tslint-conf", "campaign": null, "detection_source": "osv", "packages": [ { "package": "tslint-conf", "ecosystem": "npm", "versions": [ "7.2.1" ], "osv_entries": [ { "osv_id": "MAL-2026-7022", "osv_published_at": "2026-07-08T21:15:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:54:48Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:54:48Z", "osv_earliest_published_at": "2026-07-08T21:15:42Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:58:48Z" }, { "id": "vite-js-ui-2026-07-09", "display_name": "@vite-js/ui", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@vite-js/ui", "ecosystem": "npm", "versions": [ "7.15.10", "7.15.16" ], "osv_entries": [ { "osv_id": "MAL-2026-7021", "osv_published_at": "2026-07-08T20:37:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:53:55Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:53:55Z", "osv_earliest_published_at": "2026-07-08T20:37:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T04:41:45Z" }, { "id": "vite-json-pwa-2026-07-09", "display_name": "vite-json-pwa", "campaign": null, "detection_source": "osv", "packages": [ { "package": "vite-json-pwa", "ecosystem": "npm", "versions": [ "1.1.1", "1.1.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6969", "osv_published_at": "2026-07-08T08:21:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:53:53Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:53:53Z", "osv_earliest_published_at": "2026-07-08T08:21:06Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:14:21Z" }, { "id": "whs4-npm-2026-07-09", "display_name": "whs4_npm", "campaign": null, "detection_source": "osv", "packages": [ { "package": "whs4_npm", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6951", "osv_published_at": "2026-07-07T16:19:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:53:51Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:53:51Z", "osv_earliest_published_at": "2026-07-07T16:19:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:58:20Z" }, { "id": "typescript-base58-2026-07-09", "display_name": "typescript-base58", "campaign": null, "detection_source": "osv", "packages": [ { "package": "typescript-base58", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6925", "osv_published_at": "2026-07-07T15:06:09Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:53:50Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:53:50Z", "osv_earliest_published_at": "2026-07-07T15:06:09Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:58:14Z" }, { "id": "solana-address-codec-2026-07-09", "display_name": "solana-address-codec", "campaign": null, "detection_source": "osv", "packages": [ { "package": "solana-address-codec", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6924", "osv_published_at": "2026-07-07T15:06:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:53:49Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:53:49Z", "osv_earliest_published_at": "2026-07-07T15:06:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:58:06Z" }, { "id": "crypto-base58-2026-07-09", "display_name": "crypto-base58", "campaign": null, "detection_source": "osv", "packages": [ { "package": "crypto-base58", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-6920", "osv_published_at": "2026-07-07T15:06:09Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:53:45Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:53:45Z", "osv_earliest_published_at": "2026-07-07T15:06:09Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:57:46Z" }, { "id": "express-deflect-2026-07-09", "display_name": "express-deflect", "campaign": null, "detection_source": "osv", "packages": [ { "package": "express-deflect", "ecosystem": "npm", "versions": [ "1.6.10" ], "osv_entries": [ { "osv_id": "MAL-2026-6908", "osv_published_at": "2026-07-07T06:27:27Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:53:42Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:53:42Z", "osv_earliest_published_at": "2026-07-07T06:27:27Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:57:33Z" }, { "id": "node-cloud-create-2026-07-09", "display_name": "@node-cloud/create", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@node-cloud/create", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2", "1.0.3", "1.0.5" ], "osv_entries": [ { "osv_id": "MAL-2026-6741", "osv_published_at": "2026-07-03T15:59:09Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:52:28Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:52:28Z", "osv_earliest_published_at": "2026-07-03T15:59:09Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:57:10Z" }, { "id": "thirdwebb-2026-07-09", "display_name": "thirdwebb", "campaign": null, "detection_source": "osv", "packages": [ { "package": "thirdwebb", "ecosystem": "npm", "versions": [ "0.0.8" ], "osv_entries": [ { "osv_id": "MAL-2026-6694", "osv_published_at": "2026-06-30T00:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:52:24Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:52:24Z", "osv_earliest_published_at": "2026-06-30T00:00:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://safedep.io/defi-infostealer-fake-arbitrage-bot-npm/", "ledger_commit_at": "2026-07-09T00:56:50Z" }, { "id": "thirdwb-2026-07-09", "display_name": "thirdwb", "campaign": null, "detection_source": "osv", "packages": [ { "package": "thirdwb", "ecosystem": "npm", "versions": [ "0.0.8" ], "osv_entries": [ { "osv_id": "MAL-2026-6693", "osv_published_at": "2026-06-30T00:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:52:23Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:52:23Z", "osv_earliest_published_at": "2026-06-30T00:00:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://safedep.io/defi-infostealer-fake-arbitrage-bot-npm/", "ledger_commit_at": "2026-07-09T00:56:44Z" }, { "id": "ulid-xyz-2026-07-09", "display_name": "ulid-xyz", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ulid-xyz", "ecosystem": "npm", "versions": [ "2.12.1", "2.12.2", "2.12.3", "3.1.0", "3.2.0", "3.2.1", "3.2.2", "3.2.3", "3.2.4" ], "osv_entries": [ { "osv_id": "MAL-2026-6672", "osv_published_at": "2026-06-29T00:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:52:16Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:52:16Z", "osv_earliest_published_at": "2026-06-29T00:00:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:08:53Z" }, { "id": "maplibre-gl-vue3-2026-07-09", "display_name": "maplibre-gl-vue3", "campaign": null, "detection_source": "osv", "packages": [ { "package": "maplibre-gl-vue3", "ecosystem": "npm", "versions": [ "5.24.1", "5.24.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6592", "osv_published_at": "2026-06-29T09:11:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:52:10Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:52:10Z", "osv_earliest_published_at": "2026-06-29T09:11:39Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:55:58Z" }, { "id": "react-editable-calendar-2026-07-09", "display_name": "react-editable-calendar", "campaign": null, "detection_source": "osv", "packages": [ { "package": "react-editable-calendar", "ecosystem": "npm", "versions": [ "0.1.0", "0.1.1", "0.1.2", "0.1.3", "0.1.4", "0.1.6" ], "osv_entries": [ { "osv_id": "MAL-2026-6547", "osv_published_at": "2026-06-27T09:55:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:51:59Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:51:59Z", "osv_earliest_published_at": "2026-06-27T09:55:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:55:13Z" }, { "id": "pump-laserstream-parser-2026-07-09", "display_name": "pump-laserstream-parser", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pump-laserstream-parser", "ecosystem": "npm", "versions": [ "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6506", "osv_published_at": "2026-06-26T05:11:13Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:51:52Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:51:52Z", "osv_earliest_published_at": "2026-06-26T05:11:13Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:54:39Z" }, { "id": "multer-express-2026-07-09", "display_name": "multer-express", "campaign": null, "detection_source": "osv", "packages": [ { "package": "multer-express", "ecosystem": "npm", "versions": [ "2.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6387", "osv_published_at": "2026-06-24T10:23:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:51:50Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:51:50Z", "osv_earliest_published_at": "2026-06-24T10:23:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:54:29Z" }, { "id": "ts-numbering-2026-07-09", "display_name": "ts-numbering", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ts-numbering", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6288", "osv_published_at": "2026-06-23T12:05:04Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:51:48Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:51:48Z", "osv_earliest_published_at": "2026-06-23T12:05:04Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:54:22Z" }, { "id": "poly-utils-2026-07-09", "display_name": "poly-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "poly-utils", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6287", "osv_published_at": "2026-06-23T12:15:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:51:47Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:51:47Z", "osv_earliest_published_at": "2026-06-23T12:15:37Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:54:15Z" }, { "id": "ts-wross-2026-07-09", "display_name": "ts-wross", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ts-wross", "ecosystem": "npm", "versions": [ "0.0.7" ], "osv_entries": [ { "osv_id": "MAL-2026-6278", "osv_published_at": "2026-06-23T06:22:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:51:46Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:51:46Z", "osv_earliest_published_at": "2026-06-23T06:22:06Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:54:08Z" }, { "id": "node-fetch-utils-2026-07-09", "display_name": "node-fetch-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "node-fetch-utils", "ecosystem": "npm", "versions": [ "1.3.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6271", "osv_published_at": "2026-06-22T19:54:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:51:45Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:51:45Z", "osv_earliest_published_at": "2026-06-22T19:54:51Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:54:02Z" }, { "id": "ts-big-ecro-2026-07-09", "display_name": "ts-big-ecro", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ts-big-ecro", "ecosystem": "npm", "versions": [ "3.8.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6199", "osv_published_at": "2026-06-19T05:20:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:51:43Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:51:43Z", "osv_earliest_published_at": "2026-06-19T05:20:12Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:53:55Z" }, { "id": "new-ecro-1-2026-07-09", "display_name": "new-ecro-1", "campaign": null, "detection_source": "osv", "packages": [ { "package": "new-ecro-1", "ecosystem": "npm", "versions": [ "0.2.9" ], "osv_entries": [ { "osv_id": "MAL-2026-6198", "osv_published_at": "2026-06-19T05:20:04Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:51:42Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:51:42Z", "osv_earliest_published_at": "2026-06-19T05:20:04Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:53:49Z" }, { "id": "intquery-2026-07-09", "display_name": "intquery", "campaign": null, "detection_source": "osv", "packages": [ { "package": "intquery", "ecosystem": "npm", "versions": [ "1.1.4", "1.1.5" ], "osv_entries": [ { "osv_id": "MAL-2026-6113", "osv_published_at": "2026-06-18T04:05:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:51:41Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:51:41Z", "osv_earliest_published_at": "2026-06-18T04:05:21Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:53:42Z" }, { "id": "rafaelsene01-agent-flow-2026-07-09", "display_name": "@rafaelsene01/agent-flow", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@rafaelsene01/agent-flow", "ecosystem": "npm", "versions": [ "1.0.2", "1.0.3", "1.0.4", "1.2.1", "1.2.2", "1.2.3", "1.3.0", "1.4.0", "1.5.0", "1.5.1", "1.7.0", "1.9.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6111", "osv_published_at": "2026-06-18T05:19:16Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:51:40Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:51:40Z", "osv_earliest_published_at": "2026-06-18T05:19:16Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:53:36Z" }, { "id": "mci-sdk-2026-07-09", "display_name": "mci-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mci-sdk", "ecosystem": "npm", "versions": [ "1.2.11", "1.2.12", "1.2.13", "1.2.9" ], "osv_entries": [ { "osv_id": "MAL-2026-5931", "osv_published_at": "2026-06-16T22:17:46Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:51:34Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:51:34Z", "osv_earliest_published_at": "2026-06-16T22:17:46Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:03:35Z" }, { "id": "middleware-jwt-2026-07-09", "display_name": "middleware-jwt", "campaign": null, "detection_source": "osv", "packages": [ { "package": "middleware-jwt", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5888", "osv_published_at": "2026-06-16T14:35:45Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:51:33Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:51:33Z", "osv_earliest_published_at": "2026-06-16T14:35:45Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:53:13Z" }, { "id": "redis-xyz-2026-07-09", "display_name": "redis-xyz", "campaign": null, "detection_source": "osv", "packages": [ { "package": "redis-xyz", "ecosystem": "npm", "versions": [ "1.1.4" ], "osv_entries": [ { "osv_id": "MAL-2026-5883", "osv_published_at": "2026-06-16T11:58:32Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:51:32Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:51:32Z", "osv_earliest_published_at": "2026-06-16T11:58:32Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:53:06Z" }, { "id": "redis-type-os-2026-07-09", "display_name": "redis-type-os", "campaign": null, "detection_source": "osv", "packages": [ { "package": "redis-type-os", "ecosystem": "npm", "versions": [ "1.0.10", "1.0.3", "1.0.6", "1.0.7" ], "osv_entries": [ { "osv_id": "MAL-2026-5882", "osv_published_at": "2026-06-16T11:54:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:51:31Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:51:31Z", "osv_earliest_published_at": "2026-06-16T11:54:37Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:52:59Z" }, { "id": "obfus-jsxy-2026-07-09", "display_name": "obfus-jsxy", "campaign": null, "detection_source": "osv", "packages": [ { "package": "obfus-jsxy", "ecosystem": "npm", "versions": [ "3.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5881", "osv_published_at": "2026-06-16T12:02:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:51:29Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:51:29Z", "osv_earliest_published_at": "2026-06-16T12:02:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:52:53Z" }, { "id": "ioredis-os-2026-07-09", "display_name": "ioredis-os", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ioredis-os", "ecosystem": "npm", "versions": [ "5.10.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5879", "osv_published_at": "2026-06-16T11:54:56Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:51:28Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:51:28Z", "osv_earliest_published_at": "2026-06-16T11:54:56Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:52:46Z" }, { "id": "rbac-auth-2026-07-09", "display_name": "rbac-auth", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rbac-auth", "ecosystem": "npm", "versions": [ "1.0.6" ], "osv_entries": [ { "osv_id": "MAL-2026-5873", "osv_published_at": "2026-06-16T06:09:11Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:51:27Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:51:27Z", "osv_earliest_published_at": "2026-06-16T06:09:11Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:52:40Z" }, { "id": "epm-service-module-v2-2026-07-09", "display_name": "epm-service-module-v2", "campaign": null, "detection_source": "osv", "packages": [ { "package": "epm-service-module-v2", "ecosystem": "npm", "versions": [ "1.0.1", "1.0.2", "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-5851", "osv_published_at": "2026-06-16T00:05:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:51:26Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:51:26Z", "osv_earliest_published_at": "2026-06-16T00:05:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:52:33Z" }, { "id": "prettier-v1-2026-07-09", "display_name": "prettier_v1", "campaign": null, "detection_source": "osv", "packages": [ { "package": "prettier_v1", "ecosystem": "npm", "versions": [ "3.8.5" ], "osv_entries": [ { "osv_id": "MAL-2026-5845", "osv_published_at": "2026-06-15T23:45:43Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:51:25Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:51:25Z", "osv_earliest_published_at": "2026-06-15T23:45:43Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:52:27Z" }, { "id": "postcss-minify-selector-2026-07-09", "display_name": "postcss-minify-selector", "campaign": null, "detection_source": "osv", "packages": [ { "package": "postcss-minify-selector", "ecosystem": "npm", "versions": [ "0.1.10", "0.1.11", "0.1.4", "0.1.5", "0.1.6", "0.1.7", "0.1.8", "0.1.9" ], "osv_entries": [ { "osv_id": "MAL-2026-5837", "osv_published_at": "2026-06-15T20:17:18Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:51:23Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:51:23Z", "osv_earliest_published_at": "2026-06-15T20:17:18Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:52:20Z" }, { "id": "mddriver-2026-07-09", "display_name": "mddriver", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mddriver", "ecosystem": "npm", "versions": [ "1.8.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5791", "osv_published_at": "2026-06-15T16:31:14Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:51:21Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:51:21Z", "osv_earliest_published_at": "2026-06-15T16:31:14Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:52:14Z" }, { "id": "claude-cup-2026-07-09", "display_name": "claude-cup", "campaign": null, "detection_source": "osv", "packages": [ { "package": "claude-cup", "ecosystem": "npm", "versions": [ "0.2.1", "0.2.5", "0.2.6", "0.3.2", "0.5.0", "0.7.1", "0.8.0", "0.8.2", "0.8.5", "0.8.6", "0.8.8", "0.8.9", "0.9.0", "0.9.1", "0.9.2", "0.9.3", "0.9.4", "0.9.5", "0.9.7", "0.9.8" ], "osv_entries": [ { "osv_id": "MAL-2026-5789", "osv_published_at": "2026-06-15T16:45:04Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:51:20Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:51:20Z", "osv_earliest_published_at": "2026-06-15T16:45:04Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-10T00:43:27Z" }, { "id": "mailconfirmer-2026-07-09", "display_name": "mailconfirmer", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mailconfirmer", "ecosystem": "npm", "versions": [ "3.2.39", "3.3.15", "3.3.17", "3.3.18", "3.3.20", "3.3.23", "3.3.24", "3.3.25", "3.3.28", "3.3.30", "3.3.32", "3.3.35", "3.3.36", "3.3.37", "3.3.38", "3.3.39", "3.3.46", "3.3.53" ], "osv_entries": [ { "osv_id": "MAL-2026-5750", "osv_published_at": "2026-06-13T21:10:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:51:16Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:51:16Z", "osv_earliest_published_at": "2026-06-13T21:10:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:51:59Z" }, { "id": "warp-dependency-2026-07-09", "display_name": "warp-dependency", "campaign": null, "detection_source": "osv", "packages": [ { "package": "warp-dependency", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5724", "osv_published_at": "2026-06-13T02:10:04Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:51:10Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:51:10Z", "osv_earliest_published_at": "2026-06-13T02:10:04Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:51:51Z" }, { "id": "ttspc-server-sample-2026-07-09", "display_name": "ttspc-server-sample", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ttspc-server-sample", "ecosystem": "npm", "versions": [ "9.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5707", "osv_published_at": "2026-06-12T19:03:04Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:51:08Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:51:08Z", "osv_earliest_published_at": "2026-06-12T19:03:04Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:51:44Z" }, { "id": "coral-wraith-2026-07-09", "display_name": "coral-wraith", "campaign": null, "detection_source": "osv", "packages": [ { "package": "coral-wraith", "ecosystem": "npm", "versions": [ "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5682", "osv_published_at": "2026-06-12T01:41:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:51:07Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:51:07Z", "osv_earliest_published_at": "2026-06-12T01:41:21Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:51:38Z" }, { "id": "internallib-v557-2026-07-09", "display_name": "internallib_v557", "campaign": null, "detection_source": "osv", "packages": [ { "package": "internallib_v557", "ecosystem": "npm", "versions": [ "1.0.17", "1.0.20" ], "osv_entries": [ { "osv_id": "MAL-2026-5678", "osv_published_at": "2026-06-11T21:57:47Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:51:03Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:51:03Z", "osv_earliest_published_at": "2026-06-11T21:57:47Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:51:30Z" }, { "id": "worker-build-2026-07-09", "display_name": "worker-build", "campaign": null, "detection_source": "osv", "packages": [ { "package": "worker-build", "ecosystem": "npm", "versions": [ "9.0.0", "9.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5677", "osv_published_at": "2026-06-11T19:15:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:51:00Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:51:00Z", "osv_earliest_published_at": "2026-06-11T19:15:51Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:51:24Z" }, { "id": "ioredis-orm-2026-07-09", "display_name": "ioredis-orm", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ioredis-orm", "ecosystem": "npm", "versions": [ "5.11.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5675", "osv_published_at": "2026-06-11T16:23:28Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:50:59Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:50:59Z", "osv_earliest_published_at": "2026-06-11T16:23:28Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:51:16Z" }, { "id": "downlynpm-2026-07-09", "display_name": "downlynpm", "campaign": null, "detection_source": "osv", "packages": [ { "package": "downlynpm", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5666", "osv_published_at": "2026-06-11T14:09:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:50:58Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:50:58Z", "osv_earliest_published_at": "2026-06-11T14:09:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:51:10Z" }, { "id": "routing-controls-2026-07-09", "display_name": "routing-controls", "campaign": null, "detection_source": "osv", "packages": [ { "package": "routing-controls", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5635", "osv_published_at": "2026-06-11T09:44:59Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:50:56Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:50:56Z", "osv_earliest_published_at": "2026-06-11T09:44:59Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:51:03Z" }, { "id": "forge-jsx2-2026-07-09", "display_name": "forge-jsx2", "campaign": null, "detection_source": "osv", "packages": [ { "package": "forge-jsx2", "ecosystem": "npm", "versions": [ "1.0.123", "1.0.125" ], "osv_entries": [ { "osv_id": "MAL-2026-5568", "osv_published_at": "2026-06-11T04:47:43Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:50:55Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:50:55Z", "osv_earliest_published_at": "2026-06-11T04:47:43Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:50:57Z" }, { "id": "sqlite-node-createsql-2026-07-09", "display_name": "@sqlite-node/createsql", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@sqlite-node/createsql", "ecosystem": "npm", "versions": [ "1.0.1", "1.1.7" ], "osv_entries": [ { "osv_id": "MAL-2026-5396", "osv_published_at": "2026-06-09T15:59:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:50:13Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:50:13Z", "osv_earliest_published_at": "2026-06-09T15:59:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:01:42Z" }, { "id": "sql-access-nodesql-2026-07-09", "display_name": "@sql-access/nodesql", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@sql-access/nodesql", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-5394", "osv_published_at": "2026-06-09T15:58:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:49:03Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:49:03Z", "osv_earliest_published_at": "2026-06-09T15:58:52Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:50:35Z" }, { "id": "enquriers-2026-07-09", "display_name": "enquriers", "campaign": null, "detection_source": "osv", "packages": [ { "package": "enquriers", "ecosystem": "npm", "versions": [ "2.4.1", "2.4.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5384", "osv_published_at": "2026-06-09T15:10:13Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:49:01Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:49:01Z", "osv_earliest_published_at": "2026-06-09T15:10:13Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:50:28Z" }, { "id": "doaction-auth-2026-07-09", "display_name": "@doaction/auth", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@doaction/auth", "ecosystem": "npm", "versions": [ "9.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-5369", "osv_published_at": "2026-06-09T14:17:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:48:58Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:48:58Z", "osv_earliest_published_at": "2026-06-09T14:17:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:50:15Z" }, { "id": "cookie-parser-legacy-2026-07-09", "display_name": "cookie-parser-legacy", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cookie-parser-legacy", "ecosystem": "npm", "versions": [ "1.5.1", "1.5.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5346", "osv_published_at": "2026-06-09T11:19:47Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:48:57Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:48:57Z", "osv_earliest_published_at": "2026-06-09T11:19:47Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:50:09Z" }, { "id": "progerss-cli-2026-07-09", "display_name": "progerss-cli", "campaign": null, "detection_source": "osv", "packages": [ { "package": "progerss-cli", "ecosystem": "npm", "versions": [ "3.12.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5343", "osv_published_at": "2026-06-09T15:10:13Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:48:55Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:48:55Z", "osv_earliest_published_at": "2026-06-09T15:10:13Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:50:02Z" }, { "id": "kecak256-2026-07-09", "display_name": "kecak256", "campaign": null, "detection_source": "osv", "packages": [ { "package": "kecak256", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2", "1.0.5" ], "osv_entries": [ { "osv_id": "MAL-2026-5342", "osv_published_at": "2026-06-09T15:16:44Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:48:54Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:48:54Z", "osv_earliest_published_at": "2026-06-09T15:16:44Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:49:56Z" }, { "id": "nodemon-lint-2026-07-09", "display_name": "nodemon-lint", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nodemon-lint", "ecosystem": "npm", "versions": [ "3.1.15" ], "osv_entries": [ { "osv_id": "MAL-2026-5309", "osv_published_at": "2026-06-08T09:27:28Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:48:53Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:48:53Z", "osv_earliest_published_at": "2026-06-08T09:27:28Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:49:49Z" }, { "id": "nodemon-copack-2026-07-09", "display_name": "nodemon-copack", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nodemon-copack", "ecosystem": "npm", "versions": [ "3.1.15", "3.1.16" ], "osv_entries": [ { "osv_id": "MAL-2026-5308", "osv_published_at": "2026-06-08T09:00:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:48:52Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:48:52Z", "osv_earliest_published_at": "2026-06-08T09:00:21Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T19:01:21Z" }, { "id": "classwind-utils-2026-07-09", "display_name": "classwind-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "classwind-utils", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5307", "osv_published_at": "2026-06-08T09:36:44Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:48:50Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:48:50Z", "osv_earliest_published_at": "2026-06-08T09:36:44Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:49:35Z" }, { "id": "autotel-terminal-2026-07-09", "display_name": "autotel-terminal", "campaign": null, "detection_source": "osv", "packages": [ { "package": "autotel-terminal", "ecosystem": "npm", "versions": [ "22.0.0", "22.0.1", "23.0.0", "23.0.1", "23.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5186", "osv_published_at": "2026-06-04T18:54:09Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:48:05Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:48:05Z", "osv_earliest_published_at": "2026-06-04T18:54:09Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:48:07Z" }, { "id": "emcd-vue-auth-2026-07-09", "display_name": "@emcd-vue/auth", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@emcd-vue/auth", "ecosystem": "npm", "versions": [ "6.4.8", "6.4.9", "7.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5163", "osv_published_at": "2026-06-01T07:04:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:47:12Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:47:12Z", "osv_earliest_published_at": "2026-06-01T07:04:12Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://safedep.io/oob-moika-tech-dependency-confusion-campaign/", "ledger_commit_at": "2026-07-09T00:47:40Z" }, { "id": "buffer-utilities-2026-07-09", "display_name": "buffer-utilities", "campaign": null, "detection_source": "osv", "packages": [ { "package": "buffer-utilities", "ecosystem": "npm", "versions": [ "1.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5087", "osv_published_at": "2026-05-30T09:02:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:47:11Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:47:11Z", "osv_earliest_published_at": "2026-05-30T09:02:03Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:47:33Z" }, { "id": "vxui-react-2026-07-09", "display_name": "vxui-react", "campaign": null, "detection_source": "osv", "packages": [ { "package": "vxui-react", "ecosystem": "npm", "versions": [ "1.3.10", "1.3.11", "1.3.12", "1.3.13", "1.3.5", "1.3.6", "1.3.7", "1.3.9", "1.4.0", "1.5.0", "1.5.1", "1.5.2" ], "osv_entries": [ { "osv_id": "MAL-2026-4793", "osv_published_at": "2026-05-26T08:16:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:47:09Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:47:09Z", "osv_earliest_published_at": "2026-05-26T08:16:35Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:47:27Z" }, { "id": "common-tg-service-2026-07-09", "display_name": "common-tg-service", "campaign": null, "detection_source": "osv", "packages": [ { "package": "common-tg-service", "ecosystem": "npm", "versions": [ "1.3.222", "1.3.223", "1.3.224", "1.3.225", "1.3.227", "1.3.228", "1.3.229", "1.3.230", "1.3.231", "1.3.232", "1.3.233", "1.3.234", "1.3.235", "1.3.236", "1.3.237", "1.3.238", "1.3.239" ], "osv_entries": [ { "osv_id": "MAL-2026-3288", "osv_published_at": "2026-05-02T08:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:47:02Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:47:02Z", "osv_earliest_published_at": "2026-05-02T08:00:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://safedep.io/malicious-common-tg-service-npm-telegram-hijacking-framework/", "ledger_commit_at": "2026-07-10T00:41:19Z" }, { "id": "ecinc-cloud-moaxmpp-2026-07-09", "display_name": "ecinc-cloud-moaxmpp", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ecinc-cloud-moaxmpp", "ecosystem": "npm", "versions": [ "9.7.1", "9.7.2" ], "osv_entries": [ { "osv_id": "MAL-2025-6214", "osv_published_at": "2025-07-15T09:15:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:46:56Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:46:56Z", "osv_earliest_published_at": "2025-07-15T09:15:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://platform.safedep.io/community/malysis/01K01T6C4JN4Q19HD1PAB151RZ", "ledger_commit_at": "2026-07-09T00:47:03Z" }, { "id": "red-bull-venue-tools-2026-07-09", "display_name": "red-bull-venue-tools", "campaign": null, "detection_source": "osv", "packages": [ { "package": "red-bull-venue-tools", "ecosystem": "npm", "versions": [ "19.2.1" ], "osv_entries": [ { "osv_id": "MAL-2025-5455", "osv_published_at": "2025-06-22T15:32:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:46:55Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:46:55Z", "osv_earliest_published_at": "2025-06-22T15:32:21Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:46:56Z" }, { "id": "tronsev-2026-07-09", "display_name": "tronsev", "campaign": null, "detection_source": "osv", "packages": [ { "package": "tronsev", "ecosystem": "pypi", "versions": [ "0.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-7025", "osv_published_at": "2026-07-08T22:36:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:42:57Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:42:57Z", "osv_earliest_published_at": "2026-07-08T22:36:52Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:43:35Z" }, { "id": "dbzy-tools-2026-07-09", "display_name": "dbzy-tools", "campaign": null, "detection_source": "osv", "packages": [ { "package": "dbzy-tools", "ecosystem": "pypi", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-7023", "osv_published_at": "2026-07-08T21:19:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-09T00:42:56Z", "flagged_at": null, "confirmed_at": "2026-07-09T00:42:56Z", "osv_earliest_published_at": "2026-07-08T21:19:06Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:43:29Z" }, { "id": "notifier-utils-2026-07-08", "display_name": "notifier-utils", "campaign": null, "detection_source": "agent", "packages": [ { "package": "notifier-utils", "ecosystem": "npm", "versions": [ "1.3.8" ], "osv_entries": [ { "osv_id": "MAL-2026-6923", "osv_published_at": "2026-07-07T15:13:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T22:58:59Z", "flagged_at": null, "confirmed_at": "2026-07-08T22:58:59Z", "osv_earliest_published_at": "2026-07-07T15:13:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-08T23:02:17Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-6923" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-6923", "ledger_commit_at": "2026-07-09T00:57:59Z" }, { "id": "vkzmn-2026-07-08", "display_name": "vkzmn", "campaign": null, "detection_source": "agent", "packages": [ { "package": "vkzmn", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.3", "1.0.4", "1.0.6" ], "osv_entries": [ { "osv_id": "MAL-2026-6594", "osv_published_at": "2026-06-29T10:49:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T22:58:38Z", "flagged_at": null, "confirmed_at": "2026-07-08T22:58:38Z", "osv_earliest_published_at": "2026-06-29T10:49:33Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-08T23:01:30Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-6594" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-6594", "ledger_commit_at": "2026-07-09T00:56:05Z" }, { "id": "base58-cli-2026-07-08", "display_name": "base58-cli", "campaign": null, "detection_source": "agent", "packages": [ { "package": "base58-cli", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2", "1.0.3", "1.0.4", "1.0.5" ], "osv_entries": [ { "osv_id": "MAL-2026-6918", "osv_published_at": "2026-07-07T15:06:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T22:58:32Z", "flagged_at": null, "confirmed_at": "2026-07-08T22:58:32Z", "osv_earliest_published_at": "2026-07-07T15:06:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-08T23:01:19Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-6918" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-6918", "ledger_commit_at": "2026-07-09T00:57:39Z" }, { "id": "easy-time-format-2026-07-08", "display_name": "easy-time-format", "campaign": null, "detection_source": "agent", "packages": [ { "package": "easy-time-format", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T22:58:26Z", "flagged_at": null, "confirmed_at": "2026-07-08T22:58:26Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-08T23:01:08Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-6442" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-6442", "ledger_commit_at": "2026-07-08T23:01:08Z" }, { "id": "marketfront-bannerpopup-2026-07-08", "display_name": "@marketfront/bannerpopup", "campaign": null, "detection_source": "agent", "packages": [ { "package": "@marketfront/bannerpopup", "ecosystem": "npm", "versions": [ "7.0.0" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T22:58:22Z", "flagged_at": null, "confirmed_at": "2026-07-08T22:58:22Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-08T23:00:56Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-6765" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-6765", "ledger_commit_at": "2026-07-08T23:00:56Z" }, { "id": "clx-cookieparser-2026-07-08", "display_name": "clx-cookieparser", "campaign": null, "detection_source": "agent", "packages": [ { "package": "clx-cookieparser", "ecosystem": "npm", "versions": [ "1.4.4", "1.4.5", "1.4.6", "1.4.7", "1.4.8", "1.4.9", "1.5.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6661", "osv_published_at": "2026-06-29T16:33:55Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T22:58:07Z", "flagged_at": null, "confirmed_at": "2026-07-08T22:58:07Z", "osv_earliest_published_at": "2026-06-29T16:33:55Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-08T23:00:21Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-6661" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-6661", "ledger_commit_at": "2026-07-09T00:56:11Z" }, { "id": "zredis-typed-2026-07-08", "display_name": "zredis-typed", "campaign": null, "detection_source": "agent", "packages": [ { "package": "zredis-typed", "ecosystem": "npm", "versions": [ "1.0.127" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T22:57:47Z", "flagged_at": null, "confirmed_at": "2026-07-08T22:57:47Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-08T22:59:22Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-6944" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-6944", "ledger_commit_at": "2026-07-08T22:59:22Z" }, { "id": "tailwind-animates-2026-07-08", "display_name": "tailwind-animates", "campaign": null, "detection_source": "agent", "packages": [ { "package": "tailwind-animates", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6727", "osv_published_at": "2026-07-02T14:55:45Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T22:57:21Z", "flagged_at": null, "confirmed_at": "2026-07-08T22:57:21Z", "osv_earliest_published_at": "2026-07-02T14:55:45Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-08T22:58:26Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-6727" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-6727", "ledger_commit_at": "2026-07-09T00:57:03Z" }, { "id": "console-fmt-cli-2026-07-08", "display_name": "console-fmt-cli", "campaign": null, "detection_source": "agent", "packages": [ { "package": "console-fmt-cli", "ecosystem": "npm", "versions": [ "2.0.0", "2.1.0", "2.2.0", "2.3.0", "2.4.0", "2.5.0", "2.7.0", "2.8.0", "2.9.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6688", "osv_published_at": "2026-06-30T00:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T22:57:02Z", "flagged_at": null, "confirmed_at": "2026-07-08T22:57:02Z", "osv_earliest_published_at": "2026-06-30T00:00:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-08T22:57:50Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-6688" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-6688", "ledger_commit_at": "2026-07-09T00:56:31Z" }, { "id": "annotator-harvardx-2026-07-08", "display_name": "annotator-harvardx", "campaign": null, "detection_source": "agent", "packages": [ { "package": "annotator-harvardx", "ecosystem": "npm", "versions": [ "9.0.2" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T22:56:49Z", "flagged_at": null, "confirmed_at": "2026-07-08T22:56:49Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-08T22:57:17Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-6930" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-6930", "ledger_commit_at": "2026-07-08T22:57:17Z" }, { "id": "wsh4-npm-2026-07-08", "display_name": "wsh4_npm", "campaign": null, "detection_source": "agent", "packages": [ { "package": "wsh4_npm", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T22:56:44Z", "flagged_at": null, "confirmed_at": "2026-07-08T22:56:44Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-08T22:57:06Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-6954" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-6954", "ledger_commit_at": "2026-07-08T22:57:06Z" }, { "id": "mcp-server-pg-2026-07-08", "display_name": "mcp-server-pg", "campaign": null, "detection_source": "agent", "packages": [ { "package": "mcp-server-pg", "ecosystem": "npm", "versions": [ "1.2.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6922", "osv_published_at": "2026-07-07T13:59:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T22:56:37Z", "flagged_at": null, "confirmed_at": "2026-07-08T22:56:37Z", "osv_earliest_published_at": "2026-07-07T13:59:38Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-08T22:56:44Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-6922" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-6922", "ledger_commit_at": "2026-07-09T00:57:53Z" }, { "id": "react-v17-2026-07-08", "display_name": "react-v17", "campaign": null, "detection_source": "osv", "packages": [ { "package": "react-v17", "ecosystem": "npm", "versions": [ "20.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-7020", "osv_published_at": "2026-07-08T19:30:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:27:44Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:27:44Z", "osv_earliest_published_at": "2026-07-08T19:30:12Z", "hours_ahead_of_osv": -0.96, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:30:03Z" }, { "id": "npm-rce-poc-2026-07-08", "display_name": "npm-rce-poc", "campaign": null, "detection_source": "osv", "packages": [ { "package": "npm-rce-poc", "ecosystem": "npm", "versions": [ "1.0.13" ], "osv_entries": [ { "osv_id": "MAL-2026-7019", "osv_published_at": "2026-07-08T19:29:46Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:27:44Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:27:44Z", "osv_earliest_published_at": "2026-07-08T19:29:46Z", "hours_ahead_of_osv": -0.97, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:29:59Z" }, { "id": "n8n-nodes-barcode-generator-2026-07-08", "display_name": "n8n-nodes-barcode-generator", "campaign": null, "detection_source": "osv", "packages": [ { "package": "n8n-nodes-barcode-generator", "ecosystem": "npm", "versions": [ "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-7018", "osv_published_at": "2026-07-08T19:30:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:27:44Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:27:44Z", "osv_earliest_published_at": "2026-07-08T19:30:21Z", "hours_ahead_of_osv": -0.96, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:29:53Z" }, { "id": "vraksha-gh-helper-2026-07-08", "display_name": "@vraksha/gh-helper", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@vraksha/gh-helper", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7016", "osv_published_at": "2026-07-08T18:08:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:27:43Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:27:43Z", "osv_earliest_published_at": "2026-07-08T18:08:50Z", "hours_ahead_of_osv": -2.31, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:29:43Z" }, { "id": "logger-daemon-regex-2026-07-08", "display_name": "logger-daemon-regex", "campaign": null, "detection_source": "osv", "packages": [ { "package": "logger-daemon-regex", "ecosystem": "npm", "versions": [ "1.0.124" ], "osv_entries": [ { "osv_id": "MAL-2026-7017", "osv_published_at": "2026-07-08T19:30:30Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:27:43Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:27:43Z", "osv_earliest_published_at": "2026-07-08T19:30:30Z", "hours_ahead_of_osv": -0.95, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:29:48Z" }, { "id": "vps-new-manager-2026-07-08", "display_name": "vps-new-manager", "campaign": null, "detection_source": "osv", "packages": [ { "package": "vps-new-manager", "ecosystem": "npm", "versions": [ "0.1.4" ], "osv_entries": [ { "osv_id": "MAL-2026-7014", "osv_published_at": "2026-07-08T17:31:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:27:42Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:27:42Z", "osv_earliest_published_at": "2026-07-08T17:31:07Z", "hours_ahead_of_osv": -2.94, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:29:38Z" }, { "id": "next-locomotive-init-2026-07-08", "display_name": "next-locomotive-init", "campaign": null, "detection_source": "osv", "packages": [ { "package": "next-locomotive-init", "ecosystem": "npm", "versions": [ "1.0.3", "1.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-7013", "osv_published_at": "2026-07-08T17:28:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:27:42Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:27:42Z", "osv_earliest_published_at": "2026-07-08T17:28:48Z", "hours_ahead_of_osv": -2.98, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:29:33Z" }, { "id": "express-mongo-limit-2026-07-08", "display_name": "express-mongo-limit", "campaign": null, "detection_source": "osv", "packages": [ { "package": "express-mongo-limit", "ecosystem": "npm", "versions": [ "2.0.2", "2.0.6" ], "osv_entries": [ { "osv_id": "MAL-2026-7012", "osv_published_at": "2026-07-08T17:28:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:27:42Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:27:42Z", "osv_earliest_published_at": "2026-07-08T17:28:37Z", "hours_ahead_of_osv": -2.98, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:29:28Z" }, { "id": "visa-cli-tools-2026-07-08", "display_name": "visa-cli-tools", "campaign": null, "detection_source": "osv", "packages": [ { "package": "visa-cli-tools", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-7005", "osv_published_at": "2026-07-08T16:24:09Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:27:41Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:27:41Z", "osv_earliest_published_at": "2026-07-08T16:24:09Z", "hours_ahead_of_osv": -4.06, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:29:03Z" }, { "id": "events-alias-2026-07-08", "display_name": "events-alias", "campaign": null, "detection_source": "osv", "packages": [ { "package": "events-alias", "ecosystem": "npm", "versions": [ "15.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-7011", "osv_published_at": "2026-07-08T17:31:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:27:41Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:27:41Z", "osv_earliest_published_at": "2026-07-08T17:31:00Z", "hours_ahead_of_osv": -2.94, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:29:24Z" }, { "id": "crypto-promiser-2026-07-08", "display_name": "crypto-promiser", "campaign": null, "detection_source": "osv", "packages": [ { "package": "crypto-promiser", "ecosystem": "npm", "versions": [ "1.0.1", "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-7010", "osv_published_at": "2026-07-08T17:31:26Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:27:41Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:27:41Z", "osv_earliest_published_at": "2026-07-08T17:31:26Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:58:35Z" }, { "id": "configration-2026-07-08", "display_name": "configration", "campaign": null, "detection_source": "osv", "packages": [ { "package": "configration", "ecosystem": "npm", "versions": [ "2.3.5" ], "osv_entries": [ { "osv_id": "MAL-2026-7009", "osv_published_at": "2026-07-08T17:29:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:27:41Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:27:41Z", "osv_earliest_published_at": "2026-07-08T17:29:21Z", "hours_ahead_of_osv": -2.97, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:29:14Z" }, { "id": "chai-as-const-2026-07-08", "display_name": "chai-as-const", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-const", "ecosystem": "npm", "versions": [ "1.4.5" ], "osv_entries": [ { "osv_id": "MAL-2026-7008", "osv_published_at": "2026-07-08T17:30:45Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:27:41Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:27:41Z", "osv_earliest_published_at": "2026-07-08T17:30:45Z", "hours_ahead_of_osv": -2.95, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:29:08Z" }, { "id": "thunder-rony-2026-07-08", "display_name": "thunder-rony", "campaign": null, "detection_source": "osv", "packages": [ { "package": "thunder-rony", "ecosystem": "npm", "versions": [ "99.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-7004", "osv_published_at": "2026-07-08T16:25:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:27:40Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:27:40Z", "osv_earliest_published_at": "2026-07-08T16:25:37Z", "hours_ahead_of_osv": -4.03, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:28:58Z" }, { "id": "searchresults-2026-07-08", "display_name": "searchresults", "campaign": null, "detection_source": "osv", "packages": [ { "package": "searchresults", "ecosystem": "npm", "versions": [ "999.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7003", "osv_published_at": "2026-07-08T16:27:26Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:27:40Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:27:40Z", "osv_earliest_published_at": "2026-07-08T16:27:26Z", "hours_ahead_of_osv": -4.0, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:28:51Z" }, { "id": "ronyfortest-2026-07-08", "display_name": "ronyfortest", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ronyfortest", "ecosystem": "npm", "versions": [ "99.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-7002", "osv_published_at": "2026-07-08T16:25:19Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:27:40Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:27:40Z", "osv_earliest_published_at": "2026-07-08T16:25:19Z", "hours_ahead_of_osv": -4.04, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:28:45Z" }, { "id": "rony-test-2026-07-08", "display_name": "rony-test", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rony-test", "ecosystem": "npm", "versions": [ "99.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-7001", "osv_published_at": "2026-07-08T16:24:55Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:27:40Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:27:40Z", "osv_earliest_published_at": "2026-07-08T16:24:55Z", "hours_ahead_of_osv": -4.05, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:28:39Z" }, { "id": "pipo-sdk-2026-07-08", "display_name": "pipo-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pipo-sdk", "ecosystem": "npm", "versions": [ "9999.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-7000", "osv_published_at": "2026-07-08T16:27:59Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:27:39Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:27:39Z", "osv_earliest_published_at": "2026-07-08T16:27:59Z", "hours_ahead_of_osv": -3.99, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:28:33Z" }, { "id": "luludawang-kit-2026-07-08", "display_name": "luludawang-kit", "campaign": null, "detection_source": "osv", "packages": [ { "package": "luludawang-kit", "ecosystem": "npm", "versions": [ "0.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6999", "osv_published_at": "2026-07-08T16:36:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:27:39Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:27:39Z", "osv_earliest_published_at": "2026-07-08T16:36:07Z", "hours_ahead_of_osv": -3.86, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:28:26Z" }, { "id": "higherlogic-ocfe-2026-07-08", "display_name": "higherlogic-ocfe", "campaign": null, "detection_source": "osv", "packages": [ { "package": "higherlogic-ocfe", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6998", "osv_published_at": "2026-07-08T16:24:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:27:39Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:27:39Z", "osv_earliest_published_at": "2026-07-08T16:24:36Z", "hours_ahead_of_osv": -4.05, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:28:20Z" }, { "id": "goofy-sdk-2026-07-08", "display_name": "goofy-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "goofy-sdk", "ecosystem": "npm", "versions": [ "9999.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6997", "osv_published_at": "2026-07-08T16:27:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:27:39Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:27:39Z", "osv_earliest_published_at": "2026-07-08T16:27:50Z", "hours_ahead_of_osv": -4.0, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:28:16Z" }, { "id": "ec-checker-2026-07-08", "display_name": "ec-checker", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ec-checker", "ecosystem": "npm", "versions": [ "0.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6996", "osv_published_at": "2026-07-08T16:35:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:27:39Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:27:39Z", "osv_earliest_published_at": "2026-07-08T16:35:42Z", "hours_ahead_of_osv": -3.87, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:28:11Z" }, { "id": "chai-redirection-2026-07-08", "display_name": "chai-redirection", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-redirection", "ecosystem": "npm", "versions": [ "0.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6995", "osv_published_at": "2026-07-08T16:35:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:27:38Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:27:38Z", "osv_earliest_published_at": "2026-07-08T16:35:33Z", "hours_ahead_of_osv": -3.87, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:28:06Z" }, { "id": "chai-presentation-2026-07-08", "display_name": "chai-presentation", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-presentation", "ecosystem": "npm", "versions": [ "0.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6994", "osv_published_at": "2026-07-08T16:35:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:27:38Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:27:38Z", "osv_earliest_published_at": "2026-07-08T16:35:25Z", "hours_ahead_of_osv": -3.87, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:28:01Z" }, { "id": "bytefaas-sdk-2026-07-08", "display_name": "bytefaas-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bytefaas-sdk", "ecosystem": "npm", "versions": [ "9999.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6993", "osv_published_at": "2026-07-08T16:27:34Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:27:38Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:27:38Z", "osv_earliest_published_at": "2026-07-08T16:27:34Z", "hours_ahead_of_osv": -4.0, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:27:57Z" }, { "id": "babel-eslint-parser-legacy-2026-07-08", "display_name": "babel-eslint-parser-legacy", "campaign": null, "detection_source": "osv", "packages": [ { "package": "babel-eslint-parser-legacy", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6992", "osv_published_at": "2026-07-08T16:24:28Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:27:38Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:27:38Z", "osv_earliest_published_at": "2026-07-08T16:24:28Z", "hours_ahead_of_osv": -4.05, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:27:52Z" }, { "id": "airkey-mfa-react-2026-07-08", "display_name": "airkey-mfa-react", "campaign": null, "detection_source": "osv", "packages": [ { "package": "airkey-mfa-react", "ecosystem": "npm", "versions": [ "20.0.1", "36.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6991", "osv_published_at": "2026-07-08T16:30:56Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:27:38Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:27:38Z", "osv_earliest_published_at": "2026-07-08T16:30:56Z", "hours_ahead_of_osv": -3.94, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:27:47Z" }, { "id": "ai-gen-ai-opt-in-2026-07-08", "display_name": "ai-gen-ai-opt-in", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ai-gen-ai-opt-in", "ecosystem": "npm", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6990", "osv_published_at": "2026-07-08T16:21:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:27:37Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:27:37Z", "osv_earliest_published_at": "2026-07-08T16:21:20Z", "hours_ahead_of_osv": -4.1, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:27:43Z" }, { "id": "ag-charts-test-2026-07-08", "display_name": "ag-charts-test", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ag-charts-test", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6989", "osv_published_at": "2026-07-08T16:24:17Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:27:37Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:27:37Z", "osv_earliest_published_at": "2026-07-08T16:24:17Z", "hours_ahead_of_osv": -4.06, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:27:38Z" }, { "id": "vite-tab-tab-2026-07-08", "display_name": "@vite-tab/tab", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@vite-tab/tab", "ecosystem": "npm", "versions": [ "3.15.10", "5.7.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6988", "osv_published_at": "2026-07-08T16:58:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:26:03Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:26:03Z", "osv_earliest_published_at": "2026-07-08T16:58:42Z", "hours_ahead_of_osv": -3.46, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:27:01Z" }, { "id": "luminarycloudinternal-lcvis-st-2026-07-08", "display_name": "@luminarycloudinternal/lcvis-st", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@luminarycloudinternal/lcvis-st", "ecosystem": "npm", "versions": [ "9999.0.1", "9999.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6987", "osv_published_at": "2026-07-08T16:27:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:26:02Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:26:02Z", "osv_earliest_published_at": "2026-07-08T16:27:42Z", "hours_ahead_of_osv": -3.97, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:26:56Z" }, { "id": "promo-helper-2026-07-08", "display_name": "promo-helper", "campaign": null, "detection_source": "osv", "packages": [ { "package": "promo-helper", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.14", "1.0.3", "1.0.4", "1.0.5", "1.0.6", "1.0.7", "1.0.8" ], "osv_entries": [ { "osv_id": "MAL-2026-6985", "osv_published_at": "2026-07-08T16:09:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:26:01Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:26:01Z", "osv_earliest_published_at": "2026-07-08T16:09:52Z", "hours_ahead_of_osv": -4.27, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:26:47Z" }, { "id": "luminarycloudinternal-frodo-2026-07-08", "display_name": "@luminarycloudinternal/frodo", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@luminarycloudinternal/frodo", "ecosystem": "npm", "versions": [ "9999.0.1", "9999.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6986", "osv_published_at": "2026-07-08T16:20:43Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:26:01Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:26:01Z", "osv_earliest_published_at": "2026-07-08T16:20:43Z", "hours_ahead_of_osv": -4.09, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:26:52Z" }, { "id": "paysafe-cards-2026-07-08", "display_name": "paysafe-cards", "campaign": null, "detection_source": "osv", "packages": [ { "package": "paysafe-cards", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6982", "osv_published_at": "2026-07-08T14:30:54Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:24:34Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:24:34Z", "osv_earliest_published_at": "2026-07-08T14:30:54Z", "hours_ahead_of_osv": -5.89, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:26:41Z" }, { "id": "paperclip-adapter-helpers-2026-07-08", "display_name": "paperclip-adapter-helpers", "campaign": null, "detection_source": "osv", "packages": [ { "package": "paperclip-adapter-helpers", "ecosystem": "npm", "versions": [ "1.0.1", "1.0.12", "1.0.2", "1.0.4", "1.0.5", "1.0.6", "1.0.7", "1.0.8", "1.0.9" ], "osv_entries": [ { "osv_id": "MAL-2026-6981", "osv_published_at": "2026-07-08T14:32:11Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:24:34Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:24:34Z", "osv_earliest_published_at": "2026-07-08T14:32:11Z", "hours_ahead_of_osv": -5.87, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:26:36Z" }, { "id": "domains-billing-types-2026-07-08", "display_name": "domains-billing-types", "campaign": null, "detection_source": "osv", "packages": [ { "package": "domains-billing-types", "ecosystem": "npm", "versions": [ "99.91.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6980", "osv_published_at": "2026-07-08T14:20:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:24:33Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:24:33Z", "osv_earliest_published_at": "2026-07-08T14:20:52Z", "hours_ahead_of_osv": -6.06, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:26:31Z" }, { "id": "vps-adapter-core-2026-07-08", "display_name": "vps-adapter-core", "campaign": null, "detection_source": "osv", "packages": [ { "package": "vps-adapter-core", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6949", "osv_published_at": "2026-07-07T16:16:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:24:32Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:24:32Z", "osv_earliest_published_at": "2026-07-07T16:16:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-08T23:03:36Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-6949" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-6949", "ledger_commit_at": "2026-07-08T23:03:36Z" }, { "id": "runtimedev-link-2026-07-08", "display_name": "runtimedev-link", "campaign": null, "detection_source": "osv", "packages": [ { "package": "runtimedev-link", "ecosystem": "npm", "versions": [ "1.0.13" ], "osv_entries": [ { "osv_id": "MAL-2026-6948", "osv_published_at": "2026-07-07T16:12:58Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:24:32Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:24:32Z", "osv_earliest_published_at": "2026-07-07T16:12:58Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-08T22:57:28Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-6948" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-6948", "ledger_commit_at": "2026-07-08T22:57:28Z" }, { "id": "rony-testing-2026-07-08", "display_name": "rony-testing", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rony-testing", "ecosystem": "npm", "versions": [ "99.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-6968", "osv_published_at": "2026-07-08T08:26:02Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:24:32Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:24:32Z", "osv_earliest_published_at": "2026-07-08T08:26:02Z", "hours_ahead_of_osv": -11.97, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:26:26Z" }, { "id": "nam-os-a-man-2026-07-08", "display_name": "nam-os-a-man", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nam-os-a-man", "ecosystem": "npm", "versions": [ "99.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-6967", "osv_published_at": "2026-07-08T08:26:02Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:24:32Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:24:32Z", "osv_earliest_published_at": "2026-07-08T08:26:02Z", "hours_ahead_of_osv": -11.97, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:26:22Z" }, { "id": "na-rony-2026-07-08", "display_name": "na-rony", "campaign": null, "detection_source": "osv", "packages": [ { "package": "na-rony", "ecosystem": "npm", "versions": [ "1.1.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6964", "osv_published_at": "2026-07-08T08:26:02Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:24:32Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:24:32Z", "osv_earliest_published_at": "2026-07-08T08:26:02Z", "hours_ahead_of_osv": -11.97, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:26:17Z" }, { "id": "some-theme-2026-07-08", "display_name": "some-theme", "campaign": null, "detection_source": "osv", "packages": [ { "package": "some-theme", "ecosystem": "npm", "versions": [ "99.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6942", "osv_published_at": "2026-07-07T15:34:02Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:24:31Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:24:31Z", "osv_earliest_published_at": "2026-07-07T15:34:02Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-08T23:01:53Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-6942" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-6942", "ledger_commit_at": "2026-07-08T23:01:53Z" }, { "id": "paperclip-host-utils-2026-07-08", "display_name": "paperclip-host-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "paperclip-host-utils", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.2", "1.0.4", "1.0.5", "1.0.6", "1.0.7" ], "osv_entries": [ { "osv_id": "MAL-2026-6947", "osv_published_at": "2026-07-07T16:16:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:24:31Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:24:31Z", "osv_earliest_published_at": "2026-07-07T16:16:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-08T23:02:50Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-6947" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-6947", "ledger_commit_at": "2026-07-08T23:02:50Z" }, { "id": "shopify-internel-2026-07-08", "display_name": "shopify-internel", "campaign": null, "detection_source": "osv", "packages": [ { "package": "shopify-internel", "ecosystem": "npm", "versions": [ "99.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6941", "osv_published_at": "2026-07-07T15:34:02Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:24:30Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:24:30Z", "osv_earliest_published_at": "2026-07-07T15:34:02Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-08T23:00:33Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-6941" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-6941", "ledger_commit_at": "2026-07-08T23:00:33Z" }, { "id": "rnx-align-deps-2026-07-08", "display_name": "rnx-align-deps", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rnx-align-deps", "ecosystem": "npm", "versions": [ "99.0.7" ], "osv_entries": [ { "osv_id": "MAL-2026-6940", "osv_published_at": "2026-07-07T15:34:02Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:24:30Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:24:30Z", "osv_earliest_published_at": "2026-07-07T15:34:02Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-08T22:59:11Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-6940" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-6940", "ledger_commit_at": "2026-07-08T22:59:11Z" }, { "id": "nuxt-fonts-devtools-2026-07-08", "display_name": "nuxt-fonts-devtools", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nuxt-fonts-devtools", "ecosystem": "npm", "versions": [ "99.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6937", "osv_published_at": "2026-07-07T15:34:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:24:30Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:24:30Z", "osv_earliest_published_at": "2026-07-07T15:34:03Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-08T23:02:39Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-6937" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-6937", "ledger_commit_at": "2026-07-08T23:02:39Z" }, { "id": "nonexistent-package-2026-07-08", "display_name": "nonexistent-package", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nonexistent-package", "ecosystem": "npm", "versions": [ "99.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6936", "osv_published_at": "2026-07-07T15:34:02Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:24:30Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:24:30Z", "osv_earliest_published_at": "2026-07-07T15:34:02Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-08T23:02:28Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-6936" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-6936", "ledger_commit_at": "2026-07-08T23:02:28Z" }, { "id": "load-nuxt-dev-2026-07-08", "display_name": "load-nuxt-dev", "campaign": null, "detection_source": "osv", "packages": [ { "package": "load-nuxt-dev", "ecosystem": "npm", "versions": [ "99.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6935", "osv_published_at": "2026-07-07T15:34:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:24:30Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:24:30Z", "osv_earliest_published_at": "2026-07-07T15:34:03Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-08T22:56:55Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-6935" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-6935", "ledger_commit_at": "2026-07-08T22:56:55Z" }, { "id": "load-nuxt-2026-07-08", "display_name": "load-nuxt", "campaign": null, "detection_source": "osv", "packages": [ { "package": "load-nuxt", "ecosystem": "npm", "versions": [ "99.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6934", "osv_published_at": "2026-07-07T15:34:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:24:30Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:24:30Z", "osv_earliest_published_at": "2026-07-07T15:34:03Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-08T22:57:39Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-6934" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-6934", "ledger_commit_at": "2026-07-08T22:57:39Z" }, { "id": "hook-augmenting-module-2026-07-08", "display_name": "hook-augmenting-module", "campaign": null, "detection_source": "osv", "packages": [ { "package": "hook-augmenting-module", "ecosystem": "npm", "versions": [ "99.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6933", "osv_published_at": "2026-07-07T15:34:02Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:24:30Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:24:30Z", "osv_earliest_published_at": "2026-07-07T15:34:02Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-08T22:58:37Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-6933" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-6933", "ledger_commit_at": "2026-07-08T22:58:37Z" }, { "id": "debugcli-2026-07-08", "display_name": "debugcli", "campaign": null, "detection_source": "osv", "packages": [ { "package": "debugcli", "ecosystem": "npm", "versions": [ "4.3.6", "4.3.7", "4.3.8", "4.4.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6790", "osv_published_at": "2026-07-03T20:05:34Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:24:29Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:24:29Z", "osv_earliest_published_at": "2026-07-03T20:05:34Z", "hours_ahead_of_osv": -120.32, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:25:12Z" }, { "id": "chai-spycore-2026-07-08", "display_name": "chai-spycore", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-spycore", "ecosystem": "npm", "versions": [ "1.1.0", "1.5.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6907", "osv_published_at": "2026-07-07T06:27:27Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:24:29Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:24:29Z", "osv_earliest_published_at": "2026-07-07T06:27:27Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-08T23:01:42Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-6907" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-6907", "ledger_commit_at": "2026-07-08T23:01:42Z" }, { "id": "vps-maintenance-paperclip-adapter-2026-07-08", "display_name": "vps-maintenance-paperclip-adapter", "campaign": null, "detection_source": "osv", "packages": [ { "package": "vps-maintenance-paperclip-adapter", "ecosystem": "npm", "versions": [ "0.1.1", "0.1.3", "0.1.5", "0.1.6" ], "osv_entries": [ { "osv_id": "MAL-2026-6757", "osv_published_at": "2026-07-04T13:43:02Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:24:28Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:24:28Z", "osv_earliest_published_at": "2026-07-04T13:43:02Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:57:16Z" }, { "id": "gen-ai-opt-in-2026-07-08", "display_name": "gen-ai-opt-in", "campaign": null, "detection_source": "osv", "packages": [ { "package": "gen-ai-opt-in", "ecosystem": "npm", "versions": [ "99.0.0", "99.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6761", "osv_published_at": "2026-07-05T20:25:46Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:24:28Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:24:28Z", "osv_earliest_published_at": "2026-07-05T20:25:46Z", "hours_ahead_of_osv": -71.98, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:25:07Z" }, { "id": "vps-maintenance-2026-07-08", "display_name": "vps-maintenance", "campaign": null, "detection_source": "osv", "packages": [ { "package": "vps-maintenance", "ecosystem": "npm", "versions": [ "0.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6756", "osv_published_at": "2026-07-04T13:43:09Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:24:27Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:24:27Z", "osv_earliest_published_at": "2026-07-04T13:43:09Z", "hours_ahead_of_osv": -102.69, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:24:55Z" }, { "id": "procwire-2026-07-08", "display_name": "procwire", "campaign": null, "detection_source": "osv", "packages": [ { "package": "procwire", "ecosystem": "npm", "versions": [ "1.3.0", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6687", "osv_published_at": "2026-06-30T16:18:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:24:18Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:24:18Z", "osv_earliest_published_at": "2026-06-30T16:18:48Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-08T22:58:49Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-6687" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-6687", "ledger_commit_at": "2026-07-08T22:58:49Z" }, { "id": "setup-cicd-2026-07-08", "display_name": "setup-cicd", "campaign": null, "detection_source": "osv", "packages": [ { "package": "setup-cicd", "ecosystem": "npm", "versions": [ "0.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6686", "osv_published_at": "2026-06-30T15:13:14Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:24:17Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:24:17Z", "osv_earliest_published_at": "2026-06-30T15:13:14Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-08T23:03:02Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-6686" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-6686", "ledger_commit_at": "2026-07-08T23:03:02Z" }, { "id": "postcss-property-rollup-2026-07-08", "display_name": "postcss-property-rollup", "campaign": null, "detection_source": "osv", "packages": [ { "package": "postcss-property-rollup", "ecosystem": "npm", "versions": [ "0.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6684", "osv_published_at": "2026-06-30T15:13:14Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:24:17Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:24:17Z", "osv_earliest_published_at": "2026-06-30T15:13:14Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-08T23:03:25Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-6684" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-6684", "ledger_commit_at": "2026-07-08T23:03:25Z" }, { "id": "nbmolviz-js-2026-07-08", "display_name": "nbmolviz-js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nbmolviz-js", "ecosystem": "npm", "versions": [ "0.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6683", "osv_published_at": "2026-06-30T15:13:14Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:24:17Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:24:17Z", "osv_earliest_published_at": "2026-06-30T15:13:14Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-08T22:59:45Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-6683" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-6683", "ledger_commit_at": "2026-07-08T22:59:45Z" }, { "id": "confluent-kafka-javascript-2026-07-08", "display_name": "confluent-kafka-javascript", "campaign": null, "detection_source": "osv", "packages": [ { "package": "confluent-kafka-javascript", "ecosystem": "npm", "versions": [ "0.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6682", "osv_published_at": "2026-06-30T15:13:14Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:24:17Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:24:17Z", "osv_earliest_published_at": "2026-06-30T15:13:14Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-08T22:58:15Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-6682" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-6682", "ledger_commit_at": "2026-07-08T22:58:15Z" }, { "id": "agent-starter-pack-2026-07-08", "display_name": "agent-starter-pack", "campaign": null, "detection_source": "osv", "packages": [ { "package": "agent-starter-pack", "ecosystem": "npm", "versions": [ "0.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6679", "osv_published_at": "2026-06-30T15:13:14Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:24:17Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:24:17Z", "osv_earliest_published_at": "2026-06-30T15:13:14Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-08T23:00:45Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-6679" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-6679", "ledger_commit_at": "2026-07-08T23:00:45Z" }, { "id": "webda-infra-ui-static-images-2026-07-08", "display_name": "@webda-infra-ui/static-images", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@webda-infra-ui/static-images", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6652", "osv_published_at": "2026-06-29T16:53:34Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:22:28Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:22:28Z", "osv_earliest_published_at": "2026-06-29T16:53:34Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-08T22:58:04Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-6652" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-6652", "ledger_commit_at": "2026-07-08T22:58:04Z" }, { "id": "two-factor-prompt-lib-2026-07-08", "display_name": "two-factor-prompt-lib", "campaign": null, "detection_source": "osv", "packages": [ { "package": "two-factor-prompt-lib", "ecosystem": "npm", "versions": [ "0.0.1-poc" ], "osv_entries": [ { "osv_id": "MAL-2026-6414", "osv_published_at": "2026-06-25T02:16:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:21:20Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:21:20Z", "osv_earliest_published_at": "2026-06-25T02:16:08Z", "hours_ahead_of_osv": -330.09, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:23:02Z" }, { "id": "tw-style-utils-2026-07-08", "display_name": "tw-style-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "tw-style-utils", "ecosystem": "npm", "versions": [ "0.7.0", "0.7.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6508", "osv_published_at": "2026-06-26T05:17:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:21:20Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:21:20Z", "osv_earliest_published_at": "2026-06-26T05:17:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-08T23:03:13Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-6508" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-6508", "ledger_commit_at": "2026-07-08T23:03:13Z" }, { "id": "poc-publish-test-su-doughnym-2026-07-08", "display_name": "poc-publish-test-su-doughnym", "campaign": null, "detection_source": "osv", "packages": [ { "package": "poc-publish-test-su-doughnym", "ecosystem": "npm", "versions": [ "0.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6413", "osv_published_at": "2026-06-25T02:16:09Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:21:20Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:21:20Z", "osv_earliest_published_at": "2026-06-25T02:16:09Z", "hours_ahead_of_osv": -330.09, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:22:57Z" }, { "id": "ai-node-relay-2026-07-08", "display_name": "ai-node-relay", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ai-node-relay", "ecosystem": "npm", "versions": [ "0.0.1", "0.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6518", "osv_published_at": "2026-06-26T11:16:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:21:20Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:21:20Z", "osv_earliest_published_at": "2026-06-26T11:16:52Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-08T22:59:56Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-6518" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-6518", "ledger_commit_at": "2026-07-09T00:54:53Z" }, { "id": "ai-node-agent-2026-07-08", "display_name": "ai-node-agent", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ai-node-agent", "ecosystem": "npm", "versions": [ "0.0.1", "0.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6517", "osv_published_at": "2026-06-26T11:16:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:21:20Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:21:20Z", "osv_earliest_published_at": "2026-06-26T11:16:52Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-08T22:59:00Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-6517" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-6517", "ledger_commit_at": "2026-07-09T00:54:45Z" }, { "id": "su-doughnym-react-dlb-2026-07-08", "display_name": "@su-doughnym/react-dlb", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@su-doughnym/react-dlb", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-6410", "osv_published_at": "2026-06-25T02:16:09Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:21:19Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:21:19Z", "osv_earliest_published_at": "2026-06-25T02:16:09Z", "hours_ahead_of_osv": -330.09, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:22:44Z" }, { "id": "su-doughnym-loginui-2026-07-08", "display_name": "@su-doughnym/loginui", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@su-doughnym/loginui", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-6408", "osv_published_at": "2026-06-25T02:16:09Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:21:19Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:21:19Z", "osv_earliest_published_at": "2026-06-25T02:16:09Z", "hours_ahead_of_osv": -330.09, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:22:39Z" }, { "id": "nabisco-2026-07-08", "display_name": "nabisco", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nabisco", "ecosystem": "npm", "versions": [ "0.0.1-poc" ], "osv_entries": [ { "osv_id": "MAL-2026-6412", "osv_published_at": "2026-06-25T02:16:09Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:21:19Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:21:19Z", "osv_earliest_published_at": "2026-06-25T02:16:09Z", "hours_ahead_of_osv": -330.09, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:22:53Z" }, { "id": "data-fetching-client-2026-07-08", "display_name": "data-fetching-client", "campaign": null, "detection_source": "osv", "packages": [ { "package": "data-fetching-client", "ecosystem": "npm", "versions": [ "0.0.1-poc" ], "osv_entries": [ { "osv_id": "MAL-2026-6411", "osv_published_at": "2026-06-25T02:16:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:21:19Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:21:19Z", "osv_earliest_published_at": "2026-06-25T02:16:08Z", "hours_ahead_of_osv": -330.09, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:22:49Z" }, { "id": "ts-ecro-helper-2026-07-08", "display_name": "ts-ecro-helper", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ts-ecro-helper", "ecosystem": "npm", "versions": [ "0.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6204", "osv_published_at": "2026-06-19T08:28:32Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:21:18Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:21:18Z", "osv_earliest_published_at": "2026-06-19T08:28:32Z", "hours_ahead_of_osv": -467.88, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:22:20Z" }, { "id": "su-doughnym-hubspot-loginui-poc-2026-07-08", "display_name": "@su-doughnym/hubspot-loginui-poc", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@su-doughnym/hubspot-loginui-poc", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-6407", "osv_published_at": "2026-06-25T02:16:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:21:18Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:21:18Z", "osv_earliest_published_at": "2026-06-25T02:16:08Z", "hours_ahead_of_osv": -330.09, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:22:34Z" }, { "id": "signup-embedder-2026-07-08", "display_name": "signup-embedder", "campaign": null, "detection_source": "osv", "packages": [ { "package": "signup-embedder", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-6396", "osv_published_at": "2026-06-24T14:05:10Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:21:18Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:21:18Z", "osv_earliest_published_at": "2026-06-24T14:05:10Z", "hours_ahead_of_osv": -342.27, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:22:29Z" }, { "id": "hs-locale-management-2026-07-08", "display_name": "hs-locale-management", "campaign": null, "detection_source": "osv", "packages": [ { "package": "hs-locale-management", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-6394", "osv_published_at": "2026-06-24T14:01:16Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:21:18Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:21:18Z", "osv_earliest_published_at": "2026-06-24T14:01:16Z", "hours_ahead_of_osv": -342.33, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:22:25Z" }, { "id": "sp-api-dev-assistant-mcp-server-2026-07-08", "display_name": "sp-api-dev-assistant-mcp-server", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sp-api-dev-assistant-mcp-server", "ecosystem": "npm", "versions": [ "99.9.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5853", "osv_published_at": "2026-06-16T00:05:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:21:17Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:21:17Z", "osv_earliest_published_at": "2026-06-16T00:05:25Z", "hours_ahead_of_osv": -548.26, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:22:06Z" }, { "id": "parket-helper-2026-07-08", "display_name": "parket-helper", "campaign": null, "detection_source": "osv", "packages": [ { "package": "parket-helper", "ecosystem": "npm", "versions": [ "0.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6119", "osv_published_at": "2026-06-18T15:18:14Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:21:17Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:21:17Z", "osv_earliest_published_at": "2026-06-18T15:18:14Z", "hours_ahead_of_osv": -485.05, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:22:15Z" }, { "id": "opt-archetype-check-2026-07-08", "display_name": "opt-archetype-check", "campaign": null, "detection_source": "osv", "packages": [ { "package": "opt-archetype-check", "ecosystem": "npm", "versions": [ "9.9.0", "9.99.4" ], "osv_entries": [ { "osv_id": "MAL-2026-6075", "osv_published_at": "2026-06-17T19:09:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:21:17Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:21:17Z", "osv_earliest_published_at": "2026-06-17T19:09:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:53:29Z" }, { "id": "doaction-systeminformation-2026-07-08", "display_name": "@doaction/systeminformation", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@doaction/systeminformation", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-5381", "osv_published_at": "2026-06-09T14:17:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:21:17Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:21:17Z", "osv_earliest_published_at": "2026-06-09T14:17:42Z", "hours_ahead_of_osv": -702.06, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:22:01Z" }, { "id": "doaction-sudo-prompt-2026-07-08", "display_name": "@doaction/sudo-prompt", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@doaction/sudo-prompt", "ecosystem": "npm", "versions": [ "9.9.9", "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-5380", "osv_published_at": "2026-06-09T14:17:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:21:16Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:21:16Z", "osv_earliest_published_at": "2026-06-09T14:17:42Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:50:22Z" }, { "id": "doaction-example-2026-07-08", "display_name": "@doaction/example", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@doaction/example", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-5371", "osv_published_at": "2026-06-09T14:17:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:21:16Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:21:16Z", "osv_earliest_published_at": "2026-06-09T14:17:41Z", "hours_ahead_of_osv": -702.06, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:21:51Z" }, { "id": "doaction-eventemitter-2026-07-08", "display_name": "@doaction/eventemitter", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@doaction/eventemitter", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-5370", "osv_published_at": "2026-06-09T14:17:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:21:15Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:21:15Z", "osv_earliest_published_at": "2026-06-09T14:17:41Z", "hours_ahead_of_osv": -702.06, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:21:46Z" }, { "id": "demica-shared-2026-07-08", "display_name": "@demica/shared", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@demica/shared", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-5351", "osv_published_at": "2026-06-09T07:53:11Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:21:15Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:21:15Z", "osv_earliest_published_at": "2026-06-09T07:53:11Z", "hours_ahead_of_osv": -708.47, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://app.safedep.io/community/malysis/01KTMB4DP7F1BBR64PST1HZSH9", "ledger_commit_at": "2026-07-08T20:21:42Z" }, { "id": "demica-resources-2026-07-08", "display_name": "@demica/resources", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@demica/resources", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-5350", "osv_published_at": "2026-06-09T07:52:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:21:14Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:21:14Z", "osv_earliest_published_at": "2026-06-09T07:52:42Z", "hours_ahead_of_osv": -708.48, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://app.safedep.io/community/malysis/01KTMB44098ATG3YSX2G0Q9M23", "ledger_commit_at": "2026-07-08T20:21:37Z" }, { "id": "pdf-lib-enhanced-2026-07-08", "display_name": "pdf-lib-enhanced", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pdf-lib-enhanced", "ecosystem": "npm", "versions": [ "2.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-4799", "osv_published_at": "2026-05-26T11:56:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:21:11Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:21:11Z", "osv_earliest_published_at": "2026-05-26T11:56:00Z", "hours_ahead_of_osv": -1040.42, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:21:30Z" }, { "id": "weavedb-base-2026-07-08", "display_name": "weavedb-base", "campaign": null, "detection_source": "osv", "packages": [ { "package": "weavedb-base", "ecosystem": "npm", "versions": [ "0.45.4" ], "osv_entries": [ { "osv_id": "MAL-2026-4715", "osv_published_at": "2026-05-26T00:59:14Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:21:10Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:21:10Z", "osv_earliest_published_at": "2026-05-26T00:59:14Z", "hours_ahead_of_osv": -1051.37, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:21:20Z" }, { "id": "react-json-chalk-2026-07-08", "display_name": "react-json-chalk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "react-json-chalk", "ecosystem": "npm", "versions": [ "13.4.5" ], "osv_entries": [ { "osv_id": "MAL-2026-4792", "osv_published_at": "2026-05-26T08:46:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:21:10Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:21:10Z", "osv_earliest_published_at": "2026-05-26T08:46:33Z", "hours_ahead_of_osv": -1043.58, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:21:25Z" }, { "id": "forge-jsxy-2026-07-08", "display_name": "forge-jsxy", "campaign": null, "detection_source": "osv", "packages": [ { "package": "forge-jsxy", "ecosystem": "npm", "versions": [ "1.0.103", "1.0.104", "1.0.105", "1.0.107", "1.0.108", "1.0.120", "1.0.121" ], "osv_entries": [ { "osv_id": "MAL-2026-3609", "osv_published_at": "2026-05-06T00:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:21:10Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:21:10Z", "osv_earliest_published_at": "2026-05-06T00:00:00Z", "hours_ahead_of_osv": -1532.35, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://safedep.io/malicious-forge-jsx-npm-rat/", "ledger_commit_at": "2026-07-08T20:21:16Z" }, { "id": "sn-flow-client-2026-07-08", "display_name": "sn-flow-client", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sn-flow-client", "ecosystem": "npm", "versions": [ "20.5.1" ], "osv_entries": [ { "osv_id": "MAL-2024-9443", "osv_published_at": "2024-10-21T14:56:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:21:05Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:21:05Z", "osv_earliest_published_at": "2024-10-21T14:56:36Z", "hours_ahead_of_osv": -15005.41, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:21:10Z" }, { "id": "ebay-ui-core-react-2026-07-08", "display_name": "@ebay/ui-core-react", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@ebay/ui-core-react", "ecosystem": "npm", "versions": [ "9.6.4", "9.6.5", "9.6.6", "9.7.0", "9.8.0", "9.8.1" ], "osv_entries": [ { "osv_id": "MAL-2024-1006", "osv_published_at": "2024-02-15T15:21:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:21:04Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:21:04Z", "osv_earliest_published_at": "2024-02-15T15:21:51Z", "hours_ahead_of_osv": -20980.99, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:21:05Z" }, { "id": "turbom-2026-07-08", "display_name": "turbom", "campaign": null, "detection_source": "osv", "packages": [ { "package": "turbom", "ecosystem": "pypi", "versions": [ "1.0.0", "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-7015", "osv_published_at": "2026-07-08T16:50:17Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:17:16Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:17:16Z", "osv_earliest_published_at": "2026-07-08T16:50:17Z", "hours_ahead_of_osv": -3.45, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:18:11Z" }, { "id": "manom-2026-07-08", "display_name": "manom", "campaign": null, "detection_source": "osv", "packages": [ { "package": "manom", "ecosystem": "pypi", "versions": [ "1.2.2" ], "osv_entries": [ { "osv_id": "MAL-2026-7007", "osv_published_at": "2026-07-08T16:06:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:17:16Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:17:16Z", "osv_earliest_published_at": "2026-07-08T16:06:22Z", "hours_ahead_of_osv": -4.18, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:18:06Z" }, { "id": "manik-2026-07-08", "display_name": "manik", "campaign": null, "detection_source": "osv", "packages": [ { "package": "manik", "ecosystem": "pypi", "versions": [ "1.2.1" ], "osv_entries": [ { "osv_id": "MAL-2026-7006", "osv_published_at": "2026-07-08T16:05:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:17:16Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:17:16Z", "osv_earliest_published_at": "2026-07-08T16:05:51Z", "hours_ahead_of_osv": -4.19, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:18:01Z" }, { "id": "turbod-2026-07-08", "display_name": "turbod", "campaign": null, "detection_source": "osv", "packages": [ { "package": "turbod", "ecosystem": "pypi", "versions": [ "1.0.0", "1.0.1", "1.0.2", "1.0.3", "1.0.4", "1.0.5", "1.0.6", "1.0.7" ], "osv_entries": [ { "osv_id": "MAL-2026-6979", "osv_published_at": "2026-07-08T13:32:30Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:17:15Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:17:15Z", "osv_earliest_published_at": "2026-07-08T13:32:30Z", "hours_ahead_of_osv": -6.75, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:17:51Z" }, { "id": "tronpak-2026-07-08", "display_name": "tronpak", "campaign": null, "detection_source": "osv", "packages": [ { "package": "tronpak", "ecosystem": "pypi", "versions": [ "0.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6983", "osv_published_at": "2026-07-08T15:09:31Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:17:15Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:17:15Z", "osv_earliest_published_at": "2026-07-08T15:09:31Z", "hours_ahead_of_osv": -5.13, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:17:56Z" }, { "id": "manin-2026-07-08", "display_name": "manin", "campaign": null, "detection_source": "osv", "packages": [ { "package": "manin", "ecosystem": "pypi", "versions": [ "0.0.1", "0.1.0", "0.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6978", "osv_published_at": "2026-07-08T13:42:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:17:14Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:17:14Z", "osv_earliest_published_at": "2026-07-08T13:42:00Z", "hours_ahead_of_osv": -6.59, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:17:46Z" }, { "id": "rarcore-2026-07-08", "display_name": "rarcore", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rarcore", "ecosystem": "pypi", "versions": [ "0.1.1", "0.1.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6977", "osv_published_at": "2026-07-08T12:02:26Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:17:13Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:17:13Z", "osv_earliest_published_at": "2026-07-08T12:02:26Z", "hours_ahead_of_osv": -8.25, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:17:41Z" }, { "id": "py-slugify-2026-07-08", "display_name": "py-slugify", "campaign": null, "detection_source": "osv", "packages": [ { "package": "py-slugify", "ecosystem": "pypi", "versions": [ "0.8.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6976", "osv_published_at": "2026-07-08T12:05:04Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:17:13Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:17:13Z", "osv_earliest_published_at": "2026-07-08T12:05:04Z", "hours_ahead_of_osv": -8.2, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:17:36Z" }, { "id": "oxntime-2026-07-08", "display_name": "oxntime", "campaign": null, "detection_source": "osv", "packages": [ { "package": "oxntime", "ecosystem": "pypi", "versions": [ "0.0.1", "0.0.1.post1", "0.0.2", "0.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6975", "osv_published_at": "2026-07-08T11:54:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:17:13Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:17:13Z", "osv_earliest_published_at": "2026-07-08T11:54:08Z", "hours_ahead_of_osv": -8.38, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:17:31Z" }, { "id": "waymo-waymax-2026-07-08", "display_name": "waymo-waymax", "campaign": null, "detection_source": "osv", "packages": [ { "package": "waymo-waymax", "ecosystem": "pypi", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6961", "osv_published_at": "2026-07-08T04:08:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:17:12Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:17:12Z", "osv_earliest_published_at": "2026-07-08T04:08:07Z", "hours_ahead_of_osv": -16.15, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:17:25Z" }, { "id": "pyqt6darktheme-2026-07-08", "display_name": "pyqt6darktheme", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pyqt6darktheme", "ecosystem": "pypi", "versions": [ "0.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6960", "osv_published_at": "2026-07-08T04:25:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T20:17:12Z", "flagged_at": null, "confirmed_at": "2026-07-08T20:17:12Z", "osv_earliest_published_at": "2026-07-08T04:25:06Z", "hours_ahead_of_osv": -15.87, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:17:20Z" }, { "id": "gitlens-2026-07-08", "display_name": "gitlens", "campaign": null, "detection_source": "osv", "packages": [ { "package": "gitlens", "ecosystem": "npm", "versions": [ "9.4.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6973", "osv_published_at": "2026-07-08T09:21:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T11:47:11Z", "flagged_at": null, "confirmed_at": "2026-07-08T11:47:11Z", "osv_earliest_published_at": "2026-07-08T09:21:00Z", "hours_ahead_of_osv": -2.44, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T11:47:13Z" }, { "id": "vwfs-its-sf-sac-frontend-2026-07-08", "display_name": "@vwfs-its/sf-sac-frontend", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@vwfs-its/sf-sac-frontend", "ecosystem": "npm", "versions": [ "20.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6972", "osv_published_at": "2026-07-08T10:15:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T11:45:57Z", "flagged_at": null, "confirmed_at": "2026-07-08T11:45:57Z", "osv_earliest_published_at": "2026-07-08T10:15:48Z", "hours_ahead_of_osv": -1.5, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T11:46:04Z" }, { "id": "tronhapy-2026-07-08", "display_name": "tronhapy", "campaign": null, "detection_source": "osv", "packages": [ { "package": "tronhapy", "ecosystem": "pypi", "versions": [ "0.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6974", "osv_published_at": "2026-07-08T09:23:29Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T11:41:33Z", "flagged_at": null, "confirmed_at": "2026-07-08T11:41:33Z", "osv_earliest_published_at": "2026-07-08T09:23:29Z", "hours_ahead_of_osv": -2.3, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T11:41:45Z" }, { "id": "tronhap-2026-07-08", "display_name": "tronhap", "campaign": null, "detection_source": "osv", "packages": [ { "package": "tronhap", "ecosystem": "pypi", "versions": [ "0.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6971", "osv_published_at": "2026-07-08T08:35:14Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T11:41:33Z", "flagged_at": null, "confirmed_at": "2026-07-08T11:41:33Z", "osv_earliest_published_at": "2026-07-08T08:35:14Z", "hours_ahead_of_osv": -3.11, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T11:41:40Z" }, { "id": "jsonschemavalid-2026-07-08", "display_name": "jsonschemavalid", "campaign": null, "detection_source": "osv", "packages": [ { "package": "jsonschemavalid", "ecosystem": "pypi", "versions": [ "4.26.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6970", "osv_published_at": "2026-07-08T08:49:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T11:41:32Z", "flagged_at": null, "confirmed_at": "2026-07-08T11:41:32Z", "osv_earliest_published_at": "2026-07-08T08:49:35Z", "hours_ahead_of_osv": -2.87, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T11:41:34Z" }, { "id": "rio-design-tokens-2026-07-08", "display_name": "rio-design-tokens", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rio-design-tokens", "ecosystem": "npm", "versions": [ "99.99.100" ], "osv_entries": [ { "osv_id": "MAL-2026-6956", "osv_published_at": "2026-07-08T00:20:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T03:10:07Z", "flagged_at": null, "confirmed_at": "2026-07-08T03:10:07Z", "osv_earliest_published_at": "2026-07-08T00:20:08Z", "hours_ahead_of_osv": -2.83, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T03:10:14Z" }, { "id": "hello244b-2026-07-08", "display_name": "hello244b", "campaign": null, "detection_source": "osv", "packages": [ { "package": "hello244b", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6955", "osv_published_at": "2026-07-07T20:17:56Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-08T03:10:07Z", "flagged_at": null, "confirmed_at": "2026-07-08T03:10:07Z", "osv_earliest_published_at": "2026-07-07T20:17:56Z", "hours_ahead_of_osv": -6.87, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T03:10:08Z" }, { "id": "zod-pino444-2026-07-07", "display_name": "zod-pino444", "campaign": null, "detection_source": "osv", "packages": [ { "package": "zod-pino444", "ecosystem": "npm", "versions": [ "1.0.128", "1.0.129", "1.0.130", "1.0.131" ], "osv_entries": [ { "osv_id": "MAL-2026-6795", "osv_published_at": "2026-07-06T03:06:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-07T20:17:51Z", "flagged_at": null, "confirmed_at": "2026-07-07T20:17:51Z", "osv_earliest_published_at": "2026-07-06T03:06:05Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-09T04:45:39Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-6795" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-6795", "ledger_commit_at": "2026-07-09T04:45:39Z" }, { "id": "mongoose-lean-hooks-2026-07-07", "display_name": "mongoose-lean-hooks", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mongoose-lean-hooks", "ecosystem": "npm", "versions": [ "0.5.2", "0.5.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6797", "osv_published_at": "2026-07-06T18:01:34Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-07T20:17:51Z", "flagged_at": null, "confirmed_at": "2026-07-07T20:17:51Z", "osv_earliest_published_at": "2026-07-06T18:01:34Z", "hours_ahead_of_osv": -26.27, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-07T20:18:04Z" }, { "id": "paysafe-sdk-2026-07-07", "display_name": "paysafe-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "paysafe-sdk", "ecosystem": "pypi", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6929", "osv_published_at": "2026-07-07T15:22:57Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-07T20:14:04Z", "flagged_at": null, "confirmed_at": "2026-07-07T20:14:04Z", "osv_earliest_published_at": "2026-07-07T15:22:57Z", "hours_ahead_of_osv": -4.85, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-07T20:14:25Z" }, { "id": "jsonschemavalidation-2026-07-07", "display_name": "jsonschemavalidation", "campaign": null, "detection_source": "osv", "packages": [ { "package": "jsonschemavalidation", "ecosystem": "pypi", "versions": [ "4.26.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6945", "osv_published_at": "2026-07-07T15:29:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-07T20:14:04Z", "flagged_at": null, "confirmed_at": "2026-07-07T20:14:04Z", "osv_earliest_published_at": "2026-07-07T15:29:07Z", "hours_ahead_of_osv": -4.75, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-07T20:14:30Z" }, { "id": "paysafe-payments-2026-07-07", "display_name": "paysafe-payments", "campaign": null, "detection_source": "osv", "packages": [ { "package": "paysafe-payments", "ecosystem": "pypi", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6928", "osv_published_at": "2026-07-07T15:22:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-07T20:14:03Z", "flagged_at": null, "confirmed_at": "2026-07-07T20:14:03Z", "osv_earliest_published_at": "2026-07-07T15:22:35Z", "hours_ahead_of_osv": -4.86, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-07T20:14:19Z" }, { "id": "paysafe-kyc-2026-07-07", "display_name": "paysafe-kyc", "campaign": null, "detection_source": "osv", "packages": [ { "package": "paysafe-kyc", "ecosystem": "pypi", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6927", "osv_published_at": "2026-07-07T15:22:13Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-07T20:14:03Z", "flagged_at": null, "confirmed_at": "2026-07-07T20:14:03Z", "osv_earliest_published_at": "2026-07-07T15:22:13Z", "hours_ahead_of_osv": -4.86, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-07T20:14:12Z" }, { "id": "paysafe-api-2026-07-07", "display_name": "paysafe-api", "campaign": null, "detection_source": "osv", "packages": [ { "package": "paysafe-api", "ecosystem": "pypi", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6926", "osv_published_at": "2026-07-07T15:21:28Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-07T20:14:03Z", "flagged_at": null, "confirmed_at": "2026-07-07T20:14:03Z", "osv_earliest_published_at": "2026-07-07T15:21:28Z", "hours_ahead_of_osv": -4.88, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-07T20:14:07Z" }, { "id": "zluri-ad-connector-2026-07-07", "display_name": "zluri-ad-connector", "campaign": null, "detection_source": "osv", "packages": [ { "package": "zluri-ad-connector", "ecosystem": "npm", "versions": [ "9.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-6910", "osv_published_at": "2026-07-07T06:25:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-07T15:17:15Z", "flagged_at": null, "confirmed_at": "2026-07-07T15:17:15Z", "osv_earliest_published_at": "2026-07-07T06:25:49Z", "hours_ahead_of_osv": -8.86, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-07T15:17:18Z" }, { "id": "higherlogic-ocfe-2026-07-07", "display_name": "@higherlogic/ocfe", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@higherlogic/ocfe", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6911", "osv_published_at": "2026-07-07T08:41:09Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-07T15:17:15Z", "flagged_at": null, "confirmed_at": "2026-07-07T15:17:15Z", "osv_earliest_published_at": "2026-07-07T08:41:09Z", "hours_ahead_of_osv": -6.6, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-07T15:17:23Z" }, { "id": "adobesign-as-dev-tools-2026-07-05", "display_name": "@adobesign/as-dev-tools", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@adobesign/as-dev-tools", "ecosystem": "npm", "versions": [ "99.9.10", "99.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-6760", "osv_published_at": "2026-07-05T15:16:01Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-05T20:08:13Z", "flagged_at": null, "confirmed_at": "2026-07-05T20:08:13Z", "osv_earliest_published_at": "2026-07-05T15:16:01Z", "hours_ahead_of_osv": -4.87, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-05T20:08:18Z" }, { "id": "httpprobe-2026-07-04", "display_name": "httpprobe", "campaign": null, "detection_source": "osv", "packages": [ { "package": "httpprobe", "ecosystem": "pypi", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6758", "osv_published_at": "2026-07-04T18:05:11Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-04T20:02:29Z", "flagged_at": null, "confirmed_at": "2026-07-04T20:02:29Z", "osv_earliest_published_at": "2026-07-04T18:05:11Z", "hours_ahead_of_osv": -1.96, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-04T20:02:30Z" }, { "id": "yt-api-dlp-2026-07-04", "display_name": "yt-api-dlp", "campaign": null, "detection_source": "osv", "packages": [ { "package": "yt-api-dlp", "ecosystem": "pypi", "versions": [ "0.1.0", "0.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6754", "osv_published_at": "2026-07-04T12:24:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-04T14:02:23Z", "flagged_at": null, "confirmed_at": "2026-07-04T14:02:23Z", "osv_earliest_published_at": "2026-07-04T12:24:12Z", "hours_ahead_of_osv": -1.64, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-04T14:02:24Z" }, { "id": "schemavault-2026-07-04", "display_name": "schemavault", "campaign": null, "detection_source": "osv", "packages": [ { "package": "schemavault", "ecosystem": "pypi", "versions": [ "4.1.0", "4.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6753", "osv_published_at": "2026-07-03T23:47:04Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-04T04:14:54Z", "flagged_at": null, "confirmed_at": "2026-07-04T04:14:54Z", "osv_earliest_published_at": "2026-07-03T23:47:04Z", "hours_ahead_of_osv": -4.46, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-04T04:15:15Z" }, { "id": "confighub-2026-07-04", "display_name": "confighub", "campaign": null, "detection_source": "osv", "packages": [ { "package": "confighub", "ecosystem": "pypi", "versions": [ "7.0.1", "7.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6752", "osv_published_at": "2026-07-03T23:44:02Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-04T04:14:54Z", "flagged_at": null, "confirmed_at": "2026-07-04T04:14:54Z", "osv_earliest_published_at": "2026-07-03T23:44:02Z", "hours_ahead_of_osv": -4.51, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-04T04:15:10Z" }, { "id": "bytekit-2026-07-04", "display_name": "bytekit", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bytekit", "ecosystem": "pypi", "versions": [ "3.4.1", "3.4.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6751", "osv_published_at": "2026-07-03T23:50:32Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-04T04:14:54Z", "flagged_at": null, "confirmed_at": "2026-07-04T04:14:54Z", "osv_earliest_published_at": "2026-07-03T23:50:32Z", "hours_ahead_of_osv": -4.41, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-04T04:15:06Z" }, { "id": "procwire-2026-07-04", "display_name": "procwire", "campaign": null, "detection_source": "osv", "packages": [ { "package": "procwire", "ecosystem": "pypi", "versions": [ "5.2.3", "5.2.5", "5.2.6", "5.2.7" ], "osv_entries": [ { "osv_id": "MAL-2026-6750", "osv_published_at": "2026-07-03T23:38:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-04T04:14:53Z", "flagged_at": null, "confirmed_at": "2026-07-04T04:14:53Z", "osv_earliest_published_at": "2026-07-03T23:38:06Z", "hours_ahead_of_osv": -4.61, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-04T04:15:02Z" }, { "id": "ipa-user-collector-2026-07-04", "display_name": "ipa-user-collector", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ipa-user-collector", "ecosystem": "pypi", "versions": [ "8.5.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6749", "osv_published_at": "2026-07-03T22:45:17Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-04T04:14:53Z", "flagged_at": null, "confirmed_at": "2026-07-04T04:14:53Z", "osv_earliest_published_at": "2026-07-03T22:45:17Z", "hours_ahead_of_osv": -5.49, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-04T04:14:58Z" }, { "id": "haproxy-config-client-2026-07-04", "display_name": "haproxy-config-client", "campaign": null, "detection_source": "osv", "packages": [ { "package": "haproxy-config-client", "ecosystem": "pypi", "versions": [ "8.5.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6748", "osv_published_at": "2026-07-03T22:43:15Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-04T04:14:52Z", "flagged_at": null, "confirmed_at": "2026-07-04T04:14:52Z", "osv_earliest_published_at": "2026-07-03T22:43:15Z", "hours_ahead_of_osv": -5.53, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-04T04:14:53Z" }, { "id": "hello244a-2026-07-03", "display_name": "hello244a", "campaign": null, "detection_source": "osv", "packages": [ { "package": "hello244a", "ecosystem": "npm", "versions": [ "1.0.10", "1.0.11", "1.0.12", "1.0.13", "1.0.14", "1.0.15", "1.0.16", "1.0.17", "1.0.18", "1.0.19", "1.0.20", "1.0.21", "1.0.22", "1.0.23", "1.0.24", "1.0.25", "1.0.26", "1.0.27", "1.0.28", "1.0.29", "1.0.30", "1.0.31", "1.0.32", "1.0.33", "1.0.34", "1.0.35", "1.0.36", "1.0.37", "1.0.38", "1.0.39", "1.0.40", "1.0.41", "1.0.42", "1.0.43", "1.0.44", "1.0.45", "1.0.5", "1.0.6", "1.0.7", "1.0.8", "1.0.9" ], "osv_entries": [ { "osv_id": "MAL-2026-5188", "osv_published_at": "2026-06-04T20:49:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-03T21:18:22Z", "flagged_at": null, "confirmed_at": "2026-07-03T21:18:22Z", "osv_earliest_published_at": "2026-06-04T20:49:51Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:48:14Z" }, { "id": "unreal-mladapter-2026-07-03", "display_name": "unreal-mladapter", "campaign": null, "detection_source": "osv", "packages": [ { "package": "unreal-mladapter", "ecosystem": "pypi", "versions": [ "99999.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6736", "osv_published_at": "2026-07-02T21:22:11Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-03T04:27:29Z", "flagged_at": null, "confirmed_at": "2026-07-03T04:27:29Z", "osv_earliest_published_at": "2026-07-02T21:22:11Z", "hours_ahead_of_osv": -7.09, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-03T04:27:41Z" }, { "id": "ue-python-tools-2026-07-03", "display_name": "ue-python-tools", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ue-python-tools", "ecosystem": "pypi", "versions": [ "99999.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6735", "osv_published_at": "2026-07-02T21:22:54Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-03T04:27:29Z", "flagged_at": null, "confirmed_at": "2026-07-03T04:27:29Z", "osv_earliest_published_at": "2026-07-02T21:22:54Z", "hours_ahead_of_osv": -7.08, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-03T04:27:37Z" }, { "id": "horde-python-client-2026-07-03", "display_name": "horde-python-client", "campaign": null, "detection_source": "osv", "packages": [ { "package": "horde-python-client", "ecosystem": "pypi", "versions": [ "99999.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6734", "osv_published_at": "2026-07-02T21:23:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-03T04:27:28Z", "flagged_at": null, "confirmed_at": "2026-07-03T04:27:28Z", "osv_earliest_published_at": "2026-07-02T21:23:53Z", "hours_ahead_of_osv": -7.06, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-03T04:27:33Z" }, { "id": "epic-build-scripts-2026-07-03", "display_name": "epic-build-scripts", "campaign": null, "detection_source": "osv", "packages": [ { "package": "epic-build-scripts", "ecosystem": "pypi", "versions": [ "99999.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6733", "osv_published_at": "2026-07-02T21:23:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-03T04:27:28Z", "flagged_at": null, "confirmed_at": "2026-07-03T04:27:28Z", "osv_earliest_published_at": "2026-07-02T21:23:22Z", "hours_ahead_of_osv": -7.07, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-03T04:27:29Z" }, { "id": "dt-validator-2026-07-02", "display_name": "dt-validator", "campaign": null, "detection_source": "osv", "packages": [ { "package": "dt-validator", "ecosystem": "pypi", "versions": [ "0.3.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6728", "osv_published_at": "2026-07-02T17:39:30Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-02T21:13:25Z", "flagged_at": null, "confirmed_at": "2026-07-02T21:13:25Z", "osv_earliest_published_at": "2026-07-02T17:39:30Z", "hours_ahead_of_osv": -3.57, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-02T21:13:26Z" }, { "id": "modhamanish-rn-mm-template-2026-07-02", "display_name": "@modhamanish/rn-mm-template", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@modhamanish/rn-mm-template", "ecosystem": "npm", "versions": [ "1.1.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6725", "osv_published_at": "2026-07-02T13:02:29Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-02T16:42:21Z", "flagged_at": null, "confirmed_at": "2026-07-02T16:42:21Z", "osv_earliest_published_at": "2026-07-02T13:02:29Z", "hours_ahead_of_osv": -3.66, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-02T16:42:25Z" }, { "id": "electron-orbit-2026-07-01", "display_name": "electron-orbit", "campaign": null, "detection_source": "osv", "packages": [ { "package": "electron-orbit", "ecosystem": "npm", "versions": [ "1.0.10", "1.0.11", "1.0.12", "1.0.13", "1.0.14", "1.0.15", "1.0.16", "1.0.18", "1.0.20", "1.0.21", "1.0.22", "1.0.23", "1.0.24", "1.0.25", "1.0.26", "1.0.27", "1.0.28", "1.0.29", "1.0.3", "1.0.30", "1.0.31", "1.0.32", "1.0.33", "1.0.34", "1.0.36", "1.0.4", "1.0.5", "1.0.6", "1.0.7", "1.0.8", "1.0.9" ], "osv_entries": [ { "osv_id": "MAL-2026-6723", "osv_published_at": "2026-07-01T21:15:10Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-01T22:51:07Z", "flagged_at": null, "confirmed_at": "2026-07-01T22:51:07Z", "osv_earliest_published_at": "2026-07-01T21:15:10Z", "hours_ahead_of_osv": -1.6, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-01T22:52:16Z" }, { "id": "date-fns-lite-2026-07-01", "display_name": "date-fns-lite", "campaign": null, "detection_source": "osv", "packages": [ { "package": "date-fns-lite", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.10", "1.0.11", "1.0.12", "1.0.2", "1.0.3", "1.0.4", "1.0.5", "1.0.6", "1.0.7", "1.0.8", "1.0.9" ], "osv_entries": [ { "osv_id": "MAL-2026-6722", "osv_published_at": "2026-07-01T21:19:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-01T22:51:02Z", "flagged_at": null, "confirmed_at": "2026-07-01T22:51:02Z", "osv_earliest_published_at": "2026-07-01T21:19:37Z", "hours_ahead_of_osv": -1.52, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-01T22:52:11Z" }, { "id": "ts-eslint-helper-2026-07-01", "display_name": "ts-eslint-helper", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ts-eslint-helper", "ecosystem": "npm", "versions": [ "4.0.3", "4.0.4", "4.0.5" ], "osv_entries": [ { "osv_id": "MAL-2026-6721", "osv_published_at": "2026-07-01T20:28:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-01T22:51:01Z", "flagged_at": null, "confirmed_at": "2026-07-01T22:51:01Z", "osv_earliest_published_at": "2026-07-01T20:28:12Z", "hours_ahead_of_osv": -2.38, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-01T22:52:07Z" }, { "id": "ts-elinter-2026-07-01", "display_name": "ts-elinter", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ts-elinter", "ecosystem": "npm", "versions": [ "3.3.9" ], "osv_entries": [ { "osv_id": "MAL-2026-6720", "osv_published_at": "2026-07-01T20:28:27Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-01T22:51:00Z", "flagged_at": null, "confirmed_at": "2026-07-01T22:51:00Z", "osv_earliest_published_at": "2026-07-01T20:28:27Z", "hours_ahead_of_osv": -2.38, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-01T22:52:02Z" }, { "id": "ts-clob-math-v2-2026-07-01", "display_name": "ts-clob-math-v2", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ts-clob-math-v2", "ecosystem": "npm", "versions": [ "2.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6719", "osv_published_at": "2026-07-01T20:28:46Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-01T22:51:00Z", "flagged_at": null, "confirmed_at": "2026-07-01T22:51:00Z", "osv_earliest_published_at": "2026-07-01T20:28:46Z", "hours_ahead_of_osv": -2.37, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-01T22:51:58Z" }, { "id": "test-pkg-yarn-2026-07-01", "display_name": "test-pkg-yarn", "campaign": null, "detection_source": "osv", "packages": [ { "package": "test-pkg-yarn", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6718", "osv_published_at": "2026-07-01T20:47:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-01T22:51:00Z", "flagged_at": null, "confirmed_at": "2026-07-01T22:51:00Z", "osv_earliest_published_at": "2026-07-01T20:47:51Z", "hours_ahead_of_osv": -2.05, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-01T22:51:53Z" }, { "id": "test-pkg-x0-2026-07-01", "display_name": "test-pkg-x0", "campaign": null, "detection_source": "osv", "packages": [ { "package": "test-pkg-x0", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2", "1.0.3", "1.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-6717", "osv_published_at": "2026-07-01T20:46:56Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-01T22:50:59Z", "flagged_at": null, "confirmed_at": "2026-07-01T22:50:59Z", "osv_earliest_published_at": "2026-07-01T20:46:56Z", "hours_ahead_of_osv": -2.07, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-01T22:51:49Z" }, { "id": "test-pkg-pnpm-2026-07-01", "display_name": "test-pkg-pnpm", "campaign": null, "detection_source": "osv", "packages": [ { "package": "test-pkg-pnpm", "ecosystem": "npm", "versions": [ "1.0.1", "1.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-6716", "osv_published_at": "2026-07-01T20:47:19Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-01T22:50:58Z", "flagged_at": null, "confirmed_at": "2026-07-01T22:50:58Z", "osv_earliest_published_at": "2026-07-01T20:47:19Z", "hours_ahead_of_osv": -2.06, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-01T22:51:45Z" }, { "id": "svgcraft-core-2026-07-01", "display_name": "svgcraft-core", "campaign": null, "detection_source": "osv", "packages": [ { "package": "svgcraft-core", "ecosystem": "npm", "versions": [ "1.0.1", "1.0.2", "1.0.3", "1.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-6715", "osv_published_at": "2026-07-01T20:48:15Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-01T22:50:58Z", "flagged_at": null, "confirmed_at": "2026-07-01T22:50:58Z", "osv_earliest_published_at": "2026-07-01T20:48:15Z", "hours_ahead_of_osv": -2.05, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-01T22:51:40Z" }, { "id": "vitest-agent-2026-07-01", "display_name": "vitest-agent", "campaign": null, "detection_source": "osv", "packages": [ { "package": "vitest-agent", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.5", "1.0.6" ], "osv_entries": [ { "osv_id": "MAL-2026-6710", "osv_published_at": "2026-07-01T19:15:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-01T22:50:57Z", "flagged_at": null, "confirmed_at": "2026-07-01T22:50:57Z", "osv_earliest_published_at": "2026-07-01T19:15:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:56:56Z" }, { "id": "polymarket-trading-developer-tool-2026-07-01", "display_name": "polymarket-trading-developer-tool", "campaign": null, "detection_source": "osv", "packages": [ { "package": "polymarket-trading-developer-tool", "ecosystem": "npm", "versions": [ "0.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6714", "osv_published_at": "2026-07-01T20:37:24Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-01T22:50:57Z", "flagged_at": null, "confirmed_at": "2026-07-01T22:50:57Z", "osv_earliest_published_at": "2026-07-01T20:37:24Z", "hours_ahead_of_osv": -2.23, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-01T22:51:35Z" }, { "id": "polymarket-toolkit-2026-07-01", "display_name": "polymarket-toolkit", "campaign": null, "detection_source": "osv", "packages": [ { "package": "polymarket-toolkit", "ecosystem": "npm", "versions": [ "1.4.9" ], "osv_entries": [ { "osv_id": "MAL-2026-6713", "osv_published_at": "2026-07-01T20:37:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-01T22:50:57Z", "flagged_at": null, "confirmed_at": "2026-07-01T22:50:57Z", "osv_earliest_published_at": "2026-07-01T20:37:33Z", "hours_ahead_of_osv": -2.22, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-01T22:51:31Z" }, { "id": "polymarket-risk-manager-2026-07-01", "display_name": "polymarket-risk-manager", "campaign": null, "detection_source": "osv", "packages": [ { "package": "polymarket-risk-manager", "ecosystem": "npm", "versions": [ "3.5.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6712", "osv_published_at": "2026-07-01T20:37:17Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-01T22:50:57Z", "flagged_at": null, "confirmed_at": "2026-07-01T22:50:57Z", "osv_earliest_published_at": "2026-07-01T20:37:17Z", "hours_ahead_of_osv": -2.23, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-01T22:51:27Z" }, { "id": "vega-lite-next-2026-07-01", "display_name": "vega-lite-next", "campaign": null, "detection_source": "osv", "packages": [ { "package": "vega-lite-next", "ecosystem": "npm", "versions": [ "19.2.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6709", "osv_published_at": "2026-07-01T19:16:14Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-01T22:50:56Z", "flagged_at": null, "confirmed_at": "2026-07-01T22:50:56Z", "osv_earliest_published_at": "2026-07-01T19:16:14Z", "hours_ahead_of_osv": -3.58, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-01T22:51:18Z" }, { "id": "polymarket-trading-developer-tools-2026-07-01", "display_name": "polymarket-trading-developer-tools", "campaign": null, "detection_source": "osv", "packages": [ { "package": "polymarket-trading-developer-tools", "ecosystem": "npm", "versions": [ "0.1.0", "0.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6692", "osv_published_at": "2026-06-30T00:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-01T22:50:56Z", "flagged_at": null, "confirmed_at": "2026-07-01T22:50:56Z", "osv_earliest_published_at": "2026-06-30T00:00:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-08T22:59:34Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-6692" ], "advisory_url": "https://safedep.io/defi-infostealer-fake-arbitrage-bot-npm/", "ledger_commit_at": "2026-07-08T22:59:34Z" }, { "id": "polymarket-clob-maths-2026-07-01", "display_name": "polymarket-clob-maths", "campaign": null, "detection_source": "osv", "packages": [ { "package": "polymarket-clob-maths", "ecosystem": "npm", "versions": [ "2.3.9", "3.3.9" ], "osv_entries": [ { "osv_id": "MAL-2026-6691", "osv_published_at": "2026-06-30T00:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-01T22:50:56Z", "flagged_at": null, "confirmed_at": "2026-07-01T22:50:56Z", "osv_earliest_published_at": "2026-06-30T00:00:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-08T23:00:08Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-6691" ], "advisory_url": "https://safedep.io/defi-infostealer-fake-arbitrage-bot-npm/", "ledger_commit_at": "2026-07-08T23:00:08Z" }, { "id": "sypoi1-2026-07-01", "display_name": "sypoi1", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sypoi1", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6405", "osv_published_at": "2026-06-24T22:18:30Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-01T22:50:55Z", "flagged_at": null, "confirmed_at": "2026-07-01T22:50:55Z", "osv_earliest_published_at": "2026-06-24T22:18:30Z", "hours_ahead_of_osv": -168.54, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-01T22:51:00Z" }, { "id": "log-taker1-2026-07-01", "display_name": "log-taker1", "campaign": null, "detection_source": "osv", "packages": [ { "package": "log-taker1", "ecosystem": "npm", "versions": [ "0.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6690", "osv_published_at": "2026-06-30T00:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-01T22:50:55Z", "flagged_at": null, "confirmed_at": "2026-07-01T22:50:55Z", "osv_earliest_published_at": "2026-06-30T00:00:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-08T23:02:04Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-6690" ], "advisory_url": "https://safedep.io/defi-infostealer-fake-arbitrage-bot-npm/", "ledger_commit_at": "2026-07-08T23:02:04Z" }, { "id": "twrap-tool-2026-07-01", "display_name": "twrap-tool", "campaign": null, "detection_source": "osv", "packages": [ { "package": "twrap-tool", "ecosystem": "pypi", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6711", "osv_published_at": "2026-07-01T20:05:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-01T22:46:49Z", "flagged_at": null, "confirmed_at": "2026-07-01T22:46:49Z", "osv_earliest_published_at": "2026-07-01T20:05:39Z", "hours_ahead_of_osv": -2.69, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-01T22:46:49Z" }, { "id": "starlette-healthcheck-2026-07-01", "display_name": "starlette-healthcheck", "campaign": null, "detection_source": "osv", "packages": [ { "package": "starlette-healthcheck", "ecosystem": "pypi", "versions": [ "1.2.0", "1.3.0", "1.3.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6724", "osv_published_at": "2026-07-01T21:08:27Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-01T22:46:49Z", "flagged_at": null, "confirmed_at": "2026-07-01T22:46:49Z", "osv_earliest_published_at": "2026-07-01T21:08:27Z", "hours_ahead_of_osv": -1.64, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-01T22:46:53Z" }, { "id": "andes-tools-colors-2026-07-01", "display_name": "@andes-tools/colors", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@andes-tools/colors", "ecosystem": "npm", "versions": [ "999.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6703", "osv_published_at": "2026-07-01T17:11:18Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-01T18:26:02Z", "flagged_at": null, "confirmed_at": "2026-07-01T18:26:02Z", "osv_earliest_published_at": "2026-07-01T17:11:18Z", "hours_ahead_of_osv": -1.25, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-01T18:26:02Z" }, { "id": "pp-react-v5-2026-07-01", "display_name": "pp-react-v5", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pp-react-v5", "ecosystem": "npm", "versions": [ "30.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-3509", "osv_published_at": "2026-05-11T00:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-01T09:00:56Z", "flagged_at": null, "confirmed_at": "2026-07-01T09:00:56Z", "osv_earliest_published_at": "2026-05-11T00:00:00Z", "hours_ahead_of_osv": -1233.02, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-01T09:00:57Z" }, { "id": "vue-demi-fix-2026-07-01", "display_name": "vue-demi-fix", "campaign": null, "detection_source": "osv", "packages": [ { "package": "vue-demi-fix", "ecosystem": "npm", "versions": [ "10.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-6702", "osv_published_at": "2026-06-30T10:41:28Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-01T00:35:12Z", "flagged_at": null, "confirmed_at": "2026-07-01T00:35:12Z", "osv_earliest_published_at": "2026-06-30T10:41:28Z", "hours_ahead_of_osv": -13.9, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-01T00:35:35Z" }, { "id": "ripshakti-2026-07-01", "display_name": "ripshakti", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ripshakti", "ecosystem": "npm", "versions": [ "80.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6701", "osv_published_at": "2026-06-30T20:59:31Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-01T00:35:12Z", "flagged_at": null, "confirmed_at": "2026-07-01T00:35:12Z", "osv_earliest_published_at": "2026-06-30T20:59:31Z", "hours_ahead_of_osv": -3.59, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-01T00:35:30Z" }, { "id": "module-index-cache-2026-07-01", "display_name": "module-index-cache", "campaign": null, "detection_source": "osv", "packages": [ { "package": "module-index-cache", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6700", "osv_published_at": "2026-06-30T21:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-01T00:35:12Z", "flagged_at": null, "confirmed_at": "2026-07-01T00:35:12Z", "osv_earliest_published_at": "2026-06-30T21:00:00Z", "hours_ahead_of_osv": -3.59, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-01T00:35:26Z" }, { "id": "ecto-corsair-flag-7kq3mz-2026-07-01", "display_name": "ecto-corsair-flag-7kq3mz", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ecto-corsair-flag-7kq3mz", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6699", "osv_published_at": "2026-06-30T21:00:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-01T00:35:11Z", "flagged_at": null, "confirmed_at": "2026-07-01T00:35:11Z", "osv_earliest_published_at": "2026-06-30T21:00:23Z", "hours_ahead_of_osv": -3.58, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-01T00:35:22Z" }, { "id": "cursed-modules-2026-07-01", "display_name": "cursed-modules", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cursed-modules", "ecosystem": "npm", "versions": [ "2.0.0", "999.0.0", "999.0.1", "999.0.2", "999.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6698", "osv_published_at": "2026-06-30T20:38:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-01T00:35:11Z", "flagged_at": null, "confirmed_at": "2026-07-01T00:35:11Z", "osv_earliest_published_at": "2026-06-30T20:38:12Z", "hours_ahead_of_osv": -3.95, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-01T00:35:17Z" }, { "id": "sudoughnym-enviro-demo-2026-07-01", "display_name": "@sudoughnym/enviro-demo", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@sudoughnym/enviro-demo", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-6697", "osv_published_at": "2026-06-30T20:59:17Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-01T00:35:09Z", "flagged_at": null, "confirmed_at": "2026-07-01T00:35:09Z", "osv_earliest_published_at": "2026-06-30T20:59:17Z", "hours_ahead_of_osv": -3.6, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-01T00:35:12Z" }, { "id": "decimal-format-core-2026-07-01", "display_name": "decimal-format-core", "campaign": null, "detection_source": "osv", "packages": [ { "package": "decimal-format-core", "ecosystem": "npm", "versions": [ "3.1.0", "3.2.0", "3.3.0", "3.5.2", "3.5.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6689", "osv_published_at": "2026-06-30T00:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-01T00:34:59Z", "flagged_at": null, "confirmed_at": "2026-07-01T00:34:59Z", "osv_earliest_published_at": "2026-06-30T00:00:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://safedep.io/defi-infostealer-fake-arbitrage-bot-npm/", "ledger_commit_at": "2026-07-09T00:56:38Z" }, { "id": "businessapp-microsites-apis-2026-07-01", "display_name": "@businessapp-microsites/apis", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@businessapp-microsites/apis", "ecosystem": "npm", "versions": [ "9999.0.0", "9999.0.1", "9999.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6696", "osv_published_at": "2026-06-30T20:59:02Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-01T00:34:59Z", "flagged_at": null, "confirmed_at": "2026-07-01T00:34:59Z", "osv_earliest_published_at": "2026-06-30T20:59:02Z", "hours_ahead_of_osv": -3.6, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:24:48Z" }, { "id": "ripshakti1-2026-06-30", "display_name": "ripshakti1", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ripshakti1", "ecosystem": "npm", "versions": [ "81.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6674", "osv_published_at": "2026-06-30T09:37:30Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-30T18:21:10Z", "flagged_at": null, "confirmed_at": "2026-06-30T18:21:10Z", "osv_earliest_published_at": "2026-06-30T09:37:30Z", "hours_ahead_of_osv": -8.73, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-30T18:21:15Z" }, { "id": "anthropic-toolkit-2026-06-30", "display_name": "anthropic-toolkit", "campaign": null, "detection_source": "osv", "packages": [ { "package": "anthropic-toolkit", "ecosystem": "npm", "versions": [ "0.1.0", "0.1.1", "0.2.0", "0.2.1", "0.3.0", "0.3.1", "0.4.0", "0.4.1", "0.5.0", "0.5.1", "0.6.0", "0.7.0", "0.8.0", "0.9.0", "1.0.0", "1.0.1", "1.1.0", "1.1.1", "1.2.0", "1.2.1", "1.3.0", "1.3.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6673", "osv_published_at": "2026-06-30T02:02:57Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-30T18:21:09Z", "flagged_at": null, "confirmed_at": "2026-06-30T18:21:09Z", "osv_earliest_published_at": "2026-06-30T02:02:57Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:56:25Z" }, { "id": "yastatic-s3-2026-06-29", "display_name": "yastatic-s3", "campaign": null, "detection_source": "osv", "packages": [ { "package": "yastatic-s3", "ecosystem": "npm", "versions": [ "0.1.0", "0.1.10", "0.1.99" ], "osv_entries": [ { "osv_id": "MAL-2026-6586", "osv_published_at": "2026-06-29T05:25:30Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-29T15:58:10Z", "flagged_at": null, "confirmed_at": "2026-06-29T15:58:10Z", "osv_earliest_published_at": "2026-06-29T05:25:30Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-09T04:45:29Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-6586" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-6586", "ledger_commit_at": "2026-07-09T04:45:29Z" }, { "id": "envfile-sync-2026-06-29", "display_name": "envfile-sync", "campaign": null, "detection_source": "osv", "packages": [ { "package": "envfile-sync", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6589", "osv_published_at": "2026-06-29T07:32:58Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-29T15:58:10Z", "flagged_at": null, "confirmed_at": "2026-06-29T15:58:10Z", "osv_earliest_published_at": "2026-06-29T07:32:58Z", "hours_ahead_of_osv": -8.42, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-30T02:46:54Z" }, { "id": "endpointmap-2026-06-29", "display_name": "endpointmap", "campaign": null, "detection_source": "osv", "packages": [ { "package": "endpointmap", "ecosystem": "npm", "versions": [ "2.1.0", "3.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6588", "osv_published_at": "2026-06-29T08:52:54Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-29T15:58:10Z", "flagged_at": null, "confirmed_at": "2026-06-29T15:58:10Z", "osv_earliest_published_at": "2026-06-29T08:52:54Z", "hours_ahead_of_osv": -7.09, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-30T02:46:50Z" }, { "id": "clob-client-math-2026-06-29", "display_name": "clob-client-math", "campaign": null, "detection_source": "osv", "packages": [ { "package": "clob-client-math", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6587", "osv_published_at": "2026-06-29T07:18:45Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-29T15:58:10Z", "flagged_at": null, "confirmed_at": "2026-06-29T15:58:10Z", "osv_earliest_published_at": "2026-06-29T07:18:45Z", "hours_ahead_of_osv": -8.66, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-30T02:46:46Z" }, { "id": "stake-math-2026-06-29", "display_name": "stake-math", "campaign": null, "detection_source": "osv", "packages": [ { "package": "stake-math", "ecosystem": "npm", "versions": [ "3.1.0", "3.2.0", "3.3.0", "3.5.2", "3.5.3", "3.5.4" ], "osv_entries": [ { "osv_id": "MAL-2026-6585", "osv_published_at": "2026-06-29T05:33:56Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-29T15:58:09Z", "flagged_at": null, "confirmed_at": "2026-06-29T15:58:09Z", "osv_earliest_published_at": "2026-06-29T05:33:56Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-09T04:45:18Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-6585" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-6585", "ledger_commit_at": "2026-07-09T04:45:18Z" }, { "id": "poly-kelly-2026-06-29", "display_name": "poly-kelly", "campaign": null, "detection_source": "osv", "packages": [ { "package": "poly-kelly", "ecosystem": "npm", "versions": [ "3.1.0", "3.2.0", "3.3.0", "3.5.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6584", "osv_published_at": "2026-06-29T06:04:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-29T15:58:09Z", "flagged_at": null, "confirmed_at": "2026-06-29T15:58:09Z", "osv_earliest_published_at": "2026-06-29T06:04:33Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:55:51Z" }, { "id": "pino-debugging-2026-06-29", "display_name": "pino-debugging", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pino-debugging", "ecosystem": "npm", "versions": [ "1.1.3", "1.1.4" ], "osv_entries": [ { "osv_id": "MAL-2026-6583", "osv_published_at": "2026-06-29T06:27:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-29T15:58:09Z", "flagged_at": null, "confirmed_at": "2026-06-29T15:58:09Z", "osv_earliest_published_at": "2026-06-29T06:27:23Z", "hours_ahead_of_osv": -9.51, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-30T02:46:30Z" }, { "id": "openai-agents-helpers-2026-06-29", "display_name": "openai-agents-helpers", "campaign": null, "detection_source": "osv", "packages": [ { "package": "openai-agents-helpers", "ecosystem": "npm", "versions": [ "1.3.2", "1.3.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6582", "osv_published_at": "2026-06-29T06:12:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-29T15:58:08Z", "flagged_at": null, "confirmed_at": "2026-06-29T15:58:08Z", "osv_earliest_published_at": "2026-06-29T06:12:06Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:55:45Z" }, { "id": "ollama-helpers-2026-06-29", "display_name": "ollama-helpers", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ollama-helpers", "ecosystem": "npm", "versions": [ "0.1.0", "0.1.1", "0.2.0", "0.2.1", "0.3.0", "0.3.1", "0.4.0", "0.4.1", "0.5.0", "0.5.1", "0.6.0", "0.7.0", "0.7.1", "0.8.0", "0.9.0", "1.0.0", "1.0.1", "1.1.0", "1.1.1", "1.2.0", "1.2.1", "1.2.2", "1.2.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6581", "osv_published_at": "2026-06-29T05:51:09Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-29T15:58:08Z", "flagged_at": null, "confirmed_at": "2026-06-29T15:58:08Z", "osv_earliest_published_at": "2026-06-29T05:51:09Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-09T04:45:07Z", "press_urls": [ "https://osv.dev/vulnerability/MAL-2026-6581" ], "advisory_url": "https://osv.dev/vulnerability/MAL-2026-6581", "ledger_commit_at": "2026-07-09T04:45:07Z" }, { "id": "loadutils-2026-06-29", "display_name": "loadutils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "loadutils", "ecosystem": "npm", "versions": [ "1.0.4", "1.0.5", "1.0.6" ], "osv_entries": [ { "osv_id": "MAL-2026-6580", "osv_published_at": "2026-06-29T06:39:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-29T15:58:08Z", "flagged_at": null, "confirmed_at": "2026-06-29T15:58:08Z", "osv_earliest_published_at": "2026-06-29T06:39:52Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:55:38Z" }, { "id": "lessload-2026-06-29", "display_name": "lessload", "campaign": null, "detection_source": "osv", "packages": [ { "package": "lessload", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6579", "osv_published_at": "2026-06-29T05:32:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-29T15:58:08Z", "flagged_at": null, "confirmed_at": "2026-06-29T15:58:08Z", "osv_earliest_published_at": "2026-06-29T05:32:36Z", "hours_ahead_of_osv": -10.43, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-30T02:46:13Z" }, { "id": "layerd-unit-codec-parser-2026-06-29", "display_name": "layerd-unit-codec-parser", "campaign": null, "detection_source": "osv", "packages": [ { "package": "layerd-unit-codec-parser", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6578", "osv_published_at": "2026-06-29T06:35:34Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-29T15:58:07Z", "flagged_at": null, "confirmed_at": "2026-06-29T15:58:07Z", "osv_earliest_published_at": "2026-06-29T06:35:34Z", "hours_ahead_of_osv": -9.38, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-30T02:46:08Z" }, { "id": "int-sezzle-sfra-2026-06-29", "display_name": "int_sezzle_sfra", "campaign": null, "detection_source": "osv", "packages": [ { "package": "int_sezzle_sfra", "ecosystem": "npm", "versions": [ "25.2.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6577", "osv_published_at": "2026-06-29T05:34:59Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-29T15:58:07Z", "flagged_at": null, "confirmed_at": "2026-06-29T15:58:07Z", "osv_earliest_published_at": "2026-06-29T05:34:59Z", "hours_ahead_of_osv": -10.39, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-30T02:46:04Z" }, { "id": "ibrahim1337-baksen-2026-06-29", "display_name": "@ibrahim1337/baksen", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@ibrahim1337/baksen", "ecosystem": "npm", "versions": [ "1.0.0", "1.1.0", "1.2.0", "1.3.0", "1.5.0", "2.0.0", "2.0.1", "2.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6575", "osv_published_at": "2026-06-29T05:24:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-29T15:58:07Z", "flagged_at": null, "confirmed_at": "2026-06-29T15:58:07Z", "osv_earliest_published_at": "2026-06-29T05:24:50Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:55:32Z" }, { "id": "checkmarx-claude-cache-2026-06-29", "display_name": "checkmarx-claude-cache", "campaign": null, "detection_source": "osv", "packages": [ { "package": "checkmarx-claude-cache", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6576", "osv_published_at": "2026-06-29T05:59:14Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-29T15:58:07Z", "flagged_at": null, "confirmed_at": "2026-06-29T15:58:07Z", "osv_earliest_published_at": "2026-06-29T05:59:14Z", "hours_ahead_of_osv": -9.98, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-30T02:46:00Z" }, { "id": "yandex-geobase-2026-06-29", "display_name": "yandex-geobase", "campaign": null, "detection_source": "osv", "packages": [ { "package": "yandex-geobase", "ecosystem": "npm", "versions": [ "2.1.0", "2.1.1", "2.1.2", "2.2.0", "2.9.0", "3.9.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6574", "osv_published_at": "2026-06-29T04:17:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-29T15:58:06Z", "flagged_at": null, "confirmed_at": "2026-06-29T15:58:06Z", "osv_earliest_published_at": "2026-06-29T04:17:52Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:55:26Z" }, { "id": "rebrandly-domains-search-client-2026-06-29", "display_name": "rebrandly-domains-search-client", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rebrandly-domains-search-client", "ecosystem": "npm", "versions": [ "9999.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6573", "osv_published_at": "2026-06-29T03:20:27Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-29T15:58:05Z", "flagged_at": null, "confirmed_at": "2026-06-29T15:58:05Z", "osv_earliest_published_at": "2026-06-29T03:20:27Z", "hours_ahead_of_osv": -12.63, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-30T02:45:48Z" }, { "id": "rebrandly-domains-digger-2026-06-29", "display_name": "rebrandly-domains-digger", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rebrandly-domains-digger", "ecosystem": "npm", "versions": [ "9999.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6572", "osv_published_at": "2026-06-29T03:20:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-29T15:58:05Z", "flagged_at": null, "confirmed_at": "2026-06-29T15:58:05Z", "osv_earliest_published_at": "2026-06-29T03:20:35Z", "hours_ahead_of_osv": -12.62, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-30T02:45:43Z" }, { "id": "react-wp-viewer-2026-06-29", "display_name": "react-wp-viewer", "campaign": null, "detection_source": "osv", "packages": [ { "package": "react-wp-viewer", "ecosystem": "npm", "versions": [ "0.2.15", "0.2.4", "0.2.99" ], "osv_entries": [ { "osv_id": "MAL-2026-6571", "osv_published_at": "2026-06-29T04:17:26Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-29T15:58:05Z", "flagged_at": null, "confirmed_at": "2026-06-29T15:58:05Z", "osv_earliest_published_at": "2026-06-29T04:17:26Z", "hours_ahead_of_osv": -11.68, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-30T02:45:38Z" }, { "id": "pkg-fallback-2026-06-29", "display_name": "pkg-fallback", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pkg-fallback", "ecosystem": "npm", "versions": [ "1.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6570", "osv_published_at": "2026-06-29T04:26:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-29T15:58:04Z", "flagged_at": null, "confirmed_at": "2026-06-29T15:58:04Z", "osv_earliest_published_at": "2026-06-29T04:26:41Z", "hours_ahead_of_osv": -11.52, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-30T02:45:34Z" }, { "id": "longzy-basic-ui-2026-06-29", "display_name": "longzy-basic-ui", "campaign": null, "detection_source": "osv", "packages": [ { "package": "longzy-basic-ui", "ecosystem": "npm", "versions": [ "2.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6569", "osv_published_at": "2026-06-29T04:37:18Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-29T15:58:04Z", "flagged_at": null, "confirmed_at": "2026-06-29T15:58:04Z", "osv_earliest_published_at": "2026-06-29T04:37:18Z", "hours_ahead_of_osv": -11.35, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-30T02:45:30Z" }, { "id": "express-mocha-test-2026-06-29", "display_name": "express-mocha-test", "campaign": null, "detection_source": "osv", "packages": [ { "package": "express-mocha-test", "ecosystem": "npm", "versions": [ "0.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6568", "osv_published_at": "2026-06-29T04:25:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-29T15:58:04Z", "flagged_at": null, "confirmed_at": "2026-06-29T15:58:04Z", "osv_earliest_published_at": "2026-06-29T04:25:49Z", "hours_ahead_of_osv": -11.54, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-30T02:45:26Z" }, { "id": "eslint-commit-parser-2026-06-29", "display_name": "eslint-commit-parser", "campaign": null, "detection_source": "osv", "packages": [ { "package": "eslint-commit-parser", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6567", "osv_published_at": "2026-06-29T04:00:16Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-29T15:58:04Z", "flagged_at": null, "confirmed_at": "2026-06-29T15:58:04Z", "osv_earliest_published_at": "2026-06-29T04:00:16Z", "hours_ahead_of_osv": -11.96, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-30T02:45:22Z" }, { "id": "uisp-utils-2026-06-29", "display_name": "@uisp/utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@uisp/utils", "ecosystem": "npm", "versions": [ "99.0.0", "99.0.1", "99.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6565", "osv_published_at": "2026-06-29T03:20:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-29T15:58:03Z", "flagged_at": null, "confirmed_at": "2026-06-29T15:58:03Z", "osv_earliest_published_at": "2026-06-29T03:20:42Z", "hours_ahead_of_osv": -12.62, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-30T02:45:14Z" }, { "id": "date-uuid-2026-06-29", "display_name": "date-uuid", "campaign": null, "detection_source": "osv", "packages": [ { "package": "date-uuid", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6566", "osv_published_at": "2026-06-29T04:09:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-29T15:58:03Z", "flagged_at": null, "confirmed_at": "2026-06-29T15:58:03Z", "osv_earliest_published_at": "2026-06-29T04:09:22Z", "hours_ahead_of_osv": -11.81, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-30T02:45:18Z" }, { "id": "thone33-core-utils-2026-06-29", "display_name": "@thone33/core-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@thone33/core-utils", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2", "1.0.3", "1.0.4", "1.0.5" ], "osv_entries": [ { "osv_id": "MAL-2026-6564", "osv_published_at": "2026-06-29T04:50:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-29T15:58:02Z", "flagged_at": null, "confirmed_at": "2026-06-29T15:58:02Z", "osv_earliest_published_at": "2026-06-29T04:50:05Z", "hours_ahead_of_osv": -11.13, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-30T02:45:10Z" }, { "id": "thone33-analytics-injector-2026-06-29", "display_name": "@thone33/analytics-injector", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@thone33/analytics-injector", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6563", "osv_published_at": "2026-06-29T04:50:56Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-29T15:58:00Z", "flagged_at": null, "confirmed_at": "2026-06-29T15:58:00Z", "osv_earliest_published_at": "2026-06-29T04:50:56Z", "hours_ahead_of_osv": -11.12, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-30T02:45:06Z" }, { "id": "epic-common-observability-node-2026-06-29", "display_name": "@epic-common/observability-node", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@epic-common/observability-node", "ecosystem": "npm", "versions": [ "0.0.1", "10.10.1", "10.10.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6562", "osv_published_at": "2026-06-29T04:21:26Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-29T15:56:18Z", "flagged_at": null, "confirmed_at": "2026-06-29T15:56:18Z", "osv_earliest_published_at": "2026-06-29T04:21:26Z", "hours_ahead_of_osv": -11.58, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:23:27Z" }, { "id": "chai-as-assured-2026-06-29", "display_name": "chai-as-assured", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-assured", "ecosystem": "npm", "versions": [ "6.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-6532", "osv_published_at": "2026-06-26T17:44:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-29T15:56:18Z", "flagged_at": null, "confirmed_at": "2026-06-29T15:56:18Z", "osv_earliest_published_at": "2026-06-26T17:44:23Z", "hours_ahead_of_osv": -70.2, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-30T02:44:52Z" }, { "id": "ai-sdk-helpers-2026-06-29", "display_name": "ai-sdk-helpers", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ai-sdk-helpers", "ecosystem": "npm", "versions": [ "1.4.4" ], "osv_entries": [ { "osv_id": "MAL-2026-5565", "osv_published_at": "2026-06-11T05:17:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-29T15:56:14Z", "flagged_at": null, "confirmed_at": "2026-06-29T15:56:14Z", "osv_earliest_published_at": "2026-06-11T05:17:41Z", "hours_ahead_of_osv": -442.64, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-30T02:44:29Z" }, { "id": "langgraphjs-toolkit-2026-06-29", "display_name": "@langgraphjs/toolkit", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@langgraphjs/toolkit", "ecosystem": "npm", "versions": [ "1.2.12", "1.2.13" ], "osv_entries": [ { "osv_id": "MAL-2026-2509", "osv_published_at": "2026-04-07T12:15:13Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-29T15:56:12Z", "flagged_at": null, "confirmed_at": "2026-06-29T15:56:12Z", "osv_earliest_published_at": "2026-04-07T12:15:13Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://app.safedep.io/community/malysis/01KNKXNEVJTCVM0RAC2DGCMP01", "ledger_commit_at": "2026-07-09T00:47:10Z" }, { "id": "django-bkvision-2026-06-29", "display_name": "django-bkvision", "campaign": null, "detection_source": "osv", "packages": [ { "package": "django-bkvision", "ecosystem": "pypi", "versions": [ "1.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6593", "osv_published_at": "2026-06-29T09:41:45Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-29T15:52:09Z", "flagged_at": null, "confirmed_at": "2026-06-29T15:52:09Z", "osv_earliest_published_at": "2026-06-29T09:41:45Z", "hours_ahead_of_osv": -6.17, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-30T02:44:19Z" }, { "id": "skillspector-2026-06-29", "display_name": "skillspector", "campaign": null, "detection_source": "osv", "packages": [ { "package": "skillspector", "ecosystem": "pypi", "versions": [ "0.0.1", "0.0.2", "0.0.3", "0.0.4", "2.3.10", "2.3.7", "2.3.8", "2.3.9" ], "osv_entries": [ { "osv_id": "MAL-2026-6561", "osv_published_at": "2026-06-28T21:50:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-29T03:11:19Z", "flagged_at": null, "confirmed_at": "2026-06-29T03:11:19Z", "osv_earliest_published_at": "2026-06-28T21:50:42Z", "hours_ahead_of_osv": -5.34, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-29T04:15:18Z" }, { "id": "tdata-grabber-2026-06-28", "display_name": "tdata-grabber", "campaign": null, "detection_source": "osv", "packages": [ { "package": "tdata-grabber", "ecosystem": "pypi", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6560", "osv_published_at": "2026-06-28T16:55:16Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-28T21:41:32Z", "flagged_at": null, "confirmed_at": "2026-06-28T21:41:32Z", "osv_earliest_published_at": "2026-06-28T16:55:16Z", "hours_ahead_of_osv": -4.77, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-28T21:41:33Z" }, { "id": "lc-chatbot-2026-06-28", "display_name": "lc-chatbot", "campaign": null, "detection_source": "osv", "packages": [ { "package": "lc-chatbot", "ecosystem": "npm", "versions": [ "0.9.0-rc.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6559", "osv_published_at": "2026-06-28T13:05:55Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-28T15:33:08Z", "flagged_at": null, "confirmed_at": "2026-06-28T15:33:08Z", "osv_earliest_published_at": "2026-06-28T13:05:55Z", "hours_ahead_of_osv": -2.45, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-28T15:33:08Z" }, { "id": "fsociety-tools-2026-06-28", "display_name": "fsociety-tools", "campaign": null, "detection_source": "osv", "packages": [ { "package": "fsociety-tools", "ecosystem": "pypi", "versions": [ "1.0.0", "1.0.1", "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6558", "osv_published_at": "2026-06-28T11:03:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-28T15:29:01Z", "flagged_at": null, "confirmed_at": "2026-06-28T15:29:01Z", "osv_earliest_published_at": "2026-06-28T11:03:41Z", "hours_ahead_of_osv": -4.42, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-28T15:29:01Z" }, { "id": "polymarket-clob-math-2026-06-28", "display_name": "polymarket-clob-math", "campaign": null, "detection_source": "osv", "packages": [ { "package": "polymarket-clob-math", "ecosystem": "npm", "versions": [ "1.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-6556", "osv_published_at": "2026-06-28T06:02:02Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-28T09:51:45Z", "flagged_at": null, "confirmed_at": "2026-06-28T09:51:45Z", "osv_earliest_published_at": "2026-06-28T06:02:02Z", "hours_ahead_of_osv": -3.83, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-28T09:52:09Z" }, { "id": "livekit-agents-2026-06-28", "display_name": "livekit-agents", "campaign": null, "detection_source": "osv", "packages": [ { "package": "livekit-agents", "ecosystem": "npm", "versions": [ "0.2.0", "0.2.1", "0.2.2", "0.2.3", "0.3.0", "0.3.1", "0.3.2", "0.3.4", "0.3.5" ], "osv_entries": [ { "osv_id": "MAL-2026-6555", "osv_published_at": "2026-06-28T06:01:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-28T09:51:45Z", "flagged_at": null, "confirmed_at": "2026-06-28T09:51:45Z", "osv_earliest_published_at": "2026-06-28T06:01:35Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:55:19Z" }, { "id": "insomnia-test-util-m4gester-2026-06-28", "display_name": "insomnia-test-util-m4gester", "campaign": null, "detection_source": "osv", "packages": [ { "package": "insomnia-test-util-m4gester", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6554", "osv_published_at": "2026-06-28T06:00:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-28T09:51:44Z", "flagged_at": null, "confirmed_at": "2026-06-28T09:51:44Z", "osv_earliest_published_at": "2026-06-28T06:00:51Z", "hours_ahead_of_osv": -3.85, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-28T09:52:00Z" }, { "id": "insomnia-plugin-poc-m4gester2-2026-06-28", "display_name": "insomnia-plugin-poc-m4gester2", "campaign": null, "detection_source": "osv", "packages": [ { "package": "insomnia-plugin-poc-m4gester2", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6553", "osv_published_at": "2026-06-28T06:00:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-28T09:51:44Z", "flagged_at": null, "confirmed_at": "2026-06-28T09:51:44Z", "osv_earliest_published_at": "2026-06-28T06:00:35Z", "hours_ahead_of_osv": -3.85, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-28T09:51:56Z" }, { "id": "insomnia-plugin-poc-m4gester-2026-06-28", "display_name": "insomnia-plugin-poc-m4gester", "campaign": null, "detection_source": "osv", "packages": [ { "package": "insomnia-plugin-poc-m4gester", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6552", "osv_published_at": "2026-06-28T06:00:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-28T09:51:43Z", "flagged_at": null, "confirmed_at": "2026-06-28T09:51:43Z", "osv_earliest_published_at": "2026-06-28T06:00:42Z", "hours_ahead_of_osv": -3.85, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-28T09:51:52Z" }, { "id": "anthropic-internal-tools-2026-06-28", "display_name": "anthropic-internal-tools", "campaign": null, "detection_source": "osv", "packages": [ { "package": "anthropic-internal-tools", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6551", "osv_published_at": "2026-06-28T05:59:11Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-28T09:51:43Z", "flagged_at": null, "confirmed_at": "2026-06-28T09:51:43Z", "osv_earliest_published_at": "2026-06-28T05:59:11Z", "hours_ahead_of_osv": -3.88, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-28T09:51:47Z" }, { "id": "k18n-creatormarketplace-admin-language-2026-06-28", "display_name": "@k18n/creatormarketplace-admin-language", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@k18n/creatormarketplace-admin-language", "ecosystem": "npm", "versions": [ "99.0.0", "99.0.1", "99.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6550", "osv_published_at": "2026-06-28T06:01:17Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-28T09:51:42Z", "flagged_at": null, "confirmed_at": "2026-06-28T09:51:42Z", "osv_earliest_published_at": "2026-06-28T06:01:17Z", "hours_ahead_of_osv": -3.84, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-08T20:23:22Z" }, { "id": "pkg-fallback-2026-06-28", "display_name": "pkg-fallback", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pkg-fallback", "ecosystem": "pypi", "versions": [ "1.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6557", "osv_published_at": "2026-06-28T06:01:28Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-28T09:47:49Z", "flagged_at": null, "confirmed_at": "2026-06-28T09:47:49Z", "osv_earliest_published_at": "2026-06-28T06:01:28Z", "hours_ahead_of_osv": -3.77, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-28T09:47:50Z" }, { "id": "express-initial-2026-06-26", "display_name": "express-initial", "campaign": null, "detection_source": "osv", "packages": [ { "package": "express-initial", "ecosystem": "npm", "versions": [ "12.1.10", "12.1.9" ], "osv_entries": [ { "osv_id": "MAL-2026-6543", "osv_published_at": "2026-06-26T21:40:14Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-26T23:46:38Z", "flagged_at": null, "confirmed_at": "2026-06-26T23:46:38Z", "osv_earliest_published_at": "2026-06-26T21:40:14Z", "hours_ahead_of_osv": -2.11, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-26T23:47:57Z" }, { "id": "osmura-treeify-2026-06-26", "display_name": "@osmura/treeify", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@osmura/treeify", "ecosystem": "npm", "versions": [ "1.1.0", "1.1.2", "1.1.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6542", "osv_published_at": "2026-06-26T21:41:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-26T23:46:37Z", "flagged_at": null, "confirmed_at": "2026-06-26T23:46:37Z", "osv_earliest_published_at": "2026-06-26T21:41:48Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:55:06Z" }, { "id": "db-rake-2026-06-26", "display_name": "db-rake", "campaign": null, "detection_source": "osv", "packages": [ { "package": "db-rake", "ecosystem": "npm", "versions": [ "1.0.1", "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6540", "osv_published_at": "2026-06-26T21:11:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-26T23:46:37Z", "flagged_at": null, "confirmed_at": "2026-06-26T23:46:37Z", "osv_earliest_published_at": "2026-06-26T21:11:20Z", "hours_ahead_of_osv": -2.59, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-26T23:47:48Z" }, { "id": "db-query-log-2026-06-26", "display_name": "db-query-log", "campaign": null, "detection_source": "osv", "packages": [ { "package": "db-query-log", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6539", "osv_published_at": "2026-06-26T21:19:18Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-26T23:46:37Z", "flagged_at": null, "confirmed_at": "2026-06-26T23:46:37Z", "osv_earliest_published_at": "2026-06-26T21:19:18Z", "hours_ahead_of_osv": -2.46, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-26T23:47:43Z" }, { "id": "gptmini-2026-06-26", "display_name": "gptmini", "campaign": null, "detection_source": "osv", "packages": [ { "package": "gptmini", "ecosystem": "npm", "versions": [ "4.0.2", "4.0.6" ], "osv_entries": [ { "osv_id": "MAL-2026-6537", "osv_published_at": "2026-06-26T20:13:56Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-26T23:46:36Z", "flagged_at": null, "confirmed_at": "2026-06-26T23:46:36Z", "osv_earliest_published_at": "2026-06-26T20:13:56Z", "hours_ahead_of_osv": -3.54, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-26T23:47:35Z" }, { "id": "db-plog-2026-06-26", "display_name": "db-plog", "campaign": null, "detection_source": "osv", "packages": [ { "package": "db-plog", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6538", "osv_published_at": "2026-06-26T21:08:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-26T23:46:36Z", "flagged_at": null, "confirmed_at": "2026-06-26T23:46:36Z", "osv_earliest_published_at": "2026-06-26T21:08:49Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-09T00:54:59Z" }, { "id": "react-dynammic-table-component-2026-06-26", "display_name": "react-dynammic-table-component", "campaign": null, "detection_source": "osv", "packages": [ { "package": "react-dynammic-table-component", "ecosystem": "npm", "versions": [ "1.2.7" ], "osv_entries": [ { "osv_id": "MAL-2026-6534", "osv_published_at": "2026-06-26T18:16:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-26T23:46:35Z", "flagged_at": null, "confirmed_at": "2026-06-26T23:46:35Z", "osv_earliest_published_at": "2026-06-26T18:16:23Z", "hours_ahead_of_osv": -5.5, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-26T23:47:22Z" }, { "id": "react-dynamic-table-compenent-2026-06-26", "display_name": "react-dynamic-table-compenent", "campaign": null, "detection_source": "osv", "packages": [ { "package": "react-dynamic-table-compenent", "ecosystem": "npm", "versions": [ "1.2.7" ], "osv_entries": [ { "osv_id": "MAL-2026-6533", "osv_published_at": "2026-06-26T18:16:17Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-26T23:46:35Z", "flagged_at": null, "confirmed_at": "2026-06-26T23:46:35Z", "osv_earliest_published_at": "2026-06-26T18:16:17Z", "hours_ahead_of_osv": -5.5, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-26T23:47:18Z" }, { "id": "krentzen-buffer-reverse-2026-06-26", "display_name": "@krentzen/buffer-reverse", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@krentzen/buffer-reverse", "ecosystem": "npm", "versions": [ "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6536", "osv_published_at": "2026-06-26T20:21:45Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-26T23:46:35Z", "flagged_at": null, "confirmed_at": "2026-06-26T23:46:35Z", "osv_earliest_published_at": "2026-06-26T20:21:45Z", "hours_ahead_of_osv": -3.41, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-26T23:47:31Z" }, { "id": "disksweep-2026-06-26", "display_name": "disksweep", "campaign": null, "detection_source": "osv", "packages": [ { "package": "disksweep", "ecosystem": "npm", "versions": [ "1.0.0", "3.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6535", "osv_published_at": "2026-06-26T19:01:32Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-26T23:46:35Z", "flagged_at": null, "confirmed_at": "2026-06-26T23:46:35Z", "osv_earliest_published_at": "2026-06-26T19:01:32Z", "hours_ahead_of_osv": -4.75, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-26T23:47:26Z" }, { "id": "xrblocks-remote-control-2026-06-26", "display_name": "xrblocks-remote-control", "campaign": null, "detection_source": "osv", "packages": [ { "package": "xrblocks-remote-control", "ecosystem": "npm", "versions": [ "22.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6530", "osv_published_at": "2026-06-26T16:56:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-26T23:46:34Z", "flagged_at": null, "confirmed_at": "2026-06-26T23:46:34Z", "osv_earliest_published_at": "2026-06-26T16:56:03Z", "hours_ahead_of_osv": -6.84, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-26T23:47:05Z" }, { "id": "chai-as-assured-2026-06-26", "display_name": "chai-as-assured", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-assured", "ecosystem": "npm", "versions": [ "7.1.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6532", "osv_published_at": "2026-06-26T17:44:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-26T23:46:34Z", "flagged_at": null, "confirmed_at": "2026-06-26T23:46:34Z", "osv_earliest_published_at": "2026-06-26T17:44:23Z", "hours_ahead_of_osv": -6.04, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-26T23:47:14Z" }, { "id": "appupdate-cdn-sync-2026-06-26", "display_name": "@appupdate/cdn-sync", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@appupdate/cdn-sync", "ecosystem": "npm", "versions": [ "1.0.2", "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6531", "osv_published_at": "2026-06-26T18:24:34Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-26T23:46:34Z", "flagged_at": null, "confirmed_at": "2026-06-26T23:46:34Z", "osv_earliest_published_at": "2026-06-26T18:24:34Z", "hours_ahead_of_osv": -5.37, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-30T02:44:48Z" }, { "id": "immobiliarelabs-backstage-plugin-ldap-auth-backend-2026-06-26", "display_name": "@immobiliarelabs/backstage-plugin-ldap-auth-backend", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@immobiliarelabs/backstage-plugin-ldap-auth-backend", "ecosystem": "npm", "versions": [ "1.1.3", "2.0.5", "3.0.2", "4.3.2", "5.2.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6529", "osv_published_at": "2026-06-26T15:42:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-26T23:46:33Z", "flagged_at": null, "confirmed_at": "2026-06-26T23:46:33Z", "osv_earliest_published_at": "2026-06-26T15:42:07Z", "hours_ahead_of_osv": -8.07, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-26T23:47:00Z" }, { "id": "immobiliarelabs-backstage-plugin-ldap-auth-2026-06-26", "display_name": "@immobiliarelabs/backstage-plugin-ldap-auth", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@immobiliarelabs/backstage-plugin-ldap-auth", "ecosystem": "npm", "versions": [ "1.1.4", "2.0.5", "3.0.2", "4.3.2", "5.2.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6528", "osv_published_at": "2026-06-26T15:42:04Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-26T23:46:32Z", "flagged_at": null, "confirmed_at": "2026-06-26T23:46:32Z", "osv_earliest_published_at": "2026-06-26T15:42:04Z", "hours_ahead_of_osv": -8.07, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-26T23:46:56Z" }, { "id": "immobiliarelabs-backstage-plugin-gitlab-backend-2026-06-26", "display_name": "@immobiliarelabs/backstage-plugin-gitlab-backend", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@immobiliarelabs/backstage-plugin-gitlab-backend", "ecosystem": "npm", "versions": [ "3.0.3", "4.0.2", "5.2.1", "6.13.1", "7.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6527", "osv_published_at": "2026-06-26T15:42:17Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-26T23:46:31Z", "flagged_at": null, "confirmed_at": "2026-06-26T23:46:31Z", "osv_earliest_published_at": "2026-06-26T15:42:17Z", "hours_ahead_of_osv": -8.07, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-26T23:46:51Z" }, { "id": "immobiliarelabs-backstage-plugin-gitlab-2026-06-26", "display_name": "@immobiliarelabs/backstage-plugin-gitlab", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@immobiliarelabs/backstage-plugin-gitlab", "ecosystem": "npm", "versions": [ "1.0.1", "2.1.2", "3.0.3", "4.0.2", "5.2.1", "6.13.1", "7.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6526", "osv_published_at": "2026-06-26T15:42:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-26T23:46:30Z", "flagged_at": null, "confirmed_at": "2026-06-26T23:46:30Z", "osv_earliest_published_at": "2026-06-26T15:42:00Z", "hours_ahead_of_osv": -8.07, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-26T23:46:47Z" }, { "id": "ts-einkle-slot-2026-06-26", "display_name": "ts-einkle-slot", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ts-einkle-slot", "ecosystem": "npm", "versions": [ "0.0.8" ], "osv_entries": [ { "osv_id": "MAL-2026-6525", "osv_published_at": "2026-06-26T14:15:58Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-26T23:46:29Z", "flagged_at": null, "confirmed_at": "2026-06-26T23:46:29Z", "osv_earliest_published_at": "2026-06-26T14:15:58Z", "hours_ahead_of_osv": -9.51, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-26T23:46:42Z" }, { "id": "ts-einkle-2026-06-26", "display_name": "ts-einkle", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ts-einkle", "ecosystem": "npm", "versions": [ "1.0.9" ], "osv_entries": [ { "osv_id": "MAL-2026-6524", "osv_published_at": "2026-06-26T14:16:24Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-26T23:46:29Z", "flagged_at": null, "confirmed_at": "2026-06-26T23:46:29Z", "osv_earliest_published_at": "2026-06-26T14:16:24Z", "hours_ahead_of_osv": -9.5, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-26T23:46:38Z" }, { "id": "express-plugin-2026-06-26", "display_name": "express-plugin", "campaign": null, "detection_source": "osv", "packages": [ { "package": "express-plugin", "ecosystem": "npm", "versions": [ "1.6.6" ], "osv_entries": [ { "osv_id": "MAL-2026-6523", "osv_published_at": "2026-06-26T14:35:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-26T23:46:29Z", "flagged_at": null, "confirmed_at": "2026-06-26T23:46:29Z", "osv_earliest_published_at": "2026-06-26T14:35:03Z", "hours_ahead_of_osv": -9.19, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-26T23:46:33Z" }, { "id": "epsteinlovekids483-crossmint-wallets-sdk-pentest-2026-06-26", "display_name": "@epsteinlovekids483/crossmint-wallets-sdk-pentest", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@epsteinlovekids483/crossmint-wallets-sdk-pentest", "ecosystem": "npm", "versions": [ "1.0.0-pentest", "1.0.1-pentest", "1.0.11", "1.0.11-pentest", "1.0.2-pentest", "1.0.5-pentest", "1.0.7-pentest", "1.0.9-pentest" ], "osv_entries": [ { "osv_id": "MAL-2026-6522", "osv_published_at": "2026-06-26T14:13:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-26T23:46:28Z", "flagged_at": null, "confirmed_at": "2026-06-26T23:46:28Z", "osv_earliest_published_at": "2026-06-26T14:13:39Z", "hours_ahead_of_osv": -9.55, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-26T23:46:29Z" }, { "id": "dtxtools-2026-06-26", "display_name": "dtxtools", "campaign": null, "detection_source": "osv", "packages": [ { "package": "dtxtools", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6514", "osv_published_at": "2026-06-26T09:06:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-26T23:44:47Z", "flagged_at": null, "confirmed_at": "2026-06-26T23:44:47Z", "osv_earliest_published_at": "2026-06-26T09:06:00Z", "hours_ahead_of_osv": -14.65, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-26T23:45:33Z" }, { "id": "dtxto1ols-2026-06-26", "display_name": "dtxto1ols", "campaign": null, "detection_source": "osv", "packages": [ { "package": "dtxto1ols", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6513", "osv_published_at": "2026-06-26T09:10:56Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-26T23:44:47Z", "flagged_at": null, "confirmed_at": "2026-06-26T23:44:47Z", "osv_earliest_published_at": "2026-06-26T09:10:56Z", "hours_ahead_of_osv": -14.56, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-26T23:45:29Z" }, { "id": "carvana-authentication-flows-shared-2026-06-26", "display_name": "@carvana.authentication-flows/shared", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@carvana.authentication-flows/shared", "ecosystem": "npm", "versions": [ "19.2.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6521", "osv_published_at": "2026-06-26T14:36:29Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-26T23:44:47Z", "flagged_at": null, "confirmed_at": "2026-06-26T23:44:47Z", "osv_earliest_published_at": "2026-06-26T14:36:29Z", "hours_ahead_of_osv": -9.14, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-26T23:45:39Z" }, { "id": "wellnpm-2026-06-26", "display_name": "wellnpm", "campaign": null, "detection_source": "osv", "packages": [ { "package": "wellnpm", "ecosystem": "npm", "versions": [ "2.0.10", "2.0.11", "2.0.9", "3.0.0", "3.0.1", "3.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6501", "osv_published_at": "2026-06-26T01:51:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-26T23:44:46Z", "flagged_at": null, "confirmed_at": "2026-06-26T23:44:46Z", "osv_earliest_published_at": "2026-06-26T01:51:48Z", "hours_ahead_of_osv": -21.88, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-26T23:45:25Z" }, { "id": "dttfdsdee-2026-06-26", "display_name": "dttfdsdee", "campaign": null, "detection_source": "osv", "packages": [ { "package": "dttfdsdee", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.2", "1.0.3", "1.0.4", "1.0.5", "1.0.6" ], "osv_entries": [ { "osv_id": "MAL-2026-6498", "osv_published_at": "2026-06-26T02:55:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-26T23:44:46Z", "flagged_at": null, "confirmed_at": "2026-06-26T23:44:46Z", "osv_earliest_published_at": "2026-06-26T02:55:50Z", "hours_ahead_of_osv": -20.82, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-26T23:45:21Z" }, { "id": "unsafe-malicious-package-2026-06-26", "display_name": "unsafe-malicious-package", "campaign": null, "detection_source": "osv", "packages": [ { "package": "unsafe-malicious-package", "ecosystem": "npm", "versions": [ "2.0.0", "2.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6486", "osv_published_at": "2026-06-25T22:21:55Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-26T23:44:45Z", "flagged_at": null, "confirmed_at": "2026-06-26T23:44:45Z", "osv_earliest_published_at": "2026-06-25T22:21:55Z", "hours_ahead_of_osv": -25.38, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-26T23:45:15Z" }, { "id": "base58-core-2026-06-26", "display_name": "base58-core", "campaign": null, "detection_source": "osv", "packages": [ { "package": "base58-core", "ecosystem": "npm", "versions": [ "1.0.2", "1.0.3", "1.0.4", "1.0.5" ], "osv_entries": [ { "osv_id": "MAL-2026-6445", "osv_published_at": "2026-06-25T06:43:58Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-26T23:44:44Z", "flagged_at": null, "confirmed_at": "2026-06-26T23:44:44Z", "osv_earliest_published_at": "2026-06-25T06:43:58Z", "hours_ahead_of_osv": -41.01, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-30T02:44:43Z" }, { "id": "muaththir-api-2026-06-26", "display_name": "@muaththir/api", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@muaththir/api", "ecosystem": "npm", "versions": [ "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6328", "osv_published_at": "2026-06-23T16:11:16Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-26T23:44:43Z", "flagged_at": null, "confirmed_at": "2026-06-26T23:44:43Z", "osv_earliest_published_at": "2026-06-23T16:11:16Z", "hours_ahead_of_osv": -79.56, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-26T23:45:03Z" }, { "id": "self-certificate-2026-06-26", "display_name": "self-certificate", "campaign": null, "detection_source": "osv", "packages": [ { "package": "self-certificate", "ecosystem": "npm", "versions": [ "1.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5644", "osv_published_at": "2026-06-11T13:02:34Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-26T23:44:42Z", "flagged_at": null, "confirmed_at": "2026-06-26T23:44:42Z", "osv_earliest_published_at": "2026-06-11T13:02:34Z", "hours_ahead_of_osv": -370.7, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-26T23:44:55Z" }, { "id": "sqligen-2026-06-26", "display_name": "sqligen", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sqligen", "ecosystem": "pypi", "versions": [ "1.0.0", "1.0.5", "1.0.6", "1.0.7", "1.0.8", "1.1.1", "1.1.3", "1.1.4" ], "osv_entries": [ { "osv_id": "MAL-2026-6515", "osv_published_at": "2026-06-26T09:23:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-26T23:40:25Z", "flagged_at": null, "confirmed_at": "2026-06-26T23:40:25Z", "osv_earliest_published_at": "2026-06-26T09:23:52Z", "hours_ahead_of_osv": -14.28, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-26T23:40:30Z" }, { "id": "pdf-converter-pro-2026-06-26", "display_name": "pdf-converter-pro", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pdf-converter-pro", "ecosystem": "pypi", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6541", "osv_published_at": "2026-06-26T20:35:30Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-26T23:40:25Z", "flagged_at": null, "confirmed_at": "2026-06-26T23:40:25Z", "osv_earliest_published_at": "2026-06-26T20:35:30Z", "hours_ahead_of_osv": -3.08, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-26T23:40:39Z" }, { "id": "inlifegram-2026-06-26", "display_name": "inlifegram", "campaign": null, "detection_source": "osv", "packages": [ { "package": "inlifegram", "ecosystem": "pypi", "versions": [ "2.1.2.8", "2.1.2.9" ], "osv_entries": [ { "osv_id": "MAL-2026-6516", "osv_published_at": "2026-06-26T10:50:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-26T23:40:25Z", "flagged_at": null, "confirmed_at": "2026-06-26T23:40:25Z", "osv_earliest_published_at": "2026-06-26T10:50:08Z", "hours_ahead_of_osv": -12.84, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-26T23:40:35Z" }, { "id": "openblox-2026-06-26", "display_name": "openblox", "campaign": null, "detection_source": "osv", "packages": [ { "package": "openblox", "ecosystem": "pypi", "versions": [ "1.0.0", "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6504", "osv_published_at": "2026-06-26T04:51:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-26T23:40:24Z", "flagged_at": null, "confirmed_at": "2026-06-26T23:40:24Z", "osv_earliest_published_at": "2026-06-26T04:51:49Z", "hours_ahead_of_osv": -18.81, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-26T23:40:26Z" }, { "id": "pyext6cc8cd-2026-06-26", "display_name": "pyext6cc8cd", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pyext6cc8cd", "ecosystem": "pypi", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6488", "osv_published_at": "2026-06-25T22:45:45Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-26T03:10:48Z", "flagged_at": null, "confirmed_at": "2026-06-26T03:10:48Z", "osv_earliest_published_at": "2026-06-25T22:45:45Z", "hours_ahead_of_osv": -4.42, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-26T05:07:05Z" }, { "id": "extra-huggingface-2026-06-26", "display_name": "extra-huggingface", "campaign": null, "detection_source": "osv", "packages": [ { "package": "extra-huggingface", "ecosystem": "pypi", "versions": [ "0.4.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6489", "osv_published_at": "2026-06-25T22:49:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-26T03:10:48Z", "flagged_at": null, "confirmed_at": "2026-06-26T03:10:48Z", "osv_earliest_published_at": "2026-06-25T22:49:25Z", "hours_ahead_of_osv": -4.36, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-26T05:07:10Z" }, { "id": "mi-test-99-tuapellido-2026-06-26", "display_name": "mi-test-99-tuapellido", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mi-test-99-tuapellido", "ecosystem": "pypi", "versions": [ "99.9" ], "osv_entries": [ { "osv_id": "MAL-2026-6478", "osv_published_at": "2026-06-25T21:11:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-26T03:10:47Z", "flagged_at": null, "confirmed_at": "2026-06-26T03:10:47Z", "osv_earliest_published_at": "2026-06-25T21:11:03Z", "hours_ahead_of_osv": -6.0, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-26T05:07:01Z" }, { "id": "typedecode-2026-06-25", "display_name": "typedecode", "campaign": null, "detection_source": "osv", "packages": [ { "package": "typedecode", "ecosystem": "npm", "versions": [ "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6476", "osv_published_at": "2026-06-25T20:32:15Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-25T22:17:03Z", "flagged_at": null, "confirmed_at": "2026-06-25T22:17:03Z", "osv_earliest_published_at": "2026-06-25T20:32:15Z", "hours_ahead_of_osv": -1.75, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-25T22:17:55Z" }, { "id": "textshape-css-2026-06-25", "display_name": "textshape-css", "campaign": null, "detection_source": "osv", "packages": [ { "package": "textshape-css", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6475", "osv_published_at": "2026-06-25T20:26:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-25T22:17:03Z", "flagged_at": null, "confirmed_at": "2026-06-25T22:17:03Z", "osv_earliest_published_at": "2026-06-25T20:26:21Z", "hours_ahead_of_osv": -1.84, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-25T22:17:50Z" }, { "id": "tailwindcss-effector-2026-06-25", "display_name": "tailwindcss-effector", "campaign": null, "detection_source": "osv", "packages": [ { "package": "tailwindcss-effector", "ecosystem": "npm", "versions": [ "1.7.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6472", "osv_published_at": "2026-06-25T18:43:43Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-25T22:17:03Z", "flagged_at": null, "confirmed_at": "2026-06-25T22:17:03Z", "osv_earliest_published_at": "2026-06-25T18:43:43Z", "hours_ahead_of_osv": -3.56, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-25T22:17:36Z" }, { "id": "ref-slot-2026-06-25", "display_name": "ref-slot", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ref-slot", "ecosystem": "npm", "versions": [ "1.0.9" ], "osv_entries": [ { "osv_id": "MAL-2026-6474", "osv_published_at": "2026-06-25T20:40:44Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-25T22:17:03Z", "flagged_at": null, "confirmed_at": "2026-06-25T22:17:03Z", "osv_earliest_published_at": "2026-06-25T20:40:44Z", "hours_ahead_of_osv": -1.61, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-25T22:17:46Z" }, { "id": "colorpicker-ui-2026-06-25", "display_name": "colorpicker-ui", "campaign": null, "detection_source": "osv", "packages": [ { "package": "colorpicker-ui", "ecosystem": "npm", "versions": [ "1.2.4", "1.2.5" ], "osv_entries": [ { "osv_id": "MAL-2026-6473", "osv_published_at": "2026-06-25T20:16:17Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-25T22:17:03Z", "flagged_at": null, "confirmed_at": "2026-06-25T22:17:03Z", "osv_earliest_published_at": "2026-06-25T20:16:17Z", "hours_ahead_of_osv": -2.01, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-25T22:17:41Z" }, { "id": "ts-precision-2026-06-25", "display_name": "ts-precision", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ts-precision", "ecosystem": "npm", "versions": [ "3.7.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6469", "osv_published_at": "2026-06-25T18:11:56Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-25T22:17:02Z", "flagged_at": null, "confirmed_at": "2026-06-25T22:17:02Z", "osv_earliest_published_at": "2026-06-25T18:11:56Z", "hours_ahead_of_osv": -4.08, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-25T22:17:21Z" }, { "id": "tailwind-color-shades-2026-06-25", "display_name": "tailwind-color-shades", "campaign": null, "detection_source": "osv", "packages": [ { "package": "tailwind-color-shades", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6471", "osv_published_at": "2026-06-25T18:43:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-25T22:17:02Z", "flagged_at": null, "confirmed_at": "2026-06-25T22:17:02Z", "osv_earliest_published_at": "2026-06-25T18:43:49Z", "hours_ahead_of_osv": -3.55, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-25T22:17:31Z" }, { "id": "chlklib-2026-06-25", "display_name": "chlklib", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chlklib", "ecosystem": "npm", "versions": [ "1.2.0", "1.2.1", "1.2.2", "1.2.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6470", "osv_published_at": "2026-06-25T18:27:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-25T22:17:02Z", "flagged_at": null, "confirmed_at": "2026-06-25T22:17:02Z", "osv_earliest_published_at": "2026-06-25T18:27:36Z", "hours_ahead_of_osv": -3.82, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-25T22:17:26Z" }, { "id": "vpms-design-system-2026-06-25", "display_name": "@vpms/design-system", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@vpms/design-system", "ecosystem": "npm", "versions": [ "0.1.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6467", "osv_published_at": "2026-06-25T17:20:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-25T22:17:01Z", "flagged_at": null, "confirmed_at": "2026-06-25T22:17:01Z", "osv_earliest_published_at": "2026-06-25T17:20:53Z", "hours_ahead_of_osv": -4.94, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-25T22:17:11Z" }, { "id": "ts-opus-2026-06-25", "display_name": "ts-opus", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ts-opus", "ecosystem": "npm", "versions": [ "0.0.8" ], "osv_entries": [ { "osv_id": "MAL-2026-6468", "osv_published_at": "2026-06-25T18:11:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-25T22:17:01Z", "flagged_at": null, "confirmed_at": "2026-06-25T22:17:01Z", "osv_earliest_published_at": "2026-06-25T18:11:49Z", "hours_ahead_of_osv": -4.09, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-25T22:17:16Z" }, { "id": "gx-npm-feature-flags-2026-06-25", "display_name": "gx-npm-feature-flags", "campaign": null, "detection_source": "osv", "packages": [ { "package": "gx-npm-feature-flags", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-6466", "osv_published_at": "2026-06-25T17:06:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-25T22:17:00Z", "flagged_at": null, "confirmed_at": "2026-06-25T22:17:00Z", "osv_earliest_published_at": "2026-06-25T17:06:05Z", "hours_ahead_of_osv": -5.18, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-25T22:17:06Z" }, { "id": "chai-as-built-2026-06-25", "display_name": "chai-as-built", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-built", "ecosystem": "npm", "versions": [ "6.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6465", "osv_published_at": "2026-06-25T17:13:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-25T22:17:00Z", "flagged_at": null, "confirmed_at": "2026-06-25T22:17:00Z", "osv_earliest_published_at": "2026-06-25T17:13:38Z", "hours_ahead_of_osv": -5.06, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-25T22:17:01Z" }, { "id": "dddooo-2026-06-25", "display_name": "dddooo", "campaign": null, "detection_source": "osv", "packages": [ { "package": "dddooo", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6460", "osv_published_at": "2026-06-25T10:05:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-25T22:16:27Z", "flagged_at": null, "confirmed_at": "2026-06-25T22:16:27Z", "osv_earliest_published_at": "2026-06-25T10:05:37Z", "hours_ahead_of_osv": -12.18, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-25T22:16:40Z" }, { "id": "colibri-event-types-megamarket-ru-web-2026-06-25", "display_name": "@colibri-event-types/megamarket-ru-web", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@colibri-event-types/megamarket-ru-web", "ecosystem": "npm", "versions": [ "5.2.8" ], "osv_entries": [ { "osv_id": "MAL-2026-6464", "osv_published_at": "2026-06-25T17:00:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-25T22:16:27Z", "flagged_at": null, "confirmed_at": "2026-06-25T22:16:27Z", "osv_earliest_published_at": "2026-06-25T17:00:25Z", "hours_ahead_of_osv": -5.27, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-25T22:16:51Z" }, { "id": "abu-common-components-2026-06-25", "display_name": "abu-common-components", "campaign": null, "detection_source": "osv", "packages": [ { "package": "abu-common-components", "ecosystem": "npm", "versions": [ "99.99.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6463", "osv_published_at": "2026-06-25T15:26:32Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-25T22:16:27Z", "flagged_at": null, "confirmed_at": "2026-06-25T22:16:27Z", "osv_earliest_published_at": "2026-06-25T15:26:32Z", "hours_ahead_of_osv": -6.83, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-25T22:16:46Z" }, { "id": "easy-string-kit-2026-06-25", "display_name": "easy-string-kit", "campaign": null, "detection_source": "osv", "packages": [ { "package": "easy-string-kit", "ecosystem": "npm", "versions": [ "1.0.2", "1.0.3", "1.0.7" ], "osv_entries": [ { "osv_id": "MAL-2026-6459", "osv_published_at": "2026-06-25T08:39:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-25T22:16:26Z", "flagged_at": null, "confirmed_at": "2026-06-25T22:16:26Z", "osv_earliest_published_at": "2026-06-25T08:39:07Z", "hours_ahead_of_osv": -13.62, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-25T22:16:35Z" }, { "id": "python-dateutil2-2026-06-25", "display_name": "python-dateutil2", "campaign": null, "detection_source": "osv", "packages": [ { "package": "python-dateutil2", "ecosystem": "pypi", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6400", "osv_published_at": "2026-06-24T16:27:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-25T03:09:55Z", "flagged_at": null, "confirmed_at": "2026-06-25T03:09:55Z", "osv_earliest_published_at": "2026-06-24T16:27:52Z", "hours_ahead_of_osv": -10.7, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-25T04:31:32Z" }, { "id": "system-core-utils-2026-06-24", "display_name": "system-core-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "system-core-utils", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6380", "osv_published_at": "2026-06-24T06:58:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-24T11:33:43Z", "flagged_at": null, "confirmed_at": "2026-06-24T11:33:43Z", "osv_earliest_published_at": "2026-06-24T06:58:42Z", "hours_ahead_of_osv": -4.58, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T11:36:25Z" }, { "id": "simplisafe-gatsby-2026-06-24", "display_name": "simplisafe-gatsby", "campaign": null, "detection_source": "osv", "packages": [ { "package": "simplisafe-gatsby", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6379", "osv_published_at": "2026-06-24T07:35:59Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-24T11:33:43Z", "flagged_at": null, "confirmed_at": "2026-06-24T11:33:43Z", "osv_earliest_published_at": "2026-06-24T07:35:59Z", "hours_ahead_of_osv": -3.96, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T11:36:21Z" }, { "id": "macos-ci-utils-2026-06-24", "display_name": "macos-ci-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "macos-ci-utils", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6378", "osv_published_at": "2026-06-24T07:21:28Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-24T11:33:43Z", "flagged_at": null, "confirmed_at": "2026-06-24T11:33:43Z", "osv_earliest_published_at": "2026-06-24T07:21:28Z", "hours_ahead_of_osv": -4.2, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T11:36:16Z" }, { "id": "linux-ci-utils-2026-06-24", "display_name": "linux-ci-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "linux-ci-utils", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6377", "osv_published_at": "2026-06-24T07:21:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-24T11:33:43Z", "flagged_at": null, "confirmed_at": "2026-06-24T11:33:43Z", "osv_earliest_published_at": "2026-06-24T07:21:25Z", "hours_ahead_of_osv": -4.21, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T11:36:12Z" }, { "id": "bn-lint-2026-06-24", "display_name": "bn-lint", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bn-lint", "ecosystem": "npm", "versions": [ "3.0.6", "3.0.8" ], "osv_entries": [ { "osv_id": "MAL-2026-6376", "osv_published_at": "2026-06-24T06:26:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-24T11:33:43Z", "flagged_at": null, "confirmed_at": "2026-06-24T11:33:43Z", "osv_earliest_published_at": "2026-06-24T06:26:20Z", "hours_ahead_of_osv": -5.12, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-26T23:45:07Z" }, { "id": "twilio-voice-js-reference-components-2026-06-24", "display_name": "twilio-voice-js-reference-components", "campaign": null, "detection_source": "osv", "packages": [ { "package": "twilio-voice-js-reference-components", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6373", "osv_published_at": "2026-06-24T03:36:02Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-24T11:33:42Z", "flagged_at": null, "confirmed_at": "2026-06-24T11:33:42Z", "osv_earliest_published_at": "2026-06-24T03:36:02Z", "hours_ahead_of_osv": -7.96, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T11:35:56Z" }, { "id": "rollup-runtime-polyfill-core-2026-06-24", "display_name": "rollup-runtime-polyfill-core", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rollup-runtime-polyfill-core", "ecosystem": "npm", "versions": [ "0.13.7" ], "osv_entries": [ { "osv_id": "MAL-2026-6372", "osv_published_at": "2026-06-24T03:58:02Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-24T11:33:42Z", "flagged_at": null, "confirmed_at": "2026-06-24T11:33:42Z", "osv_earliest_published_at": "2026-06-24T03:58:02Z", "hours_ahead_of_osv": -7.59, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T11:35:51Z" }, { "id": "gpt-chat-cli-2026-06-24", "display_name": "gpt-chat-cli", "campaign": null, "detection_source": "osv", "packages": [ { "package": "gpt-chat-cli", "ecosystem": "npm", "versions": [ "1.0.1", "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6375", "osv_published_at": "2026-06-24T06:02:01Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-24T11:33:42Z", "flagged_at": null, "confirmed_at": "2026-06-24T11:33:42Z", "osv_earliest_published_at": "2026-06-24T06:02:01Z", "hours_ahead_of_osv": -5.53, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T11:36:04Z" }, { "id": "evil-pkg-2026-06-24", "display_name": "evil-pkg", "campaign": null, "detection_source": "osv", "packages": [ { "package": "evil-pkg", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6374", "osv_published_at": "2026-06-24T06:16:56Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-24T11:33:42Z", "flagged_at": null, "confirmed_at": "2026-06-24T11:33:42Z", "osv_earliest_published_at": "2026-06-24T06:16:56Z", "hours_ahead_of_osv": -5.28, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T11:36:00Z" }, { "id": "llm-traces-app-2026-06-24", "display_name": "llm-traces-app", "campaign": null, "detection_source": "osv", "packages": [ { "package": "llm-traces-app", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6371", "osv_published_at": "2026-06-24T03:36:16Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-24T11:33:41Z", "flagged_at": null, "confirmed_at": "2026-06-24T11:33:41Z", "osv_earliest_published_at": "2026-06-24T03:36:16Z", "hours_ahead_of_osv": -7.96, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T11:35:46Z" }, { "id": "hyperpure-2026-06-24", "display_name": "hyperpure", "campaign": null, "detection_source": "osv", "packages": [ { "package": "hyperpure", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6370", "osv_published_at": "2026-06-24T04:00:01Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-24T11:33:41Z", "flagged_at": null, "confirmed_at": "2026-06-24T11:33:41Z", "osv_earliest_published_at": "2026-06-24T04:00:01Z", "hours_ahead_of_osv": -7.56, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T11:35:42Z" }, { "id": "hardhat-test-log-2026-06-24", "display_name": "hardhat-test-log", "campaign": null, "detection_source": "osv", "packages": [ { "package": "hardhat-test-log", "ecosystem": "npm", "versions": [ "1.1.0", "1.1.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6369", "osv_published_at": "2026-06-24T04:13:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-24T11:33:41Z", "flagged_at": null, "confirmed_at": "2026-06-24T11:33:41Z", "osv_earliest_published_at": "2026-06-24T04:13:05Z", "hours_ahead_of_osv": -7.34, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-30T02:44:38Z" }, { "id": "decimal-format-utils-2026-06-24", "display_name": "decimal-format-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "decimal-format-utils", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6368", "osv_published_at": "2026-06-24T03:59:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-24T11:33:41Z", "flagged_at": null, "confirmed_at": "2026-06-24T11:33:41Z", "osv_earliest_published_at": "2026-06-24T03:59:39Z", "hours_ahead_of_osv": -7.57, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T11:35:34Z" }, { "id": "dbt-language-server-2026-06-24", "display_name": "dbt-language-server", "campaign": null, "detection_source": "osv", "packages": [ { "package": "dbt-language-server", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6367", "osv_published_at": "2026-06-24T04:07:56Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-24T11:33:41Z", "flagged_at": null, "confirmed_at": "2026-06-24T11:33:41Z", "osv_earliest_published_at": "2026-06-24T04:07:56Z", "hours_ahead_of_osv": -7.43, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T11:35:30Z" }, { "id": "backpack-ios-2026-06-24", "display_name": "backpack-ios", "campaign": null, "detection_source": "osv", "packages": [ { "package": "backpack-ios", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6366", "osv_published_at": "2026-06-24T03:36:34Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-24T11:33:41Z", "flagged_at": null, "confirmed_at": "2026-06-24T11:33:41Z", "osv_earliest_published_at": "2026-06-24T03:36:34Z", "hours_ahead_of_osv": -7.95, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T11:35:26Z" }, { "id": "openllmapi-2026-06-24", "display_name": "openllmapi", "campaign": null, "detection_source": "osv", "packages": [ { "package": "openllmapi", "ecosystem": "npm", "versions": [ "4.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6364", "osv_published_at": "2026-06-24T02:56:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-24T11:33:40Z", "flagged_at": null, "confirmed_at": "2026-06-24T11:33:40Z", "osv_earliest_published_at": "2026-06-24T02:56:49Z", "hours_ahead_of_osv": -8.61, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T11:35:18Z" }, { "id": "npmkekw-2026-06-24", "display_name": "npmkekw", "campaign": null, "detection_source": "osv", "packages": [ { "package": "npmkekw", "ecosystem": "npm", "versions": [ "2.0.0", "2.0.1", "2.0.3", "2.0.5" ], "osv_entries": [ { "osv_id": "MAL-2026-6363", "osv_published_at": "2026-06-24T02:37:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-24T11:33:40Z", "flagged_at": null, "confirmed_at": "2026-06-24T11:33:40Z", "osv_earliest_published_at": "2026-06-24T02:37:21Z", "hours_ahead_of_osv": -8.94, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T11:35:13Z" }, { "id": "assertcore-2026-06-24", "display_name": "assertcore", "campaign": null, "detection_source": "osv", "packages": [ { "package": "assertcore", "ecosystem": "npm", "versions": [ "3.1.7" ], "osv_entries": [ { "osv_id": "MAL-2026-6365", "osv_published_at": "2026-06-24T03:50:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-24T11:33:40Z", "flagged_at": null, "confirmed_at": "2026-06-24T11:33:40Z", "osv_earliest_published_at": "2026-06-24T03:50:42Z", "hours_ahead_of_osv": -7.72, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T11:35:22Z" }, { "id": "theme-color-picker-2026-06-24", "display_name": "theme-color-picker", "campaign": null, "detection_source": "osv", "packages": [ { "package": "theme-color-picker", "ecosystem": "npm", "versions": [ "2.0.28", "2.0.30", "2.0.31" ], "osv_entries": [ { "osv_id": "MAL-2026-6357", "osv_published_at": "2026-06-23T21:53:28Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-24T11:33:39Z", "flagged_at": null, "confirmed_at": "2026-06-24T11:33:39Z", "osv_earliest_published_at": "2026-06-23T21:53:28Z", "hours_ahead_of_osv": -13.67, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T11:34:55Z" }, { "id": "monty-data-2026-06-24", "display_name": "monty-data", "campaign": null, "detection_source": "osv", "packages": [ { "package": "monty-data", "ecosystem": "npm", "versions": [ "1.0.0", "1.1.0", "1.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6362", "osv_published_at": "2026-06-24T02:49:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-24T11:33:39Z", "flagged_at": null, "confirmed_at": "2026-06-24T11:33:39Z", "osv_earliest_published_at": "2026-06-24T02:49:40Z", "hours_ahead_of_osv": -8.73, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T11:35:09Z" }, { "id": "html-to-gutenberg-2026-06-24", "display_name": "html-to-gutenberg", "campaign": null, "detection_source": "osv", "packages": [ { "package": "html-to-gutenberg", "ecosystem": "npm", "versions": [ "4.2.11" ], "osv_entries": [ { "osv_id": "MAL-2026-6359", "osv_published_at": "2026-06-24T01:51:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-24T11:33:39Z", "flagged_at": null, "confirmed_at": "2026-06-24T11:33:39Z", "osv_earliest_published_at": "2026-06-24T01:51:00Z", "hours_ahead_of_osv": -9.71, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T11:35:03Z" }, { "id": "fetch-page-assets-2026-06-24", "display_name": "fetch-page-assets", "campaign": null, "detection_source": "osv", "packages": [ { "package": "fetch-page-assets", "ecosystem": "npm", "versions": [ "1.2.9" ], "osv_entries": [ { "osv_id": "MAL-2026-6358", "osv_published_at": "2026-06-24T01:44:29Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-24T11:33:39Z", "flagged_at": null, "confirmed_at": "2026-06-24T11:33:39Z", "osv_earliest_published_at": "2026-06-24T01:44:29Z", "hours_ahead_of_osv": -9.82, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T11:34:59Z" }, { "id": "safe-json-38bd-2026-06-24", "display_name": "safe-json-38bd", "campaign": null, "detection_source": "osv", "packages": [ { "package": "safe-json-38bd", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6356", "osv_published_at": "2026-06-23T21:40:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-24T11:33:38Z", "flagged_at": null, "confirmed_at": "2026-06-24T11:33:38Z", "osv_earliest_published_at": "2026-06-23T21:40:03Z", "hours_ahead_of_osv": -13.89, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T11:34:51Z" }, { "id": "ppt-creator-2026-06-24", "display_name": "ppt-creator", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ppt-creator", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6355", "osv_published_at": "2026-06-23T21:54:18Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-24T11:33:38Z", "flagged_at": null, "confirmed_at": "2026-06-24T11:33:38Z", "osv_earliest_published_at": "2026-06-23T21:54:18Z", "hours_ahead_of_osv": -13.66, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T11:34:47Z" }, { "id": "npm-bug-bounty-test1-rhyselsmore-2026-06-24", "display_name": "npm-bug-bounty-test1-rhyselsmore", "campaign": null, "detection_source": "osv", "packages": [ { "package": "npm-bug-bounty-test1-rhyselsmore", "ecosystem": "npm", "versions": [ "1.0.5" ], "osv_entries": [ { "osv_id": "MAL-2026-6354", "osv_published_at": "2026-06-23T21:57:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-24T11:33:38Z", "flagged_at": null, "confirmed_at": "2026-06-24T11:33:38Z", "osv_earliest_published_at": "2026-06-23T21:57:12Z", "hours_ahead_of_osv": -13.61, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T11:34:43Z" }, { "id": "markdownlint-cli2-fix-2026-06-24", "display_name": "markdownlint-cli2-fix", "campaign": null, "detection_source": "osv", "packages": [ { "package": "markdownlint-cli2-fix", "ecosystem": "npm", "versions": [ "99.0.6", "99.0.7" ], "osv_entries": [ { "osv_id": "MAL-2026-6353", "osv_published_at": "2026-06-23T21:46:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-24T11:33:38Z", "flagged_at": null, "confirmed_at": "2026-06-24T11:33:38Z", "osv_earliest_published_at": "2026-06-23T21:46:05Z", "hours_ahead_of_osv": -13.79, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T11:34:39Z" }, { "id": "hex-conv-ae7a-2026-06-24", "display_name": "hex-conv-ae7a", "campaign": null, "detection_source": "osv", "packages": [ { "package": "hex-conv-ae7a", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6352", "osv_published_at": "2026-06-23T21:40:34Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-24T11:33:37Z", "flagged_at": null, "confirmed_at": "2026-06-24T11:33:37Z", "osv_earliest_published_at": "2026-06-23T21:40:34Z", "hours_ahead_of_osv": -13.88, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T11:34:35Z" }, { "id": "delta-time-32bb-2026-06-24", "display_name": "delta-time-32bb", "campaign": null, "detection_source": "osv", "packages": [ { "package": "delta-time-32bb", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6351", "osv_published_at": "2026-06-23T22:26:24Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-24T11:33:37Z", "flagged_at": null, "confirmed_at": "2026-06-24T11:33:37Z", "osv_earliest_published_at": "2026-06-23T22:26:24Z", "hours_ahead_of_osv": -13.12, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T11:34:31Z" }, { "id": "chai-as-operated-2026-06-24", "display_name": "chai-as-operated", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-operated", "ecosystem": "npm", "versions": [ "6.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6350", "osv_published_at": "2026-06-23T21:50:24Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-24T11:33:37Z", "flagged_at": null, "confirmed_at": "2026-06-24T11:33:37Z", "osv_earliest_published_at": "2026-06-23T21:50:24Z", "hours_ahead_of_osv": -13.72, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T11:34:27Z" }, { "id": "bug-monorepo-2026-06-24", "display_name": "bug-monorepo", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bug-monorepo", "ecosystem": "npm", "versions": [ "3.1.94" ], "osv_entries": [ { "osv_id": "MAL-2026-6349", "osv_published_at": "2026-06-23T21:53:55Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-24T11:33:37Z", "flagged_at": null, "confirmed_at": "2026-06-24T11:33:37Z", "osv_earliest_published_at": "2026-06-23T21:53:55Z", "hours_ahead_of_osv": -13.66, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T11:34:22Z" }, { "id": "buffer-wrap-67d7-2026-06-24", "display_name": "buffer-wrap-67d7", "campaign": null, "detection_source": "osv", "packages": [ { "package": "buffer-wrap-67d7", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6348", "osv_published_at": "2026-06-23T21:40:45Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-24T11:33:37Z", "flagged_at": null, "confirmed_at": "2026-06-24T11:33:37Z", "osv_earliest_published_at": "2026-06-23T21:40:45Z", "hours_ahead_of_osv": -13.88, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T11:34:18Z" }, { "id": "node-core-libs-2026-06-24", "display_name": "node-core-libs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "node-core-libs", "ecosystem": "npm", "versions": [ "1.0.0", "1.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6276", "osv_published_at": "2026-06-23T06:19:13Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-24T11:33:36Z", "flagged_at": null, "confirmed_at": "2026-06-24T11:33:36Z", "osv_earliest_published_at": "2026-06-23T06:19:13Z", "hours_ahead_of_osv": -29.24, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T11:34:05Z" }, { "id": "new-ecro-helper-2026-06-24", "display_name": "new-ecro-helper", "campaign": null, "detection_source": "osv", "packages": [ { "package": "new-ecro-helper", "ecosystem": "npm", "versions": [ "5.8.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6283", "osv_published_at": "2026-06-23T12:15:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-24T11:33:36Z", "flagged_at": null, "confirmed_at": "2026-06-24T11:33:36Z", "osv_earliest_published_at": "2026-06-23T12:15:37Z", "hours_ahead_of_osv": -23.3, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T11:34:09Z" }, { "id": "ethereum-gas-reporter-2026-06-24", "display_name": "ethereum-gas-reporter", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ethereum-gas-reporter", "ecosystem": "npm", "versions": [ "0.2.27" ], "osv_entries": [ { "osv_id": "MAL-2026-6202", "osv_published_at": "2026-06-19T08:08:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-24T11:33:35Z", "flagged_at": null, "confirmed_at": "2026-06-24T11:33:35Z", "osv_earliest_published_at": "2026-06-19T08:08:39Z", "hours_ahead_of_osv": -123.42, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T11:33:50Z" }, { "id": "assert-kit-2026-06-24", "display_name": "assert-kit", "campaign": null, "detection_source": "osv", "packages": [ { "package": "assert-kit", "ecosystem": "npm", "versions": [ "4.3.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6200", "osv_published_at": "2026-06-19T08:08:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-24T11:33:35Z", "flagged_at": null, "confirmed_at": "2026-06-24T11:33:35Z", "osv_earliest_published_at": "2026-06-19T08:08:40Z", "hours_ahead_of_osv": -123.42, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T11:33:46Z" }, { "id": "qwedqwed-axios-2026-06-24", "display_name": "@qwedqwed/axios", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@qwedqwed/axios", "ecosystem": "npm", "versions": [ "1.16.12", "1.16.6" ], "osv_entries": [ { "osv_id": "MAL-2026-4422", "osv_published_at": "2026-05-20T07:04:14Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-24T11:33:32Z", "flagged_at": null, "confirmed_at": "2026-06-24T11:33:32Z", "osv_earliest_published_at": "2026-05-20T07:04:14Z", "hours_ahead_of_osv": -844.49, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T11:33:36Z" }, { "id": "paypal-postman-lib-2026-06-24", "display_name": "paypal-postman-lib", "campaign": null, "detection_source": "osv", "packages": [ { "package": "paypal-postman-lib", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2025-47594", "osv_published_at": "2025-09-23T18:23:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-24T11:33:30Z", "flagged_at": null, "confirmed_at": "2026-06-24T11:33:30Z", "osv_earliest_published_at": "2025-09-23T18:23:25Z", "hours_ahead_of_osv": -6569.17, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T11:33:31Z" }, { "id": "afterpay-sdk-example-server-2026-06-24", "display_name": "afterpay-sdk-example-server", "campaign": null, "detection_source": "osv", "packages": [ { "package": "afterpay-sdk-example-server", "ecosystem": "npm", "versions": [ "1.2.1" ], "osv_entries": [ { "osv_id": "MAL-2023-1111", "osv_published_at": "2023-05-03T01:37:43Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-24T11:33:26Z", "flagged_at": null, "confirmed_at": "2026-06-24T11:33:26Z", "osv_earliest_published_at": "2023-05-03T01:37:43Z", "hours_ahead_of_osv": -27561.93, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T11:33:27Z" }, { "id": "mcpsever-2026-06-24", "display_name": "mcpsever", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mcpsever", "ecosystem": "pypi", "versions": [ "0.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6384", "osv_published_at": "2026-06-24T06:39:18Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-24T11:29:40Z", "flagged_at": null, "confirmed_at": "2026-06-24T11:29:40Z", "osv_earliest_published_at": "2026-06-24T06:39:18Z", "hours_ahead_of_osv": -4.84, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T11:29:55Z" }, { "id": "gunicorm-2026-06-24", "display_name": "gunicorm", "campaign": null, "detection_source": "osv", "packages": [ { "package": "gunicorm", "ecosystem": "pypi", "versions": [ "0.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6383", "osv_published_at": "2026-06-24T06:41:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-24T11:29:39Z", "flagged_at": null, "confirmed_at": "2026-06-24T11:29:39Z", "osv_earliest_published_at": "2026-06-24T06:41:41Z", "hours_ahead_of_osv": -4.8, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T11:29:51Z" }, { "id": "fkaks-2026-06-24", "display_name": "fkaks", "campaign": null, "detection_source": "osv", "packages": [ { "package": "fkaks", "ecosystem": "pypi", "versions": [ "0.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6382", "osv_published_at": "2026-06-24T06:40:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-24T11:29:39Z", "flagged_at": null, "confirmed_at": "2026-06-24T11:29:39Z", "osv_earliest_published_at": "2026-06-24T06:40:36Z", "hours_ahead_of_osv": -4.82, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T11:29:47Z" }, { "id": "ditenv-2026-06-24", "display_name": "ditenv", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ditenv", "ecosystem": "pypi", "versions": [ "0.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6381", "osv_published_at": "2026-06-24T06:41:09Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-24T11:29:39Z", "flagged_at": null, "confirmed_at": "2026-06-24T11:29:39Z", "osv_earliest_published_at": "2026-06-24T06:41:09Z", "hours_ahead_of_osv": -4.81, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T11:29:42Z" }, { "id": "wagmi-util-2026-06-23", "display_name": "wagmi_util", "campaign": null, "detection_source": "osv", "packages": [ { "package": "wagmi_util", "ecosystem": "npm", "versions": [ "3.6.19" ], "osv_entries": [ { "osv_id": "MAL-2026-6347", "osv_published_at": "2026-06-23T20:52:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T22:13:56Z", "flagged_at": null, "confirmed_at": "2026-06-23T22:13:56Z", "osv_earliest_published_at": "2026-06-23T20:52:51Z", "hours_ahead_of_osv": -1.35, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:52:03Z" }, { "id": "triage-bot-2026-06-23", "display_name": "triage-bot", "campaign": null, "detection_source": "osv", "packages": [ { "package": "triage-bot", "ecosystem": "npm", "versions": [ "1.0.1", "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6346", "osv_published_at": "2026-06-23T20:18:45Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T22:13:56Z", "flagged_at": null, "confirmed_at": "2026-06-23T22:13:56Z", "osv_earliest_published_at": "2026-06-23T20:18:45Z", "hours_ahead_of_osv": -1.92, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-01T22:50:56Z" }, { "id": "thurdweb-2026-06-23", "display_name": "thurdweb", "campaign": null, "detection_source": "osv", "packages": [ { "package": "thurdweb", "ecosystem": "npm", "versions": [ "0.0.8" ], "osv_entries": [ { "osv_id": "MAL-2026-6345", "osv_published_at": "2026-06-23T20:01:24Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T22:13:56Z", "flagged_at": null, "confirmed_at": "2026-06-23T22:13:56Z", "osv_earliest_published_at": "2026-06-23T20:01:24Z", "hours_ahead_of_osv": -2.21, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:51:55Z" }, { "id": "thirdwebjs-2026-06-23", "display_name": "thirdwebjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "thirdwebjs", "ecosystem": "npm", "versions": [ "0.0.8" ], "osv_entries": [ { "osv_id": "MAL-2026-6344", "osv_published_at": "2026-06-23T20:01:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T22:13:56Z", "flagged_at": null, "confirmed_at": "2026-06-23T22:13:56Z", "osv_earliest_published_at": "2026-06-23T20:01:23Z", "hours_ahead_of_osv": -2.21, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:51:51Z" }, { "id": "thidweb-2026-06-23", "display_name": "thidweb", "campaign": null, "detection_source": "osv", "packages": [ { "package": "thidweb", "ecosystem": "npm", "versions": [ "0.0.8" ], "osv_entries": [ { "osv_id": "MAL-2026-6343", "osv_published_at": "2026-06-23T20:01:26Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T22:13:55Z", "flagged_at": null, "confirmed_at": "2026-06-23T22:13:55Z", "osv_earliest_published_at": "2026-06-23T20:01:26Z", "hours_ahead_of_osv": -2.21, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:51:46Z" }, { "id": "therdweb-2026-06-23", "display_name": "therdweb", "campaign": null, "detection_source": "osv", "packages": [ { "package": "therdweb", "ecosystem": "npm", "versions": [ "0.0.8" ], "osv_entries": [ { "osv_id": "MAL-2026-6342", "osv_published_at": "2026-06-23T20:01:30Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T22:13:55Z", "flagged_at": null, "confirmed_at": "2026-06-23T22:13:55Z", "osv_earliest_published_at": "2026-06-23T20:01:30Z", "hours_ahead_of_osv": -2.21, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:51:42Z" }, { "id": "react-check-error-2026-06-23", "display_name": "react-check-error", "campaign": null, "detection_source": "osv", "packages": [ { "package": "react-check-error", "ecosystem": "npm", "versions": [ "2.1.6", "2.1.7" ], "osv_entries": [ { "osv_id": "MAL-2026-6341", "osv_published_at": "2026-06-23T20:19:56Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T22:13:55Z", "flagged_at": null, "confirmed_at": "2026-06-23T22:13:55Z", "osv_earliest_published_at": "2026-06-23T20:19:56Z", "hours_ahead_of_osv": -1.9, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:51:39Z" }, { "id": "rainbownkit-2026-06-23", "display_name": "rainbownkit", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rainbownkit", "ecosystem": "npm", "versions": [ "0.0.8" ], "osv_entries": [ { "osv_id": "MAL-2026-6340", "osv_published_at": "2026-06-23T20:01:24Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T22:13:55Z", "flagged_at": null, "confirmed_at": "2026-06-23T22:13:55Z", "osv_earliest_published_at": "2026-06-23T20:01:24Z", "hours_ahead_of_osv": -2.21, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:51:34Z" }, { "id": "sync-external-2026-06-23", "display_name": "sync-external", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sync-external", "ecosystem": "npm", "versions": [ "1.6.0", "1.6.1", "1.6.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6336", "osv_published_at": "2026-06-23T15:38:44Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T22:13:54Z", "flagged_at": null, "confirmed_at": "2026-06-23T22:13:54Z", "osv_earliest_published_at": "2026-06-23T15:38:44Z", "hours_ahead_of_osv": -6.59, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:51:18Z" }, { "id": "rainbokit-2026-06-23", "display_name": "rainbokit", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rainbokit", "ecosystem": "npm", "versions": [ "0.0.8" ], "osv_entries": [ { "osv_id": "MAL-2026-6339", "osv_published_at": "2026-06-23T20:01:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T22:13:54Z", "flagged_at": null, "confirmed_at": "2026-06-23T22:13:54Z", "osv_earliest_published_at": "2026-06-23T20:01:22Z", "hours_ahead_of_osv": -2.21, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:51:30Z" }, { "id": "log-taker-2026-06-23", "display_name": "log-taker", "campaign": null, "detection_source": "osv", "packages": [ { "package": "log-taker", "ecosystem": "npm", "versions": [ "0.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6338", "osv_published_at": "2026-06-23T20:20:56Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T22:13:54Z", "flagged_at": null, "confirmed_at": "2026-06-23T22:13:54Z", "osv_earliest_published_at": "2026-06-23T20:20:56Z", "hours_ahead_of_osv": -1.88, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:51:26Z" }, { "id": "hunsterx-package-2026-06-23", "display_name": "hunsterx-package", "campaign": null, "detection_source": "osv", "packages": [ { "package": "hunsterx-package", "ecosystem": "npm", "versions": [ "7.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6337", "osv_published_at": "2026-06-23T19:33:15Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T22:13:54Z", "flagged_at": null, "confirmed_at": "2026-06-23T22:13:54Z", "osv_earliest_published_at": "2026-06-23T19:33:15Z", "hours_ahead_of_osv": -2.68, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:51:22Z" }, { "id": "withgoogle-stitch-sdk-2026-06-23", "display_name": "@withgoogle/stitch-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@withgoogle/stitch-sdk", "ecosystem": "npm", "versions": [ "0.1.1", "0.1.2", "0.1.3", "0.1.4", "0.1.5" ], "osv_entries": [ { "osv_id": "MAL-2026-6256", "osv_published_at": "2026-06-20T12:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T22:13:47Z", "flagged_at": null, "confirmed_at": "2026-06-23T22:13:47Z", "osv_earliest_published_at": "2026-06-20T12:00:00Z", "hours_ahead_of_osv": -82.23, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://safedep.io/withgoogle-stitch-sdk-scope-squat-credential-harvester/", "ledger_commit_at": "2026-06-24T02:50:55Z" }, { "id": "crosswalker-2026-06-23", "display_name": "crosswalker", "campaign": null, "detection_source": "osv", "packages": [ { "package": "crosswalker", "ecosystem": "npm", "versions": [ "18.2.1" ], "osv_entries": [ { "osv_id": "MAL-2024-2031", "osv_published_at": "2024-06-25T12:34:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T22:13:43Z", "flagged_at": null, "confirmed_at": "2026-06-23T22:13:43Z", "osv_earliest_published_at": "2024-06-25T12:34:37Z", "hours_ahead_of_osv": -17481.65, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:50:47Z" }, { "id": "web3-eth-utils-2026-06-23", "display_name": "web3-eth-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "web3-eth-utils", "ecosystem": "npm", "versions": [ "6.2.8" ], "osv_entries": [ { "osv_id": "MAL-2026-6326", "osv_published_at": "2026-06-23T15:55:57Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T17:46:36Z", "flagged_at": null, "confirmed_at": "2026-06-23T17:46:36Z", "osv_earliest_published_at": "2026-06-23T15:55:57Z", "hours_ahead_of_osv": -1.84, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:50:28Z" }, { "id": "web3-eth-util-2026-06-23", "display_name": "web3-eth-util", "campaign": null, "detection_source": "osv", "packages": [ { "package": "web3-eth-util", "ecosystem": "npm", "versions": [ "6.2.8" ], "osv_entries": [ { "osv_id": "MAL-2026-6325", "osv_published_at": "2026-06-23T15:55:58Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T17:46:36Z", "flagged_at": null, "confirmed_at": "2026-06-23T17:46:36Z", "osv_earliest_published_at": "2026-06-23T15:55:58Z", "hours_ahead_of_osv": -1.84, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:50:24Z" }, { "id": "web3-crypto-address-utils-2026-06-23", "display_name": "web3-crypto-address-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "web3-crypto-address-utils", "ecosystem": "npm", "versions": [ "0.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6324", "osv_published_at": "2026-06-23T15:57:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T17:46:36Z", "flagged_at": null, "confirmed_at": "2026-06-23T17:46:36Z", "osv_earliest_published_at": "2026-06-23T15:57:08Z", "hours_ahead_of_osv": -1.82, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:50:20Z" }, { "id": "ts-sudo-2026-06-23", "display_name": "ts-sudo", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ts-sudo", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6323", "osv_published_at": "2026-06-23T15:32:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T17:46:35Z", "flagged_at": null, "confirmed_at": "2026-06-23T17:46:35Z", "osv_earliest_published_at": "2026-06-23T15:32:53Z", "hours_ahead_of_osv": -2.23, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:50:16Z" }, { "id": "ts-predict-helper-2026-06-23", "display_name": "ts-predict-helper", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ts-predict-helper", "ecosystem": "npm", "versions": [ "3.7.0", "3.7.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6322", "osv_published_at": "2026-06-23T15:27:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T17:46:35Z", "flagged_at": null, "confirmed_at": "2026-06-23T17:46:35Z", "osv_earliest_published_at": "2026-06-23T15:27:33Z", "hours_ahead_of_osv": -2.32, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:50:12Z" }, { "id": "ts-grok-2026-06-23", "display_name": "ts-grok", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ts-grok", "ecosystem": "npm", "versions": [ "0.0.8" ], "osv_entries": [ { "osv_id": "MAL-2026-6321", "osv_published_at": "2026-06-23T16:11:24Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T17:46:35Z", "flagged_at": null, "confirmed_at": "2026-06-23T17:46:35Z", "osv_earliest_published_at": "2026-06-23T16:11:24Z", "hours_ahead_of_osv": -1.59, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:50:08Z" }, { "id": "ts-escrow-2026-06-23", "display_name": "ts-escrow", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ts-escrow", "ecosystem": "npm", "versions": [ "0.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6320", "osv_published_at": "2026-06-23T16:11:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T17:46:35Z", "flagged_at": null, "confirmed_at": "2026-06-23T17:46:35Z", "osv_earliest_published_at": "2026-06-23T16:11:23Z", "hours_ahead_of_osv": -1.59, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:50:04Z" }, { "id": "ts-escro-2026-06-23", "display_name": "ts-escro", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ts-escro", "ecosystem": "npm", "versions": [ "0.0.6", "0.0.8" ], "osv_entries": [ { "osv_id": "MAL-2026-6319", "osv_published_at": "2026-06-23T16:11:18Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T17:46:35Z", "flagged_at": null, "confirmed_at": "2026-06-23T17:46:35Z", "osv_earliest_published_at": "2026-06-23T16:11:18Z", "hours_ahead_of_osv": -1.59, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:49:59Z" }, { "id": "ts-bn-lint-helper-2026-06-23", "display_name": "ts-bn-lint-helper", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ts-bn-lint-helper", "ecosystem": "npm", "versions": [ "3.1.19" ], "osv_entries": [ { "osv_id": "MAL-2026-6318", "osv_published_at": "2026-06-23T16:11:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T17:46:34Z", "flagged_at": null, "confirmed_at": "2026-06-23T17:46:34Z", "osv_earliest_published_at": "2026-06-23T16:11:21Z", "hours_ahead_of_osv": -1.59, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:49:55Z" }, { "id": "ts-bn-lint-2026-06-23", "display_name": "ts-bn-lint", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ts-bn-lint", "ecosystem": "npm", "versions": [ "3.1.19", "5.8.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6317", "osv_published_at": "2026-06-23T16:11:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T17:46:34Z", "flagged_at": null, "confirmed_at": "2026-06-23T17:46:34Z", "osv_earliest_published_at": "2026-06-23T16:11:21Z", "hours_ahead_of_osv": -1.59, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:49:51Z" }, { "id": "ts-biginteger-lib-2026-06-23", "display_name": "ts-biginteger-lib", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ts-biginteger-lib", "ecosystem": "npm", "versions": [ "5.0.5" ], "osv_entries": [ { "osv_id": "MAL-2026-6316", "osv_published_at": "2026-06-23T16:07:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T17:46:34Z", "flagged_at": null, "confirmed_at": "2026-06-23T17:46:34Z", "osv_earliest_published_at": "2026-06-23T16:07:35Z", "hours_ahead_of_osv": -1.65, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:49:46Z" }, { "id": "zynkit-probe-2026-06-23", "display_name": "@zynkit/probe", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@zynkit/probe", "ecosystem": "npm", "versions": [ "0.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6314", "osv_published_at": "2026-06-23T16:22:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T17:46:33Z", "flagged_at": null, "confirmed_at": "2026-06-23T17:46:33Z", "osv_earliest_published_at": "2026-06-23T16:22:48Z", "hours_ahead_of_osv": -1.4, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:49:39Z" }, { "id": "ts-arithmetic-helper-2026-06-23", "display_name": "ts-arithmetic-helper", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ts-arithmetic-helper", "ecosystem": "npm", "versions": [ "3.7.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6315", "osv_published_at": "2026-06-23T15:27:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T17:46:33Z", "flagged_at": null, "confirmed_at": "2026-06-23T17:46:33Z", "osv_earliest_published_at": "2026-06-23T15:27:33Z", "hours_ahead_of_osv": -2.32, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:49:43Z" }, { "id": "zynkit-jwtbytes-2026-06-23", "display_name": "@zynkit/jwtbytes", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@zynkit/jwtbytes", "ecosystem": "npm", "versions": [ "0.4.3", "0.5.1", "0.5.2", "0.5.3", "0.5.4" ], "osv_entries": [ { "osv_id": "MAL-2026-6313", "osv_published_at": "2026-06-23T16:22:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T17:46:32Z", "flagged_at": null, "confirmed_at": "2026-06-23T17:46:32Z", "osv_earliest_published_at": "2026-06-23T16:22:25Z", "hours_ahead_of_osv": -1.4, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:49:34Z" }, { "id": "tinyfox-shapecheck-2026-06-23", "display_name": "@tinyfox/shapecheck", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@tinyfox/shapecheck", "ecosystem": "npm", "versions": [ "0.7.4", "0.8.5", "0.8.6", "0.8.7", "0.8.8" ], "osv_entries": [ { "osv_id": "MAL-2026-6312", "osv_published_at": "2026-06-23T16:22:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T17:46:31Z", "flagged_at": null, "confirmed_at": "2026-06-23T17:46:31Z", "osv_earliest_published_at": "2026-06-23T16:22:49Z", "hours_ahead_of_osv": -1.4, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:49:30Z" }, { "id": "thymelab-logfx-2026-06-23", "display_name": "@thymelab/logfx", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@thymelab/logfx", "ecosystem": "npm", "versions": [ "2.15.3", "2.15.4", "2.15.5", "2.15.6" ], "osv_entries": [ { "osv_id": "MAL-2026-6311", "osv_published_at": "2026-06-23T16:22:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T17:46:30Z", "flagged_at": null, "confirmed_at": "2026-06-23T17:46:30Z", "osv_earliest_published_at": "2026-06-23T16:22:33Z", "hours_ahead_of_osv": -1.4, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:49:27Z" }, { "id": "petitcode-eb-retry-2026-06-23", "display_name": "@petitcode/eb-retry", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@petitcode/eb-retry", "ecosystem": "npm", "versions": [ "1.3.3", "1.3.4", "1.3.5", "1.3.6" ], "osv_entries": [ { "osv_id": "MAL-2026-6310", "osv_published_at": "2026-06-23T16:22:26Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T17:46:29Z", "flagged_at": null, "confirmed_at": "2026-06-23T17:46:29Z", "osv_earliest_published_at": "2026-06-23T16:22:26Z", "hours_ahead_of_osv": -1.4, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:49:23Z" }, { "id": "nullzero-urlcat-2026-06-23", "display_name": "@nullzero/urlcat", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@nullzero/urlcat", "ecosystem": "npm", "versions": [ "1.4.0", "1.4.1", "1.4.2", "1.4.3", "1.4.4" ], "osv_entries": [ { "osv_id": "MAL-2026-6309", "osv_published_at": "2026-06-23T16:22:56Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T17:46:28Z", "flagged_at": null, "confirmed_at": "2026-06-23T17:46:28Z", "osv_earliest_published_at": "2026-06-22T12:00:00Z", "hours_ahead_of_osv": -29.77, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://safedep.io/wshu-net-npm-credential-stealer-campaign/", "ledger_commit_at": "2026-06-26T23:44:59Z" }, { "id": "lazyutil-dater-2026-06-23", "display_name": "@lazyutil/dater", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@lazyutil/dater", "ecosystem": "npm", "versions": [ "0.8.1", "0.9.2", "0.9.3", "0.9.4", "0.9.5" ], "osv_entries": [ { "osv_id": "MAL-2026-6308", "osv_published_at": "2026-06-23T16:22:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T17:46:27Z", "flagged_at": null, "confirmed_at": "2026-06-23T17:46:27Z", "osv_earliest_published_at": "2026-06-23T16:22:37Z", "hours_ahead_of_osv": -1.4, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:49:15Z" }, { "id": "glitchpad-throttler-2026-06-23", "display_name": "@glitchpad/throttler", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@glitchpad/throttler", "ecosystem": "npm", "versions": [ "2.1.1", "2.2.1", "2.2.2", "2.2.3", "2.2.4" ], "osv_entries": [ { "osv_id": "MAL-2026-6307", "osv_published_at": "2026-06-23T16:23:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T17:46:26Z", "flagged_at": null, "confirmed_at": "2026-06-23T17:46:26Z", "osv_earliest_published_at": "2026-06-23T16:23:03Z", "hours_ahead_of_osv": -1.39, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:49:11Z" }, { "id": "gleamkit-probe-2026-06-23", "display_name": "@gleamkit/probe", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@gleamkit/probe", "ecosystem": "npm", "versions": [ "0.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6306", "osv_published_at": "2026-06-23T16:22:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T17:46:24Z", "flagged_at": null, "confirmed_at": "2026-06-23T17:46:24Z", "osv_earliest_published_at": "2026-06-23T16:22:20Z", "hours_ahead_of_osv": -1.4, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:49:07Z" }, { "id": "frostnode-waitfor-2026-06-23", "display_name": "@frostnode/waitfor", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@frostnode/waitfor", "ecosystem": "npm", "versions": [ "0.10.3", "0.10.4", "0.10.5", "0.10.6", "0.9.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6305", "osv_published_at": "2026-06-23T16:22:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T17:46:24Z", "flagged_at": null, "confirmed_at": "2026-06-23T17:46:24Z", "osv_earliest_published_at": "2026-06-22T12:00:00Z", "hours_ahead_of_osv": -29.77, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://safedep.io/wshu-net-npm-credential-stealer-campaign/", "ledger_commit_at": "2026-06-24T02:51:10Z" }, { "id": "react-simple-utils-kit-2026-06-23", "display_name": "react-simple-utils-kit", "campaign": null, "detection_source": "osv", "packages": [ { "package": "react-simple-utils-kit", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2", "1.0.4", "1.0.5", "1.1.0", "1.2.0", "1.2.1", "1.2.2", "1.3.0", "1.3.1", "1.3.2", "1.3.3", "1.4.0", "1.4.1", "1.4.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6303", "osv_published_at": "2026-06-23T14:46:34Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T17:46:23Z", "flagged_at": null, "confirmed_at": "2026-06-23T17:46:23Z", "osv_earliest_published_at": "2026-06-23T14:46:34Z", "hours_ahead_of_osv": -3.0, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:48:55Z" }, { "id": "frostnode-probe-2026-06-23", "display_name": "@frostnode/probe", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@frostnode/probe", "ecosystem": "npm", "versions": [ "0.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6304", "osv_published_at": "2026-06-23T16:22:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T17:46:23Z", "flagged_at": null, "confirmed_at": "2026-06-23T17:46:23Z", "osv_earliest_published_at": "2026-06-23T16:22:36Z", "hours_ahead_of_osv": -1.4, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:48:59Z" }, { "id": "hashd-edu-2026-06-23", "display_name": "hashd-edu", "campaign": null, "detection_source": "osv", "packages": [ { "package": "hashd-edu", "ecosystem": "npm", "versions": [ "1.0.5" ], "osv_entries": [ { "osv_id": "MAL-2026-6302", "osv_published_at": "2026-06-23T15:24:26Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T17:46:20Z", "flagged_at": null, "confirmed_at": "2026-06-23T17:46:20Z", "osv_earliest_published_at": "2026-06-23T15:24:26Z", "hours_ahead_of_osv": -2.37, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:48:51Z" }, { "id": "date-format-helper2-2026-06-23", "display_name": "date-format-helper2", "campaign": null, "detection_source": "osv", "packages": [ { "package": "date-format-helper2", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.2", "1.0.3", "1.0.4", "1.0.5", "1.0.6", "1.0.7" ], "osv_entries": [ { "osv_id": "MAL-2026-6301", "osv_published_at": "2026-06-23T15:21:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T17:46:20Z", "flagged_at": null, "confirmed_at": "2026-06-23T17:46:20Z", "osv_earliest_published_at": "2026-06-23T15:21:06Z", "hours_ahead_of_osv": -2.42, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:48:47Z" }, { "id": "chalk-ultra-2026-06-23", "display_name": "chalk-ultra", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chalk-ultra", "ecosystem": "npm", "versions": [ "12.0.14", "12.0.15", "12.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6300", "osv_published_at": "2026-06-23T15:25:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T17:46:19Z", "flagged_at": null, "confirmed_at": "2026-06-23T17:46:19Z", "osv_earliest_published_at": "2026-06-23T15:25:21Z", "hours_ahead_of_osv": -2.35, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:48:43Z" }, { "id": "analysis-chart-2026-06-23", "display_name": "analysis-chart", "campaign": null, "detection_source": "osv", "packages": [ { "package": "analysis-chart", "ecosystem": "npm", "versions": [ "2.0.10", "2.0.11", "2.0.12", "2.0.13", "2.0.14", "2.0.15", "2.0.16", "2.0.17", "2.0.18", "2.0.19", "2.0.20", "2.0.21", "2.0.22", "2.0.23", "2.0.24", "2.0.25", "2.0.26", "2.0.27", "2.0.28", "2.0.8", "2.0.9" ], "osv_entries": [ { "osv_id": "MAL-2026-6299", "osv_published_at": "2026-06-23T15:25:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T17:46:19Z", "flagged_at": null, "confirmed_at": "2026-06-23T17:46:19Z", "osv_earliest_published_at": "2026-06-23T15:25:06Z", "hours_ahead_of_osv": -2.35, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:51:06Z" }, { "id": "ttal2ttml-2026-06-23", "display_name": "ttal2ttml", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ttal2ttml", "ecosystem": "npm", "versions": [ "1.0.4", "99.0.1", "99.0.2", "99.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6298", "osv_published_at": "2026-06-23T14:11:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T17:46:17Z", "flagged_at": null, "confirmed_at": "2026-06-23T17:46:17Z", "osv_earliest_published_at": "2026-06-23T14:11:40Z", "hours_ahead_of_osv": -3.58, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:51:03Z" }, { "id": "tree-sitter-forth-2026-06-23", "display_name": "tree-sitter-forth", "campaign": null, "detection_source": "osv", "packages": [ { "package": "tree-sitter-forth", "ecosystem": "npm", "versions": [ "9999.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-6297", "osv_published_at": "2026-06-23T14:10:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T17:46:17Z", "flagged_at": null, "confirmed_at": "2026-06-23T17:46:17Z", "osv_earliest_published_at": "2026-06-23T14:10:12Z", "hours_ahead_of_osv": -3.6, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:48:31Z" }, { "id": "myebaynode-2026-06-23", "display_name": "myebaynode", "campaign": null, "detection_source": "osv", "packages": [ { "package": "myebaynode", "ecosystem": "npm", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6296", "osv_published_at": "2026-06-23T14:09:56Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T17:46:16Z", "flagged_at": null, "confirmed_at": "2026-06-23T17:46:16Z", "osv_earliest_published_at": "2026-06-23T14:09:56Z", "hours_ahead_of_osv": -3.61, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:48:28Z" }, { "id": "kdrive-utils-2026-06-23", "display_name": "kdrive-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "kdrive-utils", "ecosystem": "npm", "versions": [ "99.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-6295", "osv_published_at": "2026-06-23T14:10:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T17:46:16Z", "flagged_at": null, "confirmed_at": "2026-06-23T17:46:16Z", "osv_earliest_published_at": "2026-06-23T14:10:49Z", "hours_ahead_of_osv": -3.59, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:48:24Z" }, { "id": "cue-mcp-2026-06-23", "display_name": "cue-mcp", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cue-mcp", "ecosystem": "npm", "versions": [ "9999.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-6294", "osv_published_at": "2026-06-23T14:10:26Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T17:46:16Z", "flagged_at": null, "confirmed_at": "2026-06-23T17:46:16Z", "osv_earliest_published_at": "2026-06-23T14:10:26Z", "hours_ahead_of_osv": -3.6, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:48:19Z" }, { "id": "airbnb-airlock-2026-06-23", "display_name": "airbnb-airlock", "campaign": null, "detection_source": "osv", "packages": [ { "package": "airbnb-airlock", "ecosystem": "npm", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6293", "osv_published_at": "2026-06-23T14:11:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T17:46:16Z", "flagged_at": null, "confirmed_at": "2026-06-23T17:46:16Z", "osv_earliest_published_at": "2026-06-23T14:11:48Z", "hours_ahead_of_osv": -3.57, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:48:16Z" }, { "id": "outmarket-utils-2026-06-23", "display_name": "@outmarket/utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@outmarket/utils", "ecosystem": "npm", "versions": [ "9.9.10", "9.9.11", "9.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-6292", "osv_published_at": "2026-06-23T14:12:09Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T17:46:15Z", "flagged_at": null, "confirmed_at": "2026-06-23T17:46:15Z", "osv_earliest_published_at": "2026-06-23T14:12:09Z", "hours_ahead_of_osv": -3.57, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T11:34:14Z" }, { "id": "ts-wross-2026-06-23", "display_name": "ts-wross", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ts-wross", "ecosystem": "npm", "versions": [ "0.0.8" ], "osv_entries": [ { "osv_id": "MAL-2026-6278", "osv_published_at": "2026-06-23T06:22:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T17:46:14Z", "flagged_at": null, "confirmed_at": "2026-06-23T17:46:14Z", "osv_earliest_published_at": "2026-06-23T06:22:06Z", "hours_ahead_of_osv": -11.4, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:48:01Z" }, { "id": "outmarket-ui-2026-06-23", "display_name": "@outmarket/ui", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@outmarket/ui", "ecosystem": "npm", "versions": [ "9.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-6291", "osv_published_at": "2026-06-23T14:12:09Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T17:46:14Z", "flagged_at": null, "confirmed_at": "2026-06-23T17:46:14Z", "osv_earliest_published_at": "2026-06-23T14:12:09Z", "hours_ahead_of_osv": -3.57, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:48:08Z" }, { "id": "search-from-search-2026-06-23", "display_name": "search-from-search", "campaign": null, "detection_source": "osv", "packages": [ { "package": "search-from-search", "ecosystem": "npm", "versions": [ "999.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-6277", "osv_published_at": "2026-06-23T06:10:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T17:46:13Z", "flagged_at": null, "confirmed_at": "2026-06-23T17:46:13Z", "osv_earliest_published_at": "2026-06-23T06:10:51Z", "hours_ahead_of_osv": -11.59, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:47:57Z" }, { "id": "toorc-2026-06-23", "display_name": "toorc", "campaign": null, "detection_source": "osv", "packages": [ { "package": "toorc", "ecosystem": "pypi", "versions": [ "0.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6290", "osv_published_at": "2026-06-23T12:07:57Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T17:41:50Z", "flagged_at": null, "confirmed_at": "2026-06-23T17:41:50Z", "osv_earliest_published_at": "2026-06-23T12:07:57Z", "hours_ahead_of_osv": -5.56, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:47:13Z" }, { "id": "security-alerts-sdk-2026-06-23", "display_name": "security-alerts-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "security-alerts-sdk", "ecosystem": "pypi", "versions": [ "1.0.0", "1.0.1", "1.0.2", "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6327", "osv_published_at": "2026-06-23T15:50:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T17:41:50Z", "flagged_at": null, "confirmed_at": "2026-06-23T17:41:50Z", "osv_earliest_published_at": "2026-06-23T15:50:03Z", "hours_ahead_of_osv": -1.86, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:50:42Z" }, { "id": "equest-2026-06-23", "display_name": "equest", "campaign": null, "detection_source": "osv", "packages": [ { "package": "equest", "ecosystem": "pypi", "versions": [ "0.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6289", "osv_published_at": "2026-06-23T12:07:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T17:41:50Z", "flagged_at": null, "confirmed_at": "2026-06-23T17:41:50Z", "osv_earliest_published_at": "2026-06-23T12:07:23Z", "hours_ahead_of_osv": -5.57, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:47:10Z" }, { "id": "ip-rotat-2026-06-23", "display_name": "ip-rotat", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ip-rotat", "ecosystem": "pypi", "versions": [ "0.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6280", "osv_published_at": "2026-06-23T10:23:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T12:17:11Z", "flagged_at": null, "confirmed_at": "2026-06-23T12:17:11Z", "osv_earliest_published_at": "2026-06-23T10:23:00Z", "hours_ahead_of_osv": -1.9, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:46:56Z" }, { "id": "ts-apis-ts-utils-2026-06-23", "display_name": "@ts-apis/ts-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@ts-apis/ts-utils", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.4", "1.0.5", "1.0.6", "1.0.7", "1.0.8", "1.0.9" ], "osv_entries": [ { "osv_id": "MAL-2026-6275", "osv_published_at": "2026-06-23T03:01:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T05:42:22Z", "flagged_at": null, "confirmed_at": "2026-06-23T05:42:22Z", "osv_earliest_published_at": "2026-06-23T03:01:33Z", "hours_ahead_of_osv": -2.68, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:46:49Z" }, { "id": "web3-token-helper-2026-06-23", "display_name": "web3-token-helper", "campaign": null, "detection_source": "osv", "packages": [ { "package": "web3-token-helper", "ecosystem": "npm", "versions": [ "1.0.1", "1.1.1", "1.1.2", "1.2.0", "1.2.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6274", "osv_published_at": "2026-06-22T22:38:59Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T04:00:43Z", "flagged_at": null, "confirmed_at": "2026-06-23T04:00:43Z", "osv_earliest_published_at": "2026-06-22T22:38:59Z", "hours_ahead_of_osv": -5.36, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:44:20Z" }, { "id": "zod-pino-2026-06-23", "display_name": "zod-pino", "campaign": null, "detection_source": "osv", "packages": [ { "package": "zod-pino", "ecosystem": "npm", "versions": [ "1.0.122", "1.0.123", "1.0.124", "1.0.126", "1.0.127" ], "osv_entries": [ { "osv_id": "MAL-2026-6273", "osv_published_at": "2026-06-22T21:53:45Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T04:00:42Z", "flagged_at": null, "confirmed_at": "2026-06-23T04:00:42Z", "osv_earliest_published_at": "2026-06-22T21:53:45Z", "hours_ahead_of_osv": -6.12, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T11:34:00Z" }, { "id": "variational-common-ui-2026-06-23", "display_name": "@variational/common-ui", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@variational/common-ui", "ecosystem": "npm", "versions": [ "1.0.1", "1.0.2", "1.0.3", "1.0.4", "1.0.5", "1.0.6", "1.0.7", "1.0.8", "1.0.9", "1.1.0", "1.2.0", "1.2.1", "1.2.2", "1.2.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6272", "osv_published_at": "2026-06-22T21:16:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T04:00:42Z", "flagged_at": null, "confirmed_at": "2026-06-23T04:00:42Z", "osv_earliest_published_at": "2026-06-22T21:16:50Z", "hours_ahead_of_osv": -6.73, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:44:12Z" }, { "id": "node-fetch-utils-2026-06-23", "display_name": "node-fetch-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "node-fetch-utils", "ecosystem": "npm", "versions": [ "1.2.1", "1.2.2", "1.2.3", "1.2.4", "1.2.5", "1.2.6", "1.2.7" ], "osv_entries": [ { "osv_id": "MAL-2026-6271", "osv_published_at": "2026-06-22T19:54:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-23T04:00:40Z", "flagged_at": null, "confirmed_at": "2026-06-23T04:00:40Z", "osv_earliest_published_at": "2026-06-22T19:54:51Z", "hours_ahead_of_osv": -8.1, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:44:07Z" }, { "id": "fork-angular-daterangepicker-2026-06-21", "display_name": "fork-angular-daterangepicker", "campaign": null, "detection_source": "osv", "packages": [ { "package": "fork-angular-daterangepicker", "ecosystem": "npm", "versions": [ "11.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6255", "osv_published_at": "2026-06-21T17:40:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-21T22:28:40Z", "flagged_at": null, "confirmed_at": "2026-06-21T22:28:40Z", "osv_earliest_published_at": "2026-06-21T17:40:39Z", "hours_ahead_of_osv": -4.8, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-21T22:28:41Z" }, { "id": "zomato-sushi-2026-06-21", "display_name": "zomato-sushi", "campaign": null, "detection_source": "osv", "packages": [ { "package": "zomato-sushi", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6254", "osv_published_at": "2026-06-21T16:11:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-21T17:08:45Z", "flagged_at": null, "confirmed_at": "2026-06-21T17:08:45Z", "osv_earliest_published_at": "2026-06-21T16:11:12Z", "hours_ahead_of_osv": -0.96, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-21T17:09:09Z" }, { "id": "zomato-server-2026-06-21", "display_name": "zomato-server", "campaign": null, "detection_source": "osv", "packages": [ { "package": "zomato-server", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6253", "osv_published_at": "2026-06-21T16:04:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-21T17:08:44Z", "flagged_at": null, "confirmed_at": "2026-06-21T17:08:44Z", "osv_earliest_published_at": "2026-06-21T16:04:03Z", "hours_ahead_of_osv": -1.08, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-21T17:09:04Z" }, { "id": "zomato-logger-2026-06-21", "display_name": "zomato-logger", "campaign": null, "detection_source": "osv", "packages": [ { "package": "zomato-logger", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6252", "osv_published_at": "2026-06-21T16:11:10Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-21T17:08:44Z", "flagged_at": null, "confirmed_at": "2026-06-21T17:08:44Z", "osv_earliest_published_at": "2026-06-21T16:11:10Z", "hours_ahead_of_osv": -0.96, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-21T17:08:59Z" }, { "id": "zomato-config-2026-06-21", "display_name": "zomato-config", "campaign": null, "detection_source": "osv", "packages": [ { "package": "zomato-config", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6251", "osv_published_at": "2026-06-21T16:01:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-21T17:08:44Z", "flagged_at": null, "confirmed_at": "2026-06-21T17:08:44Z", "osv_earliest_published_at": "2026-06-21T16:01:08Z", "hours_ahead_of_osv": -1.13, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-21T17:08:54Z" }, { "id": "hyperpure-core-2026-06-21", "display_name": "hyperpure-core", "campaign": null, "detection_source": "osv", "packages": [ { "package": "hyperpure-core", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6250", "osv_published_at": "2026-06-21T16:21:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-21T17:08:44Z", "flagged_at": null, "confirmed_at": "2026-06-21T17:08:44Z", "osv_earliest_published_at": "2026-06-21T16:21:08Z", "hours_ahead_of_osv": -0.79, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-21T17:08:49Z" }, { "id": "blinkit-core-2026-06-21", "display_name": "blinkit-core", "campaign": null, "detection_source": "osv", "packages": [ { "package": "blinkit-core", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6249", "osv_published_at": "2026-06-21T16:21:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-21T17:08:43Z", "flagged_at": null, "confirmed_at": "2026-06-21T17:08:43Z", "osv_earliest_published_at": "2026-06-21T16:21:08Z", "hours_ahead_of_osv": -0.79, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-21T17:08:44Z" }, { "id": "jsonschema-viewer-2026-06-21", "display_name": "jsonschema-viewer", "campaign": null, "detection_source": "osv", "packages": [ { "package": "jsonschema-viewer", "ecosystem": "pypi", "versions": [ "0.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6248", "osv_published_at": "2026-06-21T13:38:16Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-21T17:04:28Z", "flagged_at": null, "confirmed_at": "2026-06-21T17:04:28Z", "osv_earliest_published_at": "2026-06-21T13:38:16Z", "hours_ahead_of_osv": -3.44, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-21T17:04:29Z" }, { "id": "atlasora-utils-2026-06-20", "display_name": "atlasora-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "atlasora-utils", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6243", "osv_published_at": "2026-06-20T13:10:04Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-20T23:07:30Z", "flagged_at": null, "confirmed_at": "2026-06-20T23:07:30Z", "osv_earliest_published_at": "2026-06-20T13:10:04Z", "hours_ahead_of_osv": -9.96, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-20T23:07:56Z" }, { "id": "atlasora-types-2026-06-20", "display_name": "atlasora-types", "campaign": null, "detection_source": "osv", "packages": [ { "package": "atlasora-types", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6242", "osv_published_at": "2026-06-20T13:10:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-20T23:07:30Z", "flagged_at": null, "confirmed_at": "2026-06-20T23:07:30Z", "osv_earliest_published_at": "2026-06-20T13:10:05Z", "hours_ahead_of_osv": -9.96, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-20T23:07:50Z" }, { "id": "atlasora-shared-2026-06-20", "display_name": "atlasora-shared", "campaign": null, "detection_source": "osv", "packages": [ { "package": "atlasora-shared", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6241", "osv_published_at": "2026-06-20T13:10:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-20T23:07:29Z", "flagged_at": null, "confirmed_at": "2026-06-20T23:07:29Z", "osv_earliest_published_at": "2026-06-20T13:10:07Z", "hours_ahead_of_osv": -9.96, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-20T23:07:46Z" }, { "id": "atlasora-sdk-2026-06-20", "display_name": "atlasora-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "atlasora-sdk", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6240", "osv_published_at": "2026-06-20T13:10:04Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-20T23:07:29Z", "flagged_at": null, "confirmed_at": "2026-06-20T23:07:29Z", "osv_earliest_published_at": "2026-06-20T13:10:04Z", "hours_ahead_of_osv": -9.96, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-20T23:07:40Z" }, { "id": "atlasora-config-2026-06-20", "display_name": "atlasora-config", "campaign": null, "detection_source": "osv", "packages": [ { "package": "atlasora-config", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6239", "osv_published_at": "2026-06-20T13:10:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-20T23:07:29Z", "flagged_at": null, "confirmed_at": "2026-06-20T23:07:29Z", "osv_earliest_published_at": "2026-06-20T13:10:08Z", "hours_ahead_of_osv": -9.96, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-20T23:07:36Z" }, { "id": "atlasora-client-2026-06-20", "display_name": "atlasora-client", "campaign": null, "detection_source": "osv", "packages": [ { "package": "atlasora-client", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6238", "osv_published_at": "2026-06-20T13:10:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-20T23:07:29Z", "flagged_at": null, "confirmed_at": "2026-06-20T23:07:29Z", "osv_earliest_published_at": "2026-06-20T13:10:03Z", "hours_ahead_of_osv": -9.96, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-20T23:07:33Z" }, { "id": "atlasora-api-2026-06-20", "display_name": "atlasora-api", "campaign": null, "detection_source": "osv", "packages": [ { "package": "atlasora-api", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6237", "osv_published_at": "2026-06-20T13:10:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-20T23:07:28Z", "flagged_at": null, "confirmed_at": "2026-06-20T23:07:28Z", "osv_earliest_published_at": "2026-06-20T13:10:06Z", "hours_ahead_of_osv": -9.96, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-20T23:07:29Z" }, { "id": "d0rk3r-2026-06-20", "display_name": "d0rk3r", "campaign": null, "detection_source": "osv", "packages": [ { "package": "d0rk3r", "ecosystem": "pypi", "versions": [ "1.0.0", "1.0.2", "1.0.3", "1.0.4", "1.0.5", "1.0.6", "1.0.7", "1.0.8", "1.0.9", "1.1.0", "1.1.1", "1.1.2", "1.1.3", "1.1.4", "1.1.5", "1.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6246", "osv_published_at": "2026-06-20T19:24:10Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-20T23:03:37Z", "flagged_at": null, "confirmed_at": "2026-06-20T23:03:37Z", "osv_earliest_published_at": "2026-06-20T19:24:10Z", "hours_ahead_of_osv": -3.66, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-20T23:03:47Z" }, { "id": "request-cache-py-2026-06-20", "display_name": "request-cache-py", "campaign": null, "detection_source": "osv", "packages": [ { "package": "request-cache-py", "ecosystem": "pypi", "versions": [ "1.0.0", "1.0.1", "1.0.2", "1.0.3", "1.0.4", "1.0.5", "1.0.6", "1.0.7", "1.0.8", "1.0.9", "1.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6245", "osv_published_at": "2026-06-20T18:47:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-20T23:03:34Z", "flagged_at": null, "confirmed_at": "2026-06-20T23:03:34Z", "osv_earliest_published_at": "2026-06-20T18:47:50Z", "hours_ahead_of_osv": -4.26, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-20T23:03:41Z" }, { "id": "d0rk3r-telemetry-2026-06-20", "display_name": "d0rk3r-telemetry", "campaign": null, "detection_source": "osv", "packages": [ { "package": "d0rk3r-telemetry", "ecosystem": "pypi", "versions": [ "1.0.0", "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6244", "osv_published_at": "2026-06-20T19:08:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-20T23:03:33Z", "flagged_at": null, "confirmed_at": "2026-06-20T23:03:33Z", "osv_earliest_published_at": "2026-06-20T19:08:37Z", "hours_ahead_of_osv": -3.92, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-20T23:03:37Z" }, { "id": "query-profile-2026-06-20", "display_name": "query-profile", "campaign": null, "detection_source": "osv", "packages": [ { "package": "query-profile", "ecosystem": "pypi", "versions": [ "0.0.1", "0.0.2", "0.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6236", "osv_published_at": "2026-06-20T08:55:46Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-20T23:03:32Z", "flagged_at": null, "confirmed_at": "2026-06-20T23:03:32Z", "osv_earliest_published_at": "2026-06-20T08:55:46Z", "hours_ahead_of_osv": -14.13, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-20T23:03:33Z" }, { "id": "yianzzkf6687-2026-06-20", "display_name": "yianzzkf6687", "campaign": null, "detection_source": "osv", "packages": [ { "package": "yianzzkf6687", "ecosystem": "npm", "versions": [ "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6235", "osv_published_at": "2026-06-20T03:50:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-20T07:44:52Z", "osv_earliest_published_at": "2026-06-20T03:50:25Z", "hours_ahead_of_osv": -3.91, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-20T07:45:00Z" }, { "id": "yian666aikf-2026-06-20", "display_name": "yian666aikf", "campaign": null, "detection_source": "osv", "packages": [ { "package": "yian666aikf", "ecosystem": "npm", "versions": [ "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6234", "osv_published_at": "2026-06-20T03:50:32Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-20T07:44:52Z", "osv_earliest_published_at": "2026-06-20T03:50:32Z", "hours_ahead_of_osv": -3.91, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-20T07:44:56Z" }, { "id": "free-claude-2026-06-20", "display_name": "free-claude", "campaign": null, "detection_source": "osv", "packages": [ { "package": "free-claude", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6232", "osv_published_at": "2026-06-19T17:37:59Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-20T07:44:51Z", "osv_earliest_published_at": "2026-06-19T17:37:59Z", "hours_ahead_of_osv": -14.11, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T11:33:54Z", "hours_ahead_of_press": null, "confirmed_at": "2026-06-24T11:33:54Z" }, { "id": "fluent-dashboard-panel-metrics-2026-06-20", "display_name": "fluent-dashboard-panel-metrics", "campaign": null, "detection_source": "osv", "packages": [ { "package": "fluent-dashboard-panel-metrics", "ecosystem": "pypi", "versions": [ "0.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6233", "osv_published_at": "2026-06-20T01:07:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-20T07:44:14Z", "osv_earliest_published_at": "2026-06-20T01:07:05Z", "hours_ahead_of_osv": -6.62, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-20T07:44:21Z" }, { "id": "improvado-layout-panel-metrics-2026-06-20", "display_name": "improvado-layout-panel-metrics", "campaign": null, "detection_source": "osv", "packages": [ { "package": "improvado-layout-panel-metrics", "ecosystem": "pypi", "versions": [ "0.1.0", "0.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6231", "osv_published_at": "2026-06-19T22:45:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-20T07:44:13Z", "osv_earliest_published_at": "2026-06-19T22:45:50Z", "hours_ahead_of_osv": -8.97, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-20T07:44:17Z" }, { "id": "django-auth-middleware-plus-2026-06-20", "display_name": "django-auth-middleware-plus", "campaign": null, "detection_source": "osv", "packages": [ { "package": "django-auth-middleware-plus", "ecosystem": "pypi", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-6230", "osv_published_at": "2026-06-19T21:05:32Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-20T07:44:12Z", "osv_earliest_published_at": "2026-06-19T21:05:32Z", "hours_ahead_of_osv": -10.64, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-20T07:44:13Z" }, { "id": "routecraft-2026-06-19", "display_name": "routecraft", "campaign": null, "detection_source": "osv", "packages": [ { "package": "routecraft", "ecosystem": "npm", "versions": [ "4.2.0", "5.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6229", "osv_published_at": "2026-06-19T15:55:54Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T20:32:28Z", "osv_earliest_published_at": "2026-06-19T15:55:54Z", "hours_ahead_of_osv": -4.61, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T20:33:38Z" }, { "id": "base-parts-ai-2026-06-19", "display_name": "base_parts_ai", "campaign": null, "detection_source": "osv", "packages": [ { "package": "base_parts_ai", "ecosystem": "npm", "versions": [ "1.0.50", "1.0.52" ], "osv_entries": [ { "osv_id": "MAL-2026-6228", "osv_published_at": "2026-06-19T15:59:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T20:32:28Z", "osv_earliest_published_at": "2026-06-19T15:59:03Z", "hours_ahead_of_osv": -4.56, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T20:33:34Z" }, { "id": "new-ts-helper-2026-06-19", "display_name": "new-ts-helper", "campaign": null, "detection_source": "osv", "packages": [ { "package": "new-ts-helper", "ecosystem": "npm", "versions": [ "9.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6227", "osv_published_at": "2026-06-19T14:13:34Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T20:32:27Z", "osv_earliest_published_at": "2026-06-19T14:13:34Z", "hours_ahead_of_osv": -6.31, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T20:33:30Z" }, { "id": "new-mjs-eslint-2026-06-19", "display_name": "new-mjs-eslint", "campaign": null, "detection_source": "osv", "packages": [ { "package": "new-mjs-eslint", "ecosystem": "npm", "versions": [ "7.0.6" ], "osv_entries": [ { "osv_id": "MAL-2026-6226", "osv_published_at": "2026-06-19T14:24:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T20:32:26Z", "osv_earliest_published_at": "2026-06-19T14:24:05Z", "hours_ahead_of_osv": -6.14, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T20:33:27Z" }, { "id": "new-eslint-1-2026-06-19", "display_name": "new-eslint-1", "campaign": null, "detection_source": "osv", "packages": [ { "package": "new-eslint-1", "ecosystem": "npm", "versions": [ "7.0.6" ], "osv_entries": [ { "osv_id": "MAL-2026-6225", "osv_published_at": "2026-06-19T14:24:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T20:32:26Z", "osv_earliest_published_at": "2026-06-19T14:24:00Z", "hours_ahead_of_osv": -6.14, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T20:33:23Z" }, { "id": "new-eslint-2026-06-19", "display_name": "new-eslint", "campaign": null, "detection_source": "osv", "packages": [ { "package": "new-eslint", "ecosystem": "npm", "versions": [ "7.0.5" ], "osv_entries": [ { "osv_id": "MAL-2026-6224", "osv_published_at": "2026-06-19T14:23:59Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T20:32:25Z", "osv_earliest_published_at": "2026-06-19T14:23:59Z", "hours_ahead_of_osv": -6.14, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T20:33:19Z" }, { "id": "mjs-eslint-2026-06-19", "display_name": "mjs-eslint", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mjs-eslint", "ecosystem": "npm", "versions": [ "7.0.5" ], "osv_entries": [ { "osv_id": "MAL-2026-6223", "osv_published_at": "2026-06-19T14:24:01Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T20:32:25Z", "osv_earliest_published_at": "2026-06-19T14:24:01Z", "hours_ahead_of_osv": -6.14, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T20:33:15Z" }, { "id": "create-mono-package-2026-06-19", "display_name": "create-mono-package", "campaign": null, "detection_source": "osv", "packages": [ { "package": "create-mono-package", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6222", "osv_published_at": "2026-06-19T15:30:59Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T20:32:24Z", "osv_earliest_published_at": "2026-06-19T15:30:59Z", "hours_ahead_of_osv": -5.02, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T20:33:11Z" }, { "id": "chai-assert-kit-2026-06-19", "display_name": "chai-assert-kit", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-assert-kit", "ecosystem": "npm", "versions": [ "3.8.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6221", "osv_published_at": "2026-06-19T15:00:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T20:32:24Z", "osv_earliest_published_at": "2026-06-19T15:00:48Z", "hours_ahead_of_osv": -5.53, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T20:33:07Z" }, { "id": "chai-as-uphelded-2026-06-19", "display_name": "chai-as-uphelded", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-uphelded", "ecosystem": "npm", "versions": [ "6.11.4" ], "osv_entries": [ { "osv_id": "MAL-2026-6220", "osv_published_at": "2026-06-19T15:00:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T20:32:24Z", "osv_earliest_published_at": "2026-06-19T15:00:03Z", "hours_ahead_of_osv": -5.54, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T20:33:03Z" }, { "id": "chai-as-forgeted-2026-06-19", "display_name": "chai-as-forgeted", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-forgeted", "ecosystem": "npm", "versions": [ "9.24.6" ], "osv_entries": [ { "osv_id": "MAL-2026-6219", "osv_published_at": "2026-06-19T14:10:27Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T20:32:23Z", "osv_earliest_published_at": "2026-06-19T14:10:27Z", "hours_ahead_of_osv": -6.37, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T20:33:00Z" }, { "id": "chai-as-attested-2026-06-19", "display_name": "chai-as-attested", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-attested", "ecosystem": "npm", "versions": [ "6.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6218", "osv_published_at": "2026-06-19T15:00:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T20:32:23Z", "osv_earliest_published_at": "2026-06-19T15:00:12Z", "hours_ahead_of_osv": -5.54, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T20:32:55Z" }, { "id": "aikaf788812-2026-06-19", "display_name": "aikaf788812", "campaign": null, "detection_source": "osv", "packages": [ { "package": "aikaf788812", "ecosystem": "npm", "versions": [ "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6217", "osv_published_at": "2026-06-19T15:31:29Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T20:32:22Z", "osv_earliest_published_at": "2026-06-19T15:31:29Z", "hours_ahead_of_osv": -5.01, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T20:32:51Z" }, { "id": "aikaf668897-2026-06-19", "display_name": "aikaf668897", "campaign": null, "detection_source": "osv", "packages": [ { "package": "aikaf668897", "ecosystem": "npm", "versions": [ "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6216", "osv_published_at": "2026-06-19T15:31:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T20:32:22Z", "osv_earliest_published_at": "2026-06-19T15:31:36Z", "hours_ahead_of_osv": -5.01, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T20:32:48Z" }, { "id": "chunklab-hexparse-2026-06-19", "display_name": "@chunklab/hexparse", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@chunklab/hexparse", "ecosystem": "npm", "versions": [ "1.0.7", "1.1.4", "1.1.5", "1.1.6", "1.1.7" ], "osv_entries": [ { "osv_id": "MAL-2026-6214", "osv_published_at": "2026-06-19T15:13:24Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T20:32:21Z", "osv_earliest_published_at": "2026-06-19T15:13:24Z", "hours_ahead_of_osv": -5.32, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:47:45Z", "hours_ahead_of_press": null, "confirmed_at": "2026-06-24T02:47:45Z" }, { "id": "aikaf6688812-2026-06-19", "display_name": "aikaf6688812", "campaign": null, "detection_source": "osv", "packages": [ { "package": "aikaf6688812", "ecosystem": "npm", "versions": [ "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6215", "osv_published_at": "2026-06-19T15:31:30Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T20:32:21Z", "osv_earliest_published_at": "2026-06-19T15:31:30Z", "hours_ahead_of_osv": -5.01, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T20:32:44Z" }, { "id": "bytemend-mfebus-2026-06-19", "display_name": "@bytemend/mfebus", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@bytemend/mfebus", "ecosystem": "npm", "versions": [ "1.4.0", "1.4.1", "1.4.2", "1.4.3", "1.4.4", "1.4.5" ], "osv_entries": [ { "osv_id": "MAL-2026-6213", "osv_published_at": "2026-06-19T15:13:09Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T20:32:20Z", "osv_earliest_published_at": "2026-06-19T15:13:09Z", "hours_ahead_of_osv": -5.32, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:47:41Z", "hours_ahead_of_press": null, "confirmed_at": "2026-06-24T02:47:41Z" }, { "id": "briskforge-envcheck-2026-06-19", "display_name": "@briskforge/envcheck", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@briskforge/envcheck", "ecosystem": "npm", "versions": [ "0.5.2", "0.5.3", "0.5.4", "0.5.5" ], "osv_entries": [ { "osv_id": "MAL-2026-6212", "osv_published_at": "2026-06-19T15:12:55Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T20:32:20Z", "osv_earliest_published_at": "2026-06-19T15:12:55Z", "hours_ahead_of_osv": -5.32, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:47:37Z", "hours_ahead_of_press": null, "confirmed_at": "2026-06-24T02:47:37Z" }, { "id": "apiwizards-auth-middleware-2026-06-19", "display_name": "@apiwizards/auth-middleware", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@apiwizards/auth-middleware", "ecosystem": "npm", "versions": [ "4.7.0", "5.1.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6211", "osv_published_at": "2026-06-19T15:03:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T20:32:20Z", "osv_earliest_published_at": "2026-06-19T15:03:53Z", "hours_ahead_of_osv": -5.47, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:47:33Z", "hours_ahead_of_press": null, "confirmed_at": "2026-06-24T02:47:33Z" }, { "id": "apexcraft-nano-key-2026-06-19", "display_name": "@apexcraft/nano-key", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@apexcraft/nano-key", "ecosystem": "npm", "versions": [ "1.2.4", "1.2.5", "1.3.2", "1.3.3", "1.3.4", "1.3.5", "1.3.6", "1.3.7", "1.3.8" ], "osv_entries": [ { "osv_id": "MAL-2026-6210", "osv_published_at": "2026-06-19T15:12:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T20:32:19Z", "osv_earliest_published_at": "2026-06-19T15:12:42Z", "hours_ahead_of_osv": -5.33, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:47:29Z", "hours_ahead_of_press": null, "confirmed_at": "2026-06-24T02:47:29Z" }, { "id": "antoncarlos1-nodelamp-2026-06-19", "display_name": "@antoncarlos1/nodelamp", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@antoncarlos1/nodelamp", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6209", "osv_published_at": "2026-06-19T15:02:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T20:32:18Z", "osv_earliest_published_at": "2026-06-19T15:02:53Z", "hours_ahead_of_osv": -5.49, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T20:32:20Z" }, { "id": "ccl-component-resources-2026-06-19", "display_name": "ccl-component-resources", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ccl-component-resources", "ecosystem": "npm", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2024-1959", "osv_published_at": "2024-06-25T12:32:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T20:32:13Z", "osv_earliest_published_at": "2024-06-25T12:32:40Z", "hours_ahead_of_osv": -17383.99, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T20:32:13Z" }, { "id": "fastercoding-2026-06-19", "display_name": "fastercoding", "campaign": null, "detection_source": "osv", "packages": [ { "package": "fastercoding", "ecosystem": "pypi", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6208", "osv_published_at": "2026-06-19T11:38:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T20:31:39Z", "osv_earliest_published_at": "2026-06-19T11:38:53Z", "hours_ahead_of_osv": -8.88, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T20:31:47Z" }, { "id": "shoaib-done-pack-2026-06-19", "display_name": "shoaib-done-pack", "campaign": null, "detection_source": "osv", "packages": [ { "package": "shoaib-done-pack", "ecosystem": "pypi", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6207", "osv_published_at": "2026-06-19T10:18:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T20:31:38Z", "osv_earliest_published_at": "2026-06-19T10:18:42Z", "hours_ahead_of_osv": -10.22, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T20:31:42Z" }, { "id": "fastercode-2026-06-19", "display_name": "fastercode", "campaign": null, "detection_source": "osv", "packages": [ { "package": "fastercode", "ecosystem": "pypi", "versions": [ "0.1.0", "0.1.1", "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6206", "osv_published_at": "2026-06-19T10:38:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T20:31:38Z", "osv_earliest_published_at": "2026-06-19T10:38:48Z", "hours_ahead_of_osv": -9.88, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T20:31:38Z" }, { "id": "ts-big-ecro-2026-06-19", "display_name": "ts-big-ecro", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ts-big-ecro", "ecosystem": "npm", "versions": [ "0.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6199", "osv_published_at": "2026-06-19T05:20:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:10:47Z", "osv_earliest_published_at": "2026-06-19T05:20:12Z", "hours_ahead_of_osv": -3.84, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:12:30Z" }, { "id": "new-ecro-1-2026-06-19", "display_name": "new-ecro-1", "campaign": null, "detection_source": "osv", "packages": [ { "package": "new-ecro-1", "ecosystem": "npm", "versions": [ "0.1.9", "0.3.9" ], "osv_entries": [ { "osv_id": "MAL-2026-6198", "osv_published_at": "2026-06-19T05:20:04Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:10:45Z", "osv_earliest_published_at": "2026-06-19T05:20:04Z", "hours_ahead_of_osv": -3.84, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:12:26Z" }, { "id": "new-ecro-2026-06-19", "display_name": "new-ecro", "campaign": null, "detection_source": "osv", "packages": [ { "package": "new-ecro", "ecosystem": "npm", "versions": [ "0.0.6", "0.0.7", "0.0.9" ], "osv_entries": [ { "osv_id": "MAL-2026-6197", "osv_published_at": "2026-06-19T05:20:02Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:10:41Z", "osv_earliest_published_at": "2026-06-19T05:20:02Z", "hours_ahead_of_osv": -3.84, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:12:22Z" }, { "id": "build-tracker-n5p1-2026-06-19", "display_name": "build-tracker-n5p1", "campaign": null, "detection_source": "osv", "packages": [ { "package": "build-tracker-n5p1", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6196", "osv_published_at": "2026-06-19T06:48:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:10:35Z", "osv_earliest_published_at": "2026-06-19T06:48:23Z", "hours_ahead_of_osv": -2.37, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:12:17Z" }, { "id": "ts-linter-builders-2026-06-19", "display_name": "ts-linter-builders", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ts-linter-builders", "ecosystem": "npm", "versions": [ "1.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-6195", "osv_published_at": "2026-06-19T04:30:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:10:33Z", "osv_earliest_published_at": "2026-06-19T04:30:48Z", "hours_ahead_of_osv": -4.66, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:12:13Z" }, { "id": "portloop-2026-06-19", "display_name": "portloop", "campaign": null, "detection_source": "osv", "packages": [ { "package": "portloop", "ecosystem": "npm", "versions": [ "1.14.0", "1.6.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6194", "osv_published_at": "2026-06-19T04:36:47Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:10:31Z", "osv_earliest_published_at": "2026-06-19T04:36:47Z", "hours_ahead_of_osv": -4.56, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:12:09Z" }, { "id": "ordered-btree-2026-06-19", "display_name": "ordered-btree", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ordered-btree", "ecosystem": "npm", "versions": [ "3.2.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6193", "osv_published_at": "2026-06-19T05:09:45Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:10:27Z", "osv_earliest_published_at": "2026-06-19T05:09:45Z", "hours_ahead_of_osv": -4.01, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:12:05Z" }, { "id": "nodepathbalance54-2026-06-19", "display_name": "nodepathbalance54", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nodepathbalance54", "ecosystem": "npm", "versions": [ "1.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6192", "osv_published_at": "2026-06-19T05:01:34Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:10:25Z", "osv_earliest_published_at": "2026-06-19T05:01:34Z", "hours_ahead_of_osv": -4.15, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:12:01Z" }, { "id": "node-slot-2026-06-19", "display_name": "node-slot", "campaign": null, "detection_source": "osv", "packages": [ { "package": "node-slot", "ecosystem": "npm", "versions": [ "1.0.7", "1.0.8", "1.0.9" ], "osv_entries": [ { "osv_id": "MAL-2026-6191", "osv_published_at": "2026-06-19T05:10:55Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:10:23Z", "osv_earliest_published_at": "2026-06-19T05:10:55Z", "hours_ahead_of_osv": -3.99, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T11:33:42Z", "hours_ahead_of_press": null, "confirmed_at": "2026-06-24T02:50:51Z" }, { "id": "mjs-eslint-helper-2026-06-19", "display_name": "mjs-eslint-helper", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mjs-eslint-helper", "ecosystem": "npm", "versions": [ "4.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6190", "osv_published_at": "2026-06-19T03:59:02Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:10:21Z", "osv_earliest_published_at": "2026-06-19T03:59:02Z", "hours_ahead_of_osv": -5.19, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:11:53Z" }, { "id": "eyee-2026-06-19", "display_name": "eyee", "campaign": null, "detection_source": "osv", "packages": [ { "package": "eyee", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6189", "osv_published_at": "2026-06-19T04:51:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:10:19Z", "osv_earliest_published_at": "2026-06-19T04:51:48Z", "hours_ahead_of_osv": -4.31, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:11:49Z" }, { "id": "eslint-helper-1-2026-06-19", "display_name": "eslint-helper-1", "campaign": null, "detection_source": "osv", "packages": [ { "package": "eslint-helper-1", "ecosystem": "npm", "versions": [ "5.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-6188", "osv_published_at": "2026-06-19T03:59:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:10:17Z", "osv_earliest_published_at": "2026-06-19T03:59:03Z", "hours_ahead_of_osv": -5.19, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:11:45Z" }, { "id": "eslint-helper-2026-06-19", "display_name": "eslint-helper", "campaign": null, "detection_source": "osv", "packages": [ { "package": "eslint-helper", "ecosystem": "npm", "versions": [ "4.0.1", "4.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6187", "osv_published_at": "2026-06-19T03:59:01Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:10:15Z", "osv_earliest_published_at": "2026-06-19T03:59:01Z", "hours_ahead_of_osv": -5.19, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:11:40Z" }, { "id": "electron-internal-utils-2026-06-19", "display_name": "electron-internal-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "electron-internal-utils", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6186", "osv_published_at": "2026-06-19T04:56:31Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:10:11Z", "osv_earliest_published_at": "2026-06-19T04:56:31Z", "hours_ahead_of_osv": -4.23, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:11:36Z" }, { "id": "conversa-sdk-2026-06-19", "display_name": "conversa-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "conversa-sdk", "ecosystem": "npm", "versions": [ "1.0.9", "2.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6185", "osv_published_at": "2026-06-19T04:57:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:10:09Z", "osv_earliest_published_at": "2026-06-19T04:57:48Z", "hours_ahead_of_osv": -4.21, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:11:31Z" }, { "id": "qlab-component-intelligence-2026-06-19", "display_name": "@qlab/component-intelligence", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@qlab/component-intelligence", "ecosystem": "npm", "versions": [ "2.0.6" ], "osv_entries": [ { "osv_id": "MAL-2026-6184", "osv_published_at": "2026-06-19T05:02:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:10:05Z", "osv_earliest_published_at": "2026-06-19T05:02:33Z", "hours_ahead_of_osv": -4.13, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:11:27Z" }, { "id": "mep-exp-api-tools-2026-06-19", "display_name": "@mep-exp/api-tools", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mep-exp/api-tools", "ecosystem": "npm", "versions": [ "2.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6183", "osv_published_at": "2026-06-19T05:03:19Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:10:03Z", "osv_earliest_published_at": "2026-06-19T05:03:19Z", "hours_ahead_of_osv": -4.11, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:11:23Z" }, { "id": "virtualization-compression-collapse-2026-06-19", "display_name": "virtualization-compression-collapse", "campaign": null, "detection_source": "osv", "packages": [ { "package": "virtualization-compression-collapse", "ecosystem": "npm", "versions": [ "1.0.0", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6181", "osv_published_at": "2026-06-17T12:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:10:01Z", "osv_earliest_published_at": "2026-06-17T12:00:00Z", "hours_ahead_of_osv": -45.17, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:11:19Z" }, { "id": "userinterface-machinelearning-2026-06-19", "display_name": "userinterface-machinelearning", "campaign": null, "detection_source": "osv", "packages": [ { "package": "userinterface-machinelearning", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6180", "osv_published_at": "2026-06-17T12:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:09:57Z", "osv_earliest_published_at": "2026-06-17T12:00:00Z", "hours_ahead_of_osv": -45.17, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:11:15Z" }, { "id": "touchid-images-2026-06-19", "display_name": "touchid-images", "campaign": null, "detection_source": "osv", "packages": [ { "package": "touchid-images", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6179", "osv_published_at": "2026-06-17T12:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:09:55Z", "osv_earliest_published_at": "2026-06-17T12:00:00Z", "hours_ahead_of_osv": -45.17, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:11:11Z" }, { "id": "streaming-downloads-2026-06-19", "display_name": "streaming-downloads", "campaign": null, "detection_source": "osv", "packages": [ { "package": "streaming-downloads", "ecosystem": "npm", "versions": [ "1.0.0", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6178", "osv_published_at": "2026-06-17T12:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:09:53Z", "osv_earliest_published_at": "2026-06-17T12:00:00Z", "hours_ahead_of_osv": -45.16, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:11:06Z" }, { "id": "socket-network-2026-06-19", "display_name": "socket-network", "campaign": null, "detection_source": "osv", "packages": [ { "package": "socket-network", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6177", "osv_published_at": "2026-06-17T12:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:09:49Z", "osv_earliest_published_at": "2026-06-17T12:00:00Z", "hours_ahead_of_osv": -45.16, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:11:02Z" }, { "id": "request-tracking-sqlite-2026-06-19", "display_name": "request-tracking-sqlite", "campaign": null, "detection_source": "osv", "packages": [ { "package": "request-tracking-sqlite", "ecosystem": "npm", "versions": [ "1.0.0", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6176", "osv_published_at": "2026-06-17T12:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:09:47Z", "osv_earliest_published_at": "2026-06-17T12:00:00Z", "hours_ahead_of_osv": -45.16, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:10:58Z" }, { "id": "request-performance-2026-06-19", "display_name": "request-performance", "campaign": null, "detection_source": "osv", "packages": [ { "package": "request-performance", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6175", "osv_published_at": "2026-06-17T12:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:09:43Z", "osv_earliest_published_at": "2026-06-17T12:00:00Z", "hours_ahead_of_osv": -45.16, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:10:54Z" }, { "id": "pushnotifications-gesturerecognition-2026-06-19", "display_name": "pushnotifications-gesturerecognition", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pushnotifications-gesturerecognition", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6174", "osv_published_at": "2026-06-17T12:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:09:41Z", "osv_earliest_published_at": "2026-06-17T12:00:00Z", "hours_ahead_of_osv": -45.16, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:10:50Z" }, { "id": "profiling-keychain-2026-06-19", "display_name": "profiling-keychain", "campaign": null, "detection_source": "osv", "packages": [ { "package": "profiling-keychain", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6173", "osv_published_at": "2026-06-17T12:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:09:39Z", "osv_earliest_published_at": "2026-06-17T12:00:00Z", "hours_ahead_of_osv": -45.16, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:10:46Z" }, { "id": "platformspecific-webgl-2026-06-19", "display_name": "platformspecific-webgl", "campaign": null, "detection_source": "osv", "packages": [ { "package": "platformspecific-webgl", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6172", "osv_published_at": "2026-06-17T12:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:09:37Z", "osv_earliest_published_at": "2026-06-17T12:00:00Z", "hours_ahead_of_osv": -45.16, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:10:42Z" }, { "id": "personal-custom-button-2026-06-19", "display_name": "personal-custom-button", "campaign": null, "detection_source": "osv", "packages": [ { "package": "personal-custom-button", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2", "1.0.3", "1.0.4", "1.0.5", "1.0.6" ], "osv_entries": [ { "osv_id": "MAL-2026-6171", "osv_published_at": "2026-06-17T12:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:09:35Z", "osv_earliest_published_at": "2026-06-17T12:00:00Z", "hours_ahead_of_osv": -45.16, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:10:37Z" }, { "id": "onesignal-hooks-2026-06-19", "display_name": "onesignal-hooks", "campaign": null, "detection_source": "osv", "packages": [ { "package": "onesignal-hooks", "ecosystem": "npm", "versions": [ "1.0.0", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6170", "osv_published_at": "2026-06-17T12:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:09:21Z", "osv_earliest_published_at": "2026-06-17T12:00:00Z", "hours_ahead_of_osv": -45.16, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:10:33Z" }, { "id": "notificationcenter-enzyme-jest-2026-06-19", "display_name": "notificationcenter-enzyme-jest", "campaign": null, "detection_source": "osv", "packages": [ { "package": "notificationcenter-enzyme-jest", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6169", "osv_published_at": "2026-06-17T12:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:09:17Z", "osv_earliest_published_at": "2026-06-17T12:00:00Z", "hours_ahead_of_osv": -45.15, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:10:29Z" }, { "id": "macos-contentprovider-optimizingassets-2026-06-19", "display_name": "macos-contentprovider-optimizingassets", "campaign": null, "detection_source": "osv", "packages": [ { "package": "macos-contentprovider-optimizingassets", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6168", "osv_published_at": "2026-06-17T12:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:09:15Z", "osv_earliest_published_at": "2026-06-17T12:00:00Z", "hours_ahead_of_osv": -45.15, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:10:25Z" }, { "id": "lazyloading-haptics-2026-06-19", "display_name": "lazyloading-haptics", "campaign": null, "detection_source": "osv", "packages": [ { "package": "lazyloading-haptics", "ecosystem": "npm", "versions": [ "1.0.0", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6167", "osv_published_at": "2026-06-17T12:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:09:13Z", "osv_earliest_published_at": "2026-06-17T12:00:00Z", "hours_ahead_of_osv": -45.15, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:10:21Z" }, { "id": "jest-macos-2026-06-19", "display_name": "jest-macos", "campaign": null, "detection_source": "osv", "packages": [ { "package": "jest-macos", "ecosystem": "npm", "versions": [ "1.0.0", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6166", "osv_published_at": "2026-06-17T12:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:09:09Z", "osv_earliest_published_at": "2026-06-17T12:00:00Z", "hours_ahead_of_osv": -45.15, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:10:15Z" }, { "id": "ios-save-area-custom-2026-06-19", "display_name": "ios-save-area-custom", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ios-save-area-custom", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2", "1.0.3", "1.0.4", "1.0.5", "1.0.6" ], "osv_entries": [ { "osv_id": "MAL-2026-6165", "osv_published_at": "2026-06-17T12:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:09:05Z", "osv_earliest_published_at": "2026-06-17T12:00:00Z", "hours_ahead_of_osv": -45.15, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:10:10Z" }, { "id": "interaction-photos-infinitescroll-2026-06-19", "display_name": "interaction-photos-infinitescroll", "campaign": null, "detection_source": "osv", "packages": [ { "package": "interaction-photos-infinitescroll", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6164", "osv_published_at": "2026-06-17T12:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:08:51Z", "osv_earliest_published_at": "2026-06-17T12:00:00Z", "hours_ahead_of_osv": -45.15, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:10:06Z" }, { "id": "framerate-interaction-permissions-2026-06-19", "display_name": "framerate-interaction-permissions", "campaign": null, "detection_source": "osv", "packages": [ { "package": "framerate-interaction-permissions", "ecosystem": "npm", "versions": [ "1.0.0", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6163", "osv_published_at": "2026-06-17T12:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:08:47Z", "osv_earliest_published_at": "2026-06-17T12:00:00Z", "hours_ahead_of_osv": -45.15, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:10:02Z" }, { "id": "font-picker-responsive-2026-06-19", "display_name": "font-picker-responsive", "campaign": null, "detection_source": "osv", "packages": [ { "package": "font-picker-responsive", "ecosystem": "npm", "versions": [ "1.0.0", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6162", "osv_published_at": "2026-06-17T12:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:08:44Z", "osv_earliest_published_at": "2026-06-17T12:00:00Z", "hours_ahead_of_osv": -45.15, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:09:57Z" }, { "id": "flexbox-oauth-machinelearning-2026-06-19", "display_name": "flexbox-oauth-machinelearning", "campaign": null, "detection_source": "osv", "packages": [ { "package": "flexbox-oauth-machinelearning", "ecosystem": "npm", "versions": [ "1.0.0", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6161", "osv_published_at": "2026-06-17T12:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:08:44Z", "osv_earliest_published_at": "2026-06-17T12:00:00Z", "hours_ahead_of_osv": -45.15, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:09:53Z" }, { "id": "firebase-readability-2026-06-19", "display_name": "firebase-readability", "campaign": null, "detection_source": "osv", "packages": [ { "package": "firebase-readability", "ecosystem": "npm", "versions": [ "1.0.0", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6160", "osv_published_at": "2026-06-17T12:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:08:42Z", "osv_earliest_published_at": "2026-06-17T12:00:00Z", "hours_ahead_of_osv": -45.15, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:09:49Z" }, { "id": "expandingcards-socket-virtualization-2026-06-19", "display_name": "expandingcards-socket-virtualization", "campaign": null, "detection_source": "osv", "packages": [ { "package": "expandingcards-socket-virtualization", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6159", "osv_published_at": "2026-06-17T12:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:08:42Z", "osv_earliest_published_at": "2026-06-17T12:00:00Z", "hours_ahead_of_osv": -45.15, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:09:45Z" }, { "id": "enzyme-optimization-bluetooth-2026-06-19", "display_name": "enzyme-optimization-bluetooth", "campaign": null, "detection_source": "osv", "packages": [ { "package": "enzyme-optimization-bluetooth", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6158", "osv_published_at": "2026-06-17T12:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:08:41Z", "osv_earliest_published_at": "2026-06-17T12:00:00Z", "hours_ahead_of_osv": -45.14, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:09:41Z" }, { "id": "dropdown-thread-2026-06-19", "display_name": "dropdown-thread", "campaign": null, "detection_source": "osv", "packages": [ { "package": "dropdown-thread", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6157", "osv_published_at": "2026-06-17T12:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:08:41Z", "osv_earliest_published_at": "2026-06-17T12:00:00Z", "hours_ahead_of_osv": -45.14, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:09:37Z" }, { "id": "documents-widgets-2026-06-19", "display_name": "documents-widgets", "campaign": null, "detection_source": "osv", "packages": [ { "package": "documents-widgets", "ecosystem": "npm", "versions": [ "1.0.0", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6156", "osv_published_at": "2026-06-17T12:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:08:40Z", "osv_earliest_published_at": "2026-06-17T12:00:00Z", "hours_ahead_of_osv": -45.14, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:09:32Z" }, { "id": "designsystem-vector-2026-06-19", "display_name": "designsystem-vector", "campaign": null, "detection_source": "osv", "packages": [ { "package": "designsystem-vector", "ecosystem": "npm", "versions": [ "1.0.0", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6155", "osv_published_at": "2026-06-17T12:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:08:40Z", "osv_earliest_published_at": "2026-06-17T12:00:00Z", "hours_ahead_of_osv": -45.14, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:09:28Z" }, { "id": "datapersistence-steppers-ai-2026-06-19", "display_name": "datapersistence-steppers-ai", "campaign": null, "detection_source": "osv", "packages": [ { "package": "datapersistence-steppers-ai", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6154", "osv_published_at": "2026-06-17T12:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:08:39Z", "osv_earliest_published_at": "2026-06-17T12:00:00Z", "hours_ahead_of_osv": -45.14, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:09:24Z" }, { "id": "datapersistence-profiling-2026-06-19", "display_name": "datapersistence-profiling", "campaign": null, "detection_source": "osv", "packages": [ { "package": "datapersistence-profiling", "ecosystem": "npm", "versions": [ "1.0.0", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6153", "osv_published_at": "2026-06-17T12:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:08:38Z", "osv_earliest_published_at": "2026-06-17T12:00:00Z", "hours_ahead_of_osv": -45.14, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:09:19Z" }, { "id": "custom-save-area-block-2026-06-19", "display_name": "custom-save-area-block", "campaign": null, "detection_source": "osv", "packages": [ { "package": "custom-save-area-block", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2", "1.0.3", "1.0.4", "1.0.5", "1.0.6" ], "osv_entries": [ { "osv_id": "MAL-2026-6152", "osv_published_at": "2026-06-17T12:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:08:37Z", "osv_earliest_published_at": "2026-06-17T12:00:00Z", "hours_ahead_of_osv": -45.14, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:09:16Z" }, { "id": "buildautomation-touch-2026-06-19", "display_name": "buildautomation-touch", "campaign": null, "detection_source": "osv", "packages": [ { "package": "buildautomation-touch", "ecosystem": "npm", "versions": [ "1.0.0", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6151", "osv_published_at": "2026-06-17T12:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:08:34Z", "osv_earliest_published_at": "2026-06-17T12:00:00Z", "hours_ahead_of_osv": -45.14, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:09:11Z" }, { "id": "barcodescanner-reconnect-2026-06-19", "display_name": "barcodescanner-reconnect", "campaign": null, "detection_source": "osv", "packages": [ { "package": "barcodescanner-reconnect", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6150", "osv_published_at": "2026-06-17T12:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:08:34Z", "osv_earliest_published_at": "2026-06-17T12:00:00Z", "hours_ahead_of_osv": -45.14, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:09:07Z" }, { "id": "backgroundprocessing-contextmenus-2026-06-19", "display_name": "backgroundprocessing-contextmenus", "campaign": null, "detection_source": "osv", "packages": [ { "package": "backgroundprocessing-contextmenus", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6149", "osv_published_at": "2026-06-17T12:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:08:33Z", "osv_earliest_published_at": "2026-06-17T12:00:00Z", "hours_ahead_of_osv": -45.14, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:09:03Z" }, { "id": "async-protobuf-av-2026-06-19", "display_name": "async-protobuf-av", "campaign": null, "detection_source": "osv", "packages": [ { "package": "async-protobuf-av", "ecosystem": "npm", "versions": [ "1.0.0", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6148", "osv_published_at": "2026-06-17T12:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:08:33Z", "osv_earliest_published_at": "2026-06-17T12:00:00Z", "hours_ahead_of_osv": -45.14, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:08:59Z" }, { "id": "analytics-readability-gestures-2026-06-19", "display_name": "analytics-readability-gestures", "campaign": null, "detection_source": "osv", "packages": [ { "package": "analytics-readability-gestures", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6147", "osv_published_at": "2026-06-17T12:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:08:32Z", "osv_earliest_published_at": "2026-06-17T12:00:00Z", "hours_ahead_of_osv": -45.14, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:08:55Z" }, { "id": "actionbars-infinitescroll-searchbar-2026-06-19", "display_name": "actionbars-infinitescroll-searchbar", "campaign": null, "detection_source": "osv", "packages": [ { "package": "actionbars-infinitescroll-searchbar", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6146", "osv_published_at": "2026-06-17T12:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:08:31Z", "osv_earliest_published_at": "2026-06-17T12:00:00Z", "hours_ahead_of_osv": -45.14, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:08:50Z" }, { "id": "accordion-animationtiming-authorization-2026-06-19", "display_name": "accordion-animationtiming-authorization", "campaign": null, "detection_source": "osv", "packages": [ { "package": "accordion-animationtiming-authorization", "ecosystem": "npm", "versions": [ "1.0.0", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6145", "osv_published_at": "2026-06-17T12:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:08:31Z", "osv_earliest_published_at": "2026-06-17T12:00:00Z", "hours_ahead_of_osv": -45.14, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:08:46Z" }, { "id": "runtime-query-2026-06-19", "display_name": "runtime-query", "campaign": null, "detection_source": "osv", "packages": [ { "package": "runtime-query", "ecosystem": "npm", "versions": [ "1.6.6" ], "osv_entries": [ { "osv_id": "MAL-2026-6144", "osv_published_at": "2026-06-18T22:28:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:08:30Z", "osv_earliest_published_at": "2026-06-18T22:28:53Z", "hours_ahead_of_osv": -10.66, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:08:42Z" }, { "id": "node-vfs-polyfill-2026-06-19", "display_name": "node-vfs-polyfill", "campaign": null, "detection_source": "osv", "packages": [ { "package": "node-vfs-polyfill", "ecosystem": "npm", "versions": [ "2.0.5" ], "osv_entries": [ { "osv_id": "MAL-2026-6143", "osv_published_at": "2026-06-18T22:31:27Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:08:29Z", "osv_earliest_published_at": "2026-06-18T22:31:27Z", "hours_ahead_of_osv": -10.62, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:08:37Z" }, { "id": "db-connector-log-2026-06-19", "display_name": "db-connector-log", "campaign": null, "detection_source": "osv", "packages": [ { "package": "db-connector-log", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6142", "osv_published_at": "2026-06-18T22:29:10Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:08:29Z", "osv_earliest_published_at": "2026-06-18T22:29:10Z", "hours_ahead_of_osv": -10.66, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:08:33Z" }, { "id": "clx-cookie-signature-2026-06-19", "display_name": "clx-cookie-signature", "campaign": null, "detection_source": "osv", "packages": [ { "package": "clx-cookie-signature", "ecosystem": "npm", "versions": [ "1.2.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6141", "osv_published_at": "2026-06-18T22:28:34Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:08:29Z", "osv_earliest_published_at": "2026-06-18T22:28:34Z", "hours_ahead_of_osv": -10.67, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:08:29Z" }, { "id": "fluent-panel-metrics-2026-06-19", "display_name": "fluent-panel-metrics", "campaign": null, "detection_source": "osv", "packages": [ { "package": "fluent-panel-metrics", "ecosystem": "pypi", "versions": [ "0.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6182", "osv_published_at": "2026-06-19T00:53:01Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-19T09:07:49Z", "osv_earliest_published_at": "2026-06-19T00:53:01Z", "hours_ahead_of_osv": -8.25, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-19T09:07:50Z" }, { "id": "httpactions-strict-uri-encode-2026-06-18", "display_name": "@httpactions/strict-uri-encode", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@httpactions/strict-uri-encode", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6140", "osv_published_at": "2026-06-18T18:39:24Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-18T21:52:26Z", "osv_earliest_published_at": "2026-06-18T18:39:24Z", "hours_ahead_of_osv": -3.22, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-18T21:53:44Z" }, { "id": "httpactions-encode-url-2026-06-18", "display_name": "@httpactions/encode-url", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@httpactions/encode-url", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6139", "osv_published_at": "2026-06-18T18:39:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-18T21:52:24Z", "osv_earliest_published_at": "2026-06-18T18:39:23Z", "hours_ahead_of_osv": -3.22, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-18T21:53:40Z" }, { "id": "react-error-lint-2026-06-18", "display_name": "react-error-lint", "campaign": null, "detection_source": "osv", "packages": [ { "package": "react-error-lint", "ecosystem": "npm", "versions": [ "1.1.6" ], "osv_entries": [ { "osv_id": "MAL-2026-6137", "osv_published_at": "2026-06-18T16:32:46Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-18T21:52:21Z", "osv_earliest_published_at": "2026-06-18T16:32:46Z", "hours_ahead_of_osv": -5.33, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-18T21:53:36Z" }, { "id": "ratelimitsucks6-2026-06-18", "display_name": "ratelimitsucks6", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ratelimitsucks6", "ecosystem": "npm", "versions": [ "1.1.7" ], "osv_entries": [ { "osv_id": "MAL-2026-6136", "osv_published_at": "2026-06-18T16:30:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-18T21:52:19Z", "osv_earliest_published_at": "2026-06-18T16:30:08Z", "hours_ahead_of_osv": -5.37, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-18T21:53:32Z" }, { "id": "ratelimitsucks-2026-06-18", "display_name": "ratelimitsucks", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ratelimitsucks", "ecosystem": "npm", "versions": [ "1.7.7" ], "osv_entries": [ { "osv_id": "MAL-2026-6135", "osv_published_at": "2026-06-18T16:30:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-18T21:52:16Z", "osv_earliest_published_at": "2026-06-18T16:30:12Z", "hours_ahead_of_osv": -5.37, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-18T21:53:28Z" }, { "id": "panrouter-admin-2026-06-18", "display_name": "panrouter-admin", "campaign": null, "detection_source": "osv", "packages": [ { "package": "panrouter-admin", "ecosystem": "npm", "versions": [ "5.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6134", "osv_published_at": "2026-06-18T16:28:28Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-18T21:52:14Z", "osv_earliest_published_at": "2026-06-18T16:28:28Z", "hours_ahead_of_osv": -5.4, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-18T21:53:24Z" }, { "id": "panrouter-2026-06-18", "display_name": "panrouter", "campaign": null, "detection_source": "osv", "packages": [ { "package": "panrouter", "ecosystem": "npm", "versions": [ "5.0.0", "5.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6133", "osv_published_at": "2026-06-18T16:28:27Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-18T21:52:12Z", "osv_earliest_published_at": "2026-06-18T16:28:27Z", "hours_ahead_of_osv": -5.4, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-18T21:53:20Z" }, { "id": "metavu-2026-06-18", "display_name": "metavu", "campaign": null, "detection_source": "osv", "packages": [ { "package": "metavu", "ecosystem": "npm", "versions": [ "99.21.1-1.21.127", "99.21.1-1.21.199" ], "osv_entries": [ { "osv_id": "MAL-2026-6132", "osv_published_at": "2026-06-18T15:56:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-18T21:52:08Z", "osv_earliest_published_at": "2026-06-18T15:56:00Z", "hours_ahead_of_osv": -5.94, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-18T21:53:16Z" }, { "id": "computerrock-babel-preset-react-app-2026-06-18", "display_name": "computerrock-babel-preset-react-app", "campaign": null, "detection_source": "osv", "packages": [ { "package": "computerrock-babel-preset-react-app", "ecosystem": "npm", "versions": [ "15.12.11" ], "osv_entries": [ { "osv_id": "MAL-2026-6131", "osv_published_at": "2026-06-18T15:57:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-18T21:52:04Z", "osv_earliest_published_at": "2026-06-18T15:57:20Z", "hours_ahead_of_osv": -5.91, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-18T21:53:12Z" }, { "id": "abuden221-2026-06-18", "display_name": "abuden221", "campaign": null, "detection_source": "osv", "packages": [ { "package": "abuden221", "ecosystem": "npm", "versions": [ "1.7.7" ], "osv_entries": [ { "osv_id": "MAL-2026-6130", "osv_published_at": "2026-06-18T16:29:47Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-18T21:52:02Z", "osv_earliest_published_at": "2026-06-18T16:29:47Z", "hours_ahead_of_osv": -5.37, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-18T21:53:08Z" }, { "id": "abuden22-2026-06-18", "display_name": "abuden22", "campaign": null, "detection_source": "osv", "packages": [ { "package": "abuden22", "ecosystem": "npm", "versions": [ "1.7.7" ], "osv_entries": [ { "osv_id": "MAL-2026-6129", "osv_published_at": "2026-06-18T16:29:47Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-18T21:52:00Z", "osv_earliest_published_at": "2026-06-18T16:29:47Z", "hours_ahead_of_osv": -5.37, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-18T21:53:04Z" }, { "id": "abuden218-2026-06-18", "display_name": "abuden218", "campaign": null, "detection_source": "osv", "packages": [ { "package": "abuden218", "ecosystem": "npm", "versions": [ "1.7.7" ], "osv_entries": [ { "osv_id": "MAL-2026-6128", "osv_published_at": "2026-06-18T16:29:46Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-18T21:51:58Z", "osv_earliest_published_at": "2026-06-18T16:29:46Z", "hours_ahead_of_osv": -5.37, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-18T21:53:00Z" }, { "id": "onum-releases-utils-2026-06-18", "display_name": "@onum-releases/utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@onum-releases/utils", "ecosystem": "npm", "versions": [ "1.0.1", "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6127", "osv_published_at": "2026-06-18T16:15:26Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-18T21:51:56Z", "osv_earliest_published_at": "2026-06-18T16:15:26Z", "hours_ahead_of_osv": -5.61, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-18T21:52:56Z" }, { "id": "onum-releases-shared-components-2026-06-18", "display_name": "@onum-releases/shared-components", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@onum-releases/shared-components", "ecosystem": "npm", "versions": [ "1.0.1", "1.0.2", "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6126", "osv_published_at": "2026-06-18T16:15:24Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-18T21:51:54Z", "osv_earliest_published_at": "2026-06-18T16:15:24Z", "hours_ahead_of_osv": -5.61, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-18T21:52:52Z" }, { "id": "onum-releases-sdk-2026-06-18", "display_name": "@onum-releases/sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@onum-releases/sdk", "ecosystem": "npm", "versions": [ "1.0.1", "1.0.2", "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6125", "osv_published_at": "2026-06-18T16:15:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-18T21:51:53Z", "osv_earliest_published_at": "2026-06-18T16:15:21Z", "hours_ahead_of_osv": -5.61, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-18T21:52:49Z" }, { "id": "onum-releases-ixel-2026-06-18", "display_name": "@onum-releases/ixel", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@onum-releases/ixel", "ecosystem": "npm", "versions": [ "1.0.1", "1.0.2", "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6124", "osv_published_at": "2026-06-18T16:15:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-18T21:51:52Z", "osv_earliest_published_at": "2026-06-18T16:15:22Z", "hours_ahead_of_osv": -5.61, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-18T21:52:44Z" }, { "id": "onum-releases-auth-2026-06-18", "display_name": "@onum-releases/auth", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@onum-releases/auth", "ecosystem": "npm", "versions": [ "1.0.1", "1.0.2", "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6123", "osv_published_at": "2026-06-18T16:15:16Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-18T21:51:50Z", "osv_earliest_published_at": "2026-06-18T16:15:16Z", "hours_ahead_of_osv": -5.61, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-18T21:52:40Z" }, { "id": "onum-releases-api-client-2026-06-18", "display_name": "@onum-releases/api-client", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@onum-releases/api-client", "ecosystem": "npm", "versions": [ "1.0.1", "1.0.2", "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6122", "osv_published_at": "2026-06-18T16:15:13Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-18T21:51:49Z", "osv_earliest_published_at": "2026-06-18T16:15:13Z", "hours_ahead_of_osv": -5.61, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-18T21:52:37Z" }, { "id": "gbrlxvi-ts-project-lint-2026-06-18", "display_name": "@gbrlxvi/ts-project-lint", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@gbrlxvi/ts-project-lint", "ecosystem": "npm", "versions": [ "1.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6121", "osv_published_at": "2026-06-18T16:44:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-18T21:51:48Z", "osv_earliest_published_at": "2026-06-18T16:44:00Z", "hours_ahead_of_osv": -5.13, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-18T21:52:33Z" }, { "id": "caspianph-storyteller-2026-06-18", "display_name": "@caspianph/storyteller", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@caspianph/storyteller", "ecosystem": "npm", "versions": [ "1.1.13" ], "osv_entries": [ { "osv_id": "MAL-2026-6120", "osv_published_at": "2026-06-18T16:09:47Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-18T21:51:47Z", "osv_earliest_published_at": "2026-06-18T16:09:47Z", "hours_ahead_of_osv": -5.7, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-18T21:52:29Z" }, { "id": "reading-cookies-2026-06-18", "display_name": "reading-cookies", "campaign": null, "detection_source": "osv", "packages": [ { "package": "reading-cookies", "ecosystem": "npm", "versions": [ "6.13.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5847", "osv_published_at": "2026-06-15T23:47:28Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-18T21:51:42Z", "osv_earliest_published_at": "2026-06-15T23:47:28Z", "hours_ahead_of_osv": -70.07, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-18T21:52:00Z" }, { "id": "numdifftools-2026-06-18", "display_name": "numdifftools", "campaign": null, "detection_source": "osv", "packages": [ { "package": "numdifftools", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5844", "osv_published_at": "2026-06-15T23:39:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-18T21:51:42Z", "osv_earliest_published_at": "2026-06-15T23:39:12Z", "hours_ahead_of_osv": -70.21, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-18T21:51:57Z" }, { "id": "db-xorma-2026-06-18", "display_name": "db-xorma", "campaign": null, "detection_source": "osv", "packages": [ { "package": "db-xorma", "ecosystem": "npm", "versions": [ "1.0.3", "1.0.4", "1.0.5" ], "osv_entries": [ { "osv_id": "MAL-2026-5464", "osv_published_at": "2026-06-09T20:18:54Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-18T21:51:40Z", "osv_earliest_published_at": "2026-06-09T20:18:54Z", "hours_ahead_of_osv": -217.55, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-26T23:44:51Z", "hours_ahead_of_press": null, "confirmed_at": "2026-06-26T23:44:51Z" }, { "id": "randpicker-2026-06-18", "display_name": "randpicker", "campaign": null, "detection_source": "osv", "packages": [ { "package": "randpicker", "ecosystem": "pypi", "versions": [ "0.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6138", "osv_published_at": "2026-06-18T17:21:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-18T21:50:55Z", "osv_earliest_published_at": "2026-06-18T17:21:25Z", "hours_ahead_of_osv": -4.49, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-18T21:50:56Z" }, { "id": "type-check-816d-2026-06-18", "display_name": "type-check-816d", "campaign": null, "detection_source": "osv", "packages": [ { "package": "type-check-816d", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6101", "osv_published_at": "2026-06-18T03:27:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-18T11:15:40Z", "osv_earliest_published_at": "2026-06-18T03:27:53Z", "hours_ahead_of_osv": -7.8, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-18T11:16:34Z" }, { "id": "string-tools-be6c-2026-06-18", "display_name": "string-tools-be6c", "campaign": null, "detection_source": "osv", "packages": [ { "package": "string-tools-be6c", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6100", "osv_published_at": "2026-06-18T03:27:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-18T11:15:40Z", "osv_earliest_published_at": "2026-06-18T03:27:53Z", "hours_ahead_of_osv": -7.8, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-18T11:16:29Z" }, { "id": "stream-read-35cf-2026-06-18", "display_name": "stream-read-35cf", "campaign": null, "detection_source": "osv", "packages": [ { "package": "stream-read-35cf", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6099", "osv_published_at": "2026-06-18T03:53:34Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-18T11:15:39Z", "osv_earliest_published_at": "2026-06-18T03:53:34Z", "hours_ahead_of_osv": -7.37, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-18T11:16:25Z" }, { "id": "stackus-2026-06-18", "display_name": "stackus", "campaign": null, "detection_source": "osv", "packages": [ { "package": "stackus", "ecosystem": "npm", "versions": [ "1.0.6" ], "osv_entries": [ { "osv_id": "MAL-2026-6098", "osv_published_at": "2026-06-18T04:09:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-18T11:15:39Z", "osv_earliest_published_at": "2026-06-18T04:09:20Z", "hours_ahead_of_osv": -7.11, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-18T11:16:21Z" }, { "id": "roblox-api-client-2026-06-18", "display_name": "roblox-api-client", "campaign": null, "detection_source": "osv", "packages": [ { "package": "roblox-api-client", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6097", "osv_published_at": "2026-06-18T04:07:15Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-18T11:15:38Z", "osv_earliest_published_at": "2026-06-18T04:07:15Z", "hours_ahead_of_osv": -7.14, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-18T11:16:17Z" }, { "id": "requests-middleware-2026-06-18", "display_name": "requests-middleware", "campaign": null, "detection_source": "osv", "packages": [ { "package": "requests-middleware", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6096", "osv_published_at": "2026-06-18T04:07:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-18T11:15:38Z", "osv_earliest_published_at": "2026-06-18T04:07:42Z", "hours_ahead_of_osv": -7.13, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-18T11:16:13Z" }, { "id": "oem-agentic-shared-2026-06-18", "display_name": "oem-agentic-shared", "campaign": null, "detection_source": "osv", "packages": [ { "package": "oem-agentic-shared", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6095", "osv_published_at": "2026-06-18T03:56:46Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-18T11:15:38Z", "osv_earliest_published_at": "2026-06-18T03:56:46Z", "hours_ahead_of_osv": -7.31, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-18T11:16:09Z" }, { "id": "metrics-probe-f256-2026-06-18", "display_name": "metrics-probe-f256", "campaign": null, "detection_source": "osv", "packages": [ { "package": "metrics-probe-f256", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6094", "osv_published_at": "2026-06-18T03:27:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-18T11:15:37Z", "osv_earliest_published_at": "2026-06-18T03:27:53Z", "hours_ahead_of_osv": -7.8, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-18T11:16:04Z" }, { "id": "jwtmode-2026-06-18", "display_name": "jwtmode", "campaign": null, "detection_source": "osv", "packages": [ { "package": "jwtmode", "ecosystem": "npm", "versions": [ "1.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-6093", "osv_published_at": "2026-06-18T04:09:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-18T11:15:37Z", "osv_earliest_published_at": "2026-06-18T04:09:05Z", "hours_ahead_of_osv": -7.11, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-18T11:16:00Z" }, { "id": "fmt-helpers-794b-2026-06-18", "display_name": "fmt-helpers-794b", "campaign": null, "detection_source": "osv", "packages": [ { "package": "fmt-helpers-794b", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6092", "osv_published_at": "2026-06-18T03:27:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-18T11:15:36Z", "osv_earliest_published_at": "2026-06-18T03:27:53Z", "hours_ahead_of_osv": -7.8, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-18T11:15:56Z" }, { "id": "datacamp-light-2026-06-18", "display_name": "datacamp-light", "campaign": null, "detection_source": "osv", "packages": [ { "package": "datacamp-light", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6091", "osv_published_at": "2026-06-18T03:55:18Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-18T11:15:36Z", "osv_earliest_published_at": "2026-06-18T03:55:18Z", "hours_ahead_of_osv": -7.34, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-18T11:15:51Z" }, { "id": "data-utils-bcf2-2026-06-18", "display_name": "data-utils-bcf2", "campaign": null, "detection_source": "osv", "packages": [ { "package": "data-utils-bcf2", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6090", "osv_published_at": "2026-06-18T03:54:28Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-18T11:15:36Z", "osv_earliest_published_at": "2026-06-18T03:54:28Z", "hours_ahead_of_osv": -7.35, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-18T11:15:46Z" }, { "id": "color-utils-dee0-2026-06-18", "display_name": "color-utils-dee0", "campaign": null, "detection_source": "osv", "packages": [ { "package": "color-utils-dee0", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6089", "osv_published_at": "2026-06-18T03:27:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-18T11:15:35Z", "osv_earliest_published_at": "2026-06-18T03:27:53Z", "hours_ahead_of_osv": -7.79, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-18T11:15:42Z" }, { "id": "vite-common-utils-2026-06-17", "display_name": "vite-common-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "vite-common-utils", "ecosystem": "npm", "versions": [ "1.0.3", "1.0.4", "1.0.5" ], "osv_entries": [ { "osv_id": "MAL-2026-6088", "osv_published_at": "2026-06-17T22:33:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T23:28:30Z", "osv_earliest_published_at": "2026-06-17T22:33:52Z", "hours_ahead_of_osv": -0.91, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T23:29:19Z" }, { "id": "uol-simple-api-futebol-2026-06-17", "display_name": "uol-simple-api-futebol", "campaign": null, "detection_source": "osv", "packages": [ { "package": "uol-simple-api-futebol", "ecosystem": "npm", "versions": [ "4.6.3", "4.6.4", "4.7.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6087", "osv_published_at": "2026-06-17T22:23:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T23:28:24Z", "osv_earliest_published_at": "2026-06-17T22:23:08Z", "hours_ahead_of_osv": -1.09, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-30T02:44:33Z", "hours_ahead_of_press": null, "confirmed_at": "2026-06-30T02:44:33Z" }, { "id": "ai-chat-helper-2026-06-17", "display_name": "ai-chat-helper", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ai-chat-helper", "ecosystem": "npm", "versions": [ "1.0.1", "1.0.2", "1.0.9" ], "osv_entries": [ { "osv_id": "MAL-2026-6086", "osv_published_at": "2026-06-17T22:09:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T23:28:20Z", "osv_earliest_published_at": "2026-06-17T22:09:22Z", "hours_ahead_of_osv": -1.32, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T23:29:12Z" }, { "id": "hotcappuccino-nodepull-2026-06-17", "display_name": "@hotcappuccino/nodepull", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@hotcappuccino/nodepull", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6085", "osv_published_at": "2026-06-17T21:52:46Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T23:28:14Z", "osv_earliest_published_at": "2026-06-17T21:52:46Z", "hours_ahead_of_osv": -1.59, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T23:29:08Z" }, { "id": "array-util-nodepull-2026-06-17", "display_name": "@array-util/nodepull", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@array-util/nodepull", "ecosystem": "npm", "versions": [ "1.0.0", "1.1.0", "1.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6084", "osv_published_at": "2026-06-17T21:49:58Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T23:28:12Z", "osv_earliest_published_at": "2026-06-17T21:49:58Z", "hours_ahead_of_osv": -1.64, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T23:29:04Z" }, { "id": "set-proto-chain-2026-06-17", "display_name": "set-proto-chain", "campaign": null, "detection_source": "osv", "packages": [ { "package": "set-proto-chain", "ecosystem": "npm", "versions": [ "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6079", "osv_published_at": "2026-06-17T21:38:59Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T23:28:06Z", "osv_earliest_published_at": "2026-06-17T21:38:59Z", "hours_ahead_of_osv": -1.82, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T23:29:00Z" }, { "id": "pino-slite-2026-06-17", "display_name": "pino-slite", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pino-slite", "ecosystem": "npm", "versions": [ "4.1.12", "4.1.16" ], "osv_entries": [ { "osv_id": "MAL-2026-6078", "osv_published_at": "2026-06-17T21:40:46Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T23:28:04Z", "osv_earliest_published_at": "2026-06-17T21:40:46Z", "hours_ahead_of_osv": -1.79, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T23:28:56Z" }, { "id": "ebpf-tracker-action-2026-06-17", "display_name": "ebpf-tracker-action", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ebpf-tracker-action", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6077", "osv_published_at": "2026-06-17T21:34:28Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T23:28:00Z", "osv_earliest_published_at": "2026-06-17T21:34:28Z", "hours_ahead_of_osv": -1.89, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T23:28:52Z" }, { "id": "opt-archetype-check-2026-06-17", "display_name": "opt-archetype-check", "campaign": null, "detection_source": "osv", "packages": [ { "package": "opt-archetype-check", "ecosystem": "npm", "versions": [ "9.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6075", "osv_published_at": "2026-06-17T19:09:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T23:27:58Z", "osv_earliest_published_at": "2026-06-17T19:09:08Z", "hours_ahead_of_osv": -4.31, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T23:28:48Z" }, { "id": "mastra-redis-2026-06-17", "display_name": "@mastra/redis", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/redis", "ecosystem": "npm", "versions": [ "1.1.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6074", "osv_published_at": "2026-06-17T18:27:15Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T23:27:57Z", "osv_earliest_published_at": "2026-06-17T18:27:15Z", "hours_ahead_of_osv": -5.01, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T23:28:45Z" }, { "id": "mastra-observability-2026-06-17", "display_name": "@mastra/observability", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/observability", "ecosystem": "npm", "versions": [ "1.14.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6073", "osv_published_at": "2026-06-17T18:35:09Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T23:27:56Z", "osv_earliest_published_at": "2026-06-17T18:35:09Z", "hours_ahead_of_osv": -4.88, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T23:28:41Z" }, { "id": "mastra-loggers-2026-06-17", "display_name": "@mastra/loggers", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/loggers", "ecosystem": "npm", "versions": [ "1.1.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6072", "osv_published_at": "2026-06-17T18:32:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T23:27:56Z", "osv_earliest_published_at": "2026-06-17T18:32:00Z", "hours_ahead_of_osv": -4.93, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T23:28:37Z" }, { "id": "n8n-nodes-security-test-poc-2026-06-17", "display_name": "n8n-nodes-security-test-poc", "campaign": null, "detection_source": "osv", "packages": [ { "package": "n8n-nodes-security-test-poc", "ecosystem": "npm", "versions": [ "1.0.1", "1.0.2", "1.0.3", "1.0.4", "1.0.5" ], "osv_entries": [ { "osv_id": "MAL-2026-6071", "osv_published_at": "2026-06-17T18:10:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T23:27:55Z", "osv_earliest_published_at": "2026-06-17T18:10:52Z", "hours_ahead_of_osv": -5.28, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T23:28:33Z" }, { "id": "libsc-runtime-telemetry-2026-06-17", "display_name": "libsc-runtime-telemetry", "campaign": null, "detection_source": "osv", "packages": [ { "package": "libsc-runtime-telemetry", "ecosystem": "npm", "versions": [ "0.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6070", "osv_published_at": "2026-06-17T18:38:17Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T23:27:54Z", "osv_earliest_published_at": "2026-06-17T18:38:17Z", "hours_ahead_of_osv": -4.83, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T23:28:29Z" }, { "id": "civitatis-bot-ui-2026-06-17", "display_name": "@civitatis/bot-ui", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@civitatis/bot-ui", "ecosystem": "npm", "versions": [ "14.12.11", "15.12.11" ], "osv_entries": [ { "osv_id": "MAL-2026-6069", "osv_published_at": "2026-06-17T18:55:02Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T23:27:53Z", "osv_earliest_published_at": "2026-06-17T18:55:02Z", "hours_ahead_of_osv": -4.55, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T23:28:25Z" }, { "id": "swift-parse-stream-2026-06-17", "display_name": "swift-parse-stream", "campaign": null, "detection_source": "osv", "packages": [ { "package": "swift-parse-stream", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6068", "osv_published_at": "2026-06-17T16:37:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T23:27:52Z", "osv_earliest_published_at": "2026-06-17T16:37:42Z", "hours_ahead_of_osv": -6.84, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-18T21:52:24Z" }, { "id": "scan-only-2026-06-17", "display_name": "scan-only", "campaign": null, "detection_source": "osv", "packages": [ { "package": "scan-only", "ecosystem": "npm", "versions": [ "0.2.0", "0.3.0", "0.4.0", "0.4.1", "0.4.2", "0.4.3", "0.4.4", "0.4.5", "0.4.6", "0.4.7", "0.4.8", "0.4.9", "0.5.0", "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6067", "osv_published_at": "2026-06-17T17:04:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T23:27:52Z", "osv_earliest_published_at": "2026-06-17T17:04:07Z", "hours_ahead_of_osv": -6.4, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T23:28:18Z" }, { "id": "quirky-token-2026-06-17", "display_name": "quirky-token", "campaign": null, "detection_source": "osv", "packages": [ { "package": "quirky-token", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6066", "osv_published_at": "2026-06-17T16:37:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T23:27:47Z", "osv_earliest_published_at": "2026-06-17T16:37:40Z", "hours_ahead_of_osv": -6.84, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-18T21:52:20Z" }, { "id": "lab-services-2026-06-17", "display_name": "lab-services", "campaign": null, "detection_source": "osv", "packages": [ { "package": "lab-services", "ecosystem": "npm", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6065", "osv_published_at": "2026-06-17T17:04:43Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T23:27:46Z", "osv_earliest_published_at": "2026-06-17T17:04:43Z", "hours_ahead_of_osv": -6.38, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T23:28:10Z" }, { "id": "syncagents-2026-06-17", "display_name": "syncagents", "campaign": null, "detection_source": "osv", "packages": [ { "package": "syncagents", "ecosystem": "pypi", "versions": [ "1.0.1", "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6083", "osv_published_at": "2026-06-17T21:32:55Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T23:26:55Z", "osv_earliest_published_at": "2026-06-17T21:32:55Z", "hours_ahead_of_osv": -1.9, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T23:27:08Z" }, { "id": "dotenv-sync-2026-06-17", "display_name": "dotenv-sync", "campaign": null, "detection_source": "osv", "packages": [ { "package": "dotenv-sync", "ecosystem": "pypi", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6082", "osv_published_at": "2026-06-17T21:35:47Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T23:26:54Z", "osv_earliest_published_at": "2026-06-17T21:35:47Z", "hours_ahead_of_osv": -1.85, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T23:27:04Z" }, { "id": "disksweep-2026-06-17", "display_name": "disksweep", "campaign": null, "detection_source": "osv", "packages": [ { "package": "disksweep", "ecosystem": "pypi", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6081", "osv_published_at": "2026-06-17T21:34:55Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T23:26:54Z", "osv_earliest_published_at": "2026-06-17T21:34:55Z", "hours_ahead_of_osv": -1.87, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T23:27:00Z" }, { "id": "pystylish-2026-06-17", "display_name": "pystylish", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pystylish", "ecosystem": "pypi", "versions": [ "2.9" ], "osv_entries": [ { "osv_id": "MAL-2026-6076", "osv_published_at": "2026-06-17T19:05:58Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T23:26:53Z", "osv_earliest_published_at": "2026-06-17T19:05:58Z", "hours_ahead_of_osv": -4.35, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T23:26:53Z" }, { "id": "boardflow-2026-06-17", "display_name": "boardflow", "campaign": null, "detection_source": "osv", "packages": [ { "package": "boardflow", "ecosystem": "pypi", "versions": [ "1.0.0", "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6080", "osv_published_at": "2026-06-17T20:52:04Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T23:26:53Z", "osv_earliest_published_at": "2026-06-17T20:52:04Z", "hours_ahead_of_osv": -2.58, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T23:26:57Z" }, { "id": "mastra-voice-playai-2026-06-17", "display_name": "@mastra/voice-playai", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/voice-playai", "ecosystem": "npm", "versions": [ "0.12.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6057", "osv_published_at": "2026-06-17T11:50:31Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:28:47Z", "osv_earliest_published_at": "2026-06-17T11:50:31Z", "hours_ahead_of_osv": -0.64, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:32:48Z" }, { "id": "mastra-react-2026-06-17", "display_name": "@mastra/react", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/react", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6056", "osv_published_at": "2026-06-17T11:07:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:28:45Z", "osv_earliest_published_at": "2026-06-17T11:07:06Z", "hours_ahead_of_osv": -1.36, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:32:44Z" }, { "id": "mastra-node-speaker-2026-06-17", "display_name": "@mastra/node-speaker", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/node-speaker", "ecosystem": "npm", "versions": [ "0.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6055", "osv_published_at": "2026-06-17T11:51:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:28:43Z", "osv_earliest_published_at": "2026-06-17T11:51:50Z", "hours_ahead_of_osv": -0.61, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:32:40Z" }, { "id": "mastra-node-audio-2026-06-17", "display_name": "@mastra/node-audio", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/node-audio", "ecosystem": "npm", "versions": [ "0.1.8" ], "osv_entries": [ { "osv_id": "MAL-2026-6054", "osv_published_at": "2026-06-17T11:08:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:28:41Z", "osv_earliest_published_at": "2026-06-17T11:08:22Z", "hours_ahead_of_osv": -1.34, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:32:36Z" }, { "id": "mastra-mem0-2026-06-17", "display_name": "@mastra/mem0", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/mem0", "ecosystem": "npm", "versions": [ "0.1.14" ], "osv_entries": [ { "osv_id": "MAL-2026-6053", "osv_published_at": "2026-06-17T11:10:16Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:28:39Z", "osv_earliest_published_at": "2026-06-17T11:10:16Z", "hours_ahead_of_osv": -1.31, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:32:31Z" }, { "id": "mastra-github-signals-2026-06-17", "display_name": "@mastra/github-signals", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/github-signals", "ecosystem": "npm", "versions": [ "0.1.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6052", "osv_published_at": "2026-06-17T11:11:16Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:28:37Z", "osv_earliest_published_at": "2026-06-17T11:11:16Z", "hours_ahead_of_osv": -1.29, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:32:26Z" }, { "id": "create-mastra-2026-06-17", "display_name": "create-mastra", "campaign": null, "detection_source": "osv", "packages": [ { "package": "create-mastra", "ecosystem": "npm", "versions": [ "1.13.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6050", "osv_published_at": "2026-06-17T04:55:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:28:35Z", "osv_earliest_published_at": "2026-06-17T04:55:41Z", "hours_ahead_of_osv": -7.55, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:32:22Z" }, { "id": "mastra-voice-openai-realtime-2026-06-17", "display_name": "@mastra/voice-openai-realtime", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/voice-openai-realtime", "ecosystem": "npm", "versions": [ "0.12.6" ], "osv_entries": [ { "osv_id": "MAL-2026-6049", "osv_published_at": "2026-06-17T05:06:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:28:33Z", "osv_earliest_published_at": "2026-06-17T05:06:51Z", "hours_ahead_of_osv": -7.36, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:32:18Z" }, { "id": "mastra-voice-openai-2026-06-17", "display_name": "@mastra/voice-openai", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/voice-openai", "ecosystem": "npm", "versions": [ "0.12.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6048", "osv_published_at": "2026-06-17T05:07:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:28:31Z", "osv_earliest_published_at": "2026-06-17T05:07:00Z", "hours_ahead_of_osv": -7.36, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:32:14Z" }, { "id": "mastra-voice-google-gemini-live-2026-06-17", "display_name": "@mastra/voice-google-gemini-live", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/voice-google-gemini-live", "ecosystem": "npm", "versions": [ "0.12.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6047", "osv_published_at": "2026-06-17T05:07:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:28:29Z", "osv_earliest_published_at": "2026-06-17T05:07:00Z", "hours_ahead_of_osv": -7.36, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:32:09Z" }, { "id": "mastra-voice-google-2026-06-17", "display_name": "@mastra/voice-google", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/voice-google", "ecosystem": "npm", "versions": [ "0.12.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6046", "osv_published_at": "2026-06-17T05:07:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:28:27Z", "osv_earliest_published_at": "2026-06-17T05:07:00Z", "hours_ahead_of_osv": -7.36, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:32:05Z" }, { "id": "mastra-voice-elevenlabs-2026-06-17", "display_name": "@mastra/voice-elevenlabs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/voice-elevenlabs", "ecosystem": "npm", "versions": [ "0.12.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6045", "osv_published_at": "2026-06-17T05:09:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:28:25Z", "osv_earliest_published_at": "2026-06-17T05:09:21Z", "hours_ahead_of_osv": -7.32, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:32:01Z" }, { "id": "mastra-voice-deepgram-2026-06-17", "display_name": "@mastra/voice-deepgram", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/voice-deepgram", "ecosystem": "npm", "versions": [ "0.12.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6044", "osv_published_at": "2026-06-17T05:07:46Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:28:23Z", "osv_earliest_published_at": "2026-06-17T05:07:46Z", "hours_ahead_of_osv": -7.34, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:31:56Z" }, { "id": "mastra-voice-aws-nova-sonic-2026-06-17", "display_name": "@mastra/voice-aws-nova-sonic", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/voice-aws-nova-sonic", "ecosystem": "npm", "versions": [ "0.1.4" ], "osv_entries": [ { "osv_id": "MAL-2026-6043", "osv_published_at": "2026-06-17T05:07:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:28:21Z", "osv_earliest_published_at": "2026-06-17T05:07:21Z", "hours_ahead_of_osv": -7.35, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:31:52Z" }, { "id": "mastra-vectorize-2026-06-17", "display_name": "@mastra/vectorize", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/vectorize", "ecosystem": "npm", "versions": [ "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6042", "osv_published_at": "2026-06-17T04:57:47Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:28:19Z", "osv_earliest_published_at": "2026-06-17T04:57:47Z", "hours_ahead_of_osv": -7.51, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:31:46Z" }, { "id": "mastra-upstash-2026-06-17", "display_name": "@mastra/upstash", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/upstash", "ecosystem": "npm", "versions": [ "1.1.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6041", "osv_published_at": "2026-06-17T04:57:58Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:28:17Z", "osv_earliest_published_at": "2026-06-17T04:57:58Z", "hours_ahead_of_osv": -7.51, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:31:42Z" }, { "id": "mastra-turbopuffer-2026-06-17", "display_name": "@mastra/turbopuffer", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/turbopuffer", "ecosystem": "npm", "versions": [ "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6040", "osv_published_at": "2026-06-17T04:59:44Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:28:15Z", "osv_earliest_published_at": "2026-06-17T04:59:44Z", "hours_ahead_of_osv": -7.48, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:31:37Z" }, { "id": "mastra-temporal-2026-06-17", "display_name": "@mastra/temporal", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/temporal", "ecosystem": "npm", "versions": [ "0.1.14" ], "osv_entries": [ { "osv_id": "MAL-2026-6039", "osv_published_at": "2026-06-17T05:06:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:28:13Z", "osv_earliest_published_at": "2026-06-17T05:06:12Z", "hours_ahead_of_osv": -7.37, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:31:33Z" }, { "id": "mastra-tavily-2026-06-17", "display_name": "@mastra/tavily", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/tavily", "ecosystem": "npm", "versions": [ "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6038", "osv_published_at": "2026-06-17T05:06:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:28:11Z", "osv_earliest_published_at": "2026-06-17T05:06:12Z", "hours_ahead_of_osv": -7.37, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:31:29Z" }, { "id": "mastra-stagehand-2026-06-17", "display_name": "@mastra/stagehand", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/stagehand", "ecosystem": "npm", "versions": [ "0.2.5" ], "osv_entries": [ { "osv_id": "MAL-2026-6037", "osv_published_at": "2026-06-17T05:06:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:28:09Z", "osv_earliest_published_at": "2026-06-17T05:06:12Z", "hours_ahead_of_osv": -7.37, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:31:24Z" }, { "id": "mastra-server-2026-06-17", "display_name": "@mastra/server", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/server", "ecosystem": "npm", "versions": [ "2.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6036", "osv_published_at": "2026-06-17T04:55:59Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:28:07Z", "osv_earliest_published_at": "2026-06-17T04:55:59Z", "hours_ahead_of_osv": -7.54, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:31:20Z" }, { "id": "mastra-s3vectors-2026-06-17", "display_name": "@mastra/s3vectors", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/s3vectors", "ecosystem": "npm", "versions": [ "1.0.7" ], "osv_entries": [ { "osv_id": "MAL-2026-6035", "osv_published_at": "2026-06-17T04:57:57Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:28:07Z", "osv_earliest_published_at": "2026-06-17T04:57:57Z", "hours_ahead_of_osv": -7.5, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:31:16Z" }, { "id": "mastra-qdrant-2026-06-17", "display_name": "@mastra/qdrant", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/qdrant", "ecosystem": "npm", "versions": [ "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6034", "osv_published_at": "2026-06-17T04:57:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:28:03Z", "osv_earliest_published_at": "2026-06-17T04:57:42Z", "hours_ahead_of_osv": -7.51, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:31:12Z" }, { "id": "mastra-playground-ui-2026-06-17", "display_name": "@mastra/playground-ui", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/playground-ui", "ecosystem": "npm", "versions": [ "33.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6033", "osv_published_at": "2026-06-17T05:00:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:28:01Z", "osv_earliest_published_at": "2026-06-17T05:00:39Z", "hours_ahead_of_osv": -7.46, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:31:08Z" }, { "id": "mastra-pinecone-2026-06-17", "display_name": "@mastra/pinecone", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/pinecone", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6032", "osv_published_at": "2026-06-17T04:58:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:27:59Z", "osv_earliest_published_at": "2026-06-17T04:58:08Z", "hours_ahead_of_osv": -7.5, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:31:03Z" }, { "id": "mastra-otel-exporter-2026-06-17", "display_name": "@mastra/otel-exporter", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/otel-exporter", "ecosystem": "npm", "versions": [ "1.2.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6031", "osv_published_at": "2026-06-17T05:01:04Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:27:57Z", "osv_earliest_published_at": "2026-06-17T05:01:04Z", "hours_ahead_of_osv": -7.45, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:30:59Z" }, { "id": "mastra-nestjs-2026-06-17", "display_name": "@mastra/nestjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/nestjs", "ecosystem": "npm", "versions": [ "0.1.15" ], "osv_entries": [ { "osv_id": "MAL-2026-6030", "osv_published_at": "2026-06-17T04:56:15Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:27:55Z", "osv_earliest_published_at": "2026-06-17T04:56:15Z", "hours_ahead_of_osv": -7.53, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:30:55Z" }, { "id": "mastra-mssql-2026-06-17", "display_name": "@mastra/mssql", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/mssql", "ecosystem": "npm", "versions": [ "1.3.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6029", "osv_published_at": "2026-06-17T04:57:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:27:53Z", "osv_earliest_published_at": "2026-06-17T04:57:00Z", "hours_ahead_of_osv": -7.51, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:30:50Z" }, { "id": "mastra-memory-2026-06-17", "display_name": "@mastra/memory", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/memory", "ecosystem": "npm", "versions": [ "1.20.4" ], "osv_entries": [ { "osv_id": "MAL-2026-6028", "osv_published_at": "2026-06-17T04:55:59Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:27:51Z", "osv_earliest_published_at": "2026-06-17T04:55:59Z", "hours_ahead_of_osv": -7.53, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:30:47Z" }, { "id": "mastra-mcp-registry-registry-2026-06-17", "display_name": "@mastra/mcp-registry-registry", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/mcp-registry-registry", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6027", "osv_published_at": "2026-06-17T05:06:28Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:27:49Z", "osv_earliest_published_at": "2026-06-17T05:06:28Z", "hours_ahead_of_osv": -7.36, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:30:43Z" }, { "id": "mastra-longmemeval-2026-06-17", "display_name": "@mastra/longmemeval", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/longmemeval", "ecosystem": "npm", "versions": [ "1.0.50" ], "osv_entries": [ { "osv_id": "MAL-2026-6026", "osv_published_at": "2026-06-17T05:06:28Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:27:47Z", "osv_earliest_published_at": "2026-06-17T05:06:28Z", "hours_ahead_of_osv": -7.36, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:30:38Z" }, { "id": "mastra-koa-2026-06-17", "display_name": "@mastra/koa", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/koa", "ecosystem": "npm", "versions": [ "1.5.14" ], "osv_entries": [ { "osv_id": "MAL-2026-6025", "osv_published_at": "2026-06-17T04:56:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:27:45Z", "osv_earliest_published_at": "2026-06-17T04:56:21Z", "hours_ahead_of_osv": -7.52, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:30:35Z" }, { "id": "mastra-google-cloud-pubsub-2026-06-17", "display_name": "@mastra/google-cloud-pubsub", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/google-cloud-pubsub", "ecosystem": "npm", "versions": [ "1.0.6" ], "osv_entries": [ { "osv_id": "MAL-2026-6024", "osv_published_at": "2026-06-17T05:06:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:27:43Z", "osv_earliest_published_at": "2026-06-17T05:06:39Z", "hours_ahead_of_osv": -7.35, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:30:30Z" }, { "id": "mastra-gcs-2026-06-17", "display_name": "@mastra/gcs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/gcs", "ecosystem": "npm", "versions": [ "0.2.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6023", "osv_published_at": "2026-06-17T05:08:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:27:41Z", "osv_earliest_published_at": "2026-06-17T05:08:41Z", "hours_ahead_of_osv": -7.32, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:30:26Z" }, { "id": "mastra-express-2026-06-17", "display_name": "@mastra/express", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/express", "ecosystem": "npm", "versions": [ "1.3.31" ], "osv_entries": [ { "osv_id": "MAL-2026-6022", "osv_published_at": "2026-06-17T04:56:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:27:39Z", "osv_earliest_published_at": "2026-06-17T04:56:20Z", "hours_ahead_of_osv": -7.52, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:30:22Z" }, { "id": "mastra-e2b-2026-06-17", "display_name": "@mastra/e2b", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/e2b", "ecosystem": "npm", "versions": [ "0.3.4" ], "osv_entries": [ { "osv_id": "MAL-2026-6021", "osv_published_at": "2026-06-17T05:06:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:27:37Z", "osv_earliest_published_at": "2026-06-17T05:06:39Z", "hours_ahead_of_osv": -7.35, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:30:17Z" }, { "id": "mastra-dsql-2026-06-17", "display_name": "@mastra/dsql", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/dsql", "ecosystem": "npm", "versions": [ "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6020", "osv_published_at": "2026-06-17T04:57:01Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:27:35Z", "osv_earliest_published_at": "2026-06-17T04:57:01Z", "hours_ahead_of_osv": -7.51, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:30:13Z" }, { "id": "mastra-docker-2026-06-17", "display_name": "@mastra/docker", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/docker", "ecosystem": "npm", "versions": [ "0.3.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6019", "osv_published_at": "2026-06-17T05:00:29Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:27:33Z", "osv_earliest_published_at": "2026-06-17T05:00:29Z", "hours_ahead_of_osv": -7.45, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:30:09Z" }, { "id": "mastra-deployer-vercel-2026-06-17", "display_name": "@mastra/deployer-vercel", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/deployer-vercel", "ecosystem": "npm", "versions": [ "1.1.38" ], "osv_entries": [ { "osv_id": "MAL-2026-6018", "osv_published_at": "2026-06-17T04:58:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:27:31Z", "osv_earliest_published_at": "2026-06-17T04:58:03Z", "hours_ahead_of_osv": -7.49, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:30:04Z" }, { "id": "mastra-deployer-netlify-2026-06-17", "display_name": "@mastra/deployer-netlify", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/deployer-netlify", "ecosystem": "npm", "versions": [ "1.1.20" ], "osv_entries": [ { "osv_id": "MAL-2026-6017", "osv_published_at": "2026-06-17T04:58:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:27:29Z", "osv_earliest_published_at": "2026-06-17T04:58:53Z", "hours_ahead_of_osv": -7.48, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:30:00Z" }, { "id": "mastra-deployer-cloudflare-2026-06-17", "display_name": "@mastra/deployer-cloudflare", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/deployer-cloudflare", "ecosystem": "npm", "versions": [ "1.1.44" ], "osv_entries": [ { "osv_id": "MAL-2026-6016", "osv_published_at": "2026-06-17T04:58:28Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:27:27Z", "osv_earliest_published_at": "2026-06-17T04:58:28Z", "hours_ahead_of_osv": -7.48, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:29:56Z" }, { "id": "mastra-deployer-2026-06-17", "display_name": "@mastra/deployer", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/deployer", "ecosystem": "npm", "versions": [ "1.42.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6015", "osv_published_at": "2026-06-17T04:55:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:27:25Z", "osv_earliest_published_at": "2026-06-17T04:55:41Z", "hours_ahead_of_osv": -7.53, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:29:52Z" }, { "id": "mastra-daytona-2026-06-17", "display_name": "@mastra/daytona", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/daytona", "ecosystem": "npm", "versions": [ "0.4.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6014", "osv_published_at": "2026-06-17T05:06:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:27:23Z", "osv_earliest_published_at": "2026-06-17T05:06:38Z", "hours_ahead_of_osv": -7.35, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:29:48Z" }, { "id": "mastra-cursor-2026-06-17", "display_name": "@mastra/cursor", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/cursor", "ecosystem": "npm", "versions": [ "0.2.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6013", "osv_published_at": "2026-06-17T04:58:43Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:27:21Z", "osv_earliest_published_at": "2026-06-17T04:58:43Z", "hours_ahead_of_osv": -7.48, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:29:44Z" }, { "id": "mastra-couchbase-2026-06-17", "display_name": "@mastra/couchbase", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/couchbase", "ecosystem": "npm", "versions": [ "1.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-6012", "osv_published_at": "2026-06-17T04:57:27Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:27:19Z", "osv_earliest_published_at": "2026-06-17T04:57:27Z", "hours_ahead_of_osv": -7.5, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:29:39Z" }, { "id": "mastra-core-2026-06-17", "display_name": "@mastra/core", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/core", "ecosystem": "npm", "versions": [ "1.42.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6011", "osv_published_at": "2026-06-17T04:55:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:27:17Z", "osv_earliest_published_at": "2026-06-17T04:55:41Z", "hours_ahead_of_osv": -7.53, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:29:34Z" }, { "id": "mastra-convex-2026-06-17", "display_name": "@mastra/convex", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/convex", "ecosystem": "npm", "versions": [ "1.2.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6010", "osv_published_at": "2026-06-17T04:57:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:27:15Z", "osv_earliest_published_at": "2026-06-17T04:57:52Z", "hours_ahead_of_osv": -7.49, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:29:30Z" }, { "id": "mastra-cloudflare-d1-2026-06-17", "display_name": "@mastra/cloudflare-d1", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/cloudflare-d1", "ecosystem": "npm", "versions": [ "1.0.7" ], "osv_entries": [ { "osv_id": "MAL-2026-6009", "osv_published_at": "2026-06-17T04:57:17Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:27:13Z", "osv_earliest_published_at": "2026-06-17T04:57:17Z", "hours_ahead_of_osv": -7.5, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:29:26Z" }, { "id": "mastra-cloudflare-2026-06-17", "display_name": "@mastra/cloudflare", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/cloudflare", "ecosystem": "npm", "versions": [ "1.4.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6008", "osv_published_at": "2026-06-17T04:58:18Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:27:11Z", "osv_earliest_published_at": "2026-06-17T04:58:18Z", "hours_ahead_of_osv": -7.48, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:29:22Z" }, { "id": "mastra-client-js-2026-06-17", "display_name": "@mastra/client-js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/client-js", "ecosystem": "npm", "versions": [ "1.24.1" ], "osv_entries": [ { "osv_id": "MAL-2026-6007", "osv_published_at": "2026-06-17T04:55:59Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:27:09Z", "osv_earliest_published_at": "2026-06-17T04:55:59Z", "hours_ahead_of_osv": -7.52, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:29:17Z" }, { "id": "mastra-claude-2026-06-17", "display_name": "@mastra/claude", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/claude", "ecosystem": "npm", "versions": [ "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6006", "osv_published_at": "2026-06-17T04:58:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:27:07Z", "osv_earliest_published_at": "2026-06-17T04:58:33Z", "hours_ahead_of_osv": -7.48, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:29:12Z" }, { "id": "mastra-chroma-2026-06-17", "display_name": "@mastra/chroma", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/chroma", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6005", "osv_published_at": "2026-06-17T04:57:32Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:27:05Z", "osv_earliest_published_at": "2026-06-17T04:57:32Z", "hours_ahead_of_osv": -7.49, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:29:08Z" }, { "id": "mastra-blaxel-2026-06-17", "display_name": "@mastra/blaxel", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/blaxel", "ecosystem": "npm", "versions": [ "0.4.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6004", "osv_published_at": "2026-06-17T05:06:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:27:03Z", "osv_earliest_published_at": "2026-06-17T05:06:38Z", "hours_ahead_of_osv": -7.34, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:29:03Z" }, { "id": "mastra-auth-workos-2026-06-17", "display_name": "@mastra/auth-workos", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/auth-workos", "ecosystem": "npm", "versions": [ "1.5.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6003", "osv_published_at": "2026-06-17T04:57:01Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:27:01Z", "osv_earliest_published_at": "2026-06-17T04:57:01Z", "hours_ahead_of_osv": -7.5, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:28:59Z" }, { "id": "mastra-auth-supabase-2026-06-17", "display_name": "@mastra/auth-supabase", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/auth-supabase", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-6002", "osv_published_at": "2026-06-17T04:56:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:26:59Z", "osv_earliest_published_at": "2026-06-17T04:56:51Z", "hours_ahead_of_osv": -7.5, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:28:55Z" }, { "id": "mastra-auth-clerk-2026-06-17", "display_name": "@mastra/auth-clerk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/auth-clerk", "ecosystem": "npm", "versions": [ "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-6001", "osv_published_at": "2026-06-17T04:56:43Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:26:57Z", "osv_earliest_published_at": "2026-06-17T04:56:43Z", "hours_ahead_of_osv": -7.5, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:28:51Z" }, { "id": "mastra-auth-better-auth-2026-06-17", "display_name": "@mastra/auth-better-auth", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/auth-better-auth", "ecosystem": "npm", "versions": [ "1.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-6000", "osv_published_at": "2026-06-17T04:57:17Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:26:55Z", "osv_earliest_published_at": "2026-06-17T04:57:17Z", "hours_ahead_of_osv": -7.49, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:28:46Z" }, { "id": "mastra-auth-auth0-2026-06-17", "display_name": "@mastra/auth-auth0", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/auth-auth0", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5999", "osv_published_at": "2026-06-17T04:57:01Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:26:53Z", "osv_earliest_published_at": "2026-06-17T04:57:01Z", "hours_ahead_of_osv": -7.5, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:28:43Z" }, { "id": "mastra-arize-2026-06-17", "display_name": "@mastra/arize", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/arize", "ecosystem": "npm", "versions": [ "1.2.3" ], "osv_entries": [ { "osv_id": "MAL-2026-5998", "osv_published_at": "2026-06-17T05:12:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:26:51Z", "osv_earliest_published_at": "2026-06-17T05:12:42Z", "hours_ahead_of_osv": -7.24, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:28:38Z" }, { "id": "mastra-agent-builder-2026-06-17", "display_name": "@mastra/agent-builder", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/agent-builder", "ecosystem": "npm", "versions": [ "1.0.42" ], "osv_entries": [ { "osv_id": "MAL-2026-5997", "osv_published_at": "2026-06-17T05:06:28Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:26:49Z", "osv_earliest_published_at": "2026-06-17T05:06:28Z", "hours_ahead_of_osv": -7.34, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:28:35Z" }, { "id": "mastra-agent-browser-2026-06-17", "display_name": "@mastra/agent-browser", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/agent-browser", "ecosystem": "npm", "versions": [ "0.3.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5996", "osv_published_at": "2026-06-17T05:05:56Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:26:48Z", "osv_earliest_published_at": "2026-06-17T05:05:56Z", "hours_ahead_of_osv": -7.35, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:28:31Z" }, { "id": "ts-webplug-2026-06-17", "display_name": "ts-webplug", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ts-webplug", "ecosystem": "npm", "versions": [ "3.0.5" ], "osv_entries": [ { "osv_id": "MAL-2026-5994", "osv_published_at": "2026-06-17T04:23:11Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:26:47Z", "osv_earliest_published_at": "2026-06-17T04:23:11Z", "hours_ahead_of_osv": -8.06, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:28:27Z" }, { "id": "sheratan-test-p-2026-06-17", "display_name": "sheratan_test_p", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sheratan_test_p", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5993", "osv_published_at": "2026-06-17T04:20:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:26:47Z", "osv_earliest_published_at": "2026-06-17T04:20:05Z", "hours_ahead_of_osv": -8.11, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:28:23Z" }, { "id": "runtime-metrics-w7k2-2026-06-17", "display_name": "runtime-metrics-w7k2", "campaign": null, "detection_source": "osv", "packages": [ { "package": "runtime-metrics-w7k2", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5992", "osv_published_at": "2026-06-17T04:41:58Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:26:46Z", "osv_earliest_published_at": "2026-06-17T04:41:58Z", "hours_ahead_of_osv": -7.75, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:28:19Z" }, { "id": "req-parmas-valid-2026-06-17", "display_name": "req-parmas-valid", "campaign": null, "detection_source": "osv", "packages": [ { "package": "req-parmas-valid", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5991", "osv_published_at": "2026-06-17T04:20:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:26:46Z", "osv_earliest_published_at": "2026-06-17T04:20:22Z", "hours_ahead_of_osv": -8.11, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:28:15Z" }, { "id": "pkg-telemetry-r4f9-2026-06-17", "display_name": "pkg-telemetry-r4f9", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pkg-telemetry-r4f9", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5990", "osv_published_at": "2026-06-17T04:42:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:26:46Z", "osv_earliest_published_at": "2026-06-17T04:42:06Z", "hours_ahead_of_osv": -7.74, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:28:11Z" }, { "id": "pathfix-2026-06-17", "display_name": "pathfix", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pathfix", "ecosystem": "npm", "versions": [ "3.0.10" ], "osv_entries": [ { "osv_id": "MAL-2026-5989", "osv_published_at": "2026-06-17T04:18:57Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:26:45Z", "osv_earliest_published_at": "2026-06-17T04:18:57Z", "hours_ahead_of_osv": -8.13, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:28:06Z" }, { "id": "params-valid-js-2026-06-17", "display_name": "params-valid-js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "params-valid-js", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-5988", "osv_published_at": "2026-06-17T04:22:54Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:26:45Z", "osv_earliest_published_at": "2026-06-17T04:22:54Z", "hours_ahead_of_osv": -8.06, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-18T21:52:16Z" }, { "id": "ogd-analytics-2026-06-17", "display_name": "ogd-analytics", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ogd-analytics", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5987", "osv_published_at": "2026-06-17T04:18:46Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:26:44Z", "osv_earliest_published_at": "2026-06-17T04:18:46Z", "hours_ahead_of_osv": -8.13, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:27:57Z" }, { "id": "npm-sandbox-ping-r9t2-2026-06-17", "display_name": "npm-sandbox-ping-r9t2", "campaign": null, "detection_source": "osv", "packages": [ { "package": "npm-sandbox-ping-r9t2", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5986", "osv_published_at": "2026-06-17T04:41:46Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:26:44Z", "osv_earliest_published_at": "2026-06-17T04:41:46Z", "hours_ahead_of_osv": -7.75, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:27:53Z" }, { "id": "node-path-utils-2026-06-17", "display_name": "node-path-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "node-path-utils", "ecosystem": "npm", "versions": [ "1.23.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5985", "osv_published_at": "2026-06-17T04:20:30Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:26:44Z", "osv_earliest_published_at": "2026-06-17T04:20:30Z", "hours_ahead_of_osv": -8.1, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:27:48Z" }, { "id": "nepublisher-2026-06-17", "display_name": "nepublisher", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nepublisher", "ecosystem": "npm", "versions": [ "0.4.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5984", "osv_published_at": "2026-06-17T04:23:28Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:26:43Z", "osv_earliest_published_at": "2026-06-17T04:23:28Z", "hours_ahead_of_osv": -8.05, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:27:44Z" }, { "id": "metrics-probe-dc85-2026-06-17", "display_name": "metrics-probe-dc85", "campaign": null, "detection_source": "osv", "packages": [ { "package": "metrics-probe-dc85", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5983", "osv_published_at": "2026-06-17T04:43:32Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:26:43Z", "osv_earliest_published_at": "2026-06-17T04:43:32Z", "hours_ahead_of_osv": -7.72, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:27:40Z" }, { "id": "metrics-probe-77d4-2026-06-17", "display_name": "metrics-probe-77d4", "campaign": null, "detection_source": "osv", "packages": [ { "package": "metrics-probe-77d4", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5982", "osv_published_at": "2026-06-17T04:43:34Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:26:42Z", "osv_earliest_published_at": "2026-06-17T04:43:34Z", "hours_ahead_of_osv": -7.72, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:27:35Z" }, { "id": "metrics-probe-64b2-2026-06-17", "display_name": "metrics-probe-64b2", "campaign": null, "detection_source": "osv", "packages": [ { "package": "metrics-probe-64b2", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5981", "osv_published_at": "2026-06-17T04:43:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:26:42Z", "osv_earliest_published_at": "2026-06-17T04:43:39Z", "hours_ahead_of_osv": -7.72, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:27:31Z" }, { "id": "gpu-accelerator-2026-06-17", "display_name": "gpu-accelerator", "campaign": null, "detection_source": "osv", "packages": [ { "package": "gpu-accelerator", "ecosystem": "npm", "versions": [ "1.4.2", "1.4.4", "1.4.5", "1.4.6", "1.4.7" ], "osv_entries": [ { "osv_id": "MAL-2026-5980", "osv_published_at": "2026-06-17T04:26:18Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:26:41Z", "osv_earliest_published_at": "2026-06-17T04:26:18Z", "hours_ahead_of_osv": -8.01, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:27:26Z" }, { "id": "easy-day-js-2026-06-17", "display_name": "easy-day-js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "easy-day-js", "ecosystem": "npm", "versions": [ "1.11.22" ], "osv_entries": [ { "osv_id": "MAL-2026-5979", "osv_published_at": "2026-06-17T04:15:30Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:26:40Z", "osv_earliest_published_at": "2026-06-17T04:15:30Z", "hours_ahead_of_osv": -8.19, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:27:22Z" }, { "id": "cryptodao-utils-2026-06-17", "display_name": "cryptodao-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cryptodao-utils", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-5978", "osv_published_at": "2026-06-17T03:53:13Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:26:39Z", "osv_earliest_published_at": "2026-06-17T03:53:13Z", "hours_ahead_of_osv": -8.56, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:27:18Z" }, { "id": "cryptodao-signer-2026-06-17", "display_name": "cryptodao-signer", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cryptodao-signer", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-5977", "osv_published_at": "2026-06-17T03:53:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:26:39Z", "osv_earliest_published_at": "2026-06-17T03:53:07Z", "hours_ahead_of_osv": -8.56, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:27:14Z" }, { "id": "cryptodao-core-2026-06-17", "display_name": "cryptodao-core", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cryptodao-core", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-5976", "osv_published_at": "2026-06-17T04:04:30Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:26:38Z", "osv_earliest_published_at": "2026-06-17T04:04:30Z", "hours_ahead_of_osv": -8.37, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:27:10Z" }, { "id": "cryptodao-contracts-2026-06-17", "display_name": "cryptodao-contracts", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cryptodao-contracts", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-5975", "osv_published_at": "2026-06-17T04:04:31Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:26:37Z", "osv_earliest_published_at": "2026-06-17T04:04:31Z", "hours_ahead_of_osv": -8.37, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:27:06Z" }, { "id": "cryptodao-bot-2026-06-17", "display_name": "cryptodao-bot", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cryptodao-bot", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-5974", "osv_published_at": "2026-06-17T03:53:19Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:26:37Z", "osv_earliest_published_at": "2026-06-17T03:53:19Z", "hours_ahead_of_osv": -8.55, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:27:02Z" }, { "id": "public-for-cdao-hooks-2026-06-17", "display_name": "@public-for-cdao/hooks", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@public-for-cdao/hooks", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-5971", "osv_published_at": "2026-06-17T04:07:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:26:36Z", "osv_earliest_published_at": "2026-06-17T04:07:51Z", "hours_ahead_of_osv": -8.31, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:26:49Z" }, { "id": "classbreeze-utils-2026-06-17", "display_name": "classbreeze-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "classbreeze-utils", "ecosystem": "npm", "versions": [ "0.7.10", "0.7.8", "0.7.9" ], "osv_entries": [ { "osv_id": "MAL-2026-5973", "osv_published_at": "2026-06-17T04:18:32Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:26:36Z", "osv_earliest_published_at": "2026-06-17T04:18:32Z", "hours_ahead_of_osv": -8.13, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-18T21:52:12Z" }, { "id": "canary-ci-test-2026-06-17", "display_name": "canary-ci-test", "campaign": null, "detection_source": "osv", "packages": [ { "package": "canary-ci-test", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5972", "osv_published_at": "2026-06-17T04:24:09Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:26:36Z", "osv_earliest_published_at": "2026-06-17T04:24:09Z", "hours_ahead_of_osv": -8.04, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:26:53Z" }, { "id": "richtext-editor-ui-2026-06-17", "display_name": "richtext-editor-ui", "campaign": null, "detection_source": "osv", "packages": [ { "package": "richtext-editor-ui", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5852", "osv_published_at": "2026-06-15T23:51:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:26:30Z", "osv_earliest_published_at": "2026-06-15T23:51:49Z", "hours_ahead_of_osv": -36.58, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:26:34Z" }, { "id": "tobihook-2026-06-17", "display_name": "tobihook", "campaign": null, "detection_source": "osv", "packages": [ { "package": "tobihook", "ecosystem": "pypi", "versions": [ "1.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-5995", "osv_published_at": "2026-06-17T04:22:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:25:49Z", "osv_earliest_published_at": "2026-06-17T04:22:21Z", "hours_ahead_of_osv": -8.06, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:25:54Z" }, { "id": "telegram-lite-grabber-2026-06-17", "display_name": "telegram-lite-grabber", "campaign": null, "detection_source": "osv", "packages": [ { "package": "telegram-lite-grabber", "ecosystem": "pypi", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-6051", "osv_published_at": "2026-06-17T07:09:46Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T12:25:49Z", "osv_earliest_published_at": "2026-06-17T07:09:46Z", "hours_ahead_of_osv": -5.27, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:25:58Z" }, { "id": "mastra-voice-xai-realtime-2026-06-17", "display_name": "@mastra/voice-xai-realtime", "campaign": null, "detection_source": "registry", "packages": [ { "package": "@mastra/voice-xai-realtime", "ecosystem": "npm", "versions": [ "0.1.2" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T06:00:00Z", "flagged_at": null, "confirmed_at": "2026-06-17T06:00:00Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40mastra%2Fvoice-xai-realtime", "ledger_commit_at": "2026-06-23T01:24:02Z" }, { "id": "mastra-voice-speechify-2026-06-17", "display_name": "@mastra/voice-speechify", "campaign": null, "detection_source": "registry", "packages": [ { "package": "@mastra/voice-speechify", "ecosystem": "npm", "versions": [ "0.12.2" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T06:00:00Z", "flagged_at": null, "confirmed_at": "2026-06-17T06:00:00Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40mastra%2Fvoice-speechify", "ledger_commit_at": "2026-06-23T01:24:06Z" }, { "id": "mastra-voice-sarvam-2026-06-17", "display_name": "@mastra/voice-sarvam", "campaign": null, "detection_source": "registry", "packages": [ { "package": "@mastra/voice-sarvam", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T06:00:00Z", "flagged_at": null, "confirmed_at": "2026-06-17T06:00:00Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40mastra%2Fvoice-sarvam", "ledger_commit_at": "2026-06-23T01:24:10Z" }, { "id": "cryptodao-types-2026-06-17", "display_name": "cryptodao-types", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cryptodao-types", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-5970", "osv_published_at": "2026-06-17T03:44:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T05:16:54Z", "osv_earliest_published_at": "2026-06-17T03:44:42Z", "hours_ahead_of_osv": -1.54, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T05:19:04Z" }, { "id": "cryptodao-sdk-2026-06-17", "display_name": "cryptodao-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cryptodao-sdk", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-5969", "osv_published_at": "2026-06-17T03:36:34Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T05:16:52Z", "osv_earliest_published_at": "2026-06-17T03:36:34Z", "hours_ahead_of_osv": -1.67, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T05:19:01Z" }, { "id": "cryptodao-deploy-2026-06-17", "display_name": "cryptodao-deploy", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cryptodao-deploy", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-5968", "osv_published_at": "2026-06-17T03:46:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T05:16:50Z", "osv_earliest_published_at": "2026-06-17T03:46:50Z", "hours_ahead_of_osv": -1.5, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T05:18:57Z" }, { "id": "cryptodao-config-2026-06-17", "display_name": "cryptodao-config", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cryptodao-config", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-5967", "osv_published_at": "2026-06-17T03:45:31Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T05:16:48Z", "osv_earliest_published_at": "2026-06-17T03:45:31Z", "hours_ahead_of_osv": -1.52, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T05:18:53Z" }, { "id": "cryptodao-backend-2026-06-17", "display_name": "cryptodao-backend", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cryptodao-backend", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-5966", "osv_published_at": "2026-06-17T03:39:24Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T05:16:46Z", "osv_earliest_published_at": "2026-06-17T03:39:24Z", "hours_ahead_of_osv": -1.62, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T05:18:49Z" }, { "id": "mastra-2026-06-17", "display_name": "mastra", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mastra", "ecosystem": "npm", "versions": [ "1.13.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5965", "osv_published_at": "2026-06-17T03:11:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T05:16:44Z", "osv_earliest_published_at": "2026-06-17T03:11:00Z", "hours_ahead_of_osv": -2.1, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T05:18:46Z" }, { "id": "mastra-sentry-2026-06-17", "display_name": "@mastra/sentry", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/sentry", "ecosystem": "npm", "versions": [ "1.1.4" ], "osv_entries": [ { "osv_id": "MAL-2026-5964", "osv_published_at": "2026-06-17T03:12:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T05:16:42Z", "osv_earliest_published_at": "2026-06-17T03:12:38Z", "hours_ahead_of_osv": -2.07, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T05:18:42Z" }, { "id": "mastra-schema-compat-2026-06-17", "display_name": "@mastra/schema-compat", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/schema-compat", "ecosystem": "npm", "versions": [ "1.2.12" ], "osv_entries": [ { "osv_id": "MAL-2026-5963", "osv_published_at": "2026-06-17T03:11:45Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T05:16:40Z", "osv_earliest_published_at": "2026-06-17T03:11:45Z", "hours_ahead_of_osv": -2.08, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T05:18:38Z" }, { "id": "mastra-s3-2026-06-17", "display_name": "@mastra/s3", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/s3", "ecosystem": "npm", "versions": [ "0.5.3" ], "osv_entries": [ { "osv_id": "MAL-2026-5962", "osv_published_at": "2026-06-17T03:12:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T05:16:38Z", "osv_earliest_published_at": "2026-06-17T03:12:38Z", "hours_ahead_of_osv": -2.07, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T05:18:35Z" }, { "id": "mastra-rag-2026-06-17", "display_name": "@mastra/rag", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/rag", "ecosystem": "npm", "versions": [ "2.2.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5961", "osv_published_at": "2026-06-17T03:12:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T05:16:36Z", "osv_earliest_published_at": "2026-06-17T03:12:53Z", "hours_ahead_of_osv": -2.06, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T05:18:31Z" }, { "id": "mastra-posthog-2026-06-17", "display_name": "@mastra/posthog", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/posthog", "ecosystem": "npm", "versions": [ "1.0.29" ], "osv_entries": [ { "osv_id": "MAL-2026-5960", "osv_published_at": "2026-06-17T03:14:27Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T05:16:34Z", "osv_earliest_published_at": "2026-06-17T03:14:27Z", "hours_ahead_of_osv": -2.04, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T05:18:27Z" }, { "id": "mastra-pg-2026-06-17", "display_name": "@mastra/pg", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/pg", "ecosystem": "npm", "versions": [ "1.13.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5959", "osv_published_at": "2026-06-17T03:11:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T05:16:32Z", "osv_earliest_published_at": "2026-06-17T03:11:25Z", "hours_ahead_of_osv": -2.09, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T05:18:24Z" }, { "id": "mastra-otel-bridge-2026-06-17", "display_name": "@mastra/otel-bridge", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/otel-bridge", "ecosystem": "npm", "versions": [ "1.2.3" ], "osv_entries": [ { "osv_id": "MAL-2026-5958", "osv_published_at": "2026-06-17T03:12:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T05:16:31Z", "osv_earliest_published_at": "2026-06-17T03:12:06Z", "hours_ahead_of_osv": -2.07, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T05:18:20Z" }, { "id": "mastra-mongodb-2026-06-17", "display_name": "@mastra/mongodb", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/mongodb", "ecosystem": "npm", "versions": [ "1.9.3" ], "osv_entries": [ { "osv_id": "MAL-2026-5957", "osv_published_at": "2026-06-17T03:12:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T05:16:28Z", "osv_earliest_published_at": "2026-06-17T03:12:53Z", "hours_ahead_of_osv": -2.06, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T05:18:16Z" }, { "id": "mastra-mcp-docs-server-2026-06-17", "display_name": "@mastra/mcp-docs-server", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/mcp-docs-server", "ecosystem": "npm", "versions": [ "1.1.47" ], "osv_entries": [ { "osv_id": "MAL-2026-5956", "osv_published_at": "2026-06-17T03:12:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T05:16:27Z", "osv_earliest_published_at": "2026-06-17T03:12:51Z", "hours_ahead_of_osv": -2.06, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T05:18:13Z" }, { "id": "mastra-mcp-2026-06-17", "display_name": "@mastra/mcp", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/mcp", "ecosystem": "npm", "versions": [ "1.10.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5955", "osv_published_at": "2026-06-17T03:11:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T05:16:27Z", "osv_earliest_published_at": "2026-06-17T03:11:25Z", "hours_ahead_of_osv": -2.08, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T05:18:09Z" }, { "id": "mastra-libsql-2026-06-17", "display_name": "@mastra/libsql", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/libsql", "ecosystem": "npm", "versions": [ "1.13.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5954", "osv_published_at": "2026-06-17T03:11:19Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T05:16:26Z", "osv_earliest_published_at": "2026-06-17T03:11:19Z", "hours_ahead_of_osv": -2.09, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T05:18:05Z" }, { "id": "mastra-langsmith-2026-06-17", "display_name": "@mastra/langsmith", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/langsmith", "ecosystem": "npm", "versions": [ "1.2.4" ], "osv_entries": [ { "osv_id": "MAL-2026-5953", "osv_published_at": "2026-06-17T03:12:46Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T05:16:26Z", "osv_earliest_published_at": "2026-06-17T03:12:46Z", "hours_ahead_of_osv": -2.06, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T05:18:02Z" }, { "id": "mastra-langfuse-2026-06-17", "display_name": "@mastra/langfuse", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/langfuse", "ecosystem": "npm", "versions": [ "1.3.6" ], "osv_entries": [ { "osv_id": "MAL-2026-5952", "osv_published_at": "2026-06-17T03:11:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T05:16:25Z", "osv_earliest_published_at": "2026-06-17T03:11:37Z", "hours_ahead_of_osv": -2.08, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T05:17:58Z" }, { "id": "mastra-inngest-2026-06-17", "display_name": "@mastra/inngest", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/inngest", "ecosystem": "npm", "versions": [ "1.5.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5951", "osv_published_at": "2026-06-17T03:13:11Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T05:16:25Z", "osv_earliest_published_at": "2026-06-17T03:13:11Z", "hours_ahead_of_osv": -2.05, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T05:17:55Z" }, { "id": "mastra-hono-2026-06-17", "display_name": "@mastra/hono", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/hono", "ecosystem": "npm", "versions": [ "1.4.26" ], "osv_entries": [ { "osv_id": "MAL-2026-5950", "osv_published_at": "2026-06-17T03:12:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T05:16:25Z", "osv_earliest_published_at": "2026-06-17T03:12:21Z", "hours_ahead_of_osv": -2.07, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T05:17:51Z" }, { "id": "mastra-fastify-2026-06-17", "display_name": "@mastra/fastify", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/fastify", "ecosystem": "npm", "versions": [ "1.3.31" ], "osv_entries": [ { "osv_id": "MAL-2026-5949", "osv_published_at": "2026-06-17T03:12:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T05:16:24Z", "osv_earliest_published_at": "2026-06-17T03:12:53Z", "hours_ahead_of_osv": -2.06, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T05:17:47Z" }, { "id": "mastra-fastembed-2026-06-17", "display_name": "@mastra/fastembed", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/fastembed", "ecosystem": "npm", "versions": [ "1.1.3" ], "osv_entries": [ { "osv_id": "MAL-2026-5948", "osv_published_at": "2026-06-17T03:12:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T05:16:24Z", "osv_earliest_published_at": "2026-06-17T03:12:38Z", "hours_ahead_of_osv": -2.06, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T05:17:44Z" }, { "id": "mastra-evals-2026-06-17", "display_name": "@mastra/evals", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/evals", "ecosystem": "npm", "versions": [ "1.3.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5947", "osv_published_at": "2026-06-17T03:11:45Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T05:16:23Z", "osv_earliest_published_at": "2026-06-17T03:11:45Z", "hours_ahead_of_osv": -2.08, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T05:17:40Z" }, { "id": "mastra-editor-2026-06-17", "display_name": "@mastra/editor", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/editor", "ecosystem": "npm", "versions": [ "0.11.3" ], "osv_entries": [ { "osv_id": "MAL-2026-5946", "osv_published_at": "2026-06-17T03:12:10Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T05:16:23Z", "osv_earliest_published_at": "2026-06-17T03:12:10Z", "hours_ahead_of_osv": -2.07, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T05:17:36Z" }, { "id": "mastra-dynamodb-2026-06-17", "display_name": "@mastra/dynamodb", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/dynamodb", "ecosystem": "npm", "versions": [ "1.0.9" ], "osv_entries": [ { "osv_id": "MAL-2026-5945", "osv_published_at": "2026-06-17T03:12:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T05:16:22Z", "osv_earliest_published_at": "2026-06-17T03:12:00Z", "hours_ahead_of_osv": -2.07, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T05:17:33Z" }, { "id": "mastra-duckdb-2026-06-17", "display_name": "@mastra/duckdb", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/duckdb", "ecosystem": "npm", "versions": [ "1.4.3" ], "osv_entries": [ { "osv_id": "MAL-2026-5944", "osv_published_at": "2026-06-17T03:11:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T05:16:22Z", "osv_earliest_published_at": "2026-06-17T03:11:53Z", "hours_ahead_of_osv": -2.07, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T05:17:29Z" }, { "id": "mastra-datadog-2026-06-17", "display_name": "@mastra/datadog", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/datadog", "ecosystem": "npm", "versions": [ "1.2.5" ], "osv_entries": [ { "osv_id": "MAL-2026-5943", "osv_published_at": "2026-06-17T03:12:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T05:16:22Z", "osv_earliest_published_at": "2026-06-17T03:12:21Z", "hours_ahead_of_osv": -2.07, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T05:17:26Z" }, { "id": "mastra-clickhouse-2026-06-17", "display_name": "@mastra/clickhouse", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/clickhouse", "ecosystem": "npm", "versions": [ "1.10.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5942", "osv_published_at": "2026-06-17T03:13:17Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T05:16:21Z", "osv_earliest_published_at": "2026-06-17T03:13:17Z", "hours_ahead_of_osv": -2.05, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T05:17:22Z" }, { "id": "mastra-braintrust-2026-06-17", "display_name": "@mastra/braintrust", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/braintrust", "ecosystem": "npm", "versions": [ "1.1.4" ], "osv_entries": [ { "osv_id": "MAL-2026-5941", "osv_published_at": "2026-06-17T03:13:09Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T05:16:21Z", "osv_earliest_published_at": "2026-06-17T03:13:09Z", "hours_ahead_of_osv": -2.05, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T05:17:18Z" }, { "id": "mastra-auth-2026-06-17", "display_name": "@mastra/auth", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/auth", "ecosystem": "npm", "versions": [ "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-5940", "osv_published_at": "2026-06-17T03:12:26Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T05:16:20Z", "osv_earliest_published_at": "2026-06-17T03:12:26Z", "hours_ahead_of_osv": -2.06, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T05:17:14Z" }, { "id": "mastra-ai-sdk-2026-06-17", "display_name": "@mastra/ai-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@mastra/ai-sdk", "ecosystem": "npm", "versions": [ "1.4.6" ], "osv_entries": [ { "osv_id": "MAL-2026-5939", "osv_published_at": "2026-06-17T03:11:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T05:16:20Z", "osv_earliest_published_at": "2026-06-17T03:11:37Z", "hours_ahead_of_osv": -2.08, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T05:17:10Z" }, { "id": "speed4-2026-06-17", "display_name": "speed4", "campaign": null, "detection_source": "osv", "packages": [ { "package": "speed4", "ecosystem": "npm", "versions": [ "1.1.7" ], "osv_entries": [ { "osv_id": "MAL-2026-5938", "osv_published_at": "2026-06-16T23:42:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T05:16:19Z", "osv_earliest_published_at": "2026-06-16T23:42:21Z", "hours_ahead_of_osv": -5.57, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T05:17:06Z" }, { "id": "abuden21-2026-06-17", "display_name": "abuden21", "campaign": null, "detection_source": "osv", "packages": [ { "package": "abuden21", "ecosystem": "npm", "versions": [ "1.7.7" ], "osv_entries": [ { "osv_id": "MAL-2026-5937", "osv_published_at": "2026-06-16T23:43:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T05:16:19Z", "osv_earliest_published_at": "2026-06-16T23:43:22Z", "hours_ahead_of_osv": -5.55, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T05:17:02Z" }, { "id": "vite-config-field-2026-06-17", "display_name": "vite-config-field", "campaign": null, "detection_source": "osv", "packages": [ { "package": "vite-config-field", "ecosystem": "npm", "versions": [ "1.1.0", "1.1.2", "1.1.3" ], "osv_entries": [ { "osv_id": "MAL-2026-5936", "osv_published_at": "2026-06-16T22:20:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T05:16:18Z", "osv_earliest_published_at": "2026-06-16T22:20:36Z", "hours_ahead_of_osv": -6.93, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:26:42Z" }, { "id": "tw-theme-kit-2026-06-17", "display_name": "tw-theme-kit", "campaign": null, "detection_source": "osv", "packages": [ { "package": "tw-theme-kit", "ecosystem": "npm", "versions": [ "1.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5935", "osv_published_at": "2026-06-16T22:21:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T05:16:18Z", "osv_earliest_published_at": "2026-06-16T22:21:38Z", "hours_ahead_of_osv": -6.91, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T05:16:54Z" }, { "id": "ssr-auth-sync-2026-06-17", "display_name": "ssr-auth-sync", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ssr-auth-sync", "ecosystem": "npm", "versions": [ "1.6.16" ], "osv_entries": [ { "osv_id": "MAL-2026-5934", "osv_published_at": "2026-06-16T22:20:18Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T05:16:17Z", "osv_earliest_published_at": "2026-06-16T22:20:18Z", "hours_ahead_of_osv": -6.93, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T05:16:51Z" }, { "id": "react-vite-assert-2026-06-17", "display_name": "react-vite-assert", "campaign": null, "detection_source": "osv", "packages": [ { "package": "react-vite-assert", "ecosystem": "npm", "versions": [ "1.4.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5933", "osv_published_at": "2026-06-16T22:20:27Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T05:16:17Z", "osv_earliest_published_at": "2026-06-16T22:20:27Z", "hours_ahead_of_osv": -6.93, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T05:16:47Z" }, { "id": "package-uploader-2026-06-17", "display_name": "package-uploader", "campaign": null, "detection_source": "osv", "packages": [ { "package": "package-uploader", "ecosystem": "npm", "versions": [ "1.3.25" ], "osv_entries": [ { "osv_id": "MAL-2026-5932", "osv_published_at": "2026-06-16T22:18:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T05:16:16Z", "osv_earliest_published_at": "2026-06-16T22:18:21Z", "hours_ahead_of_osv": -6.97, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T05:16:43Z" }, { "id": "mci-sdk-2026-06-17", "display_name": "mci-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mci-sdk", "ecosystem": "npm", "versions": [ "1.2.10", "1.2.8" ], "osv_entries": [ { "osv_id": "MAL-2026-5931", "osv_published_at": "2026-06-16T22:17:46Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T05:16:15Z", "osv_earliest_published_at": "2026-06-16T22:17:46Z", "hours_ahead_of_osv": -6.97, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T05:16:39Z" }, { "id": "bubblestr-2026-06-17", "display_name": "bubblestr", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bubblestr", "ecosystem": "npm", "versions": [ "1.1.4" ], "osv_entries": [ { "osv_id": "MAL-2026-5930", "osv_published_at": "2026-06-16T22:22:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T05:16:15Z", "osv_earliest_published_at": "2026-06-16T22:22:20Z", "hours_ahead_of_osv": -6.9, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T05:16:36Z" }, { "id": "backoffice-charges-module-2026-06-17", "display_name": "backoffice-charges-module", "campaign": null, "detection_source": "osv", "packages": [ { "package": "backoffice-charges-module", "ecosystem": "npm", "versions": [ "1.999.0", "2.999.0", "2.999.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5929", "osv_published_at": "2026-06-16T22:30:57Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T05:16:14Z", "osv_earliest_published_at": "2026-06-16T22:30:57Z", "hours_ahead_of_osv": -6.75, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T05:16:31Z" }, { "id": "db-dx-connector-2026-06-17", "display_name": "db-dx-connector", "campaign": null, "detection_source": "osv", "packages": [ { "package": "db-dx-connector", "ecosystem": "npm", "versions": [ "1.0.1", "1.0.2", "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-5463", "osv_published_at": "2026-06-09T20:18:26Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-17T05:16:08Z", "osv_earliest_published_at": "2026-06-09T20:18:26Z", "hours_ahead_of_osv": -176.96, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-26T23:44:47Z", "hours_ahead_of_press": null, "confirmed_at": "2026-06-26T23:44:47Z" }, { "id": "chai-test-mocks-2026-06-16", "display_name": "chai-test-mocks", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-test-mocks", "ecosystem": "npm", "versions": [ "1.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5928", "osv_published_at": "2026-06-16T22:17:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T23:06:03Z", "osv_earliest_published_at": "2026-06-16T22:17:12Z", "hours_ahead_of_osv": -0.81, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T23:06:50Z" }, { "id": "aillmgen-2026-06-16", "display_name": "aillmgen", "campaign": null, "detection_source": "osv", "packages": [ { "package": "aillmgen", "ecosystem": "npm", "versions": [ "4.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5927", "osv_published_at": "2026-06-16T22:09:54Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T23:06:01Z", "osv_earliest_published_at": "2026-06-16T22:09:54Z", "hours_ahead_of_osv": -0.94, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T23:06:47Z" }, { "id": "test-copppss-2026-06-16", "display_name": "test-copppss", "campaign": null, "detection_source": "osv", "packages": [ { "package": "test-copppss", "ecosystem": "npm", "versions": [ "1.999.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5926", "osv_published_at": "2026-06-16T20:01:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T23:05:59Z", "osv_earliest_published_at": "2026-06-16T20:01:12Z", "hours_ahead_of_osv": -3.08, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T23:06:43Z" }, { "id": "motion-lib-2026-06-16", "display_name": "motion-lib", "campaign": null, "detection_source": "osv", "packages": [ { "package": "motion-lib", "ecosystem": "npm", "versions": [ "2.3.5" ], "osv_entries": [ { "osv_id": "MAL-2026-5925", "osv_published_at": "2026-06-16T19:46:09Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T23:05:57Z", "osv_earliest_published_at": "2026-06-16T19:46:09Z", "hours_ahead_of_osv": -3.33, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T23:06:39Z" }, { "id": "binproto-2026-06-16", "display_name": "binproto", "campaign": null, "detection_source": "osv", "packages": [ { "package": "binproto", "ecosystem": "npm", "versions": [ "1.0.5", "1.0.7" ], "osv_entries": [ { "osv_id": "MAL-2026-5924", "osv_published_at": "2026-06-16T19:56:34Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T23:05:55Z", "osv_earliest_published_at": "2026-06-16T19:56:34Z", "hours_ahead_of_osv": -3.16, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T23:06:36Z" }, { "id": "welcome-onboarding-web-mobile-focus-account-beta-merging-2026-06-16", "display_name": "@welcome-onboarding-web/mobile-focus-account-beta-merging", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@welcome-onboarding-web/mobile-focus-account-beta-merging", "ecosystem": "npm", "versions": [ "4.28.7" ], "osv_entries": [ { "osv_id": "MAL-2026-5923", "osv_published_at": "2026-06-16T19:59:43Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T23:05:51Z", "osv_earliest_published_at": "2026-06-16T19:59:43Z", "hours_ahead_of_osv": -3.1, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T23:06:32Z" }, { "id": "kalipto-local-2026-06-16", "display_name": "@kalipto/local", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@kalipto/local", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2", "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-5922", "osv_published_at": "2026-06-16T20:07:17Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T23:05:49Z", "osv_earliest_published_at": "2026-06-16T20:07:17Z", "hours_ahead_of_osv": -2.98, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T23:06:29Z" }, { "id": "proto-bin-2026-06-16", "display_name": "proto-bin", "campaign": null, "detection_source": "osv", "packages": [ { "package": "proto-bin", "ecosystem": "npm", "versions": [ "2.3.3", "2.5.1", "2.5.2", "2.5.3" ], "osv_entries": [ { "osv_id": "MAL-2026-5921", "osv_published_at": "2026-06-16T18:53:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T23:05:41Z", "osv_earliest_published_at": "2026-06-16T18:53:23Z", "hours_ahead_of_osv": -4.21, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T23:06:25Z" }, { "id": "pretie-x2-2026-06-16", "display_name": "pretie_x2", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pretie_x2", "ecosystem": "npm", "versions": [ "3.8.5", "3.8.6", "3.8.7", "3.8.8", "3.8.9" ], "osv_entries": [ { "osv_id": "MAL-2026-5920", "osv_published_at": "2026-06-16T19:30:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T23:05:33Z", "osv_earliest_published_at": "2026-06-16T19:30:08Z", "hours_ahead_of_osv": -3.59, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:41:15Z", "hours_ahead_of_press": null, "confirmed_at": "2026-06-24T02:41:15Z" }, { "id": "pretie-x1-2026-06-16", "display_name": "pretie_x1", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pretie_x1", "ecosystem": "npm", "versions": [ "3.8.5", "3.8.6", "3.8.7", "3.8.8", "3.8.9" ], "osv_entries": [ { "osv_id": "MAL-2026-5919", "osv_published_at": "2026-06-16T19:29:59Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T23:05:29Z", "osv_earliest_published_at": "2026-06-16T19:29:59Z", "hours_ahead_of_osv": -3.59, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:41:10Z", "hours_ahead_of_press": null, "confirmed_at": "2026-06-24T02:41:10Z" }, { "id": "nottuff7-2026-06-16", "display_name": "nottuff7", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nottuff7", "ecosystem": "npm", "versions": [ "1.7.7" ], "osv_entries": [ { "osv_id": "MAL-2026-5918", "osv_published_at": "2026-06-16T19:27:27Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T23:05:27Z", "osv_earliest_published_at": "2026-06-16T19:27:27Z", "hours_ahead_of_osv": -3.63, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T23:06:14Z" }, { "id": "nottuff4-2026-06-16", "display_name": "nottuff4", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nottuff4", "ecosystem": "npm", "versions": [ "1.7.7" ], "osv_entries": [ { "osv_id": "MAL-2026-5917", "osv_published_at": "2026-06-16T19:27:24Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T23:05:25Z", "osv_earliest_published_at": "2026-06-16T19:27:24Z", "hours_ahead_of_osv": -3.63, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T23:06:10Z" }, { "id": "nottuff25-2026-06-16", "display_name": "nottuff25", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nottuff25", "ecosystem": "npm", "versions": [ "1.7.7" ], "osv_entries": [ { "osv_id": "MAL-2026-5916", "osv_published_at": "2026-06-16T19:27:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T23:05:23Z", "osv_earliest_published_at": "2026-06-16T19:27:25Z", "hours_ahead_of_osv": -3.63, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T23:06:06Z" }, { "id": "nottuff23-2026-06-16", "display_name": "nottuff23", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nottuff23", "ecosystem": "npm", "versions": [ "1.7.7" ], "osv_entries": [ { "osv_id": "MAL-2026-5915", "osv_published_at": "2026-06-16T19:27:26Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T23:05:21Z", "osv_earliest_published_at": "2026-06-16T19:27:26Z", "hours_ahead_of_osv": -3.63, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T23:06:02Z" }, { "id": "nottuff15-2026-06-16", "display_name": "nottuff15", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nottuff15", "ecosystem": "npm", "versions": [ "1.7.7" ], "osv_entries": [ { "osv_id": "MAL-2026-5914", "osv_published_at": "2026-06-16T19:27:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T23:05:19Z", "osv_earliest_published_at": "2026-06-16T19:27:22Z", "hours_ahead_of_osv": -3.63, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T23:05:58Z" }, { "id": "mastraqqq-2026-06-16", "display_name": "mastraqqq", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mastraqqq", "ecosystem": "npm", "versions": [ "1.13.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5913", "osv_published_at": "2026-06-16T18:54:13Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T23:05:17Z", "osv_earliest_published_at": "2026-06-16T18:54:13Z", "hours_ahead_of_osv": -4.18, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T23:05:55Z" }, { "id": "js-digest-2026-06-16", "display_name": "js-digest", "campaign": null, "detection_source": "osv", "packages": [ { "package": "js-digest", "ecosystem": "npm", "versions": [ "4.2.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5912", "osv_published_at": "2026-06-16T19:45:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T23:05:15Z", "osv_earliest_published_at": "2026-06-16T19:45:33Z", "hours_ahead_of_osv": -3.33, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T23:05:51Z" }, { "id": "utils-common-helpers-2026-06-16", "display_name": "utils-common-helpers", "campaign": null, "detection_source": "osv", "packages": [ { "package": "utils-common-helpers", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5911", "osv_published_at": "2026-06-16T17:36:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T23:05:13Z", "osv_earliest_published_at": "2026-06-16T17:36:03Z", "hours_ahead_of_osv": -5.49, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T23:05:48Z" }, { "id": "uidai-reusable-components-2026-06-16", "display_name": "uidai_reusable_components", "campaign": null, "detection_source": "osv", "packages": [ { "package": "uidai_reusable_components", "ecosystem": "npm", "versions": [ "0.4.2", "0.4.3", "0.4.4", "0.4.5", "0.4.6" ], "osv_entries": [ { "osv_id": "MAL-2026-5910", "osv_published_at": "2026-06-16T16:14:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T23:05:11Z", "osv_earliest_published_at": "2026-06-16T16:14:33Z", "hours_ahead_of_osv": -6.84, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T23:05:44Z" }, { "id": "react-hook-use-debounce-throttle-12-2026-06-16", "display_name": "react-hook-use-debounce-throttle-12", "campaign": null, "detection_source": "osv", "packages": [ { "package": "react-hook-use-debounce-throttle-12", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5909", "osv_published_at": "2026-06-16T17:24:02Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T23:05:01Z", "osv_earliest_published_at": "2026-06-16T17:24:02Z", "hours_ahead_of_osv": -5.68, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T05:16:28Z" }, { "id": "chain-chai-test-2026-06-16", "display_name": "chain-chai-test", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chain-chai-test", "ecosystem": "npm", "versions": [ "1.3.5" ], "osv_entries": [ { "osv_id": "MAL-2026-5908", "osv_published_at": "2026-06-16T16:22:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T23:05:00Z", "osv_earliest_published_at": "2026-06-16T16:22:52Z", "hours_ahead_of_osv": -6.7, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T23:05:37Z" }, { "id": "chai-solidity-testkit-2026-06-16", "display_name": "chai-solidity-testkit", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-solidity-testkit", "ecosystem": "npm", "versions": [ "1.6.1", "1.6.4" ], "osv_entries": [ { "osv_id": "MAL-2026-5907", "osv_published_at": "2026-06-16T16:22:45Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T23:05:00Z", "osv_earliest_published_at": "2026-06-16T16:22:45Z", "hours_ahead_of_osv": -6.7, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T23:05:34Z" }, { "id": "chai-plugin-kit-2026-06-16", "display_name": "chai-plugin-kit", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-plugin-kit", "ecosystem": "npm", "versions": [ "5.8.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5906", "osv_published_at": "2026-06-16T16:22:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T23:04:59Z", "osv_earliest_published_at": "2026-06-16T16:22:48Z", "hours_ahead_of_osv": -6.7, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T23:05:30Z" }, { "id": "chai-plugin-helper-2026-06-16", "display_name": "chai-plugin-helper", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-plugin-helper", "ecosystem": "npm", "versions": [ "1.7.3", "1.7.4", "1.7.5", "1.7.6" ], "osv_entries": [ { "osv_id": "MAL-2026-5905", "osv_published_at": "2026-06-16T16:32:26Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T23:04:59Z", "osv_earliest_published_at": "2026-06-16T16:32:26Z", "hours_ahead_of_osv": -6.54, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T23:05:27Z" }, { "id": "chai-plugin-2026-06-16", "display_name": "chai-plugin", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-plugin", "ecosystem": "npm", "versions": [ "4.5.2", "4.5.3", "4.5.4", "4.5.5" ], "osv_entries": [ { "osv_id": "MAL-2026-5904", "osv_published_at": "2026-06-16T16:22:46Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T23:04:57Z", "osv_earliest_published_at": "2026-06-16T16:22:46Z", "hours_ahead_of_osv": -6.7, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T23:05:23Z" }, { "id": "chai-guid-2026-06-16", "display_name": "chai-guid", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-guid", "ecosystem": "npm", "versions": [ "1.1.5" ], "osv_entries": [ { "osv_id": "MAL-2026-5903", "osv_published_at": "2026-06-16T16:22:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T23:04:55Z", "osv_earliest_published_at": "2026-06-16T16:22:49Z", "hours_ahead_of_osv": -6.7, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T23:05:19Z" }, { "id": "chai-as-tokenized-2026-06-16", "display_name": "chai-as-tokenized", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-tokenized", "ecosystem": "npm", "versions": [ "7.2.3" ], "osv_entries": [ { "osv_id": "MAL-2026-5902", "osv_published_at": "2026-06-16T16:22:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T23:04:55Z", "osv_earliest_published_at": "2026-06-16T16:22:50Z", "hours_ahead_of_osv": -6.7, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T23:05:15Z" }, { "id": "chai-as-polished-2026-06-16", "display_name": "chai-as-polished", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-polished", "ecosystem": "npm", "versions": [ "7.0.8" ], "osv_entries": [ { "osv_id": "MAL-2026-5901", "osv_published_at": "2026-06-16T16:22:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T23:04:55Z", "osv_earliest_published_at": "2026-06-16T16:22:51Z", "hours_ahead_of_osv": -6.7, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T23:05:11Z" }, { "id": "check-ulid-2026-06-16", "display_name": "check-ulid", "campaign": null, "detection_source": "osv", "packages": [ { "package": "check-ulid", "ecosystem": "npm", "versions": [ "3.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5877", "osv_published_at": "2026-06-16T09:37:17Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T23:04:54Z", "osv_earliest_published_at": "2026-06-16T09:37:17Z", "hours_ahead_of_osv": -13.46, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T23:05:03Z" }, { "id": "chai-as-decrypted-2026-06-16", "display_name": "chai-as-decrypted", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-decrypted", "ecosystem": "npm", "versions": [ "4.2.8" ], "osv_entries": [ { "osv_id": "MAL-2026-5900", "osv_published_at": "2026-06-16T16:18:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T23:04:54Z", "osv_earliest_published_at": "2026-06-16T16:18:25Z", "hours_ahead_of_osv": -6.77, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T23:05:07Z" }, { "id": "metrics-pipeline-d8k2-2026-06-16", "display_name": "metrics-pipeline-d8k2", "campaign": null, "detection_source": "osv", "packages": [ { "package": "metrics-pipeline-d8k2", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.10", "1.0.11", "1.0.12", "1.0.13", "1.0.14", "1.0.15", "1.0.16", "1.0.17", "1.0.18", "1.0.19", "1.0.2", "1.0.20", "1.0.3", "1.0.4", "1.0.5", "1.0.6", "1.0.7", "1.0.8", "1.0.9" ], "osv_entries": [ { "osv_id": "MAL-2026-5858", "osv_published_at": "2026-06-16T01:34:34Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T23:04:53Z", "osv_earliest_published_at": "2026-06-16T01:34:34Z", "hours_ahead_of_osv": -21.51, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T12:26:38Z" }, { "id": "stripe-cli-init-plugin-2026-06-16", "display_name": "stripe-cli-init-plugin", "campaign": null, "detection_source": "osv", "packages": [ { "package": "stripe-cli-init-plugin", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5899", "osv_published_at": "2026-06-16T15:20:11Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T16:52:31Z", "osv_earliest_published_at": "2026-06-16T15:20:11Z", "hours_ahead_of_osv": -1.54, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T16:53:22Z" }, { "id": "strict-engine-peer-2026-06-16", "display_name": "strict-engine-peer", "campaign": null, "detection_source": "osv", "packages": [ { "package": "strict-engine-peer", "ecosystem": "npm", "versions": [ "1.0.0", "22.18.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5898", "osv_published_at": "2026-06-16T15:41:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T16:52:31Z", "osv_earliest_published_at": "2026-06-16T15:41:33Z", "hours_ahead_of_osv": -1.18, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T16:53:17Z" }, { "id": "noderzero-2026-06-16", "display_name": "noderzero", "campaign": null, "detection_source": "osv", "packages": [ { "package": "noderzero", "ecosystem": "npm", "versions": [ "1.0.1", "1.0.2", "1.0.3", "1.0.5" ], "osv_entries": [ { "osv_id": "MAL-2026-5897", "osv_published_at": "2026-06-16T15:29:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T16:52:30Z", "osv_earliest_published_at": "2026-06-16T15:29:12Z", "hours_ahead_of_osv": -1.39, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T16:53:13Z" }, { "id": "jest-test-plugin-utils-2026-06-16", "display_name": "jest-test-plugin-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "jest-test-plugin-utils", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2", "1.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-5896", "osv_published_at": "2026-06-16T15:37:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T16:52:28Z", "osv_earliest_published_at": "2026-06-16T15:37:20Z", "hours_ahead_of_osv": -1.25, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T16:53:09Z" }, { "id": "easyllmai-2026-06-16", "display_name": "easyllmai", "campaign": null, "detection_source": "osv", "packages": [ { "package": "easyllmai", "ecosystem": "npm", "versions": [ "3.0.1", "4.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5895", "osv_published_at": "2026-06-16T16:01:58Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T16:52:27Z", "osv_earliest_published_at": "2026-06-16T16:01:58Z", "hours_ahead_of_osv": -0.84, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T16:53:05Z" }, { "id": "create-vercel-integration-2026-06-16", "display_name": "create-vercel-integration", "campaign": null, "detection_source": "osv", "packages": [ { "package": "create-vercel-integration", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5894", "osv_published_at": "2026-06-16T15:27:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T16:52:26Z", "osv_earliest_published_at": "2026-06-16T15:27:53Z", "hours_ahead_of_osv": -1.41, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T16:53:01Z" }, { "id": "claude-jar-2026-06-16", "display_name": "claude-jar", "campaign": null, "detection_source": "osv", "packages": [ { "package": "claude-jar", "ecosystem": "npm", "versions": [ "0.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5893", "osv_published_at": "2026-06-16T14:51:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T16:52:25Z", "osv_earliest_published_at": "2026-06-16T14:51:36Z", "hours_ahead_of_osv": -2.01, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T16:52:57Z" }, { "id": "caspian-day-js-2026-06-16", "display_name": "caspian-day-js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "caspian-day-js", "ecosystem": "npm", "versions": [ "1.11.23" ], "osv_entries": [ { "osv_id": "MAL-2026-5892", "osv_published_at": "2026-06-16T16:01:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T16:52:25Z", "osv_earliest_published_at": "2026-06-16T16:01:36Z", "hours_ahead_of_osv": -0.85, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T16:52:53Z" }, { "id": "dsft-ft-utils-2026-06-16", "display_name": "@dsft/ft-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@dsft/ft-utils", "ecosystem": "npm", "versions": [ "1.5.8" ], "osv_entries": [ { "osv_id": "MAL-2026-5890", "osv_published_at": "2026-06-16T15:27:24Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T16:52:24Z", "osv_earliest_published_at": "2026-06-16T15:27:24Z", "hours_ahead_of_osv": -1.42, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T16:52:45Z" }, { "id": "atlassian-forge-skills-2026-06-16", "display_name": "atlassian-forge-skills", "campaign": null, "detection_source": "osv", "packages": [ { "package": "atlassian-forge-skills", "ecosystem": "npm", "versions": [ "29.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5891", "osv_published_at": "2026-06-16T14:52:14Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T16:52:24Z", "osv_earliest_published_at": "2026-06-16T14:52:14Z", "hours_ahead_of_osv": -2.0, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T16:52:49Z" }, { "id": "wordpad-text-ui-2026-06-16", "display_name": "wordpad-text-ui", "campaign": null, "detection_source": "osv", "packages": [ { "package": "wordpad-text-ui", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5885", "osv_published_at": "2026-06-16T14:02:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T16:52:23Z", "osv_earliest_published_at": "2026-06-16T14:02:23Z", "hours_ahead_of_osv": -2.83, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T16:52:36Z" }, { "id": "dsft-ft-element-2026-06-16", "display_name": "@dsft/ft-element", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@dsft/ft-element", "ecosystem": "npm", "versions": [ "2.5.9" ], "osv_entries": [ { "osv_id": "MAL-2026-5889", "osv_published_at": "2026-06-16T15:27:18Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T16:52:23Z", "osv_earliest_published_at": "2026-06-16T15:27:18Z", "hours_ahead_of_osv": -1.42, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T16:52:41Z" }, { "id": "vortnode-2026-06-16", "display_name": "vortnode", "campaign": null, "detection_source": "osv", "packages": [ { "package": "vortnode", "ecosystem": "npm", "versions": [ "1.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5884", "osv_published_at": "2026-06-16T14:04:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T16:52:22Z", "osv_earliest_published_at": "2026-06-16T14:04:12Z", "hours_ahead_of_osv": -2.8, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T16:52:32Z" }, { "id": "tailwind-typography-style-2026-06-16", "display_name": "tailwind-typography-style", "campaign": null, "detection_source": "osv", "packages": [ { "package": "tailwind-typography-style", "ecosystem": "npm", "versions": [ "0.5.8" ], "osv_entries": [ { "osv_id": "MAL-2026-5854", "osv_published_at": "2026-06-16T00:29:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T16:52:21Z", "osv_earliest_published_at": "2026-06-16T00:29:23Z", "hours_ahead_of_osv": -16.38, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T16:52:25Z" }, { "id": "temp-development-package-test-2026-06-16", "display_name": "temp-development-package-test", "campaign": null, "detection_source": "osv", "packages": [ { "package": "temp-development-package-test", "ecosystem": "pypi", "versions": [ "0.1", "0.2", "0.3", "0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-5876", "osv_published_at": "2026-06-16T09:48:43Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T16:51:34Z", "osv_earliest_published_at": "2026-06-16T09:48:43Z", "hours_ahead_of_osv": -7.05, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T16:51:44Z" }, { "id": "cache-compat-utils-2026-06-16", "display_name": "cache-compat-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cache-compat-utils", "ecosystem": "pypi", "versions": [ "0.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5878", "osv_published_at": "2026-06-16T10:59:10Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T16:51:34Z", "osv_earliest_published_at": "2026-06-16T10:59:10Z", "hours_ahead_of_osv": -5.87, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T16:51:48Z" }, { "id": "myfirstpackagetestaaa-2026-06-16", "display_name": "myfirstpackagetestaaa", "campaign": null, "detection_source": "osv", "packages": [ { "package": "myfirstpackagetestaaa", "ecosystem": "pypi", "versions": [ "2.26" ], "osv_entries": [ { "osv_id": "MAL-2026-5875", "osv_published_at": "2026-06-16T08:58:11Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T16:51:32Z", "osv_earliest_published_at": "2026-06-16T08:58:11Z", "hours_ahead_of_osv": -7.89, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T16:51:40Z" }, { "id": "aaaazzzzaz-2026-06-16", "display_name": "aaaazzzzaz", "campaign": null, "detection_source": "osv", "packages": [ { "package": "aaaazzzzaz", "ecosystem": "pypi", "versions": [ "2.26" ], "osv_entries": [ { "osv_id": "MAL-2026-5874", "osv_published_at": "2026-06-16T08:47:09Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T16:51:31Z", "osv_earliest_published_at": "2026-06-16T08:47:09Z", "hours_ahead_of_osv": -8.07, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T16:51:36Z" }, { "id": "vitest-pro-2026-06-16", "display_name": "vitest-pro", "campaign": null, "detection_source": "osv", "packages": [ { "package": "vitest-pro", "ecosystem": "npm", "versions": [ "7.0.5", "7.0.6" ], "osv_entries": [ { "osv_id": "MAL-2026-5862", "osv_published_at": "2026-06-16T03:02:30Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T10:16:09Z", "osv_earliest_published_at": "2026-06-16T03:02:30Z", "hours_ahead_of_osv": -7.23, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T23:04:58Z" }, { "id": "ts-internal-shared-lib-2026-06-16", "display_name": "@ts-internal/shared-lib", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@ts-internal/shared-lib", "ecosystem": "npm", "versions": [ "9.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-5863", "osv_published_at": "2026-06-16T04:24:55Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T10:16:09Z", "osv_earliest_published_at": "2026-06-16T04:24:55Z", "hours_ahead_of_osv": -5.85, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T10:16:22Z" }, { "id": "solana-mev-bot-2026-06-16", "display_name": "solana-mev-bot", "campaign": null, "detection_source": "osv", "packages": [ { "package": "solana-mev-bot", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5861", "osv_published_at": "2026-06-16T03:00:10Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T10:16:08Z", "osv_earliest_published_at": "2026-06-16T03:00:10Z", "hours_ahead_of_osv": -7.27, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T10:16:14Z" }, { "id": "solana-js-client-2026-06-16", "display_name": "solana-js-client", "campaign": null, "detection_source": "osv", "packages": [ { "package": "solana-js-client", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5860", "osv_published_at": "2026-06-16T03:01:18Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T10:16:08Z", "osv_earliest_published_at": "2026-06-16T03:01:18Z", "hours_ahead_of_osv": -7.25, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T10:16:10Z" }, { "id": "datacamp-light-2026-06-16", "display_name": "datacamp-light", "campaign": null, "detection_source": "osv", "packages": [ { "package": "datacamp-light", "ecosystem": "pypi", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5868", "osv_published_at": "2026-06-16T07:37:14Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T10:15:26Z", "osv_earliest_published_at": "2026-06-16T07:37:14Z", "hours_ahead_of_osv": -2.64, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T10:15:27Z" }, { "id": "tn-advertisement-2026-06-16", "display_name": "tn-advertisement", "campaign": null, "detection_source": "osv", "packages": [ { "package": "tn-advertisement", "ecosystem": "npm", "versions": [ "5.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5838", "osv_published_at": "2026-06-15T20:42:44Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T02:35:53Z", "osv_earliest_published_at": "2026-06-15T20:42:44Z", "hours_ahead_of_osv": -5.89, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T02:36:58Z" }, { "id": "postcss-minify-selector-2026-06-16", "display_name": "postcss-minify-selector", "campaign": null, "detection_source": "osv", "packages": [ { "package": "postcss-minify-selector", "ecosystem": "npm", "versions": [ "0.1.2", "0.1.3", "2.0.1", "2.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5837", "osv_published_at": "2026-06-15T20:17:18Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T02:35:53Z", "osv_earliest_published_at": "2026-06-15T20:17:18Z", "hours_ahead_of_osv": -6.31, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T02:36:55Z" }, { "id": "nic-datagov-2026-06-16", "display_name": "nic-datagov", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nic-datagov", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5836", "osv_published_at": "2026-06-15T20:31:19Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T02:35:52Z", "osv_earliest_published_at": "2026-06-15T20:31:19Z", "hours_ahead_of_osv": -6.08, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T02:36:51Z" }, { "id": "wacrot-infra-data-kit-2026-06-16", "display_name": "@wacrot/infra-data-kit", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@wacrot/infra-data-kit", "ecosystem": "npm", "versions": [ "2.0.6", "2.0.7", "2.0.8", "2.0.9", "2.1.0", "2.1.1", "2.1.2", "2.1.4" ], "osv_entries": [ { "osv_id": "MAL-2026-5834", "osv_published_at": "2026-06-15T20:55:15Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T02:35:51Z", "osv_earliest_published_at": "2026-06-15T20:55:15Z", "hours_ahead_of_osv": -5.68, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T02:36:44Z" }, { "id": "lab-helper-2026-06-16", "display_name": "lab-helper", "campaign": null, "detection_source": "osv", "packages": [ { "package": "lab-helper", "ecosystem": "npm", "versions": [ "0.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-5835", "osv_published_at": "2026-06-15T21:03:46Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T02:35:51Z", "osv_earliest_published_at": "2026-06-15T21:03:46Z", "hours_ahead_of_osv": -5.53, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T02:36:48Z" }, { "id": "yunxin-overmind-comment-2026-06-16", "display_name": "yunxin-overmind-comment", "campaign": null, "detection_source": "osv", "packages": [ { "package": "yunxin-overmind-comment", "ecosystem": "npm", "versions": [ "1.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5833", "osv_published_at": "2026-06-15T20:11:26Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T02:35:47Z", "osv_earliest_published_at": "2026-06-15T20:11:26Z", "hours_ahead_of_osv": -6.41, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T02:36:40Z" }, { "id": "vend-utilities-2026-06-16", "display_name": "vend-utilities", "campaign": null, "detection_source": "osv", "packages": [ { "package": "vend-utilities", "ecosystem": "npm", "versions": [ "14.12.11" ], "osv_entries": [ { "osv_id": "MAL-2026-5832", "osv_published_at": "2026-06-15T19:24:31Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T02:35:47Z", "osv_earliest_published_at": "2026-06-15T19:24:31Z", "hours_ahead_of_osv": -7.19, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T02:36:37Z" }, { "id": "unicocheck-ios-2026-06-16", "display_name": "unicocheck-ios", "campaign": null, "detection_source": "osv", "packages": [ { "package": "unicocheck-ios", "ecosystem": "npm", "versions": [ "9.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-5831", "osv_published_at": "2026-06-15T19:59:10Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T02:35:46Z", "osv_earliest_published_at": "2026-06-15T19:59:10Z", "hours_ahead_of_osv": -6.61, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T02:36:33Z" }, { "id": "unico-check-2026-06-16", "display_name": "unico-check", "campaign": null, "detection_source": "osv", "packages": [ { "package": "unico-check", "ecosystem": "npm", "versions": [ "9.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-5830", "osv_published_at": "2026-06-15T19:59:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T02:35:46Z", "osv_earliest_published_at": "2026-06-15T19:59:40Z", "hours_ahead_of_osv": -6.6, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T02:36:30Z" }, { "id": "unico-android-2026-06-16", "display_name": "unico-android", "campaign": null, "detection_source": "osv", "packages": [ { "package": "unico-android", "ecosystem": "npm", "versions": [ "9.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-5829", "osv_published_at": "2026-06-15T19:59:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T02:35:46Z", "osv_earliest_published_at": "2026-06-15T19:59:36Z", "hours_ahead_of_osv": -6.6, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T02:36:27Z" }, { "id": "ogd-platform-2026-06-16", "display_name": "ogd-platform", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ogd-platform", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5828", "osv_published_at": "2026-06-15T20:08:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T02:35:45Z", "osv_earliest_published_at": "2026-06-15T20:08:22Z", "hours_ahead_of_osv": -6.46, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T02:36:23Z" }, { "id": "index-ulid-2026-06-16", "display_name": "index-ulid", "campaign": null, "detection_source": "osv", "packages": [ { "package": "index-ulid", "ecosystem": "npm", "versions": [ "3.0.3", "3.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-5827", "osv_published_at": "2026-06-15T20:08:59Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T02:35:44Z", "osv_earliest_published_at": "2026-06-15T20:08:59Z", "hours_ahead_of_osv": -6.45, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T02:36:19Z" }, { "id": "intentsolution-database-security-scanner-2026-06-16", "display_name": "@intentsolution/database-security-scanner", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@intentsolution/database-security-scanner", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5825", "osv_published_at": "2026-06-15T20:09:28Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T02:35:43Z", "osv_earliest_published_at": "2026-06-15T20:09:28Z", "hours_ahead_of_osv": -6.44, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T02:36:12Z" }, { "id": "dms-backend-2026-06-16", "display_name": "dms-backend", "campaign": null, "detection_source": "osv", "packages": [ { "package": "dms-backend", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5826", "osv_published_at": "2026-06-15T20:08:26Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T02:35:43Z", "osv_earliest_published_at": "2026-06-15T20:08:26Z", "hours_ahead_of_osv": -6.45, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T02:36:15Z" }, { "id": "chai-web3-testkit-2026-06-16", "display_name": "chai-web3-testkit", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-web3-testkit", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5699", "osv_published_at": "2026-06-12T16:11:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T02:35:37Z", "osv_earliest_published_at": "2026-06-12T16:11:50Z", "hours_ahead_of_osv": -82.4, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T02:35:59Z" }, { "id": "axiosqqq-2026-06-16", "display_name": "axiosqqq", "campaign": null, "detection_source": "osv", "packages": [ { "package": "axiosqqq", "ecosystem": "npm", "versions": [ "1.16.13", "1.16.3", "1.16.9" ], "osv_entries": [ { "osv_id": "MAL-2026-4493", "osv_published_at": "2026-05-20T04:16:47Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T02:35:30Z", "osv_earliest_published_at": "2026-05-20T04:16:47Z", "hours_ahead_of_osv": -646.31, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-18T21:51:37Z" }, { "id": "dotenv-express-2026-06-16", "display_name": "dotenv-express", "campaign": null, "detection_source": "osv", "packages": [ { "package": "dotenv-express", "ecosystem": "npm", "versions": [ "17.4.3", "17.4.4", "17.4.5" ], "osv_entries": [ { "osv_id": "MAL-2026-2350", "osv_published_at": "2026-03-24T15:43:15Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T02:35:28Z", "osv_earliest_published_at": "2026-03-24T15:43:15Z", "hours_ahead_of_osv": -2002.87, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T02:35:28Z" }, { "id": "twrap-toolkit-2026-06-16", "display_name": "twrap-toolkit", "campaign": null, "detection_source": "osv", "packages": [ { "package": "twrap-toolkit", "ecosystem": "pypi", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5841", "osv_published_at": "2026-06-15T21:52:02Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T02:34:46Z", "osv_earliest_published_at": "2026-06-15T21:52:02Z", "hours_ahead_of_osv": -4.71, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T02:34:55Z" }, { "id": "testpackagemanyhttpsgo-2026-06-16", "display_name": "testpackagemanyhttpsgo", "campaign": null, "detection_source": "osv", "packages": [ { "package": "testpackagemanyhttpsgo", "ecosystem": "pypi", "versions": [ "2.26" ], "osv_entries": [ { "osv_id": "MAL-2026-5840", "osv_published_at": "2026-06-15T22:00:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T02:34:45Z", "osv_earliest_published_at": "2026-06-15T22:00:38Z", "hours_ahead_of_osv": -4.57, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T02:34:52Z" }, { "id": "cipherflow-2026-06-16", "display_name": "cipherflow", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cipherflow", "ecosystem": "pypi", "versions": [ "0.1.0", "0.1.1", "0.1.2", "0.1.3" ], "osv_entries": [ { "osv_id": "MAL-2026-5839", "osv_published_at": "2026-06-15T21:36:32Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-16T02:34:45Z", "osv_earliest_published_at": "2026-06-15T21:36:32Z", "hours_ahead_of_osv": -4.97, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T02:34:48Z" }, { "id": "surf-lending-2026-06-15", "display_name": "surf-lending", "campaign": null, "detection_source": "osv", "packages": [ { "package": "surf-lending", "ecosystem": "npm", "versions": [ "9.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-5808", "osv_published_at": "2026-06-15T17:23:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T20:24:57Z", "osv_earliest_published_at": "2026-06-15T17:23:40Z", "hours_ahead_of_osv": -3.02, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T20:24:59Z" }, { "id": "sam-package-2026-06-15", "display_name": "sam-package", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sam-package", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2", "1.0.3", "1.0.4", "1.0.5", "1.0.6", "1.0.7", "1.0.8", "1.0.9", "1.1.0", "1.1.1", "1.1.2", "1.1.3", "1.1.4", "1.1.6", "1.1.8", "1.1.9", "1.2.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5807", "osv_published_at": "2026-06-15T17:27:01Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T20:24:55Z", "osv_earliest_published_at": "2026-06-15T15:50:39Z", "hours_ahead_of_osv": -4.57, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-18T11:15:33Z" }, { "id": "flowdefi-2026-06-15", "display_name": "flowdefi", "campaign": null, "detection_source": "osv", "packages": [ { "package": "flowdefi", "ecosystem": "npm", "versions": [ "9.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-5806", "osv_published_at": "2026-06-15T17:23:54Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T20:24:39Z", "osv_earliest_published_at": "2026-06-15T17:23:54Z", "hours_ahead_of_osv": -3.01, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T20:24:51Z" }, { "id": "flowcardano-2026-06-15", "display_name": "flowcardano", "campaign": null, "detection_source": "osv", "packages": [ { "package": "flowcardano", "ecosystem": "npm", "versions": [ "9.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-5805", "osv_published_at": "2026-06-15T17:23:30Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T20:24:37Z", "osv_earliest_published_at": "2026-06-15T17:23:30Z", "hours_ahead_of_osv": -3.02, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T20:24:47Z" }, { "id": "flow-lending-sdk-2026-06-15", "display_name": "flow-lending-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "flow-lending-sdk", "ecosystem": "npm", "versions": [ "9.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-5804", "osv_published_at": "2026-06-15T17:23:59Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T20:24:35Z", "osv_earliest_published_at": "2026-06-15T17:23:59Z", "hours_ahead_of_osv": -3.01, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T20:24:43Z" }, { "id": "flow-lending-2026-06-15", "display_name": "flow-lending", "campaign": null, "detection_source": "osv", "packages": [ { "package": "flow-lending", "ecosystem": "npm", "versions": [ "9.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-5803", "osv_published_at": "2026-06-15T17:24:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T20:24:33Z", "osv_earliest_published_at": "2026-06-15T17:24:05Z", "hours_ahead_of_osv": -3.01, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T20:24:39Z" }, { "id": "cardano-addresses-docs-2026-06-15", "display_name": "cardano-addresses-docs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cardano-addresses-docs", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5802", "osv_published_at": "2026-06-15T18:26:01Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T20:24:31Z", "osv_earliest_published_at": "2026-06-15T18:26:01Z", "hours_ahead_of_osv": -1.98, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T20:24:35Z" }, { "id": "bodega-sdk-2026-06-15", "display_name": "bodega-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bodega-sdk", "ecosystem": "npm", "versions": [ "9.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-5801", "osv_published_at": "2026-06-15T17:23:32Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T20:24:29Z", "osv_earliest_published_at": "2026-06-15T17:23:32Z", "hours_ahead_of_osv": -3.02, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T20:24:31Z" }, { "id": "boardstep-2026-06-15", "display_name": "boardstep", "campaign": null, "detection_source": "osv", "packages": [ { "package": "boardstep", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.5", "1.0.7", "1.0.9", "1.1.0", "1.1.2", "1.1.3", "1.1.4" ], "osv_entries": [ { "osv_id": "MAL-2026-5800", "osv_published_at": "2026-06-15T17:30:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T20:24:27Z", "osv_earliest_published_at": "2026-06-15T17:30:40Z", "hours_ahead_of_osv": -2.9, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T20:24:27Z" }, { "id": "boardflow-2026-06-15", "display_name": "boardflow", "campaign": null, "detection_source": "osv", "packages": [ { "package": "boardflow", "ecosystem": "npm", "versions": [ "1.1.4", "1.1.5", "1.1.6", "1.1.7", "1.1.8", "1.1.9", "1.2.0", "1.2.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5799", "osv_published_at": "2026-06-15T17:30:59Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T20:24:09Z", "osv_earliest_published_at": "2026-06-15T17:30:59Z", "hours_ahead_of_osv": -2.89, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T02:36:05Z" }, { "id": "resolvx-core-2026-06-15", "display_name": "@resolvx/core", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@resolvx/core", "ecosystem": "npm", "versions": [ "1.0.0", "2.4.1", "2.4.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5798", "osv_published_at": "2026-06-15T18:00:19Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T20:24:05Z", "osv_earliest_published_at": "2026-06-15T18:00:19Z", "hours_ahead_of_osv": -2.4, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T20:24:10Z" }, { "id": "neural-network-scan-2026-06-15", "display_name": "neural-network-scan", "campaign": null, "detection_source": "osv", "packages": [ { "package": "neural-network-scan", "ecosystem": "npm", "versions": [ "1.0.1", "1.0.2", "1.0.8", "1.0.9" ], "osv_entries": [ { "osv_id": "MAL-2026-5794", "osv_published_at": "2026-06-15T16:22:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T20:23:59Z", "osv_earliest_published_at": "2026-06-15T16:22:20Z", "hours_ahead_of_osv": -4.03, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T20:24:06Z" }, { "id": "nativescript-swisspost-pcc-creative-editor-2026-06-15", "display_name": "nativescript-swisspost-pcc-creative-editor", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nativescript-swisspost-pcc-creative-editor", "ecosystem": "npm", "versions": [ "54.16.3" ], "osv_entries": [ { "osv_id": "MAL-2026-5793", "osv_published_at": "2026-06-15T15:54:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T20:23:51Z", "osv_earliest_published_at": "2026-06-15T15:54:05Z", "hours_ahead_of_osv": -4.5, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T20:24:03Z" }, { "id": "nativescript-swisspost-imagepicker-2026-06-15", "display_name": "nativescript-swisspost-imagepicker", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nativescript-swisspost-imagepicker", "ecosystem": "npm", "versions": [ "52.31.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5792", "osv_published_at": "2026-06-15T15:54:11Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T20:23:49Z", "osv_earliest_published_at": "2026-06-15T15:54:11Z", "hours_ahead_of_osv": -4.49, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T20:23:58Z" }, { "id": "mddriver-2026-06-15", "display_name": "mddriver", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mddriver", "ecosystem": "npm", "versions": [ "1.8.2", "1.8.3", "1.8.4", "1.8.5", "1.8.6" ], "osv_entries": [ { "osv_id": "MAL-2026-5791", "osv_published_at": "2026-06-15T16:31:14Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T20:23:47Z", "osv_earliest_published_at": "2026-06-15T16:31:14Z", "hours_ahead_of_osv": -3.88, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T20:23:54Z" }, { "id": "ldpbootstrap-jquery-2026-06-15", "display_name": "ldpbootstrap-jquery", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ldpbootstrap-jquery", "ecosystem": "npm", "versions": [ "1.0.10", "1.0.11", "1.0.13", "1.0.15", "1.0.9" ], "osv_entries": [ { "osv_id": "MAL-2026-5790", "osv_published_at": "2026-06-15T15:53:31Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T20:23:37Z", "osv_earliest_published_at": "2026-06-15T15:53:31Z", "hours_ahead_of_osv": -4.5, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T20:23:50Z" }, { "id": "claude-cup-2026-06-15", "display_name": "claude-cup", "campaign": null, "detection_source": "osv", "packages": [ { "package": "claude-cup", "ecosystem": "npm", "versions": [ "0.2.0", "0.2.2", "0.2.3", "0.2.4", "0.3.0", "0.3.1", "0.4.0", "0.4.1", "0.7.0", "0.7.2", "0.7.3", "0.7.4", "0.7.5", "0.7.6", "0.8.1", "0.8.3", "0.8.4", "0.8.7" ], "osv_entries": [ { "osv_id": "MAL-2026-5789", "osv_published_at": "2026-06-15T16:45:04Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T20:23:27Z", "osv_earliest_published_at": "2026-06-15T16:45:04Z", "hours_ahead_of_osv": -3.64, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-18T21:51:53Z" }, { "id": "solana-labs-web3js-2026-06-15", "display_name": "@solana-labs/web3js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@solana-labs/web3js", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.10", "1.0.5", "1.0.6", "1.0.7", "1.0.8" ], "osv_entries": [ { "osv_id": "MAL-2026-5788", "osv_published_at": "2026-06-15T17:15:14Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T20:22:59Z", "osv_earliest_published_at": "2026-06-15T17:15:14Z", "hours_ahead_of_osv": -3.13, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T20:23:42Z" }, { "id": "solana-labs-spl-toke-2026-06-15", "display_name": "@solana-labs/spl-toke", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@solana-labs/spl-toke", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.10", "1.0.5", "1.0.6", "1.0.7", "1.0.8", "1.98.111", "1.98.112" ], "osv_entries": [ { "osv_id": "MAL-2026-5787", "osv_published_at": "2026-06-15T17:15:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T20:22:47Z", "osv_earliest_published_at": "2026-06-15T17:15:36Z", "hours_ahead_of_osv": -3.12, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T20:23:38Z" }, { "id": "solana-labs-ancor-2026-06-15", "display_name": "@solana-labs/ancor", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@solana-labs/ancor", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.11", "1.0.7", "1.0.8", "1.0.9" ], "osv_entries": [ { "osv_id": "MAL-2026-5786", "osv_published_at": "2026-06-15T17:17:17Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T20:22:35Z", "osv_earliest_published_at": "2026-06-15T17:17:17Z", "hours_ahead_of_osv": -3.09, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T20:23:33Z" }, { "id": "ve-hemi-rewards-2026-06-15", "display_name": "ve-hemi-rewards", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ve-hemi-rewards", "ecosystem": "npm", "versions": [ "999.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5785", "osv_published_at": "2026-06-15T15:09:15Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T20:22:32Z", "osv_earliest_published_at": "2026-06-15T15:09:15Z", "hours_ahead_of_osv": -5.22, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T20:23:30Z" }, { "id": "vaults-monitor-cron-2026-06-15", "display_name": "vaults-monitor-cron", "campaign": null, "detection_source": "osv", "packages": [ { "package": "vaults-monitor-cron", "ecosystem": "npm", "versions": [ "999.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5784", "osv_published_at": "2026-06-15T15:09:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T20:22:31Z", "osv_earliest_published_at": "2026-06-15T15:09:40Z", "hours_ahead_of_osv": -5.21, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T20:23:26Z" }, { "id": "vault-strategies-2026-06-15", "display_name": "vault-strategies", "campaign": null, "detection_source": "osv", "packages": [ { "package": "vault-strategies", "ecosystem": "npm", "versions": [ "999.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5783", "osv_published_at": "2026-06-15T15:09:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T20:22:31Z", "osv_earliest_published_at": "2026-06-15T15:09:23Z", "hours_ahead_of_osv": -5.22, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T20:23:22Z" }, { "id": "token-prices-cron-2026-06-15", "display_name": "token-prices-cron", "campaign": null, "detection_source": "osv", "packages": [ { "package": "token-prices-cron", "ecosystem": "npm", "versions": [ "999.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5782", "osv_published_at": "2026-06-15T15:09:45Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T20:22:30Z", "osv_earliest_published_at": "2026-06-15T15:09:45Z", "hours_ahead_of_osv": -5.21, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T20:23:18Z" }, { "id": "portal-backend-2026-06-15", "display_name": "portal-backend", "campaign": null, "detection_source": "osv", "packages": [ { "package": "portal-backend", "ecosystem": "npm", "versions": [ "999.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5781", "osv_published_at": "2026-06-15T15:10:14Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T20:22:30Z", "osv_earliest_published_at": "2026-06-15T15:10:14Z", "hours_ahead_of_osv": -5.2, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T20:23:13Z" }, { "id": "ing-feat-itsme-oidc-authentication-2026-06-15", "display_name": "ing-feat-itsme-oidc-authentication", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ing-feat-itsme-oidc-authentication", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-5780", "osv_published_at": "2026-06-15T15:10:24Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T20:22:30Z", "osv_earliest_published_at": "2026-06-15T15:10:24Z", "hours_ahead_of_osv": -5.2, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T20:23:09Z" }, { "id": "hemi-supply-cron-2026-06-15", "display_name": "hemi-supply-cron", "campaign": null, "detection_source": "osv", "packages": [ { "package": "hemi-supply-cron", "ecosystem": "npm", "versions": [ "999.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5779", "osv_published_at": "2026-06-15T15:09:34Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T20:22:29Z", "osv_earliest_published_at": "2026-06-15T15:09:34Z", "hours_ahead_of_osv": -5.22, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T20:23:05Z" }, { "id": "hemi-earn-actions-2026-06-15", "display_name": "hemi-earn-actions", "campaign": null, "detection_source": "osv", "packages": [ { "package": "hemi-earn-actions", "ecosystem": "npm", "versions": [ "999.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5778", "osv_published_at": "2026-06-15T15:09:30Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T20:22:29Z", "osv_earliest_published_at": "2026-06-15T15:09:30Z", "hours_ahead_of_osv": -5.22, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T20:23:01Z" }, { "id": "field-plus-2026-06-15", "display_name": "field-plus", "campaign": null, "detection_source": "osv", "packages": [ { "package": "field-plus", "ecosystem": "npm", "versions": [ "99.99.1", "99.99.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5777", "osv_published_at": "2026-06-15T15:10:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T20:22:28Z", "osv_earliest_published_at": "2026-06-15T15:10:39Z", "hours_ahead_of_osv": -5.2, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T20:22:57Z" }, { "id": "testpgagent-2026-06-15", "display_name": "testpgagent", "campaign": null, "detection_source": "osv", "packages": [ { "package": "testpgagent", "ecosystem": "pypi", "versions": [ "0.1", "0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5824", "osv_published_at": "2026-06-15T17:24:46Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T20:21:39Z", "osv_earliest_published_at": "2026-06-15T17:24:46Z", "hours_ahead_of_osv": -2.95, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T20:22:40Z" }, { "id": "sl-pgp-2026-06-15", "display_name": "sl-pgp", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sl-pgp", "ecosystem": "pypi", "versions": [ "2.2160.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5823", "osv_published_at": "2026-06-15T17:37:34Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T20:21:38Z", "osv_earliest_published_at": "2026-06-15T17:37:34Z", "hours_ahead_of_osv": -2.73, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T20:22:36Z" }, { "id": "scriptworker-client-2026-06-15", "display_name": "scriptworker-client", "campaign": null, "detection_source": "osv", "packages": [ { "package": "scriptworker-client", "ecosystem": "pypi", "versions": [ "2.2160.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5822", "osv_published_at": "2026-06-15T17:36:19Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T20:21:38Z", "osv_earliest_published_at": "2026-06-15T17:36:19Z", "hours_ahead_of_osv": -2.76, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T20:22:32Z" }, { "id": "pyptllm-2026-06-15", "display_name": "pyptllm", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pyptllm", "ecosystem": "pypi", "versions": [ "0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5821", "osv_published_at": "2026-06-15T17:32:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T20:21:38Z", "osv_earliest_published_at": "2026-06-15T17:32:39Z", "hours_ahead_of_osv": -2.82, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T20:22:28Z" }, { "id": "node-scraper-2026-06-15", "display_name": "node-scraper", "campaign": null, "detection_source": "osv", "packages": [ { "package": "node-scraper", "ecosystem": "pypi", "versions": [ "2.2160.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5820", "osv_published_at": "2026-06-15T17:39:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T20:21:37Z", "osv_earliest_published_at": "2026-06-15T17:39:42Z", "hours_ahead_of_osv": -2.7, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T20:22:24Z" }, { "id": "mozautomation-2026-06-15", "display_name": "mozautomation", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mozautomation", "ecosystem": "pypi", "versions": [ "2.2160.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5819", "osv_published_at": "2026-06-15T17:36:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T20:21:37Z", "osv_earliest_published_at": "2026-06-15T17:36:23Z", "hours_ahead_of_osv": -2.75, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T20:22:20Z" }, { "id": "mlir-aie-2026-06-15", "display_name": "mlir-aie", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mlir-aie", "ecosystem": "pypi", "versions": [ "2.2160.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5818", "osv_published_at": "2026-06-15T17:37:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T20:21:36Z", "osv_earliest_published_at": "2026-06-15T17:37:48Z", "hours_ahead_of_osv": -2.73, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T20:22:17Z" }, { "id": "merino-common-2026-06-15", "display_name": "merino-common", "campaign": null, "detection_source": "osv", "packages": [ { "package": "merino-common", "ecosystem": "pypi", "versions": [ "2.2160.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5817", "osv_published_at": "2026-06-15T17:39:45Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T20:21:36Z", "osv_earliest_published_at": "2026-06-15T17:39:45Z", "hours_ahead_of_osv": -2.7, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T20:22:13Z" }, { "id": "llvm-aie-2026-06-15", "display_name": "llvm-aie", "campaign": null, "detection_source": "osv", "packages": [ { "package": "llvm-aie", "ecosystem": "pypi", "versions": [ "2.2160.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5816", "osv_published_at": "2026-06-15T17:39:28Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T20:21:35Z", "osv_earliest_published_at": "2026-06-15T17:39:28Z", "hours_ahead_of_osv": -2.7, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T20:22:09Z" }, { "id": "kinto-slack-2026-06-15", "display_name": "kinto-slack", "campaign": null, "detection_source": "osv", "packages": [ { "package": "kinto-slack", "ecosystem": "pypi", "versions": [ "2.2160.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5815", "osv_published_at": "2026-06-15T17:36:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T20:21:35Z", "osv_earliest_published_at": "2026-06-15T17:36:49Z", "hours_ahead_of_osv": -2.75, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T20:22:05Z" }, { "id": "intel-ai-safety-explainer-2026-06-15", "display_name": "intel-ai-safety-explainer", "campaign": null, "detection_source": "osv", "packages": [ { "package": "intel-ai-safety-explainer", "ecosystem": "pypi", "versions": [ "2.2160.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5814", "osv_published_at": "2026-06-15T17:40:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T20:21:35Z", "osv_earliest_published_at": "2026-06-15T17:40:21Z", "hours_ahead_of_osv": -2.69, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T20:22:01Z" }, { "id": "intel-ai-safety-2026-06-15", "display_name": "intel-ai-safety", "campaign": null, "detection_source": "osv", "packages": [ { "package": "intel-ai-safety", "ecosystem": "pypi", "versions": [ "0.0.0", "2.2160.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5813", "osv_published_at": "2026-06-15T17:37:45Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T20:21:34Z", "osv_earliest_published_at": "2026-06-15T17:37:45Z", "hours_ahead_of_osv": -2.73, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T20:21:58Z" }, { "id": "hello-test-s1-2026-06-15", "display_name": "hello-test-s1", "campaign": null, "detection_source": "osv", "packages": [ { "package": "hello-test-s1", "ecosystem": "pypi", "versions": [ "0.1.0", "0.3.0", "0.3.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5812", "osv_published_at": "2026-06-15T17:39:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T20:21:32Z", "osv_earliest_published_at": "2026-06-15T17:39:49Z", "hours_ahead_of_osv": -2.7, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T20:21:54Z" }, { "id": "gigl-core-2026-06-15", "display_name": "gigl-core", "campaign": null, "detection_source": "osv", "packages": [ { "package": "gigl-core", "ecosystem": "pypi", "versions": [ "0.3.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5811", "osv_published_at": "2026-06-15T17:38:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T20:21:31Z", "osv_earliest_published_at": "2026-06-15T17:38:36Z", "hours_ahead_of_osv": -2.72, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T20:21:50Z" }, { "id": "dispatch-internal-plugins-2026-06-15", "display_name": "dispatch-internal-plugins", "campaign": null, "detection_source": "osv", "packages": [ { "package": "dispatch-internal-plugins", "ecosystem": "pypi", "versions": [ "2.2160.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5810", "osv_published_at": "2026-06-15T17:39:31Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T20:21:30Z", "osv_earliest_published_at": "2026-06-15T17:39:31Z", "hours_ahead_of_osv": -2.7, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T20:21:46Z" }, { "id": "databricks-tools-core-2026-06-15", "display_name": "databricks-tools-core", "campaign": null, "detection_source": "osv", "packages": [ { "package": "databricks-tools-core", "ecosystem": "pypi", "versions": [ "2.2160.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5809", "osv_published_at": "2026-06-15T17:38:32Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T20:21:30Z", "osv_earliest_published_at": "2026-06-15T17:38:32Z", "hours_ahead_of_osv": -2.72, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T20:21:42Z" }, { "id": "neurodrift-2026-06-15", "display_name": "neurodrift", "campaign": null, "detection_source": "osv", "packages": [ { "package": "neurodrift", "ecosystem": "pypi", "versions": [ "1.21" ], "osv_entries": [ { "osv_id": "MAL-2026-5797", "osv_published_at": "2026-06-15T16:23:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T20:21:29Z", "osv_earliest_published_at": "2026-06-15T16:23:21Z", "hours_ahead_of_osv": -3.97, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T20:21:38Z" }, { "id": "llmfree-2026-06-15", "display_name": "llmfree", "campaign": null, "detection_source": "osv", "packages": [ { "package": "llmfree", "ecosystem": "pypi", "versions": [ "2.21" ], "osv_entries": [ { "osv_id": "MAL-2026-5796", "osv_published_at": "2026-06-15T16:17:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T20:21:29Z", "osv_earliest_published_at": "2026-06-15T16:17:20Z", "hours_ahead_of_osv": -4.07, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T20:21:34Z" }, { "id": "gptminifast-2026-06-15", "display_name": "gptminifast", "campaign": null, "detection_source": "osv", "packages": [ { "package": "gptminifast", "ecosystem": "pypi", "versions": [ "2.21" ], "osv_entries": [ { "osv_id": "MAL-2026-5795", "osv_published_at": "2026-06-15T15:59:57Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T20:21:29Z", "osv_earliest_published_at": "2026-06-15T15:59:57Z", "hours_ahead_of_osv": -4.36, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T20:21:30Z" }, { "id": "fastgptmini-2026-06-15", "display_name": "fastgptmini", "campaign": null, "detection_source": "osv", "packages": [ { "package": "fastgptmini", "ecosystem": "pypi", "versions": [ "2.21", "2.22", "2.23", "2.24", "2.25", "2.26" ], "osv_entries": [ { "osv_id": "MAL-2026-5776", "osv_published_at": "2026-06-15T11:43:18Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T14:09:39Z", "osv_earliest_published_at": "2026-06-15T11:43:18Z", "hours_ahead_of_osv": -2.44, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T14:09:40Z" }, { "id": "ckanext-dms-2026-06-15", "display_name": "ckanext-dms", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ckanext-dms", "ecosystem": "pypi", "versions": [ "0.1.0", "0.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5775", "osv_published_at": "2026-06-15T09:40:32Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T14:09:35Z", "osv_earliest_published_at": "2026-06-15T09:40:32Z", "hours_ahead_of_osv": -4.48, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T14:09:36Z" }, { "id": "m-at-star-tools-2026-06-15", "display_name": "m-at-star-tools", "campaign": null, "detection_source": "osv", "packages": [ { "package": "m-at-star-tools", "ecosystem": "pypi", "versions": [ "1.0.0", "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-4812", "osv_published_at": "2026-05-26T10:43:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T07:05:41Z", "osv_earliest_published_at": "2026-05-26T10:43:03Z", "hours_ahead_of_osv": -476.38, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T07:05:48Z" }, { "id": "whatsfly-labfox-2026-06-15", "display_name": "whatsfly-labfox", "campaign": null, "detection_source": "osv", "packages": [ { "package": "whatsfly-labfox", "ecosystem": "pypi", "versions": [ "0.2.1" ], "osv_entries": [ { "osv_id": "MAL-2026-4776", "osv_published_at": "2026-05-24T16:52:10Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T07:05:40Z", "osv_earliest_published_at": "2026-05-24T16:52:10Z", "hours_ahead_of_osv": -518.23, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T07:05:44Z" }, { "id": "projz-py-2026-06-15", "display_name": "projz-py", "campaign": null, "detection_source": "osv", "packages": [ { "package": "projz-py", "ecosystem": "pypi", "versions": [ "1.7.1", "1.8.2", "2.3.9" ], "osv_entries": [ { "osv_id": "MAL-2026-3696", "osv_published_at": "2026-05-12T07:43:32Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-15T07:05:40Z", "osv_earliest_published_at": "2026-05-12T07:43:32Z", "hours_ahead_of_osv": -815.37, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T07:05:40Z" }, { "id": "npx-whoami-demo-2026-06-14", "display_name": "npx-whoami-demo", "campaign": null, "detection_source": "osv", "packages": [ { "package": "npx-whoami-demo", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5772", "osv_published_at": "2026-06-14T13:39:01Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-14T18:44:04Z", "osv_earliest_published_at": "2026-06-14T13:39:01Z", "hours_ahead_of_osv": -5.08, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-14T18:44:05Z" }, { "id": "generatellm-2026-06-14", "display_name": "generatellm", "campaign": null, "detection_source": "osv", "packages": [ { "package": "generatellm", "ecosystem": "pypi", "versions": [ "2.21", "2.22", "2.23" ], "osv_entries": [ { "osv_id": "MAL-2026-5773", "osv_published_at": "2026-06-14T14:37:17Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-14T18:43:24Z", "osv_earliest_published_at": "2026-06-14T14:37:17Z", "hours_ahead_of_osv": -4.1, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-14T18:43:29Z" }, { "id": "llamagenerator-2026-06-14", "display_name": "llamagenerator", "campaign": null, "detection_source": "osv", "packages": [ { "package": "llamagenerator", "ecosystem": "pypi", "versions": [ "2.22" ], "osv_entries": [ { "osv_id": "MAL-2026-5771", "osv_published_at": "2026-06-14T12:50:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-14T18:43:23Z", "osv_earliest_published_at": "2026-06-14T12:50:38Z", "hours_ahead_of_osv": -5.88, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-14T18:43:26Z" }, { "id": "llmgenerator-2026-06-14", "display_name": "llmgenerator", "campaign": null, "detection_source": "osv", "packages": [ { "package": "llmgenerator", "ecosystem": "pypi", "versions": [ "2.21" ], "osv_entries": [ { "osv_id": "MAL-2026-5770", "osv_published_at": "2026-06-14T11:41:32Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-14T18:43:22Z", "osv_earliest_published_at": "2026-06-14T11:41:32Z", "hours_ahead_of_osv": -7.03, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-14T18:43:22Z" }, { "id": "ltidiconf-2026-06-14", "display_name": "ltidiconf", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ltidiconf", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5767", "osv_published_at": "2026-06-14T09:54:09Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-14T12:34:07Z", "osv_earliest_published_at": "2026-06-14T09:54:09Z", "hours_ahead_of_osv": -2.67, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-14T12:34:31Z" }, { "id": "sys-info-cli-app-2026-06-14", "display_name": "sys-info-cli-app", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sys-info-cli-app", "ecosystem": "npm", "versions": [ "1.0.1", "1.0.2", "1.0.9" ], "osv_entries": [ { "osv_id": "MAL-2026-5764", "osv_published_at": "2026-06-14T07:21:56Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-14T12:34:06Z", "osv_earliest_published_at": "2026-06-14T07:21:56Z", "hours_ahead_of_osv": -5.2, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-14T12:34:27Z" }, { "id": "npm-sandbox-research-g3h4-2026-06-14", "display_name": "npm-sandbox-research-g3h4", "campaign": null, "detection_source": "osv", "packages": [ { "package": "npm-sandbox-research-g3h4", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5763", "osv_published_at": "2026-06-14T07:30:43Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-14T12:34:03Z", "osv_earliest_published_at": "2026-06-14T07:30:43Z", "hours_ahead_of_osv": -5.06, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-14T12:34:24Z" }, { "id": "npm-sandbox-research-e9f0-2026-06-14", "display_name": "npm-sandbox-research-e9f0", "campaign": null, "detection_source": "osv", "packages": [ { "package": "npm-sandbox-research-e9f0", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5762", "osv_published_at": "2026-06-14T07:30:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-14T12:34:02Z", "osv_earliest_published_at": "2026-06-14T07:30:49Z", "hours_ahead_of_osv": -5.05, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-14T12:34:21Z" }, { "id": "npm-sandbox-research-d7e8-2026-06-14", "display_name": "npm-sandbox-research-d7e8", "campaign": null, "detection_source": "osv", "packages": [ { "package": "npm-sandbox-research-d7e8", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5761", "osv_published_at": "2026-06-14T07:30:44Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-14T12:34:02Z", "osv_earliest_published_at": "2026-06-14T07:30:44Z", "hours_ahead_of_osv": -5.05, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-14T12:34:17Z" }, { "id": "npm-sandbox-research-c5d6-2026-06-14", "display_name": "npm-sandbox-research-c5d6", "campaign": null, "detection_source": "osv", "packages": [ { "package": "npm-sandbox-research-c5d6", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5760", "osv_published_at": "2026-06-14T07:30:46Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-14T12:34:01Z", "osv_earliest_published_at": "2026-06-14T07:30:46Z", "hours_ahead_of_osv": -5.05, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-14T12:34:14Z" }, { "id": "npm-sandbox-research-9c4e-2026-06-14", "display_name": "npm-sandbox-research-9c4e", "campaign": null, "detection_source": "osv", "packages": [ { "package": "npm-sandbox-research-9c4e", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5759", "osv_published_at": "2026-06-14T07:30:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-14T12:34:01Z", "osv_earliest_published_at": "2026-06-14T07:30:42Z", "hours_ahead_of_osv": -5.06, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-14T12:34:11Z" }, { "id": "npm-sandbox-research-8b2f-2026-06-14", "display_name": "npm-sandbox-research-8b2f", "campaign": null, "detection_source": "osv", "packages": [ { "package": "npm-sandbox-research-8b2f", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5758", "osv_published_at": "2026-06-14T07:30:46Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-14T12:34:01Z", "osv_earliest_published_at": "2026-06-14T07:30:46Z", "hours_ahead_of_osv": -5.05, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-14T12:34:07Z" }, { "id": "npm-sandbox-ping-c8f2a-2026-06-14", "display_name": "npm-sandbox-ping-c8f2a", "campaign": null, "detection_source": "osv", "packages": [ { "package": "npm-sandbox-ping-c8f2a", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5757", "osv_published_at": "2026-06-14T07:30:47Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-14T12:34:00Z", "osv_earliest_published_at": "2026-06-14T07:30:47Z", "hours_ahead_of_osv": -5.05, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-14T12:34:04Z" }, { "id": "ezllmgen-2026-06-14", "display_name": "ezllmgen", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ezllmgen", "ecosystem": "pypi", "versions": [ "2.21" ], "osv_entries": [ { "osv_id": "MAL-2026-5769", "osv_published_at": "2026-06-14T08:53:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-14T12:33:17Z", "osv_earliest_published_at": "2026-06-14T08:53:49Z", "hours_ahead_of_osv": -3.66, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-14T12:33:26Z" }, { "id": "bash8-2026-06-14", "display_name": "bash8", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bash8", "ecosystem": "pypi", "versions": [ "0.0.0", "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5768", "osv_published_at": "2026-06-14T10:09:19Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-14T12:33:17Z", "osv_earliest_published_at": "2026-06-14T10:09:19Z", "hours_ahead_of_osv": -2.4, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-14T12:33:22Z" }, { "id": "easyllmai-2026-06-14", "display_name": "easyllmai", "campaign": null, "detection_source": "osv", "packages": [ { "package": "easyllmai", "ecosystem": "pypi", "versions": [ "2.1", "2.21" ], "osv_entries": [ { "osv_id": "MAL-2026-5766", "osv_published_at": "2026-06-14T07:51:34Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-14T12:33:16Z", "osv_earliest_published_at": "2026-06-14T07:51:34Z", "hours_ahead_of_osv": -4.7, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-14T12:33:19Z" }, { "id": "easyaillm2-2026-06-14", "display_name": "easyaillm2", "campaign": null, "detection_source": "osv", "packages": [ { "package": "easyaillm2", "ecosystem": "pypi", "versions": [ "2.0.16", "2.0.17", "2.0.18", "2.0.67", "2.0.68" ], "osv_entries": [ { "osv_id": "MAL-2026-5765", "osv_published_at": "2026-06-14T08:18:13Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-14T12:33:15Z", "osv_earliest_published_at": "2026-06-14T08:18:13Z", "hours_ahead_of_osv": -4.25, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-14T12:33:16Z" }, { "id": "easyaillm-2026-06-14", "display_name": "easyaillm", "campaign": null, "detection_source": "osv", "packages": [ { "package": "easyaillm", "ecosystem": "pypi", "versions": [ "2.0.15", "2.0.16" ], "osv_entries": [ { "osv_id": "MAL-2026-5756", "osv_published_at": "2026-06-14T01:55:27Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-14T06:23:36Z", "osv_earliest_published_at": "2026-06-14T01:55:27Z", "hours_ahead_of_osv": -4.47, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-14T06:23:39Z" }, { "id": "anthropickit-2026-06-14", "display_name": "anthropickit", "campaign": null, "detection_source": "osv", "packages": [ { "package": "anthropickit", "ecosystem": "pypi", "versions": [ "999.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-5755", "osv_published_at": "2026-06-14T01:37:46Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-14T06:23:36Z", "osv_earliest_published_at": "2026-06-14T01:37:46Z", "hours_ahead_of_osv": -4.76, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-14T06:23:36Z" }, { "id": "gbrlxvi-ts-form-utils-2026-06-14", "display_name": "@gbrlxvi/ts-form-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@gbrlxvi/ts-form-utils", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2", "1.1.0", "1.2.1", "1.3.0", "1.4.0", "1.5.0", "1.6.0", "1.7.0", "1.8.0", "1.9.0", "2.0.0", "2.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5753", "osv_published_at": "2026-06-13T21:38:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-14T00:11:49Z", "osv_earliest_published_at": "2026-06-13T21:38:53Z", "hours_ahead_of_osv": -2.55, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-14T00:12:15Z" }, { "id": "patientdocuments-2026-06-14", "display_name": "patientdocuments", "campaign": null, "detection_source": "osv", "packages": [ { "package": "patientdocuments", "ecosystem": "npm", "versions": [ "75.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5752", "osv_published_at": "2026-06-13T21:17:30Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-14T00:11:37Z", "osv_earliest_published_at": "2026-06-13T21:17:30Z", "hours_ahead_of_osv": -2.9, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-14T00:12:11Z" }, { "id": "oh-my-ashclaw-2026-06-14", "display_name": "oh-my-ashclaw", "campaign": null, "detection_source": "osv", "packages": [ { "package": "oh-my-ashclaw", "ecosystem": "npm", "versions": [ "4.11.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5751", "osv_published_at": "2026-06-13T20:59:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-14T00:11:36Z", "osv_earliest_published_at": "2026-06-13T20:59:00Z", "hours_ahead_of_osv": -3.21, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-14T00:12:08Z" }, { "id": "mailconfirmer-2026-06-14", "display_name": "mailconfirmer", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mailconfirmer", "ecosystem": "npm", "versions": [ "3.2.34", "3.2.35", "3.2.36", "3.2.38", "3.3.11", "3.3.12", "3.3.13", "3.3.16", "3.3.19", "3.3.21", "3.3.22", "3.3.26", "3.3.27", "3.3.29", "3.3.31", "3.3.34", "3.3.41", "3.3.42", "3.3.43", "3.3.44", "3.3.45", "3.3.47", "3.3.48", "3.3.51", "3.3.52", "3.3.54", "3.3.55", "3.3.58" ], "osv_entries": [ { "osv_id": "MAL-2026-5750", "osv_published_at": "2026-06-13T21:10:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-14T00:11:36Z", "osv_earliest_published_at": "2026-06-13T21:10:40Z", "hours_ahead_of_osv": -3.02, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T16:52:21Z" }, { "id": "easy-time666-2026-06-14", "display_name": "easy-time666", "campaign": null, "detection_source": "osv", "packages": [ { "package": "easy-time666", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5749", "osv_published_at": "2026-06-13T21:05:45Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-14T00:11:32Z", "osv_earliest_published_at": "2026-06-13T21:05:45Z", "hours_ahead_of_osv": -3.1, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-14T00:12:01Z" }, { "id": "chai-utils-test-2026-06-14", "display_name": "chai-utils-test", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-utils-test", "ecosystem": "npm", "versions": [ "4.5.0", "4.5.1", "4.5.2", "4.5.3", "4.5.4", "4.5.5" ], "osv_entries": [ { "osv_id": "MAL-2026-5748", "osv_published_at": "2026-06-13T20:52:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-14T00:11:32Z", "osv_earliest_published_at": "2026-06-13T20:52:08Z", "hours_ahead_of_osv": -3.32, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-14T00:11:58Z" }, { "id": "giftyhq-widget-components-2026-06-14", "display_name": "@giftyhq/widget-components", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@giftyhq/widget-components", "ecosystem": "npm", "versions": [ "19.12.11" ], "osv_entries": [ { "osv_id": "MAL-2026-5747", "osv_published_at": "2026-06-13T21:04:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-14T00:11:30Z", "osv_earliest_published_at": "2026-06-13T21:04:52Z", "hours_ahead_of_osv": -3.11, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-14T00:11:54Z" }, { "id": "xy-shared-2026-06-14", "display_name": "xy-shared", "campaign": null, "detection_source": "osv", "packages": [ { "package": "xy-shared", "ecosystem": "npm", "versions": [ "999.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5746", "osv_published_at": "2026-06-13T20:10:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-14T00:11:29Z", "osv_earliest_published_at": "2026-06-13T20:10:25Z", "hours_ahead_of_osv": -4.02, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-14T00:11:51Z" }, { "id": "oa-crm-webapi-2026-06-14", "display_name": "oa-crm-webapi", "campaign": null, "detection_source": "osv", "packages": [ { "package": "oa-crm-webapi", "ecosystem": "npm", "versions": [ "9.9.99" ], "osv_entries": [ { "osv_id": "MAL-2026-5745", "osv_published_at": "2026-06-13T20:11:58Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-14T00:11:28Z", "osv_earliest_published_at": "2026-06-13T20:11:58Z", "hours_ahead_of_osv": -3.99, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-14T00:11:47Z" }, { "id": "loadninja-shared-2026-06-14", "display_name": "loadninja-shared", "campaign": null, "detection_source": "osv", "packages": [ { "package": "loadninja-shared", "ecosystem": "npm", "versions": [ "9.9.99" ], "osv_entries": [ { "osv_id": "MAL-2026-5744", "osv_published_at": "2026-06-13T20:03:43Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-14T00:11:28Z", "osv_earliest_published_at": "2026-06-13T20:03:43Z", "hours_ahead_of_osv": -4.13, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-14T00:11:44Z" }, { "id": "environment-gate-2026-06-14", "display_name": "environment-gate", "campaign": null, "detection_source": "osv", "packages": [ { "package": "environment-gate", "ecosystem": "npm", "versions": [ "7.3.6" ], "osv_entries": [ { "osv_id": "MAL-2026-5743", "osv_published_at": "2026-06-13T20:13:30Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-14T00:11:28Z", "osv_earliest_published_at": "2026-06-13T20:13:30Z", "hours_ahead_of_osv": -3.97, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-14T00:11:41Z" }, { "id": "axl-ui-2026-06-14", "display_name": "axl-ui", "campaign": null, "detection_source": "osv", "packages": [ { "package": "axl-ui", "ecosystem": "npm", "versions": [ "9.9.99" ], "osv_entries": [ { "osv_id": "MAL-2026-5742", "osv_published_at": "2026-06-13T20:11:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-14T00:11:27Z", "osv_earliest_published_at": "2026-06-13T20:11:39Z", "hours_ahead_of_osv": -4.0, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-14T00:11:37Z" }, { "id": "achuthvp-postinstall-poc-2026-06-14", "display_name": "@achuthvp/postinstall-poc", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@achuthvp/postinstall-poc", "ecosystem": "npm", "versions": [ "1.0.2", "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-5741", "osv_published_at": "2026-06-13T20:24:46Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-14T00:11:27Z", "osv_earliest_published_at": "2026-06-13T20:24:46Z", "hours_ahead_of_osv": -3.78, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-14T00:11:34Z" }, { "id": "2fa-exe-2026-06-14", "display_name": "2fa-exe", "campaign": null, "detection_source": "osv", "packages": [ { "package": "2fa-exe", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5740", "osv_published_at": "2026-06-13T20:15:54Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-14T00:11:26Z", "osv_earliest_published_at": "2026-06-13T20:15:54Z", "hours_ahead_of_osv": -3.93, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-14T00:11:30Z" }, { "id": "salesforce-sysutils-diagnostics-2026-06-14", "display_name": "salesforce-sysutils-diagnostics", "campaign": null, "detection_source": "osv", "packages": [ { "package": "salesforce-sysutils-diagnostics", "ecosystem": "pypi", "versions": [ "0.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5754", "osv_published_at": "2026-06-13T21:38:10Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-14T00:10:41Z", "osv_earliest_published_at": "2026-06-13T21:38:10Z", "hours_ahead_of_osv": -2.54, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-14T00:10:42Z" }, { "id": "sheratan-haha-2026-06-13", "display_name": "sheratan_haha", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sheratan_haha", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5739", "osv_published_at": "2026-06-13T07:19:44Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-13T11:45:34Z", "osv_earliest_published_at": "2026-06-13T07:19:44Z", "hours_ahead_of_osv": -4.43, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-13T11:45:45Z" }, { "id": "postinstall-logger-7x9z-2026-06-13", "display_name": "postinstall-logger-7x9z", "campaign": null, "detection_source": "osv", "packages": [ { "package": "postinstall-logger-7x9z", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5738", "osv_published_at": "2026-06-13T07:15:46Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-13T11:45:30Z", "osv_earliest_published_at": "2026-06-13T07:15:46Z", "hours_ahead_of_osv": -4.5, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-13T11:45:41Z" }, { "id": "postcss-minify-selector-parser-2026-06-13", "display_name": "postcss-minify-selector-parser", "campaign": null, "detection_source": "osv", "packages": [ { "package": "postcss-minify-selector-parser", "ecosystem": "npm", "versions": [ "1.0.11", "1.0.12", "1.0.13", "1.0.14", "1.0.15", "1.0.16", "1.0.17", "1.0.18", "2.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5737", "osv_published_at": "2026-06-13T07:17:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-13T11:45:28Z", "osv_earliest_published_at": "2026-06-13T07:17:40Z", "hours_ahead_of_osv": -4.46, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-13T11:45:38Z" }, { "id": "node-stack-frames-2026-06-13", "display_name": "node-stack-frames", "campaign": null, "detection_source": "osv", "packages": [ { "package": "node-stack-frames", "ecosystem": "npm", "versions": [ "4.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5736", "osv_published_at": "2026-06-13T07:00:10Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-13T11:45:17Z", "osv_earliest_published_at": "2026-06-13T07:00:10Z", "hours_ahead_of_osv": -4.75, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-13T11:45:35Z" }, { "id": "node-multi-downloader-2026-06-13", "display_name": "node-multi-downloader", "campaign": null, "detection_source": "osv", "packages": [ { "package": "node-multi-downloader", "ecosystem": "npm", "versions": [ "5.0.14-rc.3" ], "osv_entries": [ { "osv_id": "MAL-2026-5735", "osv_published_at": "2026-06-13T07:04:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-13T11:45:17Z", "osv_earliest_published_at": "2026-06-13T07:04:03Z", "hours_ahead_of_osv": -4.69, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-13T11:45:32Z" }, { "id": "node-denv-2026-06-13", "display_name": "node-denv", "campaign": null, "detection_source": "osv", "packages": [ { "package": "node-denv", "ecosystem": "npm", "versions": [ "1.3.5" ], "osv_entries": [ { "osv_id": "MAL-2026-5734", "osv_published_at": "2026-06-13T07:00:24Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-13T11:45:16Z", "osv_earliest_published_at": "2026-06-13T07:00:24Z", "hours_ahead_of_osv": -4.75, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-13T11:45:28Z" }, { "id": "node-app-doctor-2026-06-13", "display_name": "node-app-doctor", "campaign": null, "detection_source": "osv", "packages": [ { "package": "node-app-doctor", "ecosystem": "npm", "versions": [ "1.0.1", "1.0.2", "1.0.9" ], "osv_entries": [ { "osv_id": "MAL-2026-5733", "osv_published_at": "2026-06-13T06:58:16Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-13T11:45:16Z", "osv_earliest_published_at": "2026-06-13T06:58:16Z", "hours_ahead_of_osv": -4.78, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-13T11:45:25Z" }, { "id": "houzidawang808-2026-06-13", "display_name": "houzidawang808", "campaign": null, "detection_source": "osv", "packages": [ { "package": "houzidawang808", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5732", "osv_published_at": "2026-06-13T06:51:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-13T11:45:14Z", "osv_earliest_published_at": "2026-06-13T06:51:37Z", "hours_ahead_of_osv": -4.89, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-13T11:45:21Z" }, { "id": "houzidawang807-2026-06-13", "display_name": "houzidawang807", "campaign": null, "detection_source": "osv", "packages": [ { "package": "houzidawang807", "ecosystem": "npm", "versions": [ "1.1.6" ], "osv_entries": [ { "osv_id": "MAL-2026-5731", "osv_published_at": "2026-06-13T06:51:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-13T11:45:14Z", "osv_earliest_published_at": "2026-06-13T06:51:41Z", "hours_ahead_of_osv": -4.89, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-13T11:45:18Z" }, { "id": "class-synth-2026-06-13", "display_name": "class-synth", "campaign": null, "detection_source": "osv", "packages": [ { "package": "class-synth", "ecosystem": "npm", "versions": [ "1.0.2", "1.0.3", "1.0.4", "1.0.5", "1.0.6", "1.0.7", "1.0.8", "1.0.9" ], "osv_entries": [ { "osv_id": "MAL-2026-5730", "osv_published_at": "2026-06-13T07:07:30Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-13T11:45:13Z", "osv_earliest_published_at": "2026-06-13T07:07:30Z", "hours_ahead_of_osv": -4.63, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-13T11:45:14Z" }, { "id": "houzidawang806-2026-06-13", "display_name": "houzidawang806", "campaign": null, "detection_source": "osv", "packages": [ { "package": "houzidawang806", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2", "1.0.3", "1.0.4", "1.0.5", "1.0.6", "1.0.7", "1.0.9", "1.1.0", "1.1.1", "1.1.2", "1.1.3", "1.1.4", "1.1.5", "1.1.7", "1.1.8", "1.2.0", "1.2.1", "1.2.3", "1.2.4", "1.2.5", "1.2.6" ], "osv_entries": [ { "osv_id": "MAL-2026-5729", "osv_published_at": "2026-06-13T05:07:26Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-13T11:45:10Z", "osv_earliest_published_at": "2026-06-13T05:07:26Z", "hours_ahead_of_osv": -6.63, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-14T12:34:00Z" }, { "id": "vite-config-react-2026-06-13", "display_name": "vite-config-react", "campaign": null, "detection_source": "osv", "packages": [ { "package": "vite-config-react", "ecosystem": "npm", "versions": [ "1.3.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5728", "osv_published_at": "2026-06-13T03:04:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-13T05:33:49Z", "osv_earliest_published_at": "2026-06-13T03:04:40Z", "hours_ahead_of_osv": -2.49, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-13T05:34:04Z" }, { "id": "vite-config-optimizer-2026-06-13", "display_name": "vite-config-optimizer", "campaign": null, "detection_source": "osv", "packages": [ { "package": "vite-config-optimizer", "ecosystem": "npm", "versions": [ "1.1.4" ], "osv_entries": [ { "osv_id": "MAL-2026-5727", "osv_published_at": "2026-06-13T03:03:44Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-13T05:33:48Z", "osv_earliest_published_at": "2026-06-13T03:03:44Z", "hours_ahead_of_osv": -2.5, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-13T05:34:00Z" }, { "id": "ecto-module-2026-06-13", "display_name": "ecto_module", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ecto_module", "ecosystem": "npm", "versions": [ "100.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5726", "osv_published_at": "2026-06-13T03:08:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-13T05:33:48Z", "osv_earliest_published_at": "2026-06-13T03:08:41Z", "hours_ahead_of_osv": -2.42, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-13T05:33:57Z" }, { "id": "warp-dependency-2026-06-13", "display_name": "warp-dependency", "campaign": null, "detection_source": "osv", "packages": [ { "package": "warp-dependency", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5724", "osv_published_at": "2026-06-13T02:10:04Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-13T05:33:47Z", "osv_earliest_published_at": "2026-06-13T02:10:04Z", "hours_ahead_of_osv": -3.4, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-13T05:33:54Z" }, { "id": "ci-lifecycle-test-postinstall-ping-2026-06-13", "display_name": "@ci-lifecycle-test/postinstall-ping", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@ci-lifecycle-test/postinstall-ping", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5723", "osv_published_at": "2026-06-13T02:10:32Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-13T05:33:47Z", "osv_earliest_published_at": "2026-06-13T02:10:32Z", "hours_ahead_of_osv": -3.39, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-13T05:33:50Z" }, { "id": "dash-grid-normalizer-2026-06-13", "display_name": "dash-grid-normalizer", "campaign": null, "detection_source": "osv", "packages": [ { "package": "dash-grid-normalizer", "ecosystem": "pypi", "versions": [ "0.0.1", "0.0.2", "0.0.3", "0.0.4", "0.0.5" ], "osv_entries": [ { "osv_id": "MAL-2026-5725", "osv_published_at": "2026-06-13T01:03:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-13T05:33:06Z", "osv_earliest_published_at": "2026-06-13T01:03:41Z", "hours_ahead_of_osv": -4.49, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-13T05:33:06Z" }, { "id": "ect-839201-ctf-2026-06-12", "display_name": "ect-839201-ctf", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ect-839201-ctf", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5721", "osv_published_at": "2026-06-12T21:31:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:22:39Z", "osv_earliest_published_at": "2026-06-12T21:31:00Z", "hours_ahead_of_osv": -1.86, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:22:41Z" }, { "id": "ect-839201-2026-06-12", "display_name": "ect-839201", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ect-839201", "ecosystem": "npm", "versions": [ "100.0.0", "100.0.1", "100.0.10", "100.0.2", "100.0.3", "100.0.4", "100.0.5", "100.0.6", "100.0.7", "100.0.8", "100.0.9" ], "osv_entries": [ { "osv_id": "MAL-2026-5720", "osv_published_at": "2026-06-12T21:31:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:22:37Z", "osv_earliest_published_at": "2026-06-12T21:31:03Z", "hours_ahead_of_osv": -1.86, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:22:37Z" }, { "id": "ect-654321-2026-06-12", "display_name": "ect-654321", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ect-654321", "ecosystem": "npm", "versions": [ "100.0.0", "100.0.1", "100.0.2", "100.0.3", "100.0.4", "100.0.7", "100.0.8" ], "osv_entries": [ { "osv_id": "MAL-2026-5719", "osv_published_at": "2026-06-12T21:31:04Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:22:15Z", "osv_earliest_published_at": "2026-06-12T21:31:04Z", "hours_ahead_of_osv": -1.85, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:22:15Z" }, { "id": "ect-472839-ctf-2026-06-12", "display_name": "ect-472839-ctf", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ect-472839-ctf", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5718", "osv_published_at": "2026-06-12T21:31:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:22:01Z", "osv_earliest_published_at": "2026-06-12T21:31:07Z", "hours_ahead_of_osv": -1.85, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:22:02Z" }, { "id": "claudechor-2026-06-12", "display_name": "claudechor", "campaign": null, "detection_source": "osv", "packages": [ { "package": "claudechor", "ecosystem": "npm", "versions": [ "1.0.1", "1.0.2", "1.0.3", "1.0.4", "1.0.5" ], "osv_entries": [ { "osv_id": "MAL-2026-5717", "osv_published_at": "2026-06-12T20:57:29Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:21:59Z", "osv_earliest_published_at": "2026-06-12T20:57:29Z", "hours_ahead_of_osv": -2.41, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:21:59Z" }, { "id": "beamz-2026-06-12", "display_name": "beamz", "campaign": null, "detection_source": "osv", "packages": [ { "package": "beamz", "ecosystem": "npm", "versions": [ "1.0.11", "1.0.12", "1.0.13", "1.0.14", "1.0.5", "1.0.8" ], "osv_entries": [ { "osv_id": "MAL-2026-5716", "osv_published_at": "2026-06-12T20:54:24Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:21:49Z", "osv_earliest_published_at": "2026-06-12T20:54:24Z", "hours_ahead_of_osv": -2.46, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-13T05:33:47Z" }, { "id": "workflow-postgres-setup-2026-06-12", "display_name": "workflow-postgres-setup", "campaign": null, "detection_source": "osv", "packages": [ { "package": "workflow-postgres-setup", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5715", "osv_published_at": "2026-06-12T19:48:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:21:43Z", "osv_earliest_published_at": "2026-06-12T19:48:49Z", "hours_ahead_of_osv": -3.55, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:21:44Z" }, { "id": "vite-plugin-logo-2026-06-12", "display_name": "vite-plugin-logo", "campaign": null, "detection_source": "osv", "packages": [ { "package": "vite-plugin-logo", "ecosystem": "npm", "versions": [ "1.0.3", "1.0.4", "1.0.5", "1.0.6", "1.0.7", "1.0.8", "1.0.9", "1.1.0", "1.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5714", "osv_published_at": "2026-06-12T19:52:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:21:41Z", "osv_earliest_published_at": "2026-06-12T19:52:23Z", "hours_ahead_of_osv": -3.49, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:21:41Z" }, { "id": "vite-plugin-compress-js-2026-06-12", "display_name": "vite-plugin-compress-js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "vite-plugin-compress-js", "ecosystem": "npm", "versions": [ "0.5.5", "0.5.6", "0.5.7" ], "osv_entries": [ { "osv_id": "MAL-2026-5713", "osv_published_at": "2026-06-12T19:43:47Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:21:23Z", "osv_earliest_published_at": "2026-06-12T19:43:47Z", "hours_ahead_of_osv": -3.63, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-24T02:47:22Z", "hours_ahead_of_press": null, "confirmed_at": "2026-06-24T02:47:22Z" }, { "id": "jextic-eclib-2026-06-12", "display_name": "jextic-eclib", "campaign": null, "detection_source": "osv", "packages": [ { "package": "jextic-eclib", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5712", "osv_published_at": "2026-06-12T20:35:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:21:21Z", "osv_earliest_published_at": "2026-06-12T20:35:41Z", "hours_ahead_of_osv": -2.76, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:21:27Z" }, { "id": "chalk-pro-2026-06-12", "display_name": "chalk-pro", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chalk-pro", "ecosystem": "npm", "versions": [ "7.0.4", "7.0.6" ], "osv_entries": [ { "osv_id": "MAL-2026-5711", "osv_published_at": "2026-06-12T20:36:57Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:21:19Z", "osv_earliest_published_at": "2026-06-12T20:36:57Z", "hours_ahead_of_osv": -2.74, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T05:16:17Z" }, { "id": "chalk-plus-ts-2026-06-12", "display_name": "chalk-plus-ts", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chalk-plus-ts", "ecosystem": "npm", "versions": [ "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-5710", "osv_published_at": "2026-06-12T20:34:58Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:21:17Z", "osv_earliest_published_at": "2026-06-12T20:34:58Z", "hours_ahead_of_osv": -2.77, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:21:20Z" }, { "id": "chalk-plus-js-2026-06-12", "display_name": "chalk-plus-js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chalk-plus-js", "ecosystem": "npm", "versions": [ "7.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-5709", "osv_published_at": "2026-06-12T20:38:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:21:15Z", "osv_earliest_published_at": "2026-06-12T20:38:05Z", "hours_ahead_of_osv": -2.72, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:21:17Z" }, { "id": "vite-svgr-2026-06-12", "display_name": "vite-svgr", "campaign": null, "detection_source": "osv", "packages": [ { "package": "vite-svgr", "ecosystem": "npm", "versions": [ "1.1.2", "1.1.3" ], "osv_entries": [ { "osv_id": "MAL-2026-5708", "osv_published_at": "2026-06-12T19:27:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:21:13Z", "osv_earliest_published_at": "2026-06-12T19:27:21Z", "hours_ahead_of_osv": -3.9, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:21:14Z" }, { "id": "ttspc-server-sample-2026-06-12", "display_name": "ttspc-server-sample", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ttspc-server-sample", "ecosystem": "npm", "versions": [ "9.0.0", "99.9.0", "99.9.1", "99.9.2", "99.9.3" ], "osv_entries": [ { "osv_id": "MAL-2026-5707", "osv_published_at": "2026-06-12T19:03:04Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:21:09Z", "osv_earliest_published_at": "2026-06-12T19:03:04Z", "hours_ahead_of_osv": -4.3, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-15T20:22:48Z" }, { "id": "theta-kit-2026-06-12", "display_name": "theta-kit", "campaign": null, "detection_source": "osv", "packages": [ { "package": "theta-kit", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2", "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-5706", "osv_published_at": "2026-06-12T19:07:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:21:07Z", "osv_earliest_published_at": "2026-06-12T19:07:23Z", "hours_ahead_of_osv": -4.23, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:21:07Z" }, { "id": "theta-connector-2026-06-12", "display_name": "theta-connector", "campaign": null, "detection_source": "osv", "packages": [ { "package": "theta-connector", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5705", "osv_published_at": "2026-06-12T19:07:24Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:20:59Z", "osv_earliest_published_at": "2026-06-12T19:07:24Z", "hours_ahead_of_osv": -4.23, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:21:00Z" }, { "id": "friendly-greeter-demo-2026-06-12", "display_name": "friendly-greeter-demo", "campaign": null, "detection_source": "osv", "packages": [ { "package": "friendly-greeter-demo", "ecosystem": "npm", "versions": [ "1.0.1", "1.0.10", "1.0.11", "1.0.13", "1.0.14", "1.0.2", "1.0.3", "1.0.4", "1.0.6", "1.0.9" ], "osv_entries": [ { "osv_id": "MAL-2026-5704", "osv_published_at": "2026-06-12T19:15:47Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:20:57Z", "osv_earliest_published_at": "2026-06-12T19:15:47Z", "hours_ahead_of_osv": -4.09, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T16:52:17Z" }, { "id": "eslint-plugin-mistica-local-rules-2026-06-12", "display_name": "eslint-plugin-mistica-local-rules", "campaign": null, "detection_source": "osv", "packages": [ { "package": "eslint-plugin-mistica-local-rules", "ecosystem": "npm", "versions": [ "19.12.11" ], "osv_entries": [ { "osv_id": "MAL-2026-5703", "osv_published_at": "2026-06-12T19:02:58Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:20:47Z", "osv_earliest_published_at": "2026-06-12T19:02:58Z", "hours_ahead_of_osv": -4.3, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:20:50Z" }, { "id": "vite-react-toolkit-2026-06-12", "display_name": "vite-react-toolkit", "campaign": null, "detection_source": "osv", "packages": [ { "package": "vite-react-toolkit", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5701", "osv_published_at": "2026-06-12T16:11:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:20:45Z", "osv_earliest_published_at": "2026-06-12T16:11:50Z", "hours_ahead_of_osv": -7.15, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:20:47Z" }, { "id": "ecto-win-flag-q2m7-2026-06-12", "display_name": "ecto-win-flag-q2m7", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ecto-win-flag-q2m7", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5692", "osv_published_at": "2026-06-12T14:32:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:20:07Z", "osv_earliest_published_at": "2026-06-12T14:32:51Z", "hours_ahead_of_osv": -8.79, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:20:07Z" }, { "id": "ecto-spectral-leak-8d4e2-2026-06-12", "display_name": "ecto-spectral-leak-8d4e2", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ecto-spectral-leak-8d4e2", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5690", "osv_published_at": "2026-06-12T14:32:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:20:03Z", "osv_earliest_published_at": "2026-06-12T14:32:51Z", "hours_ahead_of_osv": -8.79, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:20:03Z" }, { "id": "ecto-rust-read-f3a9c1-2026-06-12", "display_name": "ecto-rust-read-f3a9c1", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ecto-rust-read-f3a9c1", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5689", "osv_published_at": "2026-06-12T14:32:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:19:57Z", "osv_earliest_published_at": "2026-06-12T14:32:51Z", "hours_ahead_of_osv": -8.79, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:19:57Z" }, { "id": "ecto-nightly-spirit-2026-06-12", "display_name": "ecto-nightly-spirit", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ecto-nightly-spirit", "ecosystem": "npm", "versions": [ "1.0.1", "1.0.3", "1.0.4", "1.0.5", "1.0.6", "1.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5688", "osv_published_at": "2026-06-12T14:32:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:19:51Z", "osv_earliest_published_at": "2026-06-12T14:32:51Z", "hours_ahead_of_osv": -8.78, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:19:51Z" }, { "id": "ecto-corsair-flag-x9m4-2026-06-12", "display_name": "ecto-corsair-flag-x9m4", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ecto-corsair-flag-x9m4", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5686", "osv_published_at": "2026-06-12T14:32:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:19:39Z", "osv_earliest_published_at": "2026-06-12T14:32:51Z", "hours_ahead_of_osv": -8.78, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:19:42Z" }, { "id": "malwguy-ecto-corsair-whisper-3d2a7c-2026-06-12", "display_name": "@malwguy/ecto-corsair-whisper-3d2a7c", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@malwguy/ecto-corsair-whisper-3d2a7c", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5685", "osv_published_at": "2026-06-12T14:32:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:19:37Z", "osv_earliest_published_at": "2026-06-12T14:32:51Z", "hours_ahead_of_osv": -8.78, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:19:38Z" }, { "id": "vqlxjmpr-2026-06-12", "display_name": "vqlxjmpr", "campaign": null, "detection_source": "osv", "packages": [ { "package": "vqlxjmpr", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2", "1.0.3", "1.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-5672", "osv_published_at": "2026-06-11T14:09:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:18:07Z", "osv_earliest_published_at": "2026-06-11T14:09:37Z", "hours_ahead_of_osv": -33.14, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:18:07Z" }, { "id": "tw-fluid-type-2026-06-12", "display_name": "tw-fluid-type", "campaign": null, "detection_source": "osv", "packages": [ { "package": "tw-fluid-type", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5638", "osv_published_at": "2026-06-11T09:44:58Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:17:17Z", "osv_earliest_published_at": "2026-06-11T09:44:58Z", "hours_ahead_of_osv": -37.54, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:17:36Z" }, { "id": "tailwindcss-animotion-2026-06-12", "display_name": "tailwindcss-animotion", "campaign": null, "detection_source": "osv", "packages": [ { "package": "tailwindcss-animotion", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5637", "osv_published_at": "2026-06-11T09:44:58Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:17:15Z", "osv_earliest_published_at": "2026-06-11T09:44:58Z", "hours_ahead_of_osv": -37.54, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:17:33Z" }, { "id": "swagger-express-routes-2026-06-12", "display_name": "swagger-express-routes", "campaign": null, "detection_source": "osv", "packages": [ { "package": "swagger-express-routes", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5636", "osv_published_at": "2026-06-11T09:44:59Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:17:13Z", "osv_earliest_published_at": "2026-06-11T09:44:59Z", "hours_ahead_of_osv": -37.54, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:17:30Z" }, { "id": "react-photo-views-2026-06-12", "display_name": "react-photo-views", "campaign": null, "detection_source": "osv", "packages": [ { "package": "react-photo-views", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5634", "osv_published_at": "2026-06-11T09:44:58Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:17:11Z", "osv_earliest_published_at": "2026-06-11T09:44:58Z", "hours_ahead_of_osv": -37.54, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:17:26Z" }, { "id": "typeorm-encrypt-2026-06-12", "display_name": "typeorm-encrypt", "campaign": null, "detection_source": "osv", "packages": [ { "package": "typeorm-encrypt", "ecosystem": "npm", "versions": [ "1.0.1", "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5633", "osv_published_at": "2026-06-11T09:35:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:17:09Z", "osv_earliest_published_at": "2026-06-11T09:35:12Z", "hours_ahead_of_osv": -37.7, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:17:23Z" }, { "id": "tailwindcss-merge-2026-06-12", "display_name": "tailwindcss-merge", "campaign": null, "detection_source": "osv", "packages": [ { "package": "tailwindcss-merge", "ecosystem": "npm", "versions": [ "1.0.1", "1.0.2", "1.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-5632", "osv_published_at": "2026-06-11T09:35:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:17:05Z", "osv_earliest_published_at": "2026-06-11T09:35:12Z", "hours_ahead_of_osv": -37.7, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:17:19Z" }, { "id": "sass-formats-2026-06-12", "display_name": "sass-formats", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sass-formats", "ecosystem": "npm", "versions": [ "1.0.4", "1.0.5" ], "osv_entries": [ { "osv_id": "MAL-2026-5629", "osv_published_at": "2026-06-11T09:35:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:16:59Z", "osv_earliest_published_at": "2026-06-11T09:35:12Z", "hours_ahead_of_osv": -37.7, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:17:16Z" }, { "id": "clsx-tailwind-2026-06-12", "display_name": "clsx-tailwind", "campaign": null, "detection_source": "osv", "packages": [ { "package": "clsx-tailwind", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5625", "osv_published_at": "2026-06-11T09:35:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:16:55Z", "osv_earliest_published_at": "2026-06-11T09:35:12Z", "hours_ahead_of_osv": -37.7, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:17:13Z" }, { "id": "thomlecter1122-lab-helper-test-2026-06-12", "display_name": "@thomlecter1122/lab-helper-test", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@thomlecter1122/lab-helper-test", "ecosystem": "npm", "versions": [ "0.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-5534", "osv_published_at": "2026-06-10T23:35:46Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:16:35Z", "osv_earliest_published_at": "2026-06-10T23:35:46Z", "hours_ahead_of_osv": -47.68, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:16:52Z" }, { "id": "argoncrypt-2026-06-12", "display_name": "argoncrypt", "campaign": null, "detection_source": "osv", "packages": [ { "package": "argoncrypt", "ecosystem": "npm", "versions": [ "1.2.3" ], "osv_entries": [ { "osv_id": "MAL-2026-5506", "osv_published_at": "2026-06-10T14:09:55Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:16:31Z", "osv_earliest_published_at": "2026-06-10T14:09:55Z", "hours_ahead_of_osv": -57.11, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:16:46Z" }, { "id": "mcp-server-supabase-2026-06-12", "display_name": "mcp-server-supabase", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mcp-server-supabase", "ecosystem": "npm", "versions": [ "0.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5485", "osv_published_at": "2026-06-09T20:33:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:16:29Z", "osv_earliest_published_at": "2026-06-09T20:33:36Z", "hours_ahead_of_osv": -74.71, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:16:43Z" }, { "id": "mcp-server-sequential-thinking-2026-06-12", "display_name": "mcp-server-sequential-thinking", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mcp-server-sequential-thinking", "ecosystem": "npm", "versions": [ "0.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5484", "osv_published_at": "2026-06-09T20:34:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:16:27Z", "osv_earliest_published_at": "2026-06-09T20:34:37Z", "hours_ahead_of_osv": -74.7, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:16:40Z" }, { "id": "mcp-server-sentry-2026-06-12", "display_name": "mcp-server-sentry", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mcp-server-sentry", "ecosystem": "npm", "versions": [ "0.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5483", "osv_published_at": "2026-06-09T20:33:56Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:16:25Z", "osv_earliest_published_at": "2026-06-09T20:33:56Z", "hours_ahead_of_osv": -74.71, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:16:37Z" }, { "id": "mcp-server-redis-2026-06-12", "display_name": "mcp-server-redis", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mcp-server-redis", "ecosystem": "npm", "versions": [ "0.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5482", "osv_published_at": "2026-06-09T20:34:45Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:16:23Z", "osv_earliest_published_at": "2026-06-09T20:34:45Z", "hours_ahead_of_osv": -74.69, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:16:33Z" }, { "id": "mcp-server-postgres-2026-06-12", "display_name": "mcp-server-postgres", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mcp-server-postgres", "ecosystem": "npm", "versions": [ "0.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5481", "osv_published_at": "2026-06-09T20:34:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:16:21Z", "osv_earliest_published_at": "2026-06-09T20:34:49Z", "hours_ahead_of_osv": -74.69, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:16:30Z" }, { "id": "mcp-server-notion-2026-06-12", "display_name": "mcp-server-notion", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mcp-server-notion", "ecosystem": "npm", "versions": [ "0.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5480", "osv_published_at": "2026-06-09T20:34:01Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:16:19Z", "osv_earliest_published_at": "2026-06-09T20:34:01Z", "hours_ahead_of_osv": -74.7, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:16:26Z" }, { "id": "mcp-server-github-2026-06-12", "display_name": "mcp-server-github", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mcp-server-github", "ecosystem": "npm", "versions": [ "0.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5479", "osv_published_at": "2026-06-09T20:33:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:16:17Z", "osv_earliest_published_at": "2026-06-09T20:33:49Z", "hours_ahead_of_osv": -74.71, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:16:23Z" }, { "id": "mcp-server-git-2026-06-12", "display_name": "mcp-server-git", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mcp-server-git", "ecosystem": "npm", "versions": [ "0.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5478", "osv_published_at": "2026-06-09T20:34:59Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:16:15Z", "osv_earliest_published_at": "2026-06-09T20:34:59Z", "hours_ahead_of_osv": -74.69, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:16:20Z" }, { "id": "mcp-server-figma-2026-06-12", "display_name": "mcp-server-figma", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mcp-server-figma", "ecosystem": "npm", "versions": [ "0.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5477", "osv_published_at": "2026-06-09T20:34:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:16:13Z", "osv_earliest_published_at": "2026-06-09T20:34:25Z", "hours_ahead_of_osv": -74.7, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:16:17Z" }, { "id": "mcp-server-fetch-2026-06-12", "display_name": "mcp-server-fetch", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mcp-server-fetch", "ecosystem": "npm", "versions": [ "0.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5476", "osv_published_at": "2026-06-09T20:34:54Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:16:11Z", "osv_earliest_published_at": "2026-06-09T20:34:54Z", "hours_ahead_of_osv": -74.69, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:16:14Z" }, { "id": "ui-weave-2026-06-12", "display_name": "ui-weave", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ui-weave", "ecosystem": "npm", "versions": [ "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-5406", "osv_published_at": "2026-06-09T16:07:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:16:09Z", "osv_earliest_published_at": "2026-06-09T16:07:22Z", "hours_ahead_of_osv": -79.15, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:16:10Z" }, { "id": "sqlite-node-createsql-2026-06-12", "display_name": "@sqlite-node/createsql", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@sqlite-node/createsql", "ecosystem": "npm", "versions": [ "1.0.2", "1.0.4", "1.0.5", "1.0.6", "1.0.7", "1.0.8", "1.0.9", "1.1.0", "1.1.1", "1.1.2", "1.1.3", "1.1.4", "1.1.5" ], "osv_entries": [ { "osv_id": "MAL-2026-5396", "osv_published_at": "2026-06-09T15:59:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:16:07Z", "osv_earliest_published_at": "2026-06-09T15:59:00Z", "hours_ahead_of_osv": -79.29, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:16:07Z" }, { "id": "sql-trigger-nodesql-2026-06-12", "display_name": "@sql-trigger/nodesql", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@sql-trigger/nodesql", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5395", "osv_published_at": "2026-06-09T15:46:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:15:41Z", "osv_earliest_published_at": "2026-06-09T15:46:48Z", "hours_ahead_of_osv": -79.48, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:15:42Z" }, { "id": "sql-access-nodesql-2026-06-12", "display_name": "@sql-access/nodesql", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@sql-access/nodesql", "ecosystem": "npm", "versions": [ "1.0.5", "1.0.6", "1.0.8", "1.0.9", "1.1.1", "1.1.2", "1.1.3", "1.1.4", "1.1.5", "1.1.6", "1.1.7", "1.1.8" ], "osv_entries": [ { "osv_id": "MAL-2026-5394", "osv_published_at": "2026-06-09T15:58:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:15:39Z", "osv_earliest_published_at": "2026-06-09T15:58:52Z", "hours_ahead_of_osv": -79.28, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:15:39Z" }, { "id": "moustick-2026-06-12", "display_name": "moustick", "campaign": null, "detection_source": "osv", "packages": [ { "package": "moustick", "ecosystem": "npm", "versions": [ "1.2.1", "1.2.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5347", "osv_published_at": "2026-06-09T11:19:47Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:15:05Z", "osv_earliest_published_at": "2026-06-09T11:19:47Z", "hours_ahead_of_osv": -83.92, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:15:12Z" }, { "id": "cookie-parser-legacy-2026-06-12", "display_name": "cookie-parser-legacy", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cookie-parser-legacy", "ecosystem": "npm", "versions": [ "1.5.3", "1.5.4" ], "osv_entries": [ { "osv_id": "MAL-2026-5346", "osv_published_at": "2026-06-09T11:19:47Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:15:01Z", "osv_earliest_published_at": "2026-06-09T11:19:47Z", "hours_ahead_of_osv": -83.92, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:15:09Z" }, { "id": "regexp-ts-2026-06-12", "display_name": "regexp-ts", "campaign": null, "detection_source": "osv", "packages": [ { "package": "regexp-ts", "ecosystem": "npm", "versions": [ "2.1.7" ], "osv_entries": [ { "osv_id": "MAL-2026-5310", "osv_published_at": "2026-06-08T09:27:28Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:14:57Z", "osv_earliest_published_at": "2026-06-08T09:27:28Z", "hours_ahead_of_osv": -109.79, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:15:05Z" }, { "id": "chai-mocks-2026-06-12", "display_name": "chai-mocks", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-mocks", "ecosystem": "npm", "versions": [ "1.1.5" ], "osv_entries": [ { "osv_id": "MAL-2026-5306", "osv_published_at": "2026-06-08T09:00:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:14:55Z", "osv_earliest_published_at": "2026-06-08T09:00:21Z", "hours_ahead_of_osv": -110.24, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:15:02Z" }, { "id": "emcd-vue-loans-2026-06-12", "display_name": "@emcd-vue/loans", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@emcd-vue/loans", "ecosystem": "npm", "versions": [ "7.1.8" ], "osv_entries": [ { "osv_id": "MAL-2026-5165", "osv_published_at": "2026-06-01T07:05:43Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:14:49Z", "osv_earliest_published_at": "2026-06-01T07:05:43Z", "hours_ahead_of_osv": -280.15, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://safedep.io/oob-moika-tech-dependency-confusion-campaign/", "ledger_commit_at": "2026-06-12T23:14:55Z" }, { "id": "emcd-vue-b2b-pay-form-2026-06-12", "display_name": "@emcd-vue/b2b-pay-form", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@emcd-vue/b2b-pay-form", "ecosystem": "npm", "versions": [ "5.7.4" ], "osv_entries": [ { "osv_id": "MAL-2026-5164", "osv_published_at": "2026-06-01T07:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:14:47Z", "osv_earliest_published_at": "2026-06-01T07:00:00Z", "hours_ahead_of_osv": -280.25, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://safedep.io/oob-moika-tech-dependency-confusion-campaign/", "ledger_commit_at": "2026-06-12T23:14:52Z" }, { "id": "emcd-vue-auth-2026-06-12", "display_name": "@emcd-vue/auth", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@emcd-vue/auth", "ecosystem": "npm", "versions": [ "6.4.5" ], "osv_entries": [ { "osv_id": "MAL-2026-5163", "osv_published_at": "2026-06-01T07:04:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:14:45Z", "osv_earliest_published_at": "2026-06-01T07:04:12Z", "hours_ahead_of_osv": -280.18, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://safedep.io/oob-moika-tech-dependency-confusion-campaign/", "ledger_commit_at": "2026-06-12T23:14:48Z" }, { "id": "react-json-chalk-2026-06-12", "display_name": "react-json-chalk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "react-json-chalk", "ecosystem": "npm", "versions": [ "13.4.6" ], "osv_entries": [ { "osv_id": "MAL-2026-4792", "osv_published_at": "2026-05-26T08:46:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:14:43Z", "osv_earliest_published_at": "2026-05-26T08:46:33Z", "hours_ahead_of_osv": -422.47, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:14:45Z" }, { "id": "ggk-happy-2026-06-12", "display_name": "ggk-happy", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ggk-happy", "ecosystem": "npm", "versions": [ "1.2.0", "1.2.12" ], "osv_entries": [ { "osv_id": "MAL-2026-4789", "osv_published_at": "2026-05-26T09:03:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:14:41Z", "osv_earliest_published_at": "2026-05-26T09:03:51Z", "hours_ahead_of_osv": -422.18, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:14:41Z" }, { "id": "veteran-2026-06-12", "display_name": "veteran", "campaign": null, "detection_source": "osv", "packages": [ { "package": "veteran", "ecosystem": "npm", "versions": [ "1.0.11" ], "osv_entries": [ { "osv_id": "MAL-2026-4703", "osv_published_at": "2026-05-21T16:28:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:14:37Z", "osv_earliest_published_at": "2026-05-21T16:28:03Z", "hours_ahead_of_osv": -534.78, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:14:38Z" }, { "id": "tango-app-api-trax-2026-06-12", "display_name": "tango-app-api-trax", "campaign": null, "detection_source": "osv", "packages": [ { "package": "tango-app-api-trax", "ecosystem": "npm", "versions": [ "3.9.21", "3.9.32", "3.9.39", "3.9.43", "3.9.45", "3.9.47" ], "osv_entries": [ { "osv_id": "MAL-2026-4682", "osv_published_at": "2026-05-20T11:24:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:14:35Z", "osv_earliest_published_at": "2026-05-20T11:24:49Z", "hours_ahead_of_osv": -563.83, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T02:35:46Z" }, { "id": "openprompt-lang-2026-06-12", "display_name": "openprompt-lang", "campaign": null, "detection_source": "osv", "packages": [ { "package": "openprompt-lang", "ecosystem": "npm", "versions": [ "1.5.0", "1.6.0" ], "osv_entries": [ { "osv_id": "MAL-2026-4630", "osv_published_at": "2026-05-23T23:03:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:14:27Z", "osv_earliest_published_at": "2026-05-23T23:03:36Z", "hours_ahead_of_osv": -480.18, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:14:27Z" }, { "id": "oh-langfuse-2026-06-12", "display_name": "oh-langfuse", "campaign": null, "detection_source": "osv", "packages": [ { "package": "oh-langfuse", "ecosystem": "npm", "versions": [ "0.1.28", "0.1.29", "0.1.31", "0.1.38", "0.1.42", "0.1.43", "0.1.44", "0.1.45", "0.1.46", "0.1.48", "0.1.49", "0.1.50", "0.1.51", "0.1.52", "0.1.53", "0.1.56" ], "osv_entries": [ { "osv_id": "MAL-2026-4625", "osv_published_at": "2026-05-21T08:17:27Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:14:23Z", "osv_earliest_published_at": "2026-05-21T08:17:27Z", "hours_ahead_of_osv": -542.95, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:14:23Z" }, { "id": "nolimit-x-2026-06-12", "display_name": "nolimit-x", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nolimit-x", "ecosystem": "npm", "versions": [ "1.0.216", "1.0.220", "1.0.227", "1.0.236", "1.0.239", "1.0.240", "1.0.256", "1.0.263", "1.0.264", "1.0.267", "1.0.274" ], "osv_entries": [ { "osv_id": "MAL-2026-4621", "osv_published_at": "2026-05-20T09:07:46Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:13:51Z", "osv_earliest_published_at": "2026-05-20T09:07:46Z", "hours_ahead_of_osv": -566.1, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:13:51Z" }, { "id": "jsontoken-extend-2026-06-12", "display_name": "jsontoken-extend", "campaign": null, "detection_source": "osv", "packages": [ { "package": "jsontoken-extend", "ecosystem": "npm", "versions": [ "1.0.13" ], "osv_entries": [ { "osv_id": "MAL-2026-4592", "osv_published_at": "2026-05-25T15:26:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:13:29Z", "osv_earliest_published_at": "2026-05-25T15:26:07Z", "hours_ahead_of_osv": -439.79, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:13:39Z" }, { "id": "ionic-insta-api-wrapper-2026-06-12", "display_name": "ionic-insta-api-wrapper", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ionic-insta-api-wrapper", "ecosystem": "npm", "versions": [ "1.1.3" ], "osv_entries": [ { "osv_id": "MAL-2026-4588", "osv_published_at": "2026-05-21T08:32:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:13:27Z", "osv_earliest_published_at": "2026-05-21T08:32:53Z", "hours_ahead_of_osv": -542.68, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:13:35Z" }, { "id": "idlidosa-2026-06-12", "display_name": "idlidosa", "campaign": null, "detection_source": "osv", "packages": [ { "package": "idlidosa", "ecosystem": "npm", "versions": [ "1.0.1", "1.0.2", "1.0.4", "1.0.7" ], "osv_entries": [ { "osv_id": "MAL-2026-4581", "osv_published_at": "2026-05-20T07:38:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:13:25Z", "osv_earliest_published_at": "2026-05-20T07:38:38Z", "hours_ahead_of_osv": -567.58, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:13:32Z" }, { "id": "http-uploader-dev-2026-06-12", "display_name": "http-uploader-dev", "campaign": null, "detection_source": "osv", "packages": [ { "package": "http-uploader-dev", "ecosystem": "npm", "versions": [ "1.0.7" ], "osv_entries": [ { "osv_id": "MAL-2026-4580", "osv_published_at": "2026-05-21T09:06:31Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:13:17Z", "osv_earliest_published_at": "2026-05-21T09:06:31Z", "hours_ahead_of_osv": -542.11, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:13:29Z" }, { "id": "hpsetup-2026-06-12", "display_name": "hpsetup", "campaign": null, "detection_source": "osv", "packages": [ { "package": "hpsetup", "ecosystem": "npm", "versions": [ "4.5.7-beta.1", "4.6.0" ], "osv_entries": [ { "osv_id": "MAL-2026-4579", "osv_published_at": "2026-05-20T00:54:17Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:13:15Z", "osv_earliest_published_at": "2026-05-20T00:54:17Z", "hours_ahead_of_osv": -574.32, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:13:25Z" }, { "id": "finup-mongo-library-2026-06-12", "display_name": "finup-mongo-library", "campaign": null, "detection_source": "osv", "packages": [ { "package": "finup-mongo-library", "ecosystem": "npm", "versions": [ "4.0.4", "4.0.5", "4.0.6", "4.0.7", "4.0.9", "4.1.2", "4.1.3", "4.1.5", "4.2.1", "4.2.2" ], "osv_entries": [ { "osv_id": "MAL-2026-4564", "osv_published_at": "2026-05-21T12:28:01Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:13:11Z", "osv_earliest_published_at": "2026-05-21T12:28:01Z", "hours_ahead_of_osv": -538.75, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-18T21:51:41Z" }, { "id": "finkrouter-2026-06-12", "display_name": "finkrouter", "campaign": null, "detection_source": "osv", "packages": [ { "package": "finkrouter", "ecosystem": "npm", "versions": [ "1.1.1", "1.1.2" ], "osv_entries": [ { "osv_id": "MAL-2026-4563", "osv_published_at": "2026-05-22T10:25:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:12:57Z", "osv_earliest_published_at": "2026-05-22T10:25:25Z", "hours_ahead_of_osv": -516.79, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:13:18Z" }, { "id": "ezymail-2026-06-12", "display_name": "ezymail", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ezymail", "ecosystem": "npm", "versions": [ "3.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-4557", "osv_published_at": "2026-05-20T02:05:58Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:12:53Z", "osv_earliest_published_at": "2026-05-20T02:05:58Z", "hours_ahead_of_osv": -573.12, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:13:15Z" }, { "id": "codebuff-cli-2026-06-12", "display_name": "codebuff-cli", "campaign": null, "detection_source": "osv", "packages": [ { "package": "codebuff-cli", "ecosystem": "npm", "versions": [ "1.1.10", "1.1.11", "1.1.12" ], "osv_entries": [ { "osv_id": "MAL-2026-4533", "osv_published_at": "2026-05-22T11:16:55Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:12:51Z", "osv_earliest_published_at": "2026-05-22T11:16:55Z", "hours_ahead_of_osv": -515.93, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:13:12Z" }, { "id": "claw-messenger-2026-06-12", "display_name": "claw_messenger", "campaign": null, "detection_source": "osv", "packages": [ { "package": "claw_messenger", "ecosystem": "npm", "versions": [ "0.0.77", "0.0.78", "0.0.79", "0.0.80", "0.0.81", "0.0.83", "0.0.84", "0.0.89", "0.0.91", "0.0.94", "0.0.95", "1.0.0-beta.1", "2.1.1", "2.1.3", "2.1.4", "2.1.5" ], "osv_entries": [ { "osv_id": "MAL-2026-4526", "osv_published_at": "2026-05-21T02:59:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:12:45Z", "osv_earliest_published_at": "2026-05-21T02:59:33Z", "hours_ahead_of_osv": -548.22, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T23:27:39Z" }, { "id": "cdk-insights-2026-06-12", "display_name": "cdk-insights", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cdk-insights", "ecosystem": "npm", "versions": [ "1.42.3" ], "osv_entries": [ { "osv_id": "MAL-2026-4508", "osv_published_at": "2026-05-22T16:27:47Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:12:36Z", "osv_earliest_published_at": "2026-05-22T16:27:47Z", "hours_ahead_of_osv": -510.75, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:13:05Z" }, { "id": "bricks-builder-mcp-2026-06-12", "display_name": "bricks-builder-mcp", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bricks-builder-mcp", "ecosystem": "npm", "versions": [ "3.12.3" ], "osv_entries": [ { "osv_id": "MAL-2026-4500", "osv_published_at": "2026-05-20T08:20:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:12:35Z", "osv_earliest_published_at": "2026-05-20T08:20:22Z", "hours_ahead_of_osv": -566.87, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:13:02Z" }, { "id": "bitrix24-tasks-mcp-server-2026-06-12", "display_name": "bitrix24-tasks-mcp-server", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bitrix24-tasks-mcp-server", "ecosystem": "npm", "versions": [ "1.5.1" ], "osv_entries": [ { "osv_id": "MAL-2026-4498", "osv_published_at": "2026-05-20T11:18:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:12:35Z", "osv_earliest_published_at": "2026-05-20T11:18:50Z", "hours_ahead_of_osv": -563.9, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:12:59Z" }, { "id": "bingocode-2026-06-12", "display_name": "bingocode", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bingocode", "ecosystem": "npm", "versions": [ "1.1.163" ], "osv_entries": [ { "osv_id": "MAL-2026-4497", "osv_published_at": "2026-05-22T06:25:45Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:12:34Z", "osv_earliest_published_at": "2026-05-22T06:25:45Z", "hours_ahead_of_osv": -520.78, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:12:55Z" }, { "id": "bandkit-2026-06-12", "display_name": "bandkit", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bandkit", "ecosystem": "npm", "versions": [ "1.0.14", "1.0.16" ], "osv_entries": [ { "osv_id": "MAL-2026-4496", "osv_published_at": "2026-05-25T23:10:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:12:33Z", "osv_earliest_published_at": "2026-05-25T23:10:12Z", "hours_ahead_of_osv": -432.04, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:12:52Z" }, { "id": "aes-decode-runner-pro-2026-06-12", "display_name": "aes-decode-runner-pro", "campaign": null, "detection_source": "osv", "packages": [ { "package": "aes-decode-runner-pro", "ecosystem": "npm", "versions": [ "1.0.10", "1.0.11", "1.0.9" ], "osv_entries": [ { "osv_id": "MAL-2026-4475", "osv_published_at": "2026-05-25T16:36:18Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:12:32Z", "osv_earliest_published_at": "2026-05-25T16:36:18Z", "hours_ahead_of_osv": -438.6, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:12:49Z" }, { "id": "shwfed-nuxt-2026-06-12", "display_name": "@shwfed/nuxt", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@shwfed/nuxt", "ecosystem": "npm", "versions": [ "0.13.1" ], "osv_entries": [ { "osv_id": "MAL-2026-4444", "osv_published_at": "2026-05-22T03:05:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:12:31Z", "osv_earliest_published_at": "2026-05-22T03:05:41Z", "hours_ahead_of_osv": -524.11, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:12:45Z" }, { "id": "ikyyofc-gemini-cli-2026-06-12", "display_name": "@ikyyofc/gemini-cli", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@ikyyofc/gemini-cli", "ecosystem": "npm", "versions": [ "5.0.4", "5.0.5" ], "osv_entries": [ { "osv_id": "MAL-2026-4394", "osv_published_at": "2026-05-20T02:28:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:12:30Z", "osv_earliest_published_at": "2026-05-20T02:28:21Z", "hours_ahead_of_osv": -572.74, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:12:42Z" }, { "id": "ts-build-optimize-2026-06-12", "display_name": "ts-build-optimize", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ts-build-optimize", "ecosystem": "npm", "versions": [ "1.2.0", "1.2.1", "1.2.2" ], "osv_entries": [ { "osv_id": "MAL-2026-3774", "osv_published_at": "2026-05-14T19:25:02Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:12:29Z", "osv_earliest_published_at": "2026-05-14T19:25:02Z", "hours_ahead_of_osv": -699.79, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:12:39Z" }, { "id": "claw-subagent-service-2026-06-12", "display_name": "claw-subagent-service", "campaign": null, "detection_source": "osv", "packages": [ { "package": "claw-subagent-service", "ecosystem": "npm", "versions": [ "0.0.153", "0.0.156", "0.0.160", "0.0.161", "0.0.162", "0.0.164", "0.0.168", "0.0.170", "0.0.177", "0.0.179" ], "osv_entries": [ { "osv_id": "MAL-2026-3757", "osv_published_at": "2026-05-14T19:25:16Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:12:27Z", "osv_earliest_published_at": "2026-05-14T19:25:16Z", "hours_ahead_of_osv": -699.79, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:12:35Z" }, { "id": "aiscene-aiserver-2026-06-12", "display_name": "@aiscene/aiserver", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@aiscene/aiserver", "ecosystem": "npm", "versions": [ "1.7.0", "1.7.4", "1.7.5", "1.8.0" ], "osv_entries": [ { "osv_id": "MAL-2026-3747", "osv_published_at": "2026-05-14T18:32:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:12:22Z", "osv_earliest_published_at": "2026-05-14T18:32:53Z", "hours_ahead_of_osv": -700.66, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T23:04:48Z" }, { "id": "common-tg-service-2026-06-12", "display_name": "common-tg-service", "campaign": null, "detection_source": "osv", "packages": [ { "package": "common-tg-service", "ecosystem": "npm", "versions": [ "1.3.221", "1.3.226" ], "osv_entries": [ { "osv_id": "MAL-2026-3288", "osv_published_at": "2026-05-02T08:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:12:21Z", "osv_earliest_published_at": "2026-05-02T08:00:00Z", "hours_ahead_of_osv": -999.21, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://safedep.io/malicious-common-tg-service-npm-telegram-hijacking-framework/", "ledger_commit_at": "2026-06-16T02:35:32Z" }, { "id": "langgraphjs-toolkit-2026-06-12", "display_name": "@langgraphjs/toolkit", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@langgraphjs/toolkit", "ecosystem": "npm", "versions": [ "1.2.10", "1.2.11" ], "osv_entries": [ { "osv_id": "MAL-2026-2509", "osv_published_at": "2026-04-07T12:15:13Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:12:20Z", "osv_earliest_published_at": "2026-04-07T12:15:13Z", "hours_ahead_of_osv": -1594.95, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://app.safedep.io/community/malysis/01KNKXNEVJTCVM0RAC2DGCMP01", "ledger_commit_at": "2026-06-26T23:44:40Z", "hours_ahead_of_press": null, "confirmed_at": "2026-06-26T23:44:40Z" }, { "id": "ect-472839-2026-06-12", "display_name": "ect-472839", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ect-472839", "ecosystem": "npm", "versions": [ "100.0.0", "100.0.1" ], "osv_entries": [ { "osv_id": "MAL-2025-49282", "osv_published_at": "2025-10-31T02:28:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:12:19Z", "osv_earliest_published_at": "2025-10-31T02:28:48Z", "hours_ahead_of_osv": -5396.73, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:12:19Z" }, { "id": "auth0-net-2026-06-12", "display_name": "auth0.net", "campaign": null, "detection_source": "osv", "packages": [ { "package": "auth0.net", "ecosystem": "npm", "versions": [ "39.1.0" ], "osv_entries": [ { "osv_id": "MAL-2024-1783", "osv_published_at": "2024-06-25T12:28:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:12:15Z", "osv_earliest_published_at": "2024-06-25T12:28:41Z", "hours_ahead_of_osv": -17218.73, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:12:16Z" }, { "id": "textwrap-toolkit-stager-2026-06-12", "display_name": "textwrap-toolkit-stager", "campaign": null, "detection_source": "osv", "packages": [ { "package": "textwrap-toolkit-stager", "ecosystem": "pypi", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5722", "osv_published_at": "2026-06-12T21:02:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:11:37Z", "osv_earliest_published_at": "2026-06-12T21:02:20Z", "hours_ahead_of_osv": -2.15, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:12:02Z" }, { "id": "flexitest-2026-06-12", "display_name": "flexitest", "campaign": null, "detection_source": "osv", "packages": [ { "package": "flexitest", "ecosystem": "pypi", "versions": [ "2.2160.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5702", "osv_published_at": "2026-06-12T17:49:11Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:11:37Z", "osv_earliest_published_at": "2026-06-12T17:49:11Z", "hours_ahead_of_osv": -5.37, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:11:59Z" }, { "id": "pywingui-2026-06-12", "display_name": "pywingui", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pywingui", "ecosystem": "pypi", "versions": [ "6.1.26", "6.1.33", "6.1.34" ], "osv_entries": [ { "osv_id": "MAL-2026-4821", "osv_published_at": "2026-05-26T14:39:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:11:33Z", "osv_earliest_published_at": "2026-05-26T14:39:03Z", "hours_ahead_of_osv": -416.54, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:11:47Z" }, { "id": "silly-logger-2026-06-12", "display_name": "silly-logger", "campaign": null, "detection_source": "osv", "packages": [ { "package": "silly-logger", "ecosystem": "pypi", "versions": [ "0.1.6", "0.1.7" ], "osv_entries": [ { "osv_id": "MAL-2026-4767", "osv_published_at": "2026-05-19T21:50:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:11:32Z", "osv_earliest_published_at": "2026-05-19T21:50:33Z", "hours_ahead_of_osv": -577.35, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:11:44Z" }, { "id": "saas-common-lib-473815-2026-06-12", "display_name": "saas-common-lib-473815", "campaign": null, "detection_source": "osv", "packages": [ { "package": "saas-common-lib-473815", "ecosystem": "pypi", "versions": [ "3.4", "3.6" ], "osv_entries": [ { "osv_id": "MAL-2026-4766", "osv_published_at": "2026-05-19T20:28:28Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:11:31Z", "osv_earliest_published_at": "2026-05-19T20:28:28Z", "hours_ahead_of_osv": -578.72, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:11:41Z" }, { "id": "nvidia-nat-semantic-kernel-2026-06-12", "display_name": "nvidia-nat-semantic-kernel", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nvidia-nat-semantic-kernel", "ecosystem": "pypi", "versions": [ "1.8.0a20260607", "1.9.0a20260611" ], "osv_entries": [ { "osv_id": "MAL-2026-4760", "osv_published_at": "2026-05-21T10:47:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:11:30Z", "osv_earliest_published_at": "2026-05-21T10:47:05Z", "hours_ahead_of_osv": -540.41, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:11:37Z" }, { "id": "crw-2026-06-12", "display_name": "crw", "campaign": null, "detection_source": "osv", "packages": [ { "package": "crw", "ecosystem": "pypi", "versions": [ "0.13.0" ], "osv_entries": [ { "osv_id": "MAL-2026-4746", "osv_published_at": "2026-05-19T19:42:27Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:11:29Z", "osv_earliest_published_at": "2026-05-19T19:42:27Z", "hours_ahead_of_osv": -579.48, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:11:35Z" }, { "id": "cch-agent-2026-06-12", "display_name": "cch-agent", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cch-agent", "ecosystem": "pypi", "versions": [ "0.1.3", "0.1.6" ], "osv_entries": [ { "osv_id": "MAL-2026-4744", "osv_published_at": "2026-05-25T15:29:44Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:11:28Z", "osv_earliest_published_at": "2026-05-25T15:29:44Z", "hours_ahead_of_osv": -439.7, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:11:31Z" }, { "id": "aurapro-ui-2026-06-12", "display_name": "aurapro-ui", "campaign": null, "detection_source": "osv", "packages": [ { "package": "aurapro-ui", "ecosystem": "pypi", "versions": [ "3.4.15" ], "osv_entries": [ { "osv_id": "MAL-2026-4742", "osv_published_at": "2026-05-19T22:01:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T23:11:28Z", "osv_earliest_published_at": "2026-05-19T22:01:39Z", "hours_ahead_of_osv": -577.16, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:11:28Z" }, { "id": "web-model-bridge-2026-06-12", "display_name": "web-model-bridge", "campaign": null, "detection_source": "osv", "packages": [ { "package": "web-model-bridge", "ecosystem": "npm", "versions": [ "9999.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-5697", "osv_published_at": "2026-06-12T15:24:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T17:01:10Z", "osv_earliest_published_at": "2026-06-12T15:24:48Z", "hours_ahead_of_osv": -1.61, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T17:01:23Z" }, { "id": "voyager-web-2026-06-12", "display_name": "voyager-web", "campaign": null, "detection_source": "osv", "packages": [ { "package": "voyager-web", "ecosystem": "npm", "versions": [ "999.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5696", "osv_published_at": "2026-06-12T15:24:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T17:01:09Z", "osv_earliest_published_at": "2026-06-12T15:24:53Z", "hours_ahead_of_osv": -1.6, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T17:01:19Z" }, { "id": "internallib-v984-2026-06-12", "display_name": "internallib_v984", "campaign": null, "detection_source": "osv", "packages": [ { "package": "internallib_v984", "ecosystem": "npm", "versions": [ "1.0.1", "1.0.2", "1.0.3", "1.0.4", "1.0.5", "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5695", "osv_published_at": "2026-06-12T15:28:17Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T17:01:09Z", "osv_earliest_published_at": "2026-06-12T15:28:17Z", "hours_ahead_of_osv": -1.55, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T17:01:16Z" }, { "id": "internallib-v856-2026-06-12", "display_name": "internallib_v856", "campaign": null, "detection_source": "osv", "packages": [ { "package": "internallib_v856", "ecosystem": "npm", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5694", "osv_published_at": "2026-06-12T15:28:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T17:01:06Z", "osv_earliest_published_at": "2026-06-12T15:28:22Z", "hours_ahead_of_osv": -1.55, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T17:01:12Z" }, { "id": "sea-bound-siren-2026-06-12", "display_name": "sea-bound-siren", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sea-bound-siren", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2", "1.0.3", "1.0.4", "1.0.5", "1.0.6", "100.0.0", "12.0.0", "2.0.0", "2.0.1", "2.0.2", "2.0.3", "2.0.4", "3.0.0", "4.0.0", "7.0.1", "8.0.0", "99.0.0", "99.0.1", "99.0.2", "99.0.4", "99.0.5" ], "osv_entries": [ { "osv_id": "MAL-2026-5693", "osv_published_at": "2026-06-12T14:32:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T17:01:05Z", "osv_earliest_published_at": "2026-06-12T14:32:51Z", "hours_ahead_of_osv": -2.47, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:20:43Z" }, { "id": "nagios-xi-2026-06-12", "display_name": "nagios-xi", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nagios-xi", "ecosystem": "pypi", "versions": [ "19.4.0", "19.5.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5698", "osv_published_at": "2026-06-12T15:27:24Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T17:00:08Z", "osv_earliest_published_at": "2026-06-12T15:27:24Z", "hours_ahead_of_osv": -1.55, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T17:00:11Z" }, { "id": "jec-2026-06-12", "display_name": "jec", "campaign": null, "detection_source": "osv", "packages": [ { "package": "jec", "ecosystem": "pypi", "versions": [ "39.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5684", "osv_published_at": "2026-06-12T13:07:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T17:00:07Z", "osv_earliest_published_at": "2026-06-12T13:07:48Z", "hours_ahead_of_osv": -3.87, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T17:00:07Z" }, { "id": "coral-wraith-2026-06-12", "display_name": "coral-wraith", "campaign": null, "detection_source": "osv", "packages": [ { "package": "coral-wraith", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.10", "1.0.11", "1.0.12", "1.0.13", "1.0.14", "1.0.2", "1.0.3", "1.0.4", "1.0.5", "1.0.6", "1.0.7", "1.0.8", "1.0.9", "10.0.0", "11.0.0", "12.0.0", "12.0.1", "13.0.0", "14.0.0", "15.0.0", "16.0.0", "17.0.0", "19.0.0", "19.0.1", "2.0.1", "2.0.2", "2.0.3", "2.0.4", "20.0.0", "21.0.0", "22.0.0", "3.0.0", "4.0.0", "5.0.1", "5.0.2", "5.0.3", "6.0.0", "7.0.0", "7.0.1", "7.0.2", "7.0.3", "8.0.0", "9.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5682", "osv_published_at": "2026-06-12T01:41:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T09:25:33Z", "osv_earliest_published_at": "2026-06-12T01:41:21Z", "hours_ahead_of_osv": -7.74, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:19:35Z" }, { "id": "trongapy-2026-06-12", "display_name": "trongapy", "campaign": null, "detection_source": "osv", "packages": [ { "package": "trongapy", "ecosystem": "pypi", "versions": [ "0.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5683", "osv_published_at": "2026-06-12T07:33:10Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T09:24:57Z", "osv_earliest_published_at": "2026-06-12T07:33:10Z", "hours_ahead_of_osv": -1.86, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T09:24:57Z" }, { "id": "internallib-v557-2026-06-12", "display_name": "internallib_v557", "campaign": null, "detection_source": "osv", "packages": [ { "package": "internallib_v557", "ecosystem": "npm", "versions": [ "1.0.1", "1.0.10", "1.0.11", "1.0.12", "1.0.13", "1.0.14", "1.0.15", "1.0.16", "1.0.18", "1.0.19", "1.0.2", "1.0.21", "1.0.22", "1.0.23", "1.0.24", "1.0.3", "1.0.4", "1.0.5", "1.0.6", "1.0.7", "1.0.8", "1.0.9" ], "osv_entries": [ { "osv_id": "MAL-2026-5678", "osv_published_at": "2026-06-11T21:57:47Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T03:21:38Z", "osv_earliest_published_at": "2026-06-11T21:57:47Z", "hours_ahead_of_osv": -5.4, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T17:01:02Z" }, { "id": "trongap-2026-06-12", "display_name": "trongap", "campaign": null, "detection_source": "osv", "packages": [ { "package": "trongap", "ecosystem": "pypi", "versions": [ "0.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5681", "osv_published_at": "2026-06-11T23:42:45Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T03:20:59Z", "osv_earliest_published_at": "2026-06-11T23:42:45Z", "hours_ahead_of_osv": -3.64, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T03:21:05Z" }, { "id": "bittensor-burn-message-2026-06-12", "display_name": "bittensor-burn-message", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bittensor-burn-message", "ecosystem": "pypi", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5680", "osv_published_at": "2026-06-11T23:08:13Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T03:20:59Z", "osv_earliest_published_at": "2026-06-11T23:08:13Z", "hours_ahead_of_osv": -4.21, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T03:21:02Z" }, { "id": "pylogxo-2026-06-12", "display_name": "pylogxo", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pylogxo", "ecosystem": "pypi", "versions": [ "1.0.3", "1.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-5679", "osv_published_at": "2026-06-11T21:23:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-12T03:20:58Z", "osv_earliest_published_at": "2026-06-11T21:23:33Z", "hours_ahead_of_osv": -5.96, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T03:20:59Z" }, { "id": "worker-build-2026-06-11", "display_name": "worker-build", "campaign": null, "detection_source": "osv", "packages": [ { "package": "worker-build", "ecosystem": "npm", "versions": [ "9.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5677", "osv_published_at": "2026-06-11T19:15:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T21:17:47Z", "osv_earliest_published_at": "2026-06-11T19:15:51Z", "hours_ahead_of_osv": -2.03, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T21:17:48Z" }, { "id": "pc-optimizer-2026-06-11", "display_name": "pc-optimizer", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pc-optimizer", "ecosystem": "npm", "versions": [ "1.0.1", "1.0.2", "1.0.9" ], "osv_entries": [ { "osv_id": "MAL-2026-5653", "osv_published_at": "2026-06-11T13:28:04Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T15:37:39Z", "osv_earliest_published_at": "2026-06-11T13:28:04Z", "hours_ahead_of_osv": -2.16, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T15:37:39Z" }, { "id": "unified-ui-components-library-2026-06-11", "display_name": "unified-ui-components-library", "campaign": null, "detection_source": "osv", "packages": [ { "package": "unified-ui-components-library", "ecosystem": "npm", "versions": [ "10.0.1", "10.0.2", "10.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-5648", "osv_published_at": "2026-06-11T13:23:56Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T14:32:28Z", "osv_earliest_published_at": "2026-06-11T13:23:56Z", "hours_ahead_of_osv": -1.14, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T14:33:10Z" }, { "id": "ts-ecro-2026-06-11", "display_name": "ts-ecro", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ts-ecro", "ecosystem": "npm", "versions": [ "0.0.5", "0.0.6" ], "osv_entries": [ { "osv_id": "MAL-2026-5647", "osv_published_at": "2026-06-11T13:19:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T14:32:27Z", "osv_earliest_published_at": "2026-06-11T13:19:22Z", "hours_ahead_of_osv": -1.22, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T14:33:06Z" }, { "id": "sn-internal-testjgsakjdkjadkjahsdkjad-2026-06-11", "display_name": "sn-internal-testjgsakjdkjadkjahsdkjad", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sn-internal-testjgsakjdkjadkjahsdkjad", "ecosystem": "npm", "versions": [ "2.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5646", "osv_published_at": "2026-06-11T12:38:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T14:32:27Z", "osv_earliest_published_at": "2026-06-11T12:38:00Z", "hours_ahead_of_osv": -1.91, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T14:33:02Z" }, { "id": "sn-internal-test-2026-06-11", "display_name": "sn-internal-test", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sn-internal-test", "ecosystem": "npm", "versions": [ "1.9.9", "2.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5645", "osv_published_at": "2026-06-11T12:38:09Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T14:32:26Z", "osv_earliest_published_at": "2026-06-11T12:38:09Z", "hours_ahead_of_osv": -1.9, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T14:32:58Z" }, { "id": "self-certificate-2026-06-11", "display_name": "self-certificate", "campaign": null, "detection_source": "osv", "packages": [ { "package": "self-certificate", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5644", "osv_published_at": "2026-06-11T13:02:34Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T14:32:26Z", "osv_earliest_published_at": "2026-06-11T13:02:34Z", "hours_ahead_of_osv": -1.5, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T14:32:53Z" }, { "id": "parket-slot-2026-06-11", "display_name": "parket-slot", "campaign": null, "detection_source": "osv", "packages": [ { "package": "parket-slot", "ecosystem": "npm", "versions": [ "0.0.6" ], "osv_entries": [ { "osv_id": "MAL-2026-5643", "osv_published_at": "2026-06-11T12:42:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T14:32:25Z", "osv_earliest_published_at": "2026-06-11T12:42:07Z", "hours_ahead_of_osv": -1.84, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T14:32:49Z" }, { "id": "optional-cpu-features-2026-06-11", "display_name": "optional-cpu-features", "campaign": null, "detection_source": "osv", "packages": [ { "package": "optional-cpu-features", "ecosystem": "npm", "versions": [ "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-5642", "osv_published_at": "2026-06-11T13:12:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T14:32:25Z", "osv_earliest_published_at": "2026-06-11T13:12:23Z", "hours_ahead_of_osv": -1.33, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T14:32:46Z" }, { "id": "goreleaser-run-2026-06-11", "display_name": "goreleaser-run", "campaign": null, "detection_source": "osv", "packages": [ { "package": "goreleaser-run", "ecosystem": "npm", "versions": [ "2.16.0", "2.16.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5641", "osv_published_at": "2026-06-11T12:53:24Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T14:32:25Z", "osv_earliest_published_at": "2026-06-11T12:53:24Z", "hours_ahead_of_osv": -1.65, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T14:32:42Z" }, { "id": "ecto-corsair-whisper-6f3b9-2026-06-11", "display_name": "ecto-corsair-whisper-6f3b9", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ecto-corsair-whisper-6f3b9", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.10", "1.0.11", "1.0.12", "1.0.13", "1.0.14", "1.0.15", "1.0.16", "1.0.17", "1.0.18", "1.0.19", "1.0.2", "1.0.20", "1.0.21", "1.0.22", "1.0.23", "1.0.24", "1.0.25", "1.0.3", "1.0.4", "1.0.5", "1.0.7", "1.0.8" ], "osv_entries": [ { "osv_id": "MAL-2026-5640", "osv_published_at": "2026-06-11T12:40:47Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T14:32:24Z", "osv_earliest_published_at": "2026-06-11T12:40:47Z", "hours_ahead_of_osv": -1.86, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:17:57Z" }, { "id": "tt-aem-tt4a-shared-components-2026-06-11", "display_name": "@tt-aem-tt4a/shared-components", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@tt-aem-tt4a/shared-components", "ecosystem": "npm", "versions": [ "10.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5639", "osv_published_at": "2026-06-11T12:30:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T14:32:23Z", "osv_earliest_published_at": "2026-06-11T12:30:25Z", "hours_ahead_of_osv": -2.03, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T14:32:34Z" }, { "id": "buffer-utilities-2026-06-11", "display_name": "buffer-utilities", "campaign": null, "detection_source": "osv", "packages": [ { "package": "buffer-utilities", "ecosystem": "npm", "versions": [ "1.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5087", "osv_published_at": "2026-05-30T09:02:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T14:32:22Z", "osv_earliest_published_at": "2026-05-30T09:02:03Z", "hours_ahead_of_osv": -293.51, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T14:32:26Z" }, { "id": "api-rs-node-2026-06-11", "display_name": "api-rs-node", "campaign": null, "detection_source": "osv", "packages": [ { "package": "api-rs-node", "ecosystem": "npm", "versions": [ "4.3.2" ], "osv_entries": [ { "osv_id": "MAL-2026-4348", "osv_published_at": "2026-05-25T17:38:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T14:32:21Z", "osv_earliest_published_at": "2026-05-25T17:38:00Z", "hours_ahead_of_osv": -404.91, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T14:32:22Z" }, { "id": "bibip-bip-2026-06-11", "display_name": "bibip-bip", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bibip-bip", "ecosystem": "pypi", "versions": [ "0.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5649", "osv_published_at": "2026-06-11T12:02:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T14:31:43Z", "osv_earliest_published_at": "2026-06-11T12:02:00Z", "hours_ahead_of_osv": -2.5, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T14:31:44Z" }, { "id": "edu-npm-postinstall-demo2-2026-06-11", "display_name": "edu-npm-postinstall-demo2", "campaign": null, "detection_source": "osv", "packages": [ { "package": "edu-npm-postinstall-demo2", "ecosystem": "npm", "versions": [ "1.0.1", "1.0.2", "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-5624", "osv_published_at": "2026-06-11T08:25:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:14:45Z", "osv_earliest_published_at": "2026-06-11T08:25:49Z", "hours_ahead_of_osv": -4.82, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:17:10Z" }, { "id": "edu-npm-dependency-chain-demo-2026-06-11", "display_name": "edu-npm-dependency-chain-demo", "campaign": null, "detection_source": "osv", "packages": [ { "package": "edu-npm-dependency-chain-demo", "ecosystem": "npm", "versions": [ "1.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-5623", "osv_published_at": "2026-06-11T08:25:54Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:14:43Z", "osv_earliest_published_at": "2026-06-11T08:25:54Z", "hours_ahead_of_osv": -4.81, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:14:56Z" }, { "id": "whatnot-web-www-legacy-2026-06-11", "display_name": "@whatnot-web/www-legacy", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@whatnot-web/www-legacy", "ecosystem": "npm", "versions": [ "99.1.1", "99.1.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5622", "osv_published_at": "2026-06-11T09:26:29Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:14:41Z", "osv_earliest_published_at": "2026-06-11T09:26:29Z", "hours_ahead_of_osv": -3.8, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T14:32:30Z" }, { "id": "twilio-sdk-2026-06-11", "display_name": "twilio-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "twilio-sdk", "ecosystem": "npm", "versions": [ "0.1.0", "0.1.1", "0.1.2", "0.1.3", "0.2.0", "0.2.1", "0.2.2", "0.2.3", "0.2.4" ], "osv_entries": [ { "osv_id": "MAL-2026-5621", "osv_published_at": "2026-06-11T06:13:02Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:14:39Z", "osv_earliest_published_at": "2026-06-11T06:13:02Z", "hours_ahead_of_osv": -7.03, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:14:49Z" }, { "id": "telebot-server-2026-06-11", "display_name": "telebot-server", "campaign": null, "detection_source": "osv", "packages": [ { "package": "telebot-server", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5620", "osv_published_at": "2026-06-11T06:17:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:14:21Z", "osv_earliest_published_at": "2026-06-11T06:17:40Z", "hours_ahead_of_osv": -6.94, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:14:45Z" }, { "id": "tailwind-typography-plus-2026-06-11", "display_name": "tailwind-typography-plus", "campaign": null, "detection_source": "osv", "packages": [ { "package": "tailwind-typography-plus", "ecosystem": "npm", "versions": [ "2.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5619", "osv_published_at": "2026-06-11T07:38:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:14:19Z", "osv_earliest_published_at": "2026-06-11T07:38:41Z", "hours_ahead_of_osv": -5.59, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:14:41Z" }, { "id": "tailwind-animator-scroll-2026-06-11", "display_name": "tailwind-animator-scroll", "campaign": null, "detection_source": "osv", "packages": [ { "package": "tailwind-animator-scroll", "ecosystem": "npm", "versions": [ "1.7.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5618", "osv_published_at": "2026-06-11T07:39:13Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:14:17Z", "osv_earliest_published_at": "2026-06-11T07:39:13Z", "hours_ahead_of_osv": -5.58, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:14:37Z" }, { "id": "sysnu-2026-06-11", "display_name": "sysnu", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sysnu", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5617", "osv_published_at": "2026-06-11T06:49:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:14:15Z", "osv_earliest_published_at": "2026-06-11T06:49:33Z", "hours_ahead_of_osv": -6.41, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:14:34Z" }, { "id": "sysbu-2026-06-11", "display_name": "sysbu", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sysbu", "ecosystem": "npm", "versions": [ "1.0.1", "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5616", "osv_published_at": "2026-06-11T06:49:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:14:11Z", "osv_earliest_published_at": "2026-06-11T06:49:35Z", "hours_ahead_of_osv": -6.41, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:14:30Z" }, { "id": "sysau-2026-06-11", "display_name": "sysau", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sysau", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5615", "osv_published_at": "2026-06-11T06:49:34Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:14:07Z", "osv_earliest_published_at": "2026-06-11T06:49:34Z", "hours_ahead_of_osv": -6.41, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:14:26Z" }, { "id": "janus-erc20-2026-06-11", "display_name": "janus-erc20", "campaign": null, "detection_source": "osv", "packages": [ { "package": "janus-erc20", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5614", "osv_published_at": "2026-06-11T07:25:34Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:14:05Z", "osv_earliest_published_at": "2026-06-11T07:25:34Z", "hours_ahead_of_osv": -5.81, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:14:22Z" }, { "id": "internallib-v346-2026-06-11", "display_name": "internallib_v346", "campaign": null, "detection_source": "osv", "packages": [ { "package": "internallib_v346", "ecosystem": "npm", "versions": [ "1.0.3", "1.0.5", "1.0.9", "1.1.0", "1.1.1", "1.1.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5613", "osv_published_at": "2026-06-11T07:19:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:14:03Z", "osv_earliest_published_at": "2026-06-11T07:19:48Z", "hours_ahead_of_osv": -5.9, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T17:00:53Z" }, { "id": "gpt-sdk-2026-06-11", "display_name": "gpt-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "gpt-sdk", "ecosystem": "npm", "versions": [ "0.1.0", "0.1.1", "0.1.2", "0.1.3", "0.2.0", "0.2.1", "0.2.2", "0.2.3", "0.2.4" ], "osv_entries": [ { "osv_id": "MAL-2026-5612", "osv_published_at": "2026-06-11T06:33:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:13:55Z", "osv_earliest_published_at": "2026-06-11T06:33:08Z", "hours_ahead_of_osv": -6.68, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:14:14Z" }, { "id": "datetime-toolkit-2026-06-11", "display_name": "datetime-toolkit", "campaign": null, "detection_source": "osv", "packages": [ { "package": "datetime-toolkit", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-5611", "osv_published_at": "2026-06-11T07:23:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:13:37Z", "osv_earliest_published_at": "2026-06-11T07:23:50Z", "hours_ahead_of_osv": -5.83, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:17:06Z" }, { "id": "coderzero-2026-06-11", "display_name": "coderzero", "campaign": null, "detection_source": "osv", "packages": [ { "package": "coderzero", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2", "1.0.3", "1.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-5610", "osv_published_at": "2026-06-11T06:39:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:13:35Z", "osv_earliest_published_at": "2026-06-11T06:39:39Z", "hours_ahead_of_osv": -6.57, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:14:06Z" }, { "id": "clean-my-pc-2026-06-11", "display_name": "clean-my-pc", "campaign": null, "detection_source": "osv", "packages": [ { "package": "clean-my-pc", "ecosystem": "npm", "versions": [ "1.0.1", "1.0.2", "1.0.3", "1.0.4", "1.0.5", "1.0.9" ], "osv_entries": [ { "osv_id": "MAL-2026-5609", "osv_published_at": "2026-06-11T06:52:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:13:25Z", "osv_earliest_published_at": "2026-06-11T06:52:05Z", "hours_ahead_of_osv": -6.36, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:14:02Z" }, { "id": "claimora-2026-06-11", "display_name": "claimora", "campaign": null, "detection_source": "osv", "packages": [ { "package": "claimora", "ecosystem": "npm", "versions": [ "1.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-5608", "osv_published_at": "2026-06-11T07:28:44Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:13:13Z", "osv_earliest_published_at": "2026-06-11T07:28:44Z", "hours_ahead_of_osv": -5.74, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:13:58Z" }, { "id": "chai-net-test-2026-06-11", "display_name": "chai-net-test", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-net-test", "ecosystem": "npm", "versions": [ "1.1.0", "1.1.2", "1.1.3" ], "osv_entries": [ { "osv_id": "MAL-2026-5607", "osv_published_at": "2026-06-11T07:41:17Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:13:11Z", "osv_earliest_published_at": "2026-06-11T07:41:17Z", "hours_ahead_of_osv": -5.53, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:17:02Z" }, { "id": "chai-dec-2026-06-11", "display_name": "chai-dec", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-dec", "ecosystem": "npm", "versions": [ "2.3.5" ], "osv_entries": [ { "osv_id": "MAL-2026-5606", "osv_published_at": "2026-06-11T07:18:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:13:09Z", "osv_earliest_published_at": "2026-06-11T07:18:08Z", "hours_ahead_of_osv": -5.92, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:13:50Z" }, { "id": "chai-as-victimed-2026-06-11", "display_name": "chai-as-victimed", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-victimed", "ecosystem": "npm", "versions": [ "6.1.21" ], "osv_entries": [ { "osv_id": "MAL-2026-5605", "osv_published_at": "2026-06-11T07:19:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:13:07Z", "osv_earliest_published_at": "2026-06-11T07:19:25Z", "hours_ahead_of_osv": -5.89, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:13:47Z" }, { "id": "cache-section-helper-2026-06-11", "display_name": "cache-section-helper", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cache-section-helper", "ecosystem": "npm", "versions": [ "1.0.7" ], "osv_entries": [ { "osv_id": "MAL-2026-5604", "osv_published_at": "2026-06-11T07:24:13Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:13:05Z", "osv_earliest_published_at": "2026-06-11T07:24:13Z", "hours_ahead_of_osv": -5.81, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:13:43Z" }, { "id": "backup-my-data-2026-06-11", "display_name": "backup-my-data", "campaign": null, "detection_source": "osv", "packages": [ { "package": "backup-my-data", "ecosystem": "npm", "versions": [ "1.0.1", "1.0.2", "1.0.9" ], "osv_entries": [ { "osv_id": "MAL-2026-5603", "osv_published_at": "2026-06-11T06:53:18Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:13:03Z", "osv_earliest_published_at": "2026-06-11T06:53:18Z", "hours_ahead_of_osv": -6.33, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:13:39Z" }, { "id": "0x2ai-zoe-2026-06-11", "display_name": "0x2ai-zoe", "campaign": null, "detection_source": "osv", "packages": [ { "package": "0x2ai-zoe", "ecosystem": "npm", "versions": [ "0.2.0", "1.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5602", "osv_published_at": "2026-06-11T07:16:10Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:12:57Z", "osv_earliest_published_at": "2026-06-11T07:16:10Z", "hours_ahead_of_osv": -5.95, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:13:35Z" }, { "id": "0x2ai-multi-q-2026-06-11", "display_name": "0x2ai-multi-q", "campaign": null, "detection_source": "osv", "packages": [ { "package": "0x2ai-multi-q", "ecosystem": "npm", "versions": [ "0.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5601", "osv_published_at": "2026-06-11T07:16:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:12:53Z", "osv_earliest_published_at": "2026-06-11T07:16:22Z", "hours_ahead_of_osv": -5.94, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:13:32Z" }, { "id": "0x2ai-multi-mq-2026-06-11", "display_name": "0x2ai-multi-mq", "campaign": null, "detection_source": "osv", "packages": [ { "package": "0x2ai-multi-mq", "ecosystem": "npm", "versions": [ "0.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5600", "osv_published_at": "2026-06-11T07:16:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:12:51Z", "osv_earliest_published_at": "2026-06-11T07:16:23Z", "hours_ahead_of_osv": -5.94, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:13:28Z" }, { "id": "0x2ai-ivo-2026-06-11", "display_name": "0x2ai-ivo", "campaign": null, "detection_source": "osv", "packages": [ { "package": "0x2ai-ivo", "ecosystem": "npm", "versions": [ "1.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5599", "osv_published_at": "2026-06-11T07:16:15Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:12:49Z", "osv_earliest_published_at": "2026-06-11T07:16:15Z", "hours_ahead_of_osv": -5.94, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:13:24Z" }, { "id": "0x2ai-demo9x-2026-06-11", "display_name": "0x2ai-demo9x", "campaign": null, "detection_source": "osv", "packages": [ { "package": "0x2ai-demo9x", "ecosystem": "npm", "versions": [ "1.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5598", "osv_published_at": "2026-06-11T07:16:11Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:12:47Z", "osv_earliest_published_at": "2026-06-11T07:16:11Z", "hours_ahead_of_osv": -5.94, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:13:20Z" }, { "id": "0x2ai-demo9-2026-06-11", "display_name": "0x2ai-demo9", "campaign": null, "detection_source": "osv", "packages": [ { "package": "0x2ai-demo9", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5597", "osv_published_at": "2026-06-11T07:16:27Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:12:45Z", "osv_earliest_published_at": "2026-06-11T07:16:27Z", "hours_ahead_of_osv": -5.94, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:13:16Z" }, { "id": "0x2ai-demo8x-2026-06-11", "display_name": "0x2ai-demo8x", "campaign": null, "detection_source": "osv", "packages": [ { "package": "0x2ai-demo8x", "ecosystem": "npm", "versions": [ "1.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5596", "osv_published_at": "2026-06-11T07:16:14Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:12:43Z", "osv_earliest_published_at": "2026-06-11T07:16:14Z", "hours_ahead_of_osv": -5.94, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:13:13Z" }, { "id": "0x2ai-demo8-2026-06-11", "display_name": "0x2ai-demo8", "campaign": null, "detection_source": "osv", "packages": [ { "package": "0x2ai-demo8", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5595", "osv_published_at": "2026-06-11T07:16:26Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:12:41Z", "osv_earliest_published_at": "2026-06-11T07:16:26Z", "hours_ahead_of_osv": -5.94, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:13:09Z" }, { "id": "0x2ai-demo7x-2026-06-11", "display_name": "0x2ai-demo7x", "campaign": null, "detection_source": "osv", "packages": [ { "package": "0x2ai-demo7x", "ecosystem": "npm", "versions": [ "1.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5594", "osv_published_at": "2026-06-11T07:16:16Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:12:39Z", "osv_earliest_published_at": "2026-06-11T07:16:16Z", "hours_ahead_of_osv": -5.94, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:13:05Z" }, { "id": "0x2ai-demo6x-2026-06-11", "display_name": "0x2ai-demo6x", "campaign": null, "detection_source": "osv", "packages": [ { "package": "0x2ai-demo6x", "ecosystem": "npm", "versions": [ "1.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5593", "osv_published_at": "2026-06-11T07:16:17Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:12:37Z", "osv_earliest_published_at": "2026-06-11T07:16:17Z", "hours_ahead_of_osv": -5.94, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:13:01Z" }, { "id": "0x2ai-demo6-2026-06-11", "display_name": "0x2ai-demo6", "campaign": null, "detection_source": "osv", "packages": [ { "package": "0x2ai-demo6", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5592", "osv_published_at": "2026-06-11T07:16:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:12:35Z", "osv_earliest_published_at": "2026-06-11T07:16:25Z", "hours_ahead_of_osv": -5.94, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:12:58Z" }, { "id": "0x2ai-demo4-2026-06-11", "display_name": "0x2ai-demo4", "campaign": null, "detection_source": "osv", "packages": [ { "package": "0x2ai-demo4", "ecosystem": "npm", "versions": [ "1.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5591", "osv_published_at": "2026-06-11T07:16:18Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:12:33Z", "osv_earliest_published_at": "2026-06-11T07:16:18Z", "hours_ahead_of_osv": -5.94, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:12:54Z" }, { "id": "0x2ai-demo3-2026-06-11", "display_name": "0x2ai-demo3", "campaign": null, "detection_source": "osv", "packages": [ { "package": "0x2ai-demo3", "ecosystem": "npm", "versions": [ "1.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5590", "osv_published_at": "2026-06-11T07:16:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:12:31Z", "osv_earliest_published_at": "2026-06-11T07:16:20Z", "hours_ahead_of_osv": -5.94, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:12:50Z" }, { "id": "0x2ai-demo2-2026-06-11", "display_name": "0x2ai-demo2", "campaign": null, "detection_source": "osv", "packages": [ { "package": "0x2ai-demo2", "ecosystem": "npm", "versions": [ "1.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5589", "osv_published_at": "2026-06-11T07:16:18Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:12:29Z", "osv_earliest_published_at": "2026-06-11T07:16:18Z", "hours_ahead_of_osv": -5.94, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:12:47Z" }, { "id": "0x2ai-demo10x-2026-06-11", "display_name": "0x2ai-demo10x", "campaign": null, "detection_source": "osv", "packages": [ { "package": "0x2ai-demo10x", "ecosystem": "npm", "versions": [ "1.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5588", "osv_published_at": "2026-06-11T07:16:17Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:12:27Z", "osv_earliest_published_at": "2026-06-11T07:16:17Z", "hours_ahead_of_osv": -5.94, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:12:42Z" }, { "id": "0x2ai-demo1-2026-06-11", "display_name": "0x2ai-demo1", "campaign": null, "detection_source": "osv", "packages": [ { "package": "0x2ai-demo1", "ecosystem": "npm", "versions": [ "1.2.0", "2.0.0", "2.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5587", "osv_published_at": "2026-06-11T07:16:13Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:12:25Z", "osv_earliest_published_at": "2026-06-11T07:16:13Z", "hours_ahead_of_osv": -5.94, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:12:39Z" }, { "id": "wp-env-2026-06-11", "display_name": "wp-env", "campaign": null, "detection_source": "osv", "packages": [ { "package": "wp-env", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5582", "osv_published_at": "2026-06-11T05:05:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:12:19Z", "osv_earliest_published_at": "2026-06-11T05:05:53Z", "hours_ahead_of_osv": -8.11, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:12:34Z" }, { "id": "webpack-patch-2026-06-11", "display_name": "webpack-patch", "campaign": null, "detection_source": "osv", "packages": [ { "package": "webpack-patch", "ecosystem": "npm", "versions": [ "1.1.7" ], "osv_entries": [ { "osv_id": "MAL-2026-5581", "osv_published_at": "2026-06-11T05:06:30Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:12:17Z", "osv_earliest_published_at": "2026-06-11T05:06:30Z", "hours_ahead_of_osv": -8.1, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:12:30Z" }, { "id": "webpack-cache-reset-2026-06-11", "display_name": "webpack-cache-reset", "campaign": null, "detection_source": "osv", "packages": [ { "package": "webpack-cache-reset", "ecosystem": "npm", "versions": [ "0.1.4" ], "osv_entries": [ { "osv_id": "MAL-2026-5580", "osv_published_at": "2026-06-11T05:06:29Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:12:15Z", "osv_earliest_published_at": "2026-06-11T05:06:29Z", "hours_ahead_of_osv": -8.1, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:12:26Z" }, { "id": "webpack-cache-cycle-2026-06-11", "display_name": "webpack-cache-cycle", "campaign": null, "detection_source": "osv", "packages": [ { "package": "webpack-cache-cycle", "ecosystem": "npm", "versions": [ "0.1.4" ], "osv_entries": [ { "osv_id": "MAL-2026-5579", "osv_published_at": "2026-06-11T05:06:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:12:13Z", "osv_earliest_published_at": "2026-06-11T05:06:33Z", "hours_ahead_of_osv": -8.09, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:12:23Z" }, { "id": "webpack-cache-clean-2026-06-11", "display_name": "webpack-cache-clean", "campaign": null, "detection_source": "osv", "packages": [ { "package": "webpack-cache-clean", "ecosystem": "npm", "versions": [ "0.1.4" ], "osv_entries": [ { "osv_id": "MAL-2026-5578", "osv_published_at": "2026-06-11T05:06:29Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:12:11Z", "osv_earliest_published_at": "2026-06-11T05:06:29Z", "hours_ahead_of_osv": -8.1, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:12:19Z" }, { "id": "web-pool-2026-06-11", "display_name": "web-pool", "campaign": null, "detection_source": "osv", "packages": [ { "package": "web-pool", "ecosystem": "npm", "versions": [ "2.3.5" ], "osv_entries": [ { "osv_id": "MAL-2026-5577", "osv_published_at": "2026-06-11T05:10:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:12:09Z", "osv_earliest_published_at": "2026-06-11T05:10:52Z", "hours_ahead_of_osv": -8.02, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:12:15Z" }, { "id": "vite-tsconfig-2026-06-11", "display_name": "vite-tsconfig", "campaign": null, "detection_source": "osv", "packages": [ { "package": "vite-tsconfig", "ecosystem": "npm", "versions": [ "1.1.0", "1.1.2", "1.1.3" ], "osv_entries": [ { "osv_id": "MAL-2026-5576", "osv_published_at": "2026-06-11T05:21:54Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:12:07Z", "osv_earliest_published_at": "2026-06-11T05:21:54Z", "hours_ahead_of_osv": -7.84, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:16:59Z" }, { "id": "testzapier-2026-06-11", "display_name": "testzapier", "campaign": null, "detection_source": "osv", "packages": [ { "package": "testzapier", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5575", "osv_published_at": "2026-06-11T04:37:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:12:05Z", "osv_earliest_published_at": "2026-06-11T04:37:03Z", "hours_ahead_of_osv": -8.58, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:12:07Z" }, { "id": "spotify-url-resolver-2026-06-11", "display_name": "spotify-url-resolver", "campaign": null, "detection_source": "osv", "packages": [ { "package": "spotify-url-resolver", "ecosystem": "npm", "versions": [ "3.4.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5574", "osv_published_at": "2026-06-11T04:41:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:12:01Z", "osv_earliest_published_at": "2026-06-11T04:41:52Z", "hours_ahead_of_osv": -8.5, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:12:04Z" }, { "id": "solana-rpc-pool-2026-06-11", "display_name": "solana-rpc-pool", "campaign": null, "detection_source": "osv", "packages": [ { "package": "solana-rpc-pool", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5573", "osv_published_at": "2026-06-11T04:44:58Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:11:59Z", "osv_earliest_published_at": "2026-06-11T04:44:58Z", "hours_ahead_of_osv": -8.45, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:12:00Z" }, { "id": "sendgrid-sdk-2026-06-11", "display_name": "sendgrid-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sendgrid-sdk", "ecosystem": "npm", "versions": [ "0.1.0", "0.1.1", "0.1.2", "0.1.3", "0.2.0", "0.2.1", "0.2.2", "0.2.3", "0.2.4" ], "osv_entries": [ { "osv_id": "MAL-2026-5572", "osv_published_at": "2026-06-11T05:10:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:11:57Z", "osv_earliest_published_at": "2026-06-11T05:10:36Z", "hours_ahead_of_osv": -8.02, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:11:57Z" }, { "id": "qa-handoff-2026-06-11", "display_name": "qa-handoff", "campaign": null, "detection_source": "osv", "packages": [ { "package": "qa-handoff", "ecosystem": "npm", "versions": [ "0.13.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5571", "osv_published_at": "2026-06-11T04:36:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:11:39Z", "osv_earliest_published_at": "2026-06-11T04:36:36Z", "hours_ahead_of_osv": -8.58, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:11:49Z" }, { "id": "nim-submit-for-test-2026-06-11", "display_name": "nim-submit-for-test", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nim-submit-for-test", "ecosystem": "npm", "versions": [ "2.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5570", "osv_published_at": "2026-06-11T04:46:02Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:11:37Z", "osv_earliest_published_at": "2026-06-11T04:46:02Z", "hours_ahead_of_osv": -8.43, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:11:45Z" }, { "id": "js-crypto-promise-2026-06-11", "display_name": "js-crypto-promise", "campaign": null, "detection_source": "osv", "packages": [ { "package": "js-crypto-promise", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5569", "osv_published_at": "2026-06-11T04:49:31Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:11:35Z", "osv_earliest_published_at": "2026-06-11T04:49:31Z", "hours_ahead_of_osv": -8.37, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:11:42Z" }, { "id": "forge-jsx2-2026-06-11", "display_name": "forge-jsx2", "campaign": null, "detection_source": "osv", "packages": [ { "package": "forge-jsx2", "ecosystem": "npm", "versions": [ "1.0.124" ], "osv_entries": [ { "osv_id": "MAL-2026-5568", "osv_published_at": "2026-06-11T04:47:43Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:11:33Z", "osv_earliest_published_at": "2026-06-11T04:47:43Z", "hours_ahead_of_osv": -8.4, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:11:38Z" }, { "id": "field-upload-tool-2026-06-11", "display_name": "field-upload-tool", "campaign": null, "detection_source": "osv", "packages": [ { "package": "field-upload-tool", "ecosystem": "npm", "versions": [ "1.10.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5567", "osv_published_at": "2026-06-11T04:45:24Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:11:31Z", "osv_earliest_published_at": "2026-06-11T04:45:24Z", "hours_ahead_of_osv": -8.44, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:11:34Z" }, { "id": "fastify-addon-2026-06-11", "display_name": "fastify-addon", "campaign": null, "detection_source": "osv", "packages": [ { "package": "fastify-addon", "ecosystem": "npm", "versions": [ "5.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5566", "osv_published_at": "2026-06-11T05:11:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:11:29Z", "osv_earliest_published_at": "2026-06-11T05:11:06Z", "hours_ahead_of_osv": -8.01, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:11:31Z" }, { "id": "ai-sdk-helpers-2026-06-11", "display_name": "ai-sdk-helpers", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ai-sdk-helpers", "ecosystem": "npm", "versions": [ "0.1.0", "0.1.1", "0.1.2", "0.2.0", "0.2.1", "0.3.0", "0.3.1", "0.3.2", "0.4.0", "0.4.1", "0.5.0", "1.0.0", "1.0.1", "1.1.0", "1.1.1", "1.2.0", "1.2.1", "1.3.0", "1.3.1", "1.4.0", "1.4.1", "1.4.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5565", "osv_published_at": "2026-06-11T05:17:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:11:27Z", "osv_earliest_published_at": "2026-06-11T05:17:41Z", "hours_ahead_of_osv": -7.9, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:11:27Z" }, { "id": "tonsdk-core-2026-06-11", "display_name": "@tonsdk/core", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@tonsdk/core", "ecosystem": "npm", "versions": [ "0.9.3" ], "osv_entries": [ { "osv_id": "MAL-2026-5564", "osv_published_at": "2026-06-11T05:00:02Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:10:43Z", "osv_earliest_published_at": "2026-06-11T05:00:02Z", "hours_ahead_of_osv": -8.18, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:10:47Z" }, { "id": "sentry-internal-sdk-profiling-node-2026-06-11", "display_name": "@sentry-internal-sdk/profiling-node", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@sentry-internal-sdk/profiling-node", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5563", "osv_published_at": "2026-06-11T04:48:58Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:10:41Z", "osv_earliest_published_at": "2026-06-11T04:48:58Z", "hours_ahead_of_osv": -8.36, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:10:43Z" }, { "id": "koadz-sso-2026-06-11", "display_name": "@koadz/sso", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@koadz/sso", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5562", "osv_published_at": "2026-06-11T04:45:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:10:37Z", "osv_earliest_published_at": "2026-06-11T04:45:50Z", "hours_ahead_of_osv": -8.41, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:10:40Z" }, { "id": "bestlzk-sectest-2026-06-11", "display_name": "@bestlzk/sectest", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@bestlzk/sectest", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5561", "osv_published_at": "2026-06-11T05:00:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:10:35Z", "osv_earliest_published_at": "2026-06-11T05:00:38Z", "hours_ahead_of_osv": -8.17, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:10:36Z" }, { "id": "solana-web3-community-2026-06-11", "display_name": "solana-web3-community", "campaign": null, "detection_source": "osv", "packages": [ { "package": "solana-web3-community", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5560", "osv_published_at": "2026-06-11T02:58:17Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:10:33Z", "osv_earliest_published_at": "2026-06-11T02:58:17Z", "hours_ahead_of_osv": -10.2, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:10:33Z" }, { "id": "solana-dev-tools-2026-06-11", "display_name": "solana-dev-tools", "campaign": null, "detection_source": "osv", "packages": [ { "package": "solana-dev-tools", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5559", "osv_published_at": "2026-06-11T03:10:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:10:27Z", "osv_earliest_published_at": "2026-06-11T03:10:25Z", "hours_ahead_of_osv": -10.0, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:10:29Z" }, { "id": "sensivity-2026-06-11", "display_name": "sensivity", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sensivity", "ecosystem": "npm", "versions": [ "2.5.0", "2.5.1", "2.5.10", "2.5.11", "2.5.12", "2.5.13", "2.5.14", "2.5.15", "2.5.16", "2.5.17", "2.5.18", "2.5.19", "2.5.2", "2.5.20", "2.5.21", "2.5.22", "2.5.23", "2.5.24", "2.5.25", "2.5.26", "2.5.27", "2.5.28", "2.5.29", "2.5.3", "2.5.30", "2.5.31", "2.5.32", "2.5.33", "2.5.34", "2.5.35", "2.5.36", "2.5.37", "2.5.38", "2.5.39", "2.5.4", "2.5.40", "2.5.41", "2.5.42", "2.5.43", "2.5.44", "2.5.45", "2.5.46", "2.5.47", "2.5.48", "2.5.49", "2.5.5", "2.5.50", "2.5.51", "2.5.52", "2.5.53", "2.5.54", "2.5.55", "2.5.56", "2.5.57", "2.5.58", "2.5.59", "2.5.6", "2.5.60", "2.5.61", "2.5.62", "2.5.63", "2.5.64", "2.5.65", "2.5.66", "2.5.67", "2.5.68", "2.5.69", "2.5.7", "2.5.8", "2.5.9" ], "osv_entries": [ { "osv_id": "MAL-2026-5558", "osv_published_at": "2026-06-11T03:05:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:10:25Z", "osv_earliest_published_at": "2026-06-11T03:05:50Z", "hours_ahead_of_osv": -10.08, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:10:25Z" }, { "id": "janus-ft-2026-06-11", "display_name": "janus-ft", "campaign": null, "detection_source": "osv", "packages": [ { "package": "janus-ft", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5557", "osv_published_at": "2026-06-11T02:53:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:08:05Z", "osv_earliest_published_at": "2026-06-11T02:53:06Z", "hours_ahead_of_osv": -10.25, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:08:13Z" }, { "id": "janus-flow-2026-06-11", "display_name": "janus-flow", "campaign": null, "detection_source": "osv", "packages": [ { "package": "janus-flow", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5556", "osv_published_at": "2026-06-11T02:53:13Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:08:03Z", "osv_earliest_published_at": "2026-06-11T02:53:13Z", "hours_ahead_of_osv": -10.25, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:08:09Z" }, { "id": "express-timer-2026-06-11", "display_name": "express-timer", "campaign": null, "detection_source": "osv", "packages": [ { "package": "express-timer", "ecosystem": "npm", "versions": [ "1.0.1", "1.0.2", "1.0.3", "1.0.4", "1.0.5", "1.0.6" ], "osv_entries": [ { "osv_id": "MAL-2026-5555", "osv_published_at": "2026-06-11T02:51:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:08:01Z", "osv_earliest_published_at": "2026-06-11T02:51:05Z", "hours_ahead_of_osv": -10.28, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:08:05Z" }, { "id": "express-self-destruct2-2026-06-11", "display_name": "express-self-destruct2", "campaign": null, "detection_source": "osv", "packages": [ { "package": "express-self-destruct2", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5554", "osv_published_at": "2026-06-11T02:50:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:07:49Z", "osv_earliest_published_at": "2026-06-11T02:50:52Z", "hours_ahead_of_osv": -10.28, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:08:02Z" }, { "id": "express-self-destruct-2026-06-11", "display_name": "express-self-destruct", "campaign": null, "detection_source": "osv", "packages": [ { "package": "express-self-destruct", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5553", "osv_published_at": "2026-06-11T02:50:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:07:47Z", "osv_earliest_published_at": "2026-06-11T02:50:48Z", "hours_ahead_of_osv": -10.28, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:07:58Z" }, { "id": "my-name-is-khn-express-security-tool-v3-2026-06-11", "display_name": "@my_name_is_khn/express-security-tool-v3", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@my_name_is_khn/express-security-tool-v3", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5552", "osv_published_at": "2026-06-11T02:51:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:07:45Z", "osv_earliest_published_at": "2026-06-11T02:51:53Z", "hours_ahead_of_osv": -10.26, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:07:55Z" }, { "id": "my-name-is-khn-express-security-tool-v1-2026-06-11", "display_name": "@my_name_is_khn/express-security-tool-v1", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@my_name_is_khn/express-security-tool-v1", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5551", "osv_published_at": "2026-06-11T02:51:57Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:07:43Z", "osv_earliest_published_at": "2026-06-11T02:51:57Z", "hours_ahead_of_osv": -10.26, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:07:51Z" }, { "id": "my-name-is-khn-express-security-tool-2026-06-11", "display_name": "@my_name_is_khn/express-security-tool", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@my_name_is_khn/express-security-tool", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5550", "osv_published_at": "2026-06-11T02:51:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:07:41Z", "osv_earliest_published_at": "2026-06-11T02:51:48Z", "hours_ahead_of_osv": -10.26, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:07:48Z" }, { "id": "403name-fsevent-2026-06-11", "display_name": "@403name/fsevent", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@403name/fsevent", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5549", "osv_published_at": "2026-06-11T03:14:59Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:07:39Z", "osv_earliest_published_at": "2026-06-11T03:14:59Z", "hours_ahead_of_osv": -9.88, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:07:44Z" }, { "id": "403name-ether-js-2026-06-11", "display_name": "@403name/ether-js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@403name/ether-js", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5548", "osv_published_at": "2026-06-11T03:14:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:07:35Z", "osv_earliest_published_at": "2026-06-11T03:14:52Z", "hours_ahead_of_osv": -9.88, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:07:41Z" }, { "id": "403name-electron-buidler-2026-06-11", "display_name": "@403name/electron-buidler", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@403name/electron-buidler", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5547", "osv_published_at": "2026-06-11T03:15:04Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:07:31Z", "osv_earliest_published_at": "2026-06-11T03:15:04Z", "hours_ahead_of_osv": -9.87, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:07:37Z" }, { "id": "common-stack-generate-plugin-2026-06-11", "display_name": "@common-stack/generate-plugin", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@common-stack/generate-plugin", "ecosystem": "npm", "versions": [ "10.0.1-alpha.0", "9.0.2-alpha.21", "9.0.2-alpha.22", "9.0.2-alpha.23", "9.0.2-alpha.24", "9.0.4-alpha.0", "9.0.4-alpha.1", "9.0.5-alpha.0", "9.0.5-alpha.1", "9.0.5-alpha.2", "9.0.5-alpha.3", "9.0.5-alpha.4", "9.0.5-alpha.5", "9.0.6-alpha.0", "9.0.6-alpha.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5546", "osv_published_at": "2026-06-11T00:34:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:07:27Z", "osv_earliest_published_at": "2026-06-11T00:34:52Z", "hours_ahead_of_osv": -12.54, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-16T02:35:51Z" }, { "id": "pocteszep-2026-06-11", "display_name": "pocteszep", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pocteszep", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2", "1.0.4", "1.0.5", "1.0.8", "1.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5544", "osv_published_at": "2026-06-11T01:42:15Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:07:01Z", "osv_earliest_published_at": "2026-06-11T01:42:15Z", "hours_ahead_of_osv": -11.41, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:07:30Z" }, { "id": "jailbreak-code-2026-06-11", "display_name": "jailbreak-code", "campaign": null, "detection_source": "osv", "packages": [ { "package": "jailbreak-code", "ecosystem": "npm", "versions": [ "2.0.7", "2.0.9" ], "osv_entries": [ { "osv_id": "MAL-2026-5543", "osv_published_at": "2026-06-11T01:56:14Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:06:47Z", "osv_earliest_published_at": "2026-06-11T01:56:14Z", "hours_ahead_of_osv": -11.18, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:07:26Z" }, { "id": "india-map-react-2026-06-11", "display_name": "india-map-react", "campaign": null, "detection_source": "osv", "packages": [ { "package": "india-map-react", "ecosystem": "npm", "versions": [ "2.0.1", "2.0.2", "2.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-5542", "osv_published_at": "2026-06-11T02:02:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:06:43Z", "osv_earliest_published_at": "2026-06-11T02:02:37Z", "hours_ahead_of_osv": -11.07, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:16:56Z" }, { "id": "w2d-web-components-2026-06-11", "display_name": "@w2d/web-components", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@w2d/web-components", "ecosystem": "npm", "versions": [ "2.999.999" ], "osv_entries": [ { "osv_id": "MAL-2026-5541", "osv_published_at": "2026-06-11T01:57:04Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:06:41Z", "osv_earliest_published_at": "2026-06-11T01:57:04Z", "hours_ahead_of_osv": -11.16, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:07:20Z" }, { "id": "monitoring-lib-error-tracking-2026-06-11", "display_name": "@monitoring-lib/error-tracking", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@monitoring-lib/error-tracking", "ecosystem": "npm", "versions": [ "9999.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5540", "osv_published_at": "2026-06-11T01:22:04Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:06:39Z", "osv_earliest_published_at": "2026-06-11T01:22:04Z", "hours_ahead_of_osv": -11.74, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:07:16Z" }, { "id": "mermaid-v11-2026-06-11", "display_name": "mermaid-v11", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mermaid-v11", "ecosystem": "npm", "versions": [ "9999.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5539", "osv_published_at": "2026-06-11T00:41:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:06:37Z", "osv_earliest_published_at": "2026-06-11T00:41:50Z", "hours_ahead_of_osv": -12.41, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:07:12Z" }, { "id": "v018-axios-cdntest-2026-06-11", "display_name": "v018-axios-cdntest", "campaign": null, "detection_source": "osv", "packages": [ { "package": "v018-axios-cdntest", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5529", "osv_published_at": "2026-06-10T18:34:55Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:06:35Z", "osv_earliest_published_at": "2026-06-10T18:34:55Z", "hours_ahead_of_osv": -18.53, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:07:09Z" }, { "id": "events-runtime-2026-06-11", "display_name": "events-runtime", "campaign": null, "detection_source": "osv", "packages": [ { "package": "events-runtime", "ecosystem": "npm", "versions": [ "3.1.3", "3.2.0", "3.2.1", "3.2.3", "3.2.4" ], "osv_entries": [ { "osv_id": "MAL-2026-5528", "osv_published_at": "2026-06-10T18:09:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:06:31Z", "osv_earliest_published_at": "2026-06-10T18:09:36Z", "hours_ahead_of_osv": -18.95, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:07:05Z" }, { "id": "check-error-util-2026-06-11", "display_name": "check-error-util", "campaign": null, "detection_source": "osv", "packages": [ { "package": "check-error-util", "ecosystem": "npm", "versions": [ "2.1.3", "2.1.5", "2.1.6", "2.1.7", "2.1.8" ], "osv_entries": [ { "osv_id": "MAL-2026-5527", "osv_published_at": "2026-06-10T18:44:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:06:29Z", "osv_earliest_published_at": "2026-06-10T18:44:20Z", "hours_ahead_of_osv": -18.37, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:07:02Z" }, { "id": "solana-labs-web3-js-2026-06-11", "display_name": "@solana-labs/web3.js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@solana-labs/web3.js", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.10", "1.0.6", "1.0.8", "1.98.112" ], "osv_entries": [ { "osv_id": "MAL-2026-5525", "osv_published_at": "2026-06-10T18:37:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:06:27Z", "osv_earliest_published_at": "2026-06-10T18:37:05Z", "hours_ahead_of_osv": -18.49, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:06:55Z" }, { "id": "chai-check-error-2026-06-11", "display_name": "chai-check-error", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-check-error", "ecosystem": "npm", "versions": [ "2.1.5", "2.1.6", "2.1.7", "2.1.8" ], "osv_entries": [ { "osv_id": "MAL-2026-5526", "osv_published_at": "2026-06-10T18:46:09Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:06:27Z", "osv_earliest_published_at": "2026-06-10T18:46:09Z", "hours_ahead_of_osv": -18.34, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-17T05:16:13Z" }, { "id": "xnder-wrapper-module-2026-06-11", "display_name": "xnder-wrapper-module", "campaign": null, "detection_source": "osv", "packages": [ { "package": "xnder-wrapper-module", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5492", "osv_published_at": "2026-06-10T06:43:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:06:25Z", "osv_earliest_published_at": "2026-06-10T06:43:00Z", "hours_ahead_of_osv": -30.39, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:06:51Z" }, { "id": "xnder-sdk-2026-06-11", "display_name": "xnder-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "xnder-sdk", "ecosystem": "npm", "versions": [ "11.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5491", "osv_published_at": "2026-06-10T06:43:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:06:24Z", "osv_earliest_published_at": "2026-06-10T06:43:00Z", "hours_ahead_of_osv": -30.39, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:06:48Z" }, { "id": "hey-base32-2026-06-11", "display_name": "hey-base32", "campaign": null, "detection_source": "osv", "packages": [ { "package": "hey-base32", "ecosystem": "npm", "versions": [ "1.0.7", "1.0.9", "1.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5398", "osv_published_at": "2026-06-09T15:57:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:06:24Z", "osv_earliest_published_at": "2026-06-09T15:57:35Z", "hours_ahead_of_osv": -45.15, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:06:44Z" }, { "id": "solana-labs-etherjs-2026-06-11", "display_name": "@solana-labs/etherjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@solana-labs/etherjs", "ecosystem": "npm", "versions": [ "1.0.10", "1.0.5", "1.0.6", "1.0.7", "1.0.8", "1.98.111", "1.98.112" ], "osv_entries": [ { "osv_id": "MAL-2026-5362", "osv_published_at": "2026-06-07T05:44:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:06:21Z", "osv_earliest_published_at": "2026-06-07T05:44:38Z", "hours_ahead_of_osv": -103.36, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:15:15Z" }, { "id": "wallet-sdk-9-2026-06-11", "display_name": "wallet-sdk-9", "campaign": null, "detection_source": "osv", "packages": [ { "package": "wallet-sdk-9", "ecosystem": "npm", "versions": [ "3.7.73" ], "osv_entries": [ { "osv_id": "MAL-2026-5360", "osv_published_at": "2026-06-09T07:55:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:06:20Z", "osv_earliest_published_at": "2026-06-09T07:55:37Z", "hours_ahead_of_osv": -53.18, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://app.safedep.io/community/malysis/01KTN73YY0MTFGD8C4TSDAPEMX", "ledger_commit_at": "2026-06-11T13:06:34Z" }, { "id": "void-ulid-2026-06-11", "display_name": "void-ulid", "campaign": null, "detection_source": "osv", "packages": [ { "package": "void-ulid", "ecosystem": "npm", "versions": [ "3.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5341", "osv_published_at": "2026-06-09T02:29:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:06:20Z", "osv_earliest_published_at": "2026-06-09T02:29:07Z", "hours_ahead_of_osv": -58.62, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:06:28Z" }, { "id": "ethereum-kit-9-2026-06-11", "display_name": "ethereum-kit-9", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ethereum-kit-9", "ecosystem": "npm", "versions": [ "1.25.36" ], "osv_entries": [ { "osv_id": "MAL-2026-5356", "osv_published_at": "2026-06-09T07:55:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:06:20Z", "osv_earliest_published_at": "2026-06-09T07:55:35Z", "hours_ahead_of_osv": -53.18, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://app.safedep.io/community/malysis/01KTN73YXHEMD7EATFD58FKGEY", "ledger_commit_at": "2026-06-11T13:06:31Z" }, { "id": "vxui-react-2026-06-11", "display_name": "vxui-react", "campaign": null, "detection_source": "osv", "packages": [ { "package": "vxui-react", "ecosystem": "npm", "versions": [ "1.3.3", "1.3.4" ], "osv_entries": [ { "osv_id": "MAL-2026-4793", "osv_published_at": "2026-05-26T08:16:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:06:19Z", "osv_earliest_published_at": "2026-05-26T08:16:35Z", "hours_ahead_of_osv": -388.83, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:06:22Z" }, { "id": "hello244a-2026-06-11", "display_name": "hello244a", "campaign": null, "detection_source": "osv", "packages": [ { "package": "hello244a", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.2", "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-5188", "osv_published_at": "2026-06-04T20:49:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:06:19Z", "osv_earliest_published_at": "2026-06-04T20:49:51Z", "hours_ahead_of_osv": -160.27, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-12T23:14:58Z" }, { "id": "chai-as-init-2026-06-11", "display_name": "chai-as-init", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-init", "ecosystem": "npm", "versions": [ "1.4.5", "1.4.6", "1.4.7" ], "osv_entries": [ { "osv_id": "MAL-2026-2891", "osv_published_at": "2026-04-16T20:36:13Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:06:17Z", "osv_earliest_published_at": "2026-04-16T20:36:13Z", "hours_ahead_of_osv": -1336.5, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://www.indece.com/en-US/blog/7df041ba-feb1-4d87-918b-7fc2c709d805", "ledger_commit_at": "2026-06-12T23:12:26Z" }, { "id": "acme-widget-layout-utils-2026-06-11", "display_name": "acme-widget-layout-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "acme-widget-layout-utils", "ecosystem": "pypi", "versions": [ "0.0.1", "0.0.2", "0.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-5545", "osv_published_at": "2026-06-11T01:46:15Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-06-11T13:05:37Z", "osv_earliest_published_at": "2026-06-11T01:46:15Z", "hours_ahead_of_osv": -11.32, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-06-11T13:05:39Z" }, { "id": "injectivelabs-sdk-ts-2026-06-08", "display_name": "@injectivelabs/sdk-ts wallet stealer", "campaign": "InjectiveLabs", "detection_source": "registry", "packages": [ { "package": "@injectivelabs/sdk-ts", "ecosystem": "npm", "versions": [ "1.20.21" ], "osv_entries": [ { "osv_id": "MAL-2026-10165", "osv_published_at": "2026-07-10T18:43:14Z" } ] }, { "package": "@injectivelabs/utils", "ecosystem": "npm", "versions": [ "1.20.21" ], "osv_entries": [ { "osv_id": "MAL-2026-10165", "osv_published_at": "2026-07-10T18:43:14Z" } ] }, { "package": "@injectivelabs/networks", "ecosystem": "npm", "versions": [ "1.20.21" ], "osv_entries": [ { "osv_id": "MAL-2026-10165", "osv_published_at": "2026-07-10T18:43:14Z" } ] }, { "package": "@injectivelabs/ts-types", "ecosystem": "npm", "versions": [ "1.20.21" ], "osv_entries": [ { "osv_id": "MAL-2026-10165", "osv_published_at": "2026-07-10T18:43:14Z" } ] }, { "package": "@injectivelabs/exceptions", "ecosystem": "npm", "versions": [ "1.20.21" ], "osv_entries": [ { "osv_id": "MAL-2026-10165", "osv_published_at": "2026-07-10T18:43:14Z" } ] }, { "package": "@injectivelabs/wallet-base", "ecosystem": "npm", "versions": [ "1.20.21" ], "osv_entries": [ { "osv_id": "MAL-2026-10165", "osv_published_at": "2026-07-10T18:43:14Z" } ] }, { "package": "@injectivelabs/wallet-core", "ecosystem": "npm", "versions": [ "1.20.21" ], "osv_entries": [ { "osv_id": "MAL-2026-10165", "osv_published_at": "2026-07-10T18:43:14Z" } ] }, { "package": "@injectivelabs/wallet-cosmos", "ecosystem": "npm", "versions": [ "1.20.21" ], "osv_entries": [ { "osv_id": "MAL-2026-10165", "osv_published_at": "2026-07-10T18:43:14Z" } ] }, { "package": "@injectivelabs/wallet-private-key", "ecosystem": "npm", "versions": [ "1.20.21" ], "osv_entries": [ { "osv_id": "MAL-2026-10165", "osv_published_at": "2026-07-10T18:43:14Z" } ] }, { "package": "@injectivelabs/wallet-evm", "ecosystem": "npm", "versions": [ "1.20.21" ], "osv_entries": [ { "osv_id": "MAL-2026-10165", "osv_published_at": "2026-07-10T18:43:14Z" } ] }, { "package": "@injectivelabs/wallet-trezor", "ecosystem": "npm", "versions": [ "1.20.21" ], "osv_entries": [ { "osv_id": "MAL-2026-10165", "osv_published_at": "2026-07-10T18:43:14Z" } ] }, { "package": "@injectivelabs/wallet-cosmostation", "ecosystem": "npm", "versions": [ "1.20.21" ], "osv_entries": [ { "osv_id": "MAL-2026-10165", "osv_published_at": "2026-07-10T18:43:14Z" } ] }, { "package": "@injectivelabs/wallet-ledger", "ecosystem": "npm", "versions": [ "1.20.21" ], "osv_entries": [ { "osv_id": "MAL-2026-10165", "osv_published_at": "2026-07-10T18:43:14Z" } ] }, { "package": "@injectivelabs/wallet-wallet-connect", "ecosystem": "npm", "versions": [ "1.20.21" ], "osv_entries": [ { "osv_id": "MAL-2026-10165", "osv_published_at": "2026-07-10T18:43:14Z" } ] }, { "package": "@injectivelabs/wallet-magic", "ecosystem": "npm", "versions": [ "1.20.21" ], "osv_entries": [ { "osv_id": "MAL-2026-10165", "osv_published_at": "2026-07-10T18:43:14Z" } ] }, { "package": "@injectivelabs/wallet-strategy", "ecosystem": "npm", "versions": [ "1.20.21" ], "osv_entries": [ { "osv_id": "MAL-2026-10165", "osv_published_at": "2026-07-10T18:43:14Z" } ] }, { "package": "@injectivelabs/wallet-turnkey", "ecosystem": "npm", "versions": [ "1.20.21" ], "osv_entries": [ { "osv_id": "MAL-2026-10165", "osv_published_at": "2026-07-10T18:43:14Z" } ] }, { "package": "@injectivelabs/wallet-cosmos-strategy", "ecosystem": "npm", "versions": [ "1.20.21" ], "osv_entries": [ { "osv_id": "MAL-2026-10165", "osv_published_at": "2026-07-10T18:43:14Z" } ] } ], "malware_type": "wallet_stealer", "attestd_detected_at": "2026-06-08T20:59:00Z", "osv_earliest_published_at": "2026-07-10T18:43:14Z", "hours_ahead_of_osv": null, "press_coverage_at": "2026-07-09T13:32:20Z", "press_urls": [ "https://socket.dev/blog/compromised-injective-sdk-npm-package" ], "advisory_url": "https://socket.dev/blog/compromised-injective-sdk-npm-package", "ledger_commit_at": "2026-07-17T07:06:54Z", "hours_ahead_of_press": null, "confirmed_at": "2026-07-10T14:00:48Z" }, { "id": "litellm-2026-03-24", "display_name": "LiteLLM TeamPCP", "campaign": "TeamPCP", "detection_source": "registry", "packages": [ { "package": "litellm", "ecosystem": "pypi", "versions": [ "1.82.7", "1.82.8" ], "osv_entries": [ { "osv_id": "MAL-2026-2144", "osv_published_at": "2026-03-24T11:15:14Z" } ] } ], "malware_type": "backdoor", "attestd_detected_at": "2026-03-24T10:39:00Z", "osv_earliest_published_at": "2026-03-24T11:15:14Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-03-24T14:00:00Z", "press_urls": [ "https://docs.litellm.ai/blog/security-update-march-2026" ], "advisory_url": "https://docs.litellm.ai/blog/security-update-march-2026", "ledger_commit_at": null }, { "id": "pytorch-lightning-2026-04-30", "display_name": "pytorch-lightning ShaiWorm", "campaign": "ShaiWorm", "detection_source": "registry", "packages": [ { "package": "pytorch-lightning", "ecosystem": "pypi", "versions": [ "2.6.3" ], "osv_entries": [] } ], "malware_type": "backdoor", "attestd_detected_at": null, "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "press_coverage_at": "2026-04-30T00:00:00Z", "press_urls": [ "https://github.com/Lightning-AI/pytorch-lightning/issues/21689" ], "advisory_url": "https://github.com/Lightning-AI/pytorch-lightning/issues/21689", "ledger_commit_at": null }, { "id": "mini-shai-hulud-2026-05-11", "display_name": "Mini Shai-Hulud (TanStack wave)", "campaign": "TeamPCP", "detection_source": "registry", "packages": [ { "package": "@tanstack/react-router", "ecosystem": "npm", "versions": [ "1.169.5", "1.169.8" ], "osv_entries": [ { "osv_id": "MAL-2026-3465", "osv_published_at": "2026-05-11T23:44:35Z" } ] }, { "package": "@tanstack/router-core", "ecosystem": "npm", "versions": [ "1.169.5", "1.169.8" ], "osv_entries": [ { "osv_id": "MAL-2026-3465", "osv_published_at": "2026-05-11T23:44:35Z" } ] }, { "package": "@tanstack/history", "ecosystem": "npm", "versions": [ "1.161.9", "1.161.12" ], "osv_entries": [ { "osv_id": "MAL-2026-3465", "osv_published_at": "2026-05-11T23:44:35Z" } ] }, { "package": "@mistralai/mistralai", "ecosystem": "npm", "versions": [ "2.2.2", "2.2.3", "2.2.4" ], "osv_entries": [ { "osv_id": "MAL-2026-3432", "osv_published_at": "2026-05-11T23:00:35Z" } ] }, { "package": "@opensearch-project/opensearch", "ecosystem": "npm", "versions": [ "3.5.3", "3.6.2", "3.7.0", "3.8.0" ], "osv_entries": [ { "osv_id": "MAL-2026-3434", "osv_published_at": "2026-05-12T00:42:07Z" } ] }, { "package": "mistralai", "ecosystem": "pypi", "versions": [ "2.4.6" ], "osv_entries": [ { "osv_id": "MAL-2026-3608", "osv_published_at": "2026-05-12T05:49:00Z" } ] }, { "package": "guardrails-ai", "ecosystem": "pypi", "versions": [ "0.10.1" ], "osv_entries": [ { "osv_id": "MAL-2026-3607", "osv_published_at": "2026-05-12T05:49:00Z" } ] } ], "malware_type": "worm", "attestd_detected_at": null, "osv_earliest_published_at": "2026-05-11T23:00:35Z", "hours_ahead_of_osv": null, "press_coverage_at": "2026-05-11T20:00:00Z", "press_urls": [ "https://socket.dev/blog/tanstack-npm-packages-compromised-mini-shai-hulud-supply-chain-attack" ], "advisory_url": "https://socket.dev/blog/tanstack-npm-packages-compromised-mini-shai-hulud-supply-chain-attack", "ledger_commit_at": null }, { "id": "elementary-data-2026-04-26", "display_name": "elementary-data GitHub Actions injection", "campaign": null, "detection_source": "registry", "packages": [ { "package": "elementary-data", "ecosystem": "pypi", "versions": [ "0.23.3" ], "osv_entries": [ { "osv_id": "MAL-2026-3083", "osv_published_at": "2026-04-24T22:54:25Z" } ] } ], "malware_type": "backdoor", "attestd_detected_at": null, "osv_earliest_published_at": "2026-04-24T22:54:25Z", "hours_ahead_of_osv": null, "press_coverage_at": "2026-04-26T00:00:00Z", "press_urls": [ "https://www.stepsecurity.io/blog/elementary-data-compromised-on-pypi-and-ghcr-forged-release-pushed-via-github-actions-script-injection" ], "advisory_url": "https://www.stepsecurity.io/blog/elementary-data-compromised-on-pypi-and-ghcr-forged-release-pushed-via-github-actions-script-injection", "ledger_commit_at": null }, { "id": "checkmarx-kics-2026-04-22", "display_name": "@checkmarx/kics TeamPCP", "campaign": "TeamPCP", "detection_source": "registry", "packages": [ { "package": "@checkmarx/kics", "ecosystem": "npm", "versions": [ "2.1.21" ], "osv_entries": [] } ], "malware_type": "backdoor", "attestd_detected_at": null, "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "press_coverage_at": "2026-04-22T15:00:00Z", "press_urls": [ "https://www.bleepingcomputer.com/news/security/new-checkmarx-supply-chain-breach-affects-kics-analysis-tool/" ], "advisory_url": "https://www.bleepingcomputer.com/news/security/new-checkmarx-supply-chain-breach-affects-kics-analysis-tool/", "ledger_commit_at": null }, { "id": "bitwarden-cli-2026-04-22", "display_name": "@bitwarden/cli TeamPCP", "campaign": "TeamPCP", "detection_source": "registry", "packages": [ { "package": "@bitwarden/cli", "ecosystem": "npm", "versions": [ "2026.4.0" ], "osv_entries": [ { "osv_id": "MAL-2026-3020", "osv_published_at": "2026-04-23T17:07:51Z" } ] } ], "malware_type": "backdoor", "attestd_detected_at": null, "osv_earliest_published_at": "2026-04-23T17:07:51Z", "hours_ahead_of_osv": null, "press_coverage_at": "2026-04-22T18:30:00Z", "press_urls": [ "https://www.bleepingcomputer.com/news/security/bitwarden-cli-npm-package-compromised-to-steal-developer-credentials/" ], "advisory_url": "https://www.bleepingcomputer.com/news/security/bitwarden-cli-npm-package-compromised-to-steal-developer-credentials/", "ledger_commit_at": null }, { "id": "tqm-mfe-main-2026-07-14", "display_name": "@tqm-mfe/main", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@tqm-mfe/main", "ecosystem": "npm", "versions": [ "5.4.7" ], "osv_entries": [ { "osv_id": "MAL-2026-10517", "osv_published_at": "2026-07-14T02:40:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T03:17:50Z", "flagged_at": null, "confirmed_at": "2026-07-14T03:17:50Z", "osv_earliest_published_at": "2026-07-14T02:40:37Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T03:17:53Z" }, { "id": "chai-as-auth-2026-07-14", "display_name": "chai-as-auth", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-auth", "ecosystem": "npm", "versions": [ "2.3.5" ], "osv_entries": [ { "osv_id": "MAL-2026-10518", "osv_published_at": "2026-07-14T02:29:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T03:19:19Z", "flagged_at": null, "confirmed_at": "2026-07-14T03:19:19Z", "osv_earliest_published_at": "2026-07-14T02:29:39Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T03:19:23Z" }, { "id": "chai-as-sets-2026-07-14", "display_name": "chai-as-sets", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-sets", "ecosystem": "npm", "versions": [ "3.1.3" ], "osv_entries": [ { "osv_id": "MAL-2026-10519", "osv_published_at": "2026-07-14T02:29:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T03:19:20Z", "flagged_at": null, "confirmed_at": "2026-07-14T03:19:20Z", "osv_earliest_published_at": "2026-07-14T02:29:52Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T03:19:33Z" }, { "id": "fastify-bundler-2026-07-14", "display_name": "fastify-bundler", "campaign": null, "detection_source": "osv", "packages": [ { "package": "fastify-bundler", "ecosystem": "npm", "versions": [ "1.4.13" ], "osv_entries": [ { "osv_id": "MAL-2026-10520", "osv_published_at": "2026-07-14T02:41:15Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T03:19:21Z", "flagged_at": null, "confirmed_at": "2026-07-14T03:19:21Z", "osv_earliest_published_at": "2026-07-14T02:41:15Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T03:19:43Z" }, { "id": "tabrex-bs58-2026-07-14", "display_name": "@tabrex/bs58", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@tabrex/bs58", "ecosystem": "npm", "versions": [ "6.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-10523", "osv_published_at": "2026-07-14T03:34:01Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T04:41:24Z", "flagged_at": null, "confirmed_at": "2026-07-14T04:41:24Z", "osv_earliest_published_at": "2026-07-14T03:34:01Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T04:41:27Z" }, { "id": "velkov-isows-2026-07-14", "display_name": "@velkov/isows", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@velkov/isows", "ecosystem": "npm", "versions": [ "1.0.10" ], "osv_entries": [ { "osv_id": "MAL-2026-10524", "osv_published_at": "2026-07-14T03:36:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T04:41:26Z", "flagged_at": null, "confirmed_at": "2026-07-14T04:41:26Z", "osv_earliest_published_at": "2026-07-14T03:36:38Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T04:41:36Z" }, { "id": "vite-mcp-vite-type-2026-07-14", "display_name": "@vite-mcp/vite-type", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@vite-mcp/vite-type", "ecosystem": "npm", "versions": [ "6.44.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10525", "osv_published_at": "2026-07-14T03:33:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T04:41:59Z", "flagged_at": null, "confirmed_at": "2026-07-14T04:41:59Z", "osv_earliest_published_at": "2026-07-14T03:33:51Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T04:42:03Z" }, { "id": "mcp-scraper-2026-07-14", "display_name": "mcp-scraper", "campaign": "vite-mcp", "detection_source": "npm_registry", "packages": [ { "package": "mcp-scraper", "ecosystem": "npm", "versions": [ "0.17.1" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T04:42:56Z", "flagged_at": null, "confirmed_at": "2026-07-14T04:42:56Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/mcp-scraper", "ledger_commit_at": "2026-07-14T04:42:59Z" }, { "id": "vite-pro-vite-ui-2026-07-14", "display_name": "@vite-pro/vite-ui", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@vite-pro/vite-ui", "ecosystem": "npm", "versions": [ "2.5.10" ], "osv_entries": [ { "osv_id": "MAL-2026-10526", "osv_published_at": "2026-07-14T03:33:15Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T04:43:04Z", "flagged_at": null, "confirmed_at": "2026-07-14T04:43:04Z", "osv_earliest_published_at": "2026-07-14T03:33:15Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T04:43:09Z" }, { "id": "vite-ts-vite-ui-2026-07-14", "display_name": "@vite-ts/vite-ui", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@vite-ts/vite-ui", "ecosystem": "npm", "versions": [ "6.44.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10527", "osv_published_at": "2026-07-14T03:33:32Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T04:44:17Z", "flagged_at": null, "confirmed_at": "2026-07-14T04:44:17Z", "osv_earliest_published_at": "2026-07-14T03:33:32Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T04:44:22Z" }, { "id": "vitets-vite-ts-2026-07-14", "display_name": "@vitets/vite-ts", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@vitets/vite-ts", "ecosystem": "npm", "versions": [ "1.5.10" ], "osv_entries": [ { "osv_id": "MAL-2026-10528", "osv_published_at": "2026-07-14T03:33:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T04:45:03Z", "flagged_at": null, "confirmed_at": "2026-07-14T04:45:03Z", "osv_earliest_published_at": "2026-07-14T03:33:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T04:45:08Z" }, { "id": "wrenfield-abitype-2026-07-14", "display_name": "@wrenfield/abitype", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@wrenfield/abitype", "ecosystem": "npm", "versions": [ "1.2.6", "1.2.7" ], "osv_entries": [ { "osv_id": "MAL-2026-10529", "osv_published_at": "2026-07-14T03:35:58Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T04:45:05Z", "flagged_at": null, "confirmed_at": "2026-07-14T04:45:05Z", "osv_earliest_published_at": "2026-07-14T03:35:58Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T04:45:17Z" }, { "id": "cbr-internal-utils-2026-07-14", "display_name": "cbr-internal-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cbr-internal-utils", "ecosystem": "npm", "versions": [ "2.2.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10530", "osv_published_at": "2026-07-14T03:53:29Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T04:45:07Z", "flagged_at": null, "confirmed_at": "2026-07-14T04:45:07Z", "osv_earliest_published_at": "2026-07-14T03:53:29Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T04:45:27Z" }, { "id": "chain-devkit-2026-07-14", "display_name": "chain-devkit", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chain-devkit", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10531", "osv_published_at": "2026-07-14T04:02:57Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T04:45:08Z", "flagged_at": null, "confirmed_at": "2026-07-14T04:45:08Z", "osv_earliest_published_at": "2026-07-14T04:02:57Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T04:45:36Z" }, { "id": "fluterjs-2026-07-14", "display_name": "fluterjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "fluterjs", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10532", "osv_published_at": "2026-07-14T03:54:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T04:45:09Z", "flagged_at": null, "confirmed_at": "2026-07-14T04:45:09Z", "osv_earliest_published_at": "2026-07-14T03:54:52Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T04:45:46Z" }, { "id": "lusha-iam-widgets-2026-07-14", "display_name": "lusha-iam-widgets", "campaign": null, "detection_source": "osv", "packages": [ { "package": "lusha-iam-widgets", "ecosystem": "npm", "versions": [ "1.5.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10533", "osv_published_at": "2026-07-14T03:51:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T04:45:11Z", "flagged_at": null, "confirmed_at": "2026-07-14T04:45:11Z", "osv_earliest_published_at": "2026-07-14T03:51:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T04:45:55Z" }, { "id": "motion-pull-2026-07-14", "display_name": "motion-pull", "campaign": null, "detection_source": "osv", "packages": [ { "package": "motion-pull", "ecosystem": "npm", "versions": [ "2.3.5" ], "osv_entries": [ { "osv_id": "MAL-2026-10534", "osv_published_at": "2026-07-14T03:36:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T04:45:12Z", "flagged_at": null, "confirmed_at": "2026-07-14T04:45:12Z", "osv_earliest_published_at": "2026-07-14T03:36:50Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T04:46:04Z" }, { "id": "my-empty-package-2026-07-14", "display_name": "my-empty-package", "campaign": null, "detection_source": "osv", "packages": [ { "package": "my-empty-package", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10535", "osv_published_at": "2026-07-14T03:57:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T04:45:14Z", "flagged_at": null, "confirmed_at": "2026-07-14T04:45:14Z", "osv_earliest_published_at": "2026-07-14T03:57:12Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T04:46:14Z" }, { "id": "n8n-nodes-social-facebook-2026-07-14", "display_name": "n8n-nodes-social-facebook", "campaign": null, "detection_source": "osv", "packages": [ { "package": "n8n-nodes-social-facebook", "ecosystem": "npm", "versions": [ "0.1.96" ], "osv_entries": [ { "osv_id": "MAL-2026-10536", "osv_published_at": "2026-07-14T03:48:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T04:45:15Z", "flagged_at": null, "confirmed_at": "2026-07-14T04:45:15Z", "osv_earliest_published_at": "2026-07-14T03:48:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T04:47:01Z" }, { "id": "neon-postgres-2026-07-14", "display_name": "neon-postgres", "campaign": null, "detection_source": "osv", "packages": [ { "package": "neon-postgres", "ecosystem": "npm", "versions": [ "3.5.0", "3.5.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10537", "osv_published_at": "2026-07-14T03:53:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T04:45:17Z", "flagged_at": null, "confirmed_at": "2026-07-14T04:45:17Z", "osv_earliest_published_at": "2026-07-14T03:53:07Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T04:47:11Z" }, { "id": "neteller-2026-07-14", "display_name": "neteller", "campaign": null, "detection_source": "osv", "packages": [ { "package": "neteller", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10538", "osv_published_at": "2026-07-14T03:38:17Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T04:45:18Z", "flagged_at": null, "confirmed_at": "2026-07-14T04:45:18Z", "osv_earliest_published_at": "2026-07-14T03:38:17Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T04:47:21Z" }, { "id": "postcss-animatecss-2026-07-14", "display_name": "postcss-animatecss", "campaign": null, "detection_source": "osv", "packages": [ { "package": "postcss-animatecss", "ecosystem": "npm", "versions": [ "1.0.1", "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10539", "osv_published_at": "2026-07-14T03:37:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T04:45:20Z", "flagged_at": null, "confirmed_at": "2026-07-14T04:45:20Z", "osv_earliest_published_at": "2026-07-14T03:37:23Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T04:47:31Z" }, { "id": "postcss-processor-utils-2026-07-14", "display_name": "postcss-processor-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "postcss-processor-utils", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2", "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-10540", "osv_published_at": "2026-07-14T03:37:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T04:45:21Z", "flagged_at": null, "confirmed_at": "2026-07-14T04:45:21Z", "osv_earliest_published_at": "2026-07-14T03:37:39Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T09:17:34Z" }, { "id": "proxy-seller-mcp-2026-07-14", "display_name": "proxy-seller-mcp", "campaign": null, "detection_source": "osv", "packages": [ { "package": "proxy-seller-mcp", "ecosystem": "npm", "versions": [ "0.1.7" ], "osv_entries": [ { "osv_id": "MAL-2026-10541", "osv_published_at": "2026-07-14T03:47:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T04:45:22Z", "flagged_at": null, "confirmed_at": "2026-07-14T04:45:22Z", "osv_earliest_published_at": "2026-07-14T03:47:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T04:47:51Z" }, { "id": "skrill-payments-2026-07-14", "display_name": "skrill-payments", "campaign": null, "detection_source": "osv", "packages": [ { "package": "skrill-payments", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10543", "osv_published_at": "2026-07-14T03:38:30Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T04:45:24Z", "flagged_at": null, "confirmed_at": "2026-07-14T04:45:24Z", "osv_earliest_published_at": "2026-07-14T03:38:30Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T04:48:25Z" }, { "id": "skrill-sdk-2026-07-14", "display_name": "skrill-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "skrill-sdk", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10544", "osv_published_at": "2026-07-14T03:38:10Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T04:45:25Z", "flagged_at": null, "confirmed_at": "2026-07-14T04:45:25Z", "osv_earliest_published_at": "2026-07-14T03:38:10Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T04:48:34Z" }, { "id": "skrill-2026-07-14", "display_name": "skrill", "campaign": null, "detection_source": "osv", "packages": [ { "package": "skrill", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10542", "osv_published_at": "2026-07-14T03:38:02Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T04:45:27Z", "flagged_at": null, "confirmed_at": "2026-07-14T04:45:27Z", "osv_earliest_published_at": "2026-07-14T03:38:02Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T04:49:17Z" }, { "id": "vite-plugin-model-2026-07-14", "display_name": "vite-plugin-model", "campaign": null, "detection_source": "osv", "packages": [ { "package": "vite-plugin-model", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10545", "osv_published_at": "2026-07-14T03:37:11Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T04:45:28Z", "flagged_at": null, "confirmed_at": "2026-07-14T04:45:28Z", "osv_earliest_published_at": "2026-07-14T03:37:11Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T04:50:09Z" }, { "id": "viteplugiin-2026-07-14", "display_name": "viteplugiin", "campaign": null, "detection_source": "osv", "packages": [ { "package": "viteplugiin", "ecosystem": "npm", "versions": [ "1.0.28" ], "osv_entries": [ { "osv_id": "MAL-2026-10546", "osv_published_at": "2026-07-14T04:13:11Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T04:45:30Z", "flagged_at": null, "confirmed_at": "2026-07-14T04:45:30Z", "osv_earliest_published_at": "2026-07-14T04:13:11Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T04:50:51Z" }, { "id": "pokee-data-utils-2026-07-14", "display_name": "pokee-data-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pokee-data-utils", "ecosystem": "pypi", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10547", "osv_published_at": "2026-07-14T03:56:56Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T04:45:37Z", "flagged_at": null, "confirmed_at": "2026-07-14T04:45:37Z", "osv_earliest_published_at": "2026-07-14T03:56:56Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T04:51:01Z" }, { "id": "dervix-engine-io-2026-07-14", "display_name": "@dervix/engine.io", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@dervix/engine.io", "ecosystem": "npm", "versions": [ "6.6.2", "6.6.3", "6.6.5", "6.6.6", "6.6.7", "6.6.9" ], "osv_entries": [ { "osv_id": "MAL-2026-10474", "osv_published_at": "2026-07-13T19:02:59Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T06:02:57Z", "flagged_at": null, "confirmed_at": "2026-07-14T06:02:57Z", "osv_earliest_published_at": "2026-07-13T19:02:59Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T07:05:27Z" }, { "id": "dervix-socket-io-2026-07-14", "display_name": "@dervix/socket.io", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@dervix/socket.io", "ecosystem": "npm", "versions": [ "4.8.3", "4.8.4", "4.8.5", "4.8.6", "4.8.7", "4.8.8", "4.8.9" ], "osv_entries": [ { "osv_id": "MAL-2026-10475", "osv_published_at": "2026-07-13T19:02:59Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T06:02:59Z", "flagged_at": null, "confirmed_at": "2026-07-14T06:02:59Z", "osv_earliest_published_at": "2026-07-13T19:02:59Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T07:05:36Z" }, { "id": "flcik-flick-js-2026-07-14", "display_name": "@flcik/flick.js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@flcik/flick.js", "ecosystem": "npm", "versions": [ "3.0.0", "3.0.1", "3.0.2", "3.0.3", "3.0.4", "3.1.1", "3.1.2", "3.1.3", "3.1.4" ], "osv_entries": [ { "osv_id": "MAL-2026-10521", "osv_published_at": "2026-07-14T02:52:19Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T06:03:03Z", "flagged_at": null, "confirmed_at": "2026-07-14T06:03:03Z", "osv_earliest_published_at": "2026-07-14T02:52:19Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T07:06:32Z" }, { "id": "abi-encode-2026-07-14", "display_name": "abi-encode", "campaign": null, "detection_source": "osv", "packages": [ { "package": "abi-encode", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2", "1.0.3", "1.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-10549", "osv_published_at": "2026-07-14T05:21:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T06:03:05Z", "flagged_at": null, "confirmed_at": "2026-07-14T06:03:05Z", "osv_earliest_published_at": "2026-07-14T05:21:03Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T18:36:26Z" }, { "id": "better-tailwindcss-2026-07-14", "display_name": "better-tailwindcss", "campaign": null, "detection_source": "osv", "packages": [ { "package": "better-tailwindcss", "ecosystem": "npm", "versions": [ "4.6.3" ], "osv_entries": [ { "osv_id": "MAL-2026-10550", "osv_published_at": "2026-07-14T04:35:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T06:03:07Z", "flagged_at": null, "confirmed_at": "2026-07-14T06:03:07Z", "osv_earliest_published_at": "2026-07-14T04:35:12Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T06:08:35Z" }, { "id": "changiairportpromax-2026-07-14", "display_name": "changiairportpromax", "campaign": null, "detection_source": "osv", "packages": [ { "package": "changiairportpromax", "ecosystem": "npm", "versions": [ "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10298", "osv_published_at": "2026-07-13T06:27:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T06:03:08Z", "flagged_at": null, "confirmed_at": "2026-07-14T06:03:08Z", "osv_earliest_published_at": "2026-07-13T06:27:39Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T06:09:52Z" }, { "id": "elsisi-cli-2026-07-14", "display_name": "elsisi-cli", "campaign": null, "detection_source": "osv", "packages": [ { "package": "elsisi-cli", "ecosystem": "npm", "versions": [ "9.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-10551", "osv_published_at": "2026-07-14T05:09:30Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T06:03:10Z", "flagged_at": null, "confirmed_at": "2026-07-14T06:03:10Z", "osv_earliest_published_at": "2026-07-14T05:09:30Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T06:10:02Z" }, { "id": "eth-dev-2026-07-14", "display_name": "eth-dev", "campaign": null, "detection_source": "osv", "packages": [ { "package": "eth-dev", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2", "1.0.3", "1.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-10552", "osv_published_at": "2026-07-14T05:21:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T06:03:11Z", "flagged_at": null, "confirmed_at": "2026-07-14T06:03:11Z", "osv_earliest_published_at": "2026-07-14T05:21:51Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T18:37:08Z" }, { "id": "home-mp-commons-2026-07-14", "display_name": "home-mp-commons", "campaign": null, "detection_source": "osv", "packages": [ { "package": "home-mp-commons", "ecosystem": "npm", "versions": [ "999.0.1", "999.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-10553", "osv_published_at": "2026-07-14T05:09:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T06:03:13Z", "flagged_at": null, "confirmed_at": "2026-07-14T06:03:13Z", "osv_earliest_published_at": "2026-07-14T05:09:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T13:53:05Z" }, { "id": "miguelphonk-2026-07-14", "display_name": "miguelphonk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "miguelphonk", "ecosystem": "npm", "versions": [ "1.1.2", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10335", "osv_published_at": "2026-07-13T06:27:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T06:03:16Z", "flagged_at": null, "confirmed_at": "2026-07-14T06:03:16Z", "osv_earliest_published_at": "2026-07-13T06:27:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-23T08:36:02Z", "observed_at": "2026-07-14T06:03:16Z", "ingested_at": "2026-07-14T06:03:16Z", "source_published_at": "2026-07-13T06:27:40Z", "ledger_committed_at": "2026-07-23T08:36:02Z" }, { "id": "nodemon-client-2026-07-14", "display_name": "nodemon-client", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nodemon-client", "ecosystem": "npm", "versions": [ "3.1.13" ], "osv_entries": [ { "osv_id": "MAL-2026-10513", "osv_published_at": "2026-07-13T22:20:26Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T06:03:17Z", "flagged_at": null, "confirmed_at": "2026-07-14T06:03:17Z", "osv_earliest_published_at": "2026-07-13T22:20:26Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T06:12:04Z" }, { "id": "nodemon-eslint-2026-07-14", "display_name": "nodemon-eslint", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nodemon-eslint", "ecosystem": "npm", "versions": [ "3.1.13" ], "osv_entries": [ { "osv_id": "MAL-2026-10514", "osv_published_at": "2026-07-13T22:19:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T06:03:19Z", "flagged_at": null, "confirmed_at": "2026-07-14T06:03:19Z", "osv_earliest_published_at": "2026-07-13T22:19:51Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T06:12:14Z" }, { "id": "nodemon-sync-2026-07-14", "display_name": "nodemon-sync", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nodemon-sync", "ecosystem": "npm", "versions": [ "3.1.13" ], "osv_entries": [ { "osv_id": "MAL-2026-10468", "osv_published_at": "2026-07-13T17:53:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T06:03:20Z", "flagged_at": null, "confirmed_at": "2026-07-14T06:03:20Z", "osv_earliest_published_at": "2026-07-13T17:53:06Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T06:13:33Z" }, { "id": "testdonotredeemit-2026-07-14", "display_name": "testdonotredeemit", "campaign": null, "detection_source": "osv", "packages": [ { "package": "testdonotredeemit", "ecosystem": "npm", "versions": [ "1.0.0", "2.0.0", "2.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10386", "osv_published_at": "2026-07-13T06:27:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T06:03:23Z", "flagged_at": null, "confirmed_at": "2026-07-14T06:03:23Z", "osv_earliest_published_at": "2026-07-13T06:27:42Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T07:15:38Z" }, { "id": "art-template-2026-07-14", "display_name": "art-template", "campaign": null, "detection_source": "osv", "packages": [ { "package": "art-template", "ecosystem": "npm", "versions": [ "4.13.7" ], "osv_entries": [ { "osv_id": "MAL-2026-4200", "osv_published_at": "2026-05-20T08:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T06:39:37Z", "flagged_at": null, "confirmed_at": "2026-07-14T06:39:37Z", "osv_earliest_published_at": "2026-05-20T08:00:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://safedep.io/art-template-npm-supply-chain-compromise/", "ledger_commit_at": "2026-07-14T06:47:50Z" }, { "id": "gleamkit-engine-io-2026-07-14", "display_name": "@gleamkit/engine.io", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@gleamkit/engine.io", "ecosystem": "npm", "versions": [ "6.6.3", "6.6.4", "6.6.5" ], "osv_entries": [ { "osv_id": "MAL-2026-10476", "osv_published_at": "2026-07-13T19:00:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T07:05:03Z", "flagged_at": null, "confirmed_at": "2026-07-14T07:05:03Z", "osv_earliest_published_at": "2026-07-13T19:00:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T07:07:19Z" }, { "id": "gleamkit-socket-io-2026-07-14", "display_name": "@gleamkit/socket.io", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@gleamkit/socket.io", "ecosystem": "npm", "versions": [ "4.8.6", "4.8.7", "4.8.8" ], "osv_entries": [ { "osv_id": "MAL-2026-10477", "osv_published_at": "2026-07-13T19:00:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T07:05:05Z", "flagged_at": null, "confirmed_at": "2026-07-14T07:05:05Z", "osv_earliest_published_at": "2026-07-13T19:00:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T07:07:28Z" }, { "id": "wrenfield-viem-2026-07-14", "display_name": "@wrenfield/viem", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@wrenfield/viem", "ecosystem": "npm", "versions": [ "2.53.4" ], "osv_entries": [ { "osv_id": "MAL-2026-10571", "osv_published_at": "2026-07-14T06:17:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T07:05:10Z", "flagged_at": null, "confirmed_at": "2026-07-14T07:05:10Z", "osv_earliest_published_at": "2026-07-14T06:17:33Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T07:07:53Z" }, { "id": "acidic-2026-07-14", "display_name": "acidic", "campaign": null, "detection_source": "osv", "packages": [ { "package": "acidic", "ecosystem": "npm", "versions": [ "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10282", "osv_published_at": "2026-07-13T06:27:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T07:05:12Z", "flagged_at": null, "confirmed_at": "2026-07-14T07:05:12Z", "osv_earliest_published_at": "2026-07-13T06:27:42Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T07:08:46Z" }, { "id": "bismillahitidakimas-2026-07-14", "display_name": "bismillahitidakimas", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bismillahitidakimas", "ecosystem": "npm", "versions": [ "1.1.2", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10295", "osv_published_at": "2026-07-13T06:27:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T07:05:18Z", "flagged_at": null, "confirmed_at": "2026-07-14T07:05:18Z", "osv_earliest_published_at": "2026-07-13T06:27:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-21T23:18:37Z" }, { "id": "bomboclatwallahi-2026-07-14", "display_name": "bomboclatwallahi", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bomboclatwallahi", "ecosystem": "npm", "versions": [ "1.1.2", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10296", "osv_published_at": "2026-07-13T06:27:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T07:05:19Z", "flagged_at": null, "confirmed_at": "2026-07-14T07:05:19Z", "osv_earliest_published_at": "2026-07-13T06:27:39Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-21T23:18:52Z" }, { "id": "captainindia-2026-07-14", "display_name": "captainindia", "campaign": null, "detection_source": "osv", "packages": [ { "package": "captainindia", "ecosystem": "npm", "versions": [ "1.1.2", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10297", "osv_published_at": "2026-07-13T06:27:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T07:05:21Z", "flagged_at": null, "confirmed_at": "2026-07-14T07:05:21Z", "osv_earliest_published_at": "2026-07-13T06:27:39Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-21T23:19:35Z" }, { "id": "crazynut-2026-07-14", "display_name": "crazynut", "campaign": null, "detection_source": "osv", "packages": [ { "package": "crazynut", "ecosystem": "npm", "versions": [ "1.1.2", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10299", "osv_published_at": "2026-07-13T06:27:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T07:05:22Z", "flagged_at": null, "confirmed_at": "2026-07-14T07:05:22Z", "osv_earliest_published_at": "2026-07-13T06:27:39Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-21T23:22:30Z" }, { "id": "eth-wallet-helpers-2026-07-14", "display_name": "eth-wallet-helpers", "campaign": null, "detection_source": "osv", "packages": [ { "package": "eth-wallet-helpers", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2", "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-10572", "osv_published_at": "2026-07-14T05:57:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T07:05:23Z", "flagged_at": null, "confirmed_at": "2026-07-14T07:05:23Z", "osv_earliest_published_at": "2026-07-14T05:57:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T16:41:08Z" }, { "id": "fflc-updated-2026-07-14", "display_name": "fflc-updated", "campaign": null, "detection_source": "osv", "packages": [ { "package": "fflc-updated", "ecosystem": "npm", "versions": [ "1.1.2", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10301", "osv_published_at": "2026-07-13T06:27:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T07:05:26Z", "flagged_at": null, "confirmed_at": "2026-07-14T07:05:26Z", "osv_earliest_published_at": "2026-07-13T06:27:39Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-21T23:24:50Z" }, { "id": "harpoon-package-2026-07-14", "display_name": "harpoon-package", "campaign": null, "detection_source": "osv", "packages": [ { "package": "harpoon-package", "ecosystem": "npm", "versions": [ "1.0.0", "1.1.0", "1.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10573", "osv_published_at": "2026-07-14T05:58:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T07:05:29Z", "flagged_at": null, "confirmed_at": "2026-07-14T07:05:29Z", "osv_earliest_published_at": "2026-07-14T05:58:06Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T07:10:51Z" }, { "id": "howmanygreatbritain-2026-07-14", "display_name": "howmanygreatbritain", "campaign": null, "detection_source": "osv", "packages": [ { "package": "howmanygreatbritain", "ecosystem": "npm", "versions": [ "1.1.2", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10304", "osv_published_at": "2026-07-13T06:27:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T07:05:30Z", "flagged_at": null, "confirmed_at": "2026-07-14T07:05:30Z", "osv_earliest_published_at": "2026-07-13T06:27:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-21T23:26:53Z" }, { "id": "ilovefemboys-2026-07-14", "display_name": "ilovefemboys", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ilovefemboys", "ecosystem": "npm", "versions": [ "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10305", "osv_published_at": "2026-07-13T06:27:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T07:05:31Z", "flagged_at": null, "confirmed_at": "2026-07-14T07:05:31Z", "osv_earliest_published_at": "2026-07-13T06:27:39Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T07:11:43Z" }, { "id": "lowkeybored-2026-07-14", "display_name": "lowkeybored", "campaign": null, "detection_source": "osv", "packages": [ { "package": "lowkeybored", "ecosystem": "npm", "versions": [ "1.1.2", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10332", "osv_published_at": "2026-07-13T06:27:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T07:05:34Z", "flagged_at": null, "confirmed_at": "2026-07-14T07:05:34Z", "osv_earliest_published_at": "2026-07-13T06:27:39Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-23T08:35:45Z", "observed_at": "2026-07-14T07:05:34Z", "ingested_at": "2026-07-14T07:05:34Z", "source_published_at": "2026-07-13T06:27:39Z", "ledger_committed_at": "2026-07-23T08:35:45Z" }, { "id": "lowkirkuenly-2026-07-14", "display_name": "lowkirkuenly", "campaign": null, "detection_source": "osv", "packages": [ { "package": "lowkirkuenly", "ecosystem": "npm", "versions": [ "1.1.2", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10333", "osv_published_at": "2026-07-13T06:27:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T07:05:35Z", "flagged_at": null, "confirmed_at": "2026-07-14T07:05:35Z", "osv_earliest_published_at": "2026-07-13T06:27:39Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-23T08:35:53Z", "observed_at": "2026-07-14T07:05:35Z", "ingested_at": "2026-07-14T07:05:35Z", "source_published_at": "2026-07-13T06:27:39Z", "ledger_committed_at": "2026-07-23T08:35:53Z" }, { "id": "midnightrush-2026-07-14", "display_name": "midnightrush", "campaign": null, "detection_source": "osv", "packages": [ { "package": "midnightrush", "ecosystem": "npm", "versions": [ "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10334", "osv_published_at": "2026-07-13T06:27:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T07:05:38Z", "flagged_at": null, "confirmed_at": "2026-07-14T07:05:38Z", "osv_earliest_published_at": "2026-07-13T06:27:39Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T07:13:51Z" }, { "id": "nodemon-async-2026-07-14", "display_name": "nodemon-async", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nodemon-async", "ecosystem": "npm", "versions": [ "3.1.13" ], "osv_entries": [ { "osv_id": "MAL-2026-10454", "osv_published_at": "2026-07-13T16:42:43Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T07:05:40Z", "flagged_at": null, "confirmed_at": "2026-07-14T07:05:40Z", "osv_earliest_published_at": "2026-07-13T16:42:43Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T07:14:01Z" }, { "id": "omglucidesotuff-2026-07-14", "display_name": "omglucidesotuff", "campaign": null, "detection_source": "osv", "packages": [ { "package": "omglucidesotuff", "ecosystem": "npm", "versions": [ "1.1.2", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10361", "osv_published_at": "2026-07-13T06:27:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T07:05:41Z", "flagged_at": null, "confirmed_at": "2026-07-14T07:05:41Z", "osv_earliest_published_at": "2026-07-13T06:27:39Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-23T08:36:13Z", "observed_at": "2026-07-14T07:05:41Z", "ingested_at": "2026-07-14T07:05:41Z", "source_published_at": "2026-07-13T06:27:39Z", "ledger_committed_at": "2026-07-23T08:36:13Z" }, { "id": "omgyesyesyes-2026-07-14", "display_name": "omgyesyesyes", "campaign": null, "detection_source": "osv", "packages": [ { "package": "omgyesyesyes", "ecosystem": "npm", "versions": [ "1.1.2", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10362", "osv_published_at": "2026-07-13T06:27:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T07:05:42Z", "flagged_at": null, "confirmed_at": "2026-07-14T07:05:42Z", "osv_earliest_published_at": "2026-07-13T06:27:39Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-23T08:36:22Z", "observed_at": "2026-07-14T07:05:42Z", "ingested_at": "2026-07-14T07:05:42Z", "source_published_at": "2026-07-13T06:27:39Z", "ledger_committed_at": "2026-07-23T08:36:22Z" }, { "id": "pasirianspirit-2026-07-14", "display_name": "pasirianspirit", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pasirianspirit", "ecosystem": "npm", "versions": [ "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10364", "osv_published_at": "2026-07-13T06:27:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T07:05:44Z", "flagged_at": null, "confirmed_at": "2026-07-14T07:05:44Z", "osv_earliest_published_at": "2026-07-13T06:27:39Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T07:15:07Z" }, { "id": "prettier-plugin-base-2026-07-14", "display_name": "prettier-plugin-base", "campaign": null, "detection_source": "osv", "packages": [ { "package": "prettier-plugin-base", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10430", "osv_published_at": "2026-07-13T08:17:11Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T07:05:45Z", "flagged_at": null, "confirmed_at": "2026-07-14T07:05:45Z", "osv_earliest_published_at": "2026-07-13T08:17:11Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T07:15:17Z" }, { "id": "thebigyahu-2026-07-14", "display_name": "thebigyahu", "campaign": null, "detection_source": "osv", "packages": [ { "package": "thebigyahu", "ecosystem": "npm", "versions": [ "1.1.2", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10387", "osv_published_at": "2026-07-13T06:27:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T07:05:51Z", "flagged_at": null, "confirmed_at": "2026-07-14T07:05:51Z", "osv_earliest_published_at": "2026-07-13T06:27:39Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-23T08:36:35Z", "observed_at": "2026-07-14T07:05:51Z", "ingested_at": "2026-07-14T07:05:51Z", "source_published_at": "2026-07-13T06:27:39Z", "ledger_committed_at": "2026-07-23T08:36:35Z" }, { "id": "tme-xca-react-2026-07-14", "display_name": "tme-xca-react", "campaign": null, "detection_source": "osv", "packages": [ { "package": "tme-xca-react", "ecosystem": "npm", "versions": [ "3.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10237", "osv_published_at": "2026-07-06T00:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T07:05:57Z", "flagged_at": null, "confirmed_at": "2026-07-14T07:05:57Z", "osv_earliest_published_at": "2026-07-06T00:00:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T07:16:29Z" }, { "id": "vite-plugin-config-paths-2026-07-14", "display_name": "vite-plugin-config-paths", "campaign": null, "detection_source": "osv", "packages": [ { "package": "vite-plugin-config-paths", "ecosystem": "npm", "versions": [ "1.4.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10574", "osv_published_at": "2026-07-14T06:04:15Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T07:05:58Z", "flagged_at": null, "confirmed_at": "2026-07-14T07:05:58Z", "osv_earliest_published_at": "2026-07-14T06:04:15Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T07:16:39Z" }, { "id": "web-pop-2026-07-14", "display_name": "web-pop", "campaign": null, "detection_source": "osv", "packages": [ { "package": "web-pop", "ecosystem": "npm", "versions": [ "2.3.5" ], "osv_entries": [ { "osv_id": "MAL-2026-10575", "osv_published_at": "2026-07-14T05:57:46Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T07:05:59Z", "flagged_at": null, "confirmed_at": "2026-07-14T07:05:59Z", "osv_earliest_published_at": "2026-07-14T05:57:46Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T07:16:51Z" }, { "id": "whatsadmaidk-2026-07-14", "display_name": "whatsadmaidk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "whatsadmaidk", "ecosystem": "npm", "versions": [ "1.1.2", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10396", "osv_published_at": "2026-07-13T06:27:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T07:06:01Z", "flagged_at": null, "confirmed_at": "2026-07-14T07:06:01Z", "osv_earliest_published_at": "2026-07-13T06:27:39Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-23T08:36:44Z", "observed_at": "2026-07-14T07:06:01Z", "ingested_at": "2026-07-14T07:06:01Z", "source_published_at": "2026-07-13T06:27:39Z", "ledger_committed_at": "2026-07-23T08:36:44Z" }, { "id": "tennacity-2026-07-14", "display_name": "tennacity", "campaign": null, "detection_source": "osv", "packages": [ { "package": "tennacity", "ecosystem": "pypi", "versions": [ "1.0.0", "1.2.0", "1.2.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10576", "osv_published_at": "2026-07-14T10:08:54Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T10:39:38Z", "flagged_at": null, "confirmed_at": "2026-07-14T10:39:38Z", "osv_earliest_published_at": "2026-07-14T10:08:54Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T10:39:40Z" }, { "id": "asyncapi-generator-helpers-2026-07-14", "display_name": "@asyncapi/generator-helpers", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@asyncapi/generator-helpers", "ecosystem": "npm", "versions": [ "1.1.1" ], "osv_entries": [ { "osv_id": "MAL-2025-190657", "osv_published_at": "2025-11-24T12:50:55Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T11:58:44Z", "flagged_at": null, "confirmed_at": "2026-07-14T11:58:44Z", "osv_earliest_published_at": "2025-11-24T12:50:55Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-14T10:00:00Z", "press_urls": [ "https://www.aikido.dev/blog/asyncapi-npm-packages-backdoored-via-github-actions", "https://thehackernews.com/2026/07/compromised-asyncapi-npm-packages.html" ], "advisory_url": "https://www.aikido.dev/blog/asyncapi-npm-packages-backdoored-via-github-actions", "ledger_commit_at": "2026-07-15T10:00:45Z" }, { "id": "asyncapi-generator-2026-07-14", "display_name": "@asyncapi/generator", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@asyncapi/generator", "ecosystem": "npm", "versions": [ "3.3.1" ], "osv_entries": [ { "osv_id": "MAL-2025-190636", "osv_published_at": "2025-11-24T11:48:04Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T11:58:46Z", "flagged_at": null, "confirmed_at": "2026-07-14T11:58:46Z", "osv_earliest_published_at": "2025-11-24T11:48:04Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-14T10:00:00Z", "press_urls": [ "https://www.aikido.dev/blog/asyncapi-npm-packages-backdoored-via-github-actions", "https://thehackernews.com/2026/07/compromised-asyncapi-npm-packages.html" ], "advisory_url": "https://www.aikido.dev/blog/asyncapi-npm-packages-backdoored-via-github-actions", "ledger_commit_at": "2026-07-15T10:01:17Z" }, { "id": "asyncapi-specs-2026-07-14", "display_name": "@asyncapi/specs", "campaign": "ddh-libraries", "detection_source": "osv", "packages": [ { "package": "@asyncapi/specs", "ecosystem": "npm", "versions": [ "3.3.0", "3.3.1", "6.11.2", "6.11.2-alpha.1" ], "osv_entries": [ { "osv_id": "MAL-2025-190643", "osv_published_at": "2025-11-24T11:33:26Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T10:00:00Z", "flagged_at": "2026-07-14T10:00:00Z", "confirmed_at": "2026-07-14T11:58:48Z", "osv_earliest_published_at": "2025-11-24T11:33:26Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-14T10:00:00Z", "press_urls": [ "https://www.aikido.dev/blog/asyncapi-npm-packages-backdoored-via-github-actions", "https://thehackernews.com/2026/07/compromised-asyncapi-npm-packages.html" ], "advisory_url": "https://www.aikido.dev/blog/asyncapi-npm-packages-backdoored-via-github-actions", "ledger_commit_at": "2026-07-15T17:40:32Z" }, { "id": "amedit-vercel-builder-probe-2026-07-14", "display_name": "@amedit/vercel-builder-probe", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@amedit/vercel-builder-probe", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2", "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-10548", "osv_published_at": "2026-07-14T03:24:31Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T13:49:28Z", "flagged_at": null, "confirmed_at": "2026-07-14T13:49:28Z", "osv_earliest_published_at": "2026-07-14T03:24:31Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T04:56:56Z" }, { "id": "asyncapi-generator-components-2026-07-14", "display_name": "@asyncapi/generator-components", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@asyncapi/generator-components", "ecosystem": "npm", "versions": [ "0.7.1" ], "osv_entries": [ { "osv_id": "MAL-2025-190656", "osv_published_at": "2025-11-24T12:49:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T13:49:30Z", "flagged_at": null, "confirmed_at": "2026-07-14T13:49:30Z", "osv_earliest_published_at": "2025-11-24T12:49:48Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": "2026-07-14T10:00:00Z", "press_urls": [ "https://www.aikido.dev/blog/asyncapi-npm-packages-backdoored-via-github-actions", "https://thehackernews.com/2026/07/compromised-asyncapi-npm-packages.html" ], "advisory_url": "https://www.aikido.dev/blog/asyncapi-npm-packages-backdoored-via-github-actions", "ledger_commit_at": "2026-07-15T10:01:01Z" }, { "id": "cw-ui-asio-neon-themes-2026-07-14", "display_name": "@cw-ui/asio-neon-themes", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@cw-ui/asio-neon-themes", "ecosystem": "npm", "versions": [ "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10556", "osv_published_at": "2026-07-14T05:12:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T13:49:36Z", "flagged_at": null, "confirmed_at": "2026-07-14T13:49:36Z", "osv_earliest_published_at": "2026-07-14T05:12:39Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T13:50:01Z" }, { "id": "cw-ui-micro-ui-loader-2026-07-14", "display_name": "@cw-ui/micro-ui-loader", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@cw-ui/micro-ui-loader", "ecosystem": "npm", "versions": [ "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10557", "osv_published_at": "2026-07-14T05:12:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T13:50:31Z", "flagged_at": null, "confirmed_at": "2026-07-14T13:50:31Z", "osv_earliest_published_at": "2026-07-14T05:12:39Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T13:50:35Z" }, { "id": "sqlite-clone-nodesql-2026-07-14", "display_name": "@sqlite-clone/nodesql", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@sqlite-clone/nodesql", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10577", "osv_published_at": "2026-07-14T10:35:01Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T13:50:50Z", "flagged_at": null, "confirmed_at": "2026-07-14T13:50:50Z", "osv_earliest_published_at": "2026-07-14T10:35:01Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T13:50:54Z" }, { "id": "sqlite-group-sql-creator-2026-07-14", "display_name": "@sqlite-group/sql-creator", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@sqlite-group/sql-creator", "ecosystem": "npm", "versions": [ "1.0.7" ], "osv_entries": [ { "osv_id": "MAL-2026-10578", "osv_published_at": "2026-07-14T10:35:02Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T13:51:41Z", "flagged_at": null, "confirmed_at": "2026-07-14T13:51:41Z", "osv_earliest_published_at": "2026-07-14T10:35:02Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T13:51:45Z" }, { "id": "akshajrawat-utils-2026-07-14", "display_name": "akshajrawat.utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "akshajrawat.utils", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10558", "osv_published_at": "2026-07-14T05:44:19Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T13:52:28Z", "flagged_at": null, "confirmed_at": "2026-07-14T13:52:28Z", "osv_earliest_published_at": "2026-07-14T05:44:19Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T04:59:05Z" }, { "id": "bimi-maker-2026-07-14", "display_name": "bimi-maker", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bimi-maker", "ecosystem": "npm", "versions": [ "8.2.4" ], "osv_entries": [ { "osv_id": "MAL-2026-10579", "osv_published_at": "2026-07-14T12:58:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T13:52:30Z", "flagged_at": null, "confirmed_at": "2026-07-14T13:52:30Z", "osv_earliest_published_at": "2026-07-14T12:58:33Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T13:52:40Z" }, { "id": "ethers-core-2026-07-14", "display_name": "ethers-core", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ethers-core", "ecosystem": "npm", "versions": [ "6.13.5", "6.13.7" ], "osv_entries": [ { "osv_id": "MAL-2026-10580", "osv_published_at": "2026-07-14T12:55:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T13:52:33Z", "flagged_at": null, "confirmed_at": "2026-07-14T13:52:33Z", "osv_earliest_published_at": "2026-07-14T12:55:50Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T05:00:12Z" }, { "id": "micro-ui-loader-2026-07-14", "display_name": "micro-ui-loader", "campaign": null, "detection_source": "osv", "packages": [ { "package": "micro-ui-loader", "ecosystem": "npm", "versions": [ "2.0.0", "6.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10564", "osv_published_at": "2026-07-14T05:12:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T13:52:36Z", "flagged_at": null, "confirmed_at": "2026-07-14T13:52:36Z", "osv_earliest_published_at": "2026-07-14T05:12:39Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T13:53:13Z" }, { "id": "process-status-widget-2026-07-14", "display_name": "process-status-widget", "campaign": null, "detection_source": "osv", "packages": [ { "package": "process-status-widget", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10581", "osv_published_at": "2026-07-14T12:54:30Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T13:52:37Z", "flagged_at": null, "confirmed_at": "2026-07-14T13:52:37Z", "osv_earliest_published_at": "2026-07-14T12:54:30Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T13:53:22Z" }, { "id": "async-mutex-v2-2026-07-14", "display_name": "async-mutex-v2", "campaign": null, "detection_source": "osv", "packages": [ { "package": "async-mutex-v2", "ecosystem": "npm", "versions": [ "2.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10582", "osv_published_at": "2026-07-14T14:01:47Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T14:53:46Z", "flagged_at": null, "confirmed_at": "2026-07-14T14:53:46Z", "osv_earliest_published_at": "2026-07-14T14:01:47Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T14:53:48Z" }, { "id": "chalkdev-2026-07-14", "display_name": "chalkdev", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chalkdev", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10583", "osv_published_at": "2026-07-14T14:00:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T14:53:47Z", "flagged_at": null, "confirmed_at": "2026-07-14T14:53:47Z", "osv_earliest_published_at": "2026-07-14T14:00:35Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T14:53:56Z" }, { "id": "chalkdevx-2026-07-14", "display_name": "chalkdevx", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chalkdevx", "ecosystem": "npm", "versions": [ "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10584", "osv_published_at": "2026-07-14T14:00:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T14:53:48Z", "flagged_at": null, "confirmed_at": "2026-07-14T14:53:48Z", "osv_earliest_published_at": "2026-07-14T14:00:48Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T14:54:06Z" }, { "id": "cheeriobox-2026-07-14", "display_name": "cheeriobox", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cheeriobox", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10585", "osv_published_at": "2026-07-14T14:00:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T14:53:50Z", "flagged_at": null, "confirmed_at": "2026-07-14T14:53:50Z", "osv_earliest_published_at": "2026-07-14T14:00:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T14:54:14Z" }, { "id": "crypto-validate-lib-2026-07-14", "display_name": "crypto-validate-lib", "campaign": null, "detection_source": "osv", "packages": [ { "package": "crypto-validate-lib", "ecosystem": "npm", "versions": [ "1.0.1", "1.0.2", "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-10586", "osv_published_at": "2026-07-14T13:58:43Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T14:53:51Z", "flagged_at": null, "confirmed_at": "2026-07-14T14:53:51Z", "osv_earliest_published_at": "2026-07-14T13:58:43Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T18:36:59Z" }, { "id": "dayjscore-2026-07-14", "display_name": "dayjscore", "campaign": null, "detection_source": "osv", "packages": [ { "package": "dayjscore", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10587", "osv_published_at": "2026-07-14T14:00:55Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T14:53:53Z", "flagged_at": null, "confirmed_at": "2026-07-14T14:53:53Z", "osv_earliest_published_at": "2026-07-14T14:00:55Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T14:54:31Z" }, { "id": "momenntjs-2026-07-14", "display_name": "momenntjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "momenntjs", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10588", "osv_published_at": "2026-07-14T14:00:27Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T14:53:56Z", "flagged_at": null, "confirmed_at": "2026-07-14T14:53:56Z", "osv_earliest_published_at": "2026-07-14T14:00:27Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T14:54:48Z" }, { "id": "nodeaxois-2026-07-14", "display_name": "nodeaxois", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nodeaxois", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10589", "osv_published_at": "2026-07-14T14:01:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T14:53:57Z", "flagged_at": null, "confirmed_at": "2026-07-14T14:53:57Z", "osv_earliest_published_at": "2026-07-14T14:01:03Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T14:54:56Z" }, { "id": "openaiwrapper-2026-07-14", "display_name": "openaiwrapper", "campaign": null, "detection_source": "osv", "packages": [ { "package": "openaiwrapper", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10590", "osv_published_at": "2026-07-14T13:59:47Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T14:53:59Z", "flagged_at": null, "confirmed_at": "2026-07-14T14:53:59Z", "osv_earliest_published_at": "2026-07-14T13:59:47Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T14:55:05Z" }, { "id": "solana-key-utils-2026-07-14", "display_name": "solana-key-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "solana-key-utils", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2", "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-10591", "osv_published_at": "2026-07-14T13:58:15Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T14:54:01Z", "flagged_at": null, "confirmed_at": "2026-07-14T14:54:01Z", "osv_earliest_published_at": "2026-07-14T13:58:15Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T09:17:52Z" }, { "id": "stripedev-2026-07-14", "display_name": "stripedev", "campaign": null, "detection_source": "osv", "packages": [ { "package": "stripedev", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10592", "osv_published_at": "2026-07-14T13:59:34Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T14:54:02Z", "flagged_at": null, "confirmed_at": "2026-07-14T14:54:02Z", "osv_earliest_published_at": "2026-07-14T13:59:34Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T14:55:22Z" }, { "id": "twiliobox-2026-07-14", "display_name": "twiliobox", "campaign": null, "detection_source": "osv", "packages": [ { "package": "twiliobox", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10593", "osv_published_at": "2026-07-14T13:59:56Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T14:54:04Z", "flagged_at": null, "confirmed_at": "2026-07-14T14:54:04Z", "osv_earliest_published_at": "2026-07-14T13:59:56Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T14:55:31Z" }, { "id": "yargsplus-2026-07-14", "display_name": "yargsplus", "campaign": null, "detection_source": "osv", "packages": [ { "package": "yargsplus", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10594", "osv_published_at": "2026-07-14T14:00:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T14:54:05Z", "flagged_at": null, "confirmed_at": "2026-07-14T14:54:05Z", "osv_earliest_published_at": "2026-07-14T14:00:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T14:55:42Z" }, { "id": "public-for-cdao-abi-2026-07-14", "display_name": "@public-for-cdao/abi", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@public-for-cdao/abi", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-10599", "osv_published_at": "2026-07-14T17:56:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T18:33:01Z", "flagged_at": null, "confirmed_at": "2026-07-14T18:33:01Z", "osv_earliest_published_at": "2026-07-14T17:56:50Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T18:33:03Z" }, { "id": "public-for-cdao-api-2026-07-14", "display_name": "@public-for-cdao/api", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@public-for-cdao/api", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-10600", "osv_published_at": "2026-07-14T17:56:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T18:33:45Z", "flagged_at": null, "confirmed_at": "2026-07-14T18:33:45Z", "osv_earliest_published_at": "2026-07-14T17:56:25Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T18:33:48Z" }, { "id": "public-for-cdao-common-2026-07-14", "display_name": "@public-for-cdao/common", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@public-for-cdao/common", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-10601", "osv_published_at": "2026-07-14T17:56:18Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T18:34:04Z", "flagged_at": null, "confirmed_at": "2026-07-14T18:34:04Z", "osv_earliest_published_at": "2026-07-14T17:56:18Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T18:34:07Z" }, { "id": "public-for-cdao-config-2026-07-14", "display_name": "@public-for-cdao/config", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@public-for-cdao/config", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-10602", "osv_published_at": "2026-07-14T17:57:14Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T18:34:23Z", "flagged_at": null, "confirmed_at": "2026-07-14T18:34:23Z", "osv_earliest_published_at": "2026-07-14T17:57:14Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T18:34:26Z" }, { "id": "public-for-cdao-token-2026-07-14", "display_name": "@public-for-cdao/token", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@public-for-cdao/token", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-10603", "osv_published_at": "2026-07-14T17:57:01Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T18:34:42Z", "flagged_at": null, "confirmed_at": "2026-07-14T18:34:42Z", "osv_earliest_published_at": "2026-07-14T17:57:01Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T18:34:45Z" }, { "id": "public-for-cdao-types-2026-07-14", "display_name": "@public-for-cdao/types", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@public-for-cdao/types", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-10604", "osv_published_at": "2026-07-14T17:56:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T18:35:01Z", "flagged_at": null, "confirmed_at": "2026-07-14T18:35:01Z", "osv_earliest_published_at": "2026-07-14T17:56:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T18:35:04Z" }, { "id": "radivi-ui-react-dialog-2026-07-14", "display_name": "@radivi-ui/react-dialog", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@radivi-ui/react-dialog", "ecosystem": "npm", "versions": [ "1.1.3", "1.1.4" ], "osv_entries": [ { "osv_id": "MAL-2026-10605", "osv_published_at": "2026-07-14T17:55:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T18:35:21Z", "flagged_at": null, "confirmed_at": "2026-07-14T18:35:21Z", "osv_earliest_published_at": "2026-07-14T17:55:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T18:35:23Z" }, { "id": "base58-utils-2026-07-14", "display_name": "base58-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "base58-utils", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.3", "1.0.4", "1.0.5" ], "osv_entries": [ { "osv_id": "MAL-2026-10606", "osv_published_at": "2026-07-14T17:47:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T18:36:25Z", "flagged_at": null, "confirmed_at": "2026-07-14T18:36:25Z", "osv_earliest_published_at": "2026-07-14T17:47:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T18:36:34Z" }, { "id": "chai-as-act-2026-07-14", "display_name": "chai-as-act", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-act", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10607", "osv_published_at": "2026-07-14T17:53:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T18:36:27Z", "flagged_at": null, "confirmed_at": "2026-07-14T18:36:27Z", "osv_earliest_published_at": "2026-07-14T17:53:35Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T18:36:43Z" }, { "id": "chain-sdk-js-2026-07-14", "display_name": "chain-sdk-js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chain-sdk-js", "ecosystem": "npm", "versions": [ "1.0.2", "1.0.3", "1.0.4", "1.0.5", "1.0.6" ], "osv_entries": [ { "osv_id": "MAL-2026-10608", "osv_published_at": "2026-07-14T17:54:13Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T18:36:29Z", "flagged_at": null, "confirmed_at": "2026-07-14T18:36:29Z", "osv_earliest_published_at": "2026-07-14T17:54:13Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:16:26Z" }, { "id": "utils-style-engine-2026-07-14", "display_name": "utils-style-engine", "campaign": null, "detection_source": "osv", "packages": [ { "package": "utils-style-engine", "ecosystem": "npm", "versions": [ "10.2.4" ], "osv_entries": [ { "osv_id": "MAL-2026-10609", "osv_published_at": "2026-07-14T17:56:34Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T18:36:34Z", "flagged_at": null, "confirmed_at": "2026-07-14T18:36:34Z", "osv_earliest_published_at": "2026-07-14T17:56:34Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T18:37:16Z" }, { "id": "proxy-check-ii-2026-07-14", "display_name": "proxy-check-ii", "campaign": null, "detection_source": "osv", "packages": [ { "package": "proxy-check-ii", "ecosystem": "pypi", "versions": [ "0.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10610", "osv_published_at": "2026-07-14T17:07:54Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T18:36:41Z", "flagged_at": null, "confirmed_at": "2026-07-14T18:36:41Z", "osv_earliest_published_at": "2026-07-14T17:07:54Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T18:37:25Z" }, { "id": "web3-helpers-core-2026-07-14", "display_name": "@web3-helpers/core", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@web3-helpers/core", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2", "1.0.3", "1.0.4", "1.0.5", "1.0.6" ], "osv_entries": [ { "osv_id": "MAL-2026-10611", "osv_published_at": "2026-07-14T19:48:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T20:40:36Z", "flagged_at": null, "confirmed_at": "2026-07-14T20:40:36Z", "osv_earliest_published_at": "2026-07-14T19:48:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T20:40:38Z" }, { "id": "assertion-utils-js-2026-07-14", "display_name": "assertion-utils-js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "assertion-utils-js", "ecosystem": "npm", "versions": [ "2.4.3" ], "osv_entries": [ { "osv_id": "MAL-2026-10612", "osv_published_at": "2026-07-14T19:53:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T20:41:33Z", "flagged_at": null, "confirmed_at": "2026-07-14T20:41:33Z", "osv_earliest_published_at": "2026-07-14T19:53:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T20:41:36Z" }, { "id": "ethereum-lib-utils-2026-07-14", "display_name": "ethereum-lib-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ethereum-lib-utils", "ecosystem": "npm", "versions": [ "1.3.7" ], "osv_entries": [ { "osv_id": "MAL-2026-10613", "osv_published_at": "2026-07-14T19:55:59Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T20:41:36Z", "flagged_at": null, "confirmed_at": "2026-07-14T20:41:36Z", "osv_earliest_published_at": "2026-07-14T19:55:59Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T20:41:52Z" }, { "id": "postcss-selector-minify-2026-07-14", "display_name": "postcss-selector-minify", "campaign": null, "detection_source": "osv", "packages": [ { "package": "postcss-selector-minify", "ecosystem": "npm", "versions": [ "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10614", "osv_published_at": "2026-07-14T20:18:29Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T20:41:39Z", "flagged_at": null, "confirmed_at": "2026-07-14T20:41:39Z", "osv_earliest_published_at": "2026-07-14T20:18:29Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T20:42:08Z" }, { "id": "smb-common-uikit-2026-07-14", "display_name": "smb-common-uikit", "campaign": null, "detection_source": "osv", "packages": [ { "package": "smb-common-uikit", "ecosystem": "npm", "versions": [ "15.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10615", "osv_published_at": "2026-07-14T19:49:26Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T20:41:41Z", "flagged_at": null, "confirmed_at": "2026-07-14T20:41:41Z", "osv_earliest_published_at": "2026-07-14T19:49:26Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T20:42:16Z" }, { "id": "smb-portal-uikit-2026-07-14", "display_name": "smb-portal-uikit", "campaign": null, "detection_source": "osv", "packages": [ { "package": "smb-portal-uikit", "ecosystem": "npm", "versions": [ "18.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10616", "osv_published_at": "2026-07-14T19:49:16Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T20:41:42Z", "flagged_at": null, "confirmed_at": "2026-07-14T20:41:42Z", "osv_earliest_published_at": "2026-07-14T19:49:16Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T20:42:25Z" }, { "id": "cosmos-cuda-2026-07-14", "display_name": "cosmos-cuda", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cosmos-cuda", "ecosystem": "pypi", "versions": [ "9999.0.0", "9999.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10617", "osv_published_at": "2026-07-14T20:02:31Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T20:41:48Z", "flagged_at": null, "confirmed_at": "2026-07-14T20:41:48Z", "osv_earliest_published_at": "2026-07-14T20:02:31Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T20:42:33Z" }, { "id": "cosmos-gradio-2026-07-14", "display_name": "cosmos-gradio", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cosmos-gradio", "ecosystem": "pypi", "versions": [ "9999.0.0", "9999.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10618", "osv_published_at": "2026-07-14T20:06:55Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T20:41:50Z", "flagged_at": null, "confirmed_at": "2026-07-14T20:41:50Z", "osv_earliest_published_at": "2026-07-14T20:06:55Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T20:42:42Z" }, { "id": "vite-js-vui-2026-07-14", "display_name": "@vite-js/vui", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@vite-js/vui", "ecosystem": "npm", "versions": [ "7.14.16" ], "osv_entries": [ { "osv_id": "MAL-2026-10619", "osv_published_at": "2026-07-14T20:47:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T20:57:05Z", "flagged_at": null, "confirmed_at": "2026-07-14T20:57:05Z", "osv_earliest_published_at": "2026-07-14T20:47:33Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T20:57:08Z" }, { "id": "ahooks-3-7-8-2026-07-14", "display_name": "ahooks-3.7.8", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ahooks-3.7.8", "ecosystem": "npm", "versions": [ "13.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10620", "osv_published_at": "2026-07-14T20:29:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T20:57:36Z", "flagged_at": null, "confirmed_at": "2026-07-14T20:57:36Z", "osv_earliest_published_at": "2026-07-14T20:29:21Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T20:57:39Z" }, { "id": "chai-as-hardened-2026-07-14", "display_name": "chai-as-hardened", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-hardened", "ecosystem": "npm", "versions": [ "7.0.9" ], "osv_entries": [ { "osv_id": "MAL-2026-10621", "osv_published_at": "2026-07-14T20:33:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T20:57:37Z", "flagged_at": null, "confirmed_at": "2026-07-14T20:57:37Z", "osv_earliest_published_at": "2026-07-14T20:33:37Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T20:57:47Z" }, { "id": "chai-as-structured-2026-07-14", "display_name": "chai-as-structured", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-structured", "ecosystem": "npm", "versions": [ "7.0.5" ], "osv_entries": [ { "osv_id": "MAL-2026-10622", "osv_published_at": "2026-07-14T20:33:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T20:57:39Z", "flagged_at": null, "confirmed_at": "2026-07-14T20:57:39Z", "osv_earliest_published_at": "2026-07-14T20:33:52Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T20:57:55Z" }, { "id": "http-ws-listener-2026-07-14", "display_name": "http-ws-listener", "campaign": null, "detection_source": "osv", "packages": [ { "package": "http-ws-listener", "ecosystem": "npm", "versions": [ "1.0.5" ], "osv_entries": [ { "osv_id": "MAL-2026-10623", "osv_published_at": "2026-07-14T20:29:55Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T20:57:40Z", "flagged_at": null, "confirmed_at": "2026-07-14T20:57:40Z", "osv_earliest_published_at": "2026-07-14T20:29:55Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T20:58:03Z" }, { "id": "tronwe-2026-07-14", "display_name": "tronwe", "campaign": null, "detection_source": "osv", "packages": [ { "package": "tronwe", "ecosystem": "pypi", "versions": [ "0.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10624", "osv_published_at": "2026-07-14T20:17:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T20:57:44Z", "flagged_at": null, "confirmed_at": "2026-07-14T20:57:44Z", "osv_earliest_published_at": "2026-07-14T20:17:42Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T20:58:12Z" }, { "id": "tidgi-2026-07-14", "display_name": "tidgi", "campaign": null, "detection_source": "osv", "packages": [ { "package": "tidgi", "ecosystem": "npm", "versions": [ "0.13.0" ], "osv_entries": [ { "osv_id": "GHSA-9hc2-hjx8-q6pv", "osv_published_at": "2026-07-14T19:52:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-14T23:40:44Z", "flagged_at": null, "confirmed_at": "2026-07-14T23:40:44Z", "osv_earliest_published_at": "2026-07-14T19:52:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-14T23:40:46Z" }, { "id": "akshajrawat-plugin-repo-cli-2026-07-15", "display_name": "@akshajrawat/plugin-repo-cli", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@akshajrawat/plugin-repo-cli", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10554", "osv_published_at": "2026-07-14T05:44:19Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T04:56:45Z", "flagged_at": null, "confirmed_at": "2026-07-15T04:56:45Z", "osv_earliest_published_at": "2026-07-14T05:44:19Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T04:56:48Z" }, { "id": "react-case-option-2026-07-15", "display_name": "@react-case/option", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@react-case/option", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10626", "osv_published_at": "2026-07-15T01:09:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T04:56:51Z", "flagged_at": null, "confirmed_at": "2026-07-15T04:56:51Z", "osv_earliest_published_at": "2026-07-15T01:09:12Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T04:57:10Z" }, { "id": "sqlite-frame-nodesql-2026-07-15", "display_name": "@sqlite-frame/nodesql", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@sqlite-frame/nodesql", "ecosystem": "npm", "versions": [ "1.0.2", "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-10627", "osv_published_at": "2026-07-15T01:12:34Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T04:57:39Z", "flagged_at": null, "confirmed_at": "2026-07-15T04:57:39Z", "osv_earliest_published_at": "2026-07-15T01:12:34Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T04:57:42Z" }, { "id": "ai-explain-2026-07-15", "display_name": "ai-explain", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ai-explain", "ecosystem": "npm", "versions": [ "0.3.4" ], "osv_entries": [ { "osv_id": "MAL-2026-10628", "osv_published_at": "2026-07-15T02:58:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T04:58:45Z", "flagged_at": null, "confirmed_at": "2026-07-15T04:58:45Z", "osv_earliest_published_at": "2026-07-15T02:58:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T04:58:48Z" }, { "id": "ai-pro-sdk-2026-07-15", "display_name": "ai-pro-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ai-pro-sdk", "ecosystem": "npm", "versions": [ "2.0.1", "2.0.2", "2.0.3", "2.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-10629", "osv_published_at": "2026-07-15T02:57:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T04:58:47Z", "flagged_at": null, "confirmed_at": "2026-07-15T04:58:47Z", "osv_earliest_published_at": "2026-07-15T02:57:38Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T23:46:51Z" }, { "id": "chai-as-byte-2026-07-15", "display_name": "chai-as-byte", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chai-as-byte", "ecosystem": "npm", "versions": [ "3.1.5", "3.1.6" ], "osv_entries": [ { "osv_id": "MAL-2026-10630", "osv_published_at": "2026-07-15T01:21:59Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T04:58:50Z", "flagged_at": null, "confirmed_at": "2026-07-15T04:58:50Z", "osv_earliest_published_at": "2026-07-15T01:21:59Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T04:59:13Z" }, { "id": "class-synth-2026-07-15", "display_name": "class-synth", "campaign": null, "detection_source": "osv", "packages": [ { "package": "class-synth", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5730", "osv_published_at": "2026-06-13T07:07:30Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T04:58:52Z", "flagged_at": null, "confirmed_at": "2026-07-15T04:58:52Z", "osv_earliest_published_at": "2026-06-13T07:07:30Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T04:59:20Z" }, { "id": "clipboard-drop-2026-07-15", "display_name": "clipboard-drop", "campaign": null, "detection_source": "osv", "packages": [ { "package": "clipboard-drop", "ecosystem": "npm", "versions": [ "0.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10560", "osv_published_at": "2026-07-14T05:09:02Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T04:58:53Z", "flagged_at": null, "confirmed_at": "2026-07-15T04:58:53Z", "osv_earliest_published_at": "2026-07-14T05:09:02Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T04:59:29Z" }, { "id": "core-dotenv-2026-07-15", "display_name": "core-dotenv", "campaign": null, "detection_source": "osv", "packages": [ { "package": "core-dotenv", "ecosystem": "npm", "versions": [ "1.4.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10631", "osv_published_at": "2026-07-15T04:01:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T04:58:55Z", "flagged_at": null, "confirmed_at": "2026-07-15T04:58:55Z", "osv_earliest_published_at": "2026-07-15T04:01:05Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T04:59:37Z" }, { "id": "cppt-common-2026-07-15", "display_name": "cppt-common", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cppt-common", "ecosystem": "npm", "versions": [ "13.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10632", "osv_published_at": "2026-07-14T22:16:11Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T04:58:57Z", "flagged_at": null, "confirmed_at": "2026-07-15T04:58:57Z", "osv_earliest_published_at": "2026-07-14T22:16:11Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T04:59:46Z" }, { "id": "creditgauge-2026-07-15", "display_name": "creditgauge", "campaign": null, "detection_source": "osv", "packages": [ { "package": "creditgauge", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10633", "osv_published_at": "2026-07-15T03:56:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T04:58:58Z", "flagged_at": null, "confirmed_at": "2026-07-15T04:58:58Z", "osv_earliest_published_at": "2026-07-15T03:56:05Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T04:59:54Z" }, { "id": "estore-client-2026-07-15", "display_name": "estore-client", "campaign": null, "detection_source": "osv", "packages": [ { "package": "estore-client", "ecosystem": "npm", "versions": [ "5.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10634", "osv_published_at": "2026-07-15T03:57:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T04:59:00Z", "flagged_at": null, "confirmed_at": "2026-07-15T04:59:00Z", "osv_earliest_published_at": "2026-07-15T03:57:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T05:00:03Z" }, { "id": "gmail-changer-2026-07-15", "display_name": "gmail-changer", "campaign": null, "detection_source": "osv", "packages": [ { "package": "gmail-changer", "ecosystem": "npm", "versions": [ "2.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10635", "osv_published_at": "2026-07-15T04:20:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T04:59:05Z", "flagged_at": null, "confirmed_at": "2026-07-15T04:59:05Z", "osv_earliest_published_at": "2026-07-15T04:20:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T05:00:29Z" }, { "id": "mc-reg-2026-07-15", "display_name": "mc-reg", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mc-reg", "ecosystem": "npm", "versions": [ "1.0.3", "1.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-10637", "osv_published_at": "2026-07-15T00:01:17Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T04:59:08Z", "flagged_at": null, "confirmed_at": "2026-07-15T04:59:08Z", "osv_earliest_published_at": "2026-07-15T00:01:17Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T05:00:39Z" }, { "id": "monitoring-service-util-2026-07-15", "display_name": "monitoring-service-util", "campaign": null, "detection_source": "osv", "packages": [ { "package": "monitoring-service-util", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10598", "osv_published_at": "2026-07-14T17:28:26Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T04:59:09Z", "flagged_at": null, "confirmed_at": "2026-07-15T04:59:09Z", "osv_earliest_published_at": "2026-07-14T17:28:26Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T05:00:48Z" }, { "id": "monogrok-2026-07-15", "display_name": "monogrok", "campaign": null, "detection_source": "osv", "packages": [ { "package": "monogrok", "ecosystem": "npm", "versions": [ "1.0.30", "1.0.33" ], "osv_entries": [ { "osv_id": "MAL-2026-10638", "osv_published_at": "2026-07-15T04:02:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T04:59:11Z", "flagged_at": null, "confirmed_at": "2026-07-15T04:59:11Z", "osv_earliest_published_at": "2026-07-15T04:02:35Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T05:00:57Z" }, { "id": "nodemon-plint-2026-07-15", "display_name": "nodemon-plint", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nodemon-plint", "ecosystem": "npm", "versions": [ "3.1.13" ], "osv_entries": [ { "osv_id": "MAL-2026-10595", "osv_published_at": "2026-07-14T14:03:30Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T04:59:14Z", "flagged_at": null, "confirmed_at": "2026-07-15T04:59:14Z", "osv_earliest_published_at": "2026-07-14T14:03:30Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T05:01:14Z" }, { "id": "ogensec-sdk-2026-07-15", "display_name": "ogensec-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ogensec-sdk", "ecosystem": "npm", "versions": [ "1.1.1", "1.2.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10639", "osv_published_at": "2026-07-15T03:56:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T04:59:16Z", "flagged_at": null, "confirmed_at": "2026-07-15T04:59:16Z", "osv_earliest_published_at": "2026-07-15T03:56:52Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T05:01:26Z" }, { "id": "polygon-toolkit-validation-2026-07-15", "display_name": "polygon-toolkit-validation", "campaign": null, "detection_source": "osv", "packages": [ { "package": "polygon-toolkit-validation", "ecosystem": "npm", "versions": [ "1.0.9", "1.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10640", "osv_published_at": "2026-07-15T03:41:24Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T04:59:17Z", "flagged_at": null, "confirmed_at": "2026-07-15T04:59:17Z", "osv_earliest_published_at": "2026-07-15T03:41:24Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T05:01:34Z" }, { "id": "polygon-toolkit-validator-2026-07-15", "display_name": "polygon-toolkit-validator", "campaign": null, "detection_source": "osv", "packages": [ { "package": "polygon-toolkit-validator", "ecosystem": "npm", "versions": [ "1.1.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10641", "osv_published_at": "2026-07-15T03:41:32Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T04:59:19Z", "flagged_at": null, "confirmed_at": "2026-07-15T04:59:19Z", "osv_earliest_published_at": "2026-07-15T03:41:32Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T05:01:43Z" }, { "id": "relative-time-live-2026-07-15", "display_name": "relative-time-live", "campaign": null, "detection_source": "osv", "packages": [ { "package": "relative-time-live", "ecosystem": "npm", "versions": [ "0.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10565", "osv_published_at": "2026-07-14T05:09:02Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T04:59:20Z", "flagged_at": null, "confirmed_at": "2026-07-15T04:59:20Z", "osv_earliest_published_at": "2026-07-14T05:09:02Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T05:01:51Z" }, { "id": "sight-bind-2026-07-15", "display_name": "sight-bind", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sight-bind", "ecosystem": "npm", "versions": [ "0.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10566", "osv_published_at": "2026-07-14T05:09:02Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T04:59:22Z", "flagged_at": null, "confirmed_at": "2026-07-15T04:59:22Z", "osv_earliest_published_at": "2026-07-14T05:09:02Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T05:01:59Z" }, { "id": "sync-logger-2026-07-15", "display_name": "sync-logger", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sync-logger", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10568", "osv_published_at": "2026-07-14T05:09:02Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T04:59:23Z", "flagged_at": null, "confirmed_at": "2026-07-15T04:59:23Z", "osv_earliest_published_at": "2026-07-14T05:09:02Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T05:02:07Z" }, { "id": "ethereum-input-decorder-2026-07-15", "display_name": "ethereum-input-decorder", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ethereum-input-decorder", "ecosystem": "pypi", "versions": [ "1.2.2", "1.2.4" ], "osv_entries": [ { "osv_id": "MAL-2026-10643", "osv_published_at": "2026-07-15T03:52:02Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T04:59:29Z", "flagged_at": null, "confirmed_at": "2026-07-15T04:59:29Z", "osv_earliest_published_at": "2026-07-15T03:52:02Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T05:02:22Z" }, { "id": "proxy-checker-j-2026-07-15", "display_name": "proxy-checker-j", "campaign": null, "detection_source": "osv", "packages": [ { "package": "proxy-checker-j", "ecosystem": "pypi", "versions": [ "0.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10644", "osv_published_at": "2026-07-14T23:58:43Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T04:59:31Z", "flagged_at": null, "confirmed_at": "2026-07-15T04:59:31Z", "osv_earliest_published_at": "2026-07-14T23:58:43Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T05:02:32Z" }, { "id": "debile-require-dir-2026-07-15", "display_name": "@debile/require-dir", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@debile/require-dir", "ecosystem": "npm", "versions": [ "1.9.1", "1.9.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10654", "osv_published_at": "2026-07-15T04:32:04Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T06:01:57Z", "flagged_at": null, "confirmed_at": "2026-07-15T06:01:57Z", "osv_earliest_published_at": "2026-07-15T04:32:04Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T06:01:59Z" }, { "id": "pimy-b2cweb-apiclient-b2cweb-r2-2026-07-15", "display_name": "@pimy-b2cweb/apiclient-b2cweb-r2", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@pimy-b2cweb/apiclient-b2cweb-r2", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-10655", "osv_published_at": "2026-07-07T08:50:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T06:01:59Z", "flagged_at": null, "confirmed_at": "2026-07-15T06:01:59Z", "osv_earliest_published_at": "2026-07-07T08:50:52Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T06:02:10Z" }, { "id": "pimy-b2cweb-frontend-lib-2026-07-15", "display_name": "@pimy-b2cweb/frontend-lib", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@pimy-b2cweb/frontend-lib", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-10656", "osv_published_at": "2026-07-07T08:44:11Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T06:02:01Z", "flagged_at": null, "confirmed_at": "2026-07-15T06:02:01Z", "osv_earliest_published_at": "2026-07-07T08:44:11Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T06:02:20Z" }, { "id": "crypto-hasher-2026-07-15", "display_name": "crypto-hasher", "campaign": null, "detection_source": "osv", "packages": [ { "package": "crypto-hasher", "ecosystem": "npm", "versions": [ "3.1.2", "3.1.3" ], "osv_entries": [ { "osv_id": "MAL-2026-10666", "osv_published_at": "2026-07-15T06:19:59Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T07:04:11Z", "flagged_at": null, "confirmed_at": "2026-07-15T07:04:11Z", "osv_earliest_published_at": "2026-07-15T06:19:59Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T07:04:16Z" }, { "id": "true-2026-07-15", "display_name": "true", "campaign": null, "detection_source": "osv", "packages": [ { "package": "true", "ecosystem": "npm", "versions": [ "0.0.1", "0.0.2", "0.0.3", "0.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-10667", "osv_published_at": "2026-07-15T06:19:56Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T07:04:14Z", "flagged_at": null, "confirmed_at": "2026-07-15T07:04:14Z", "osv_earliest_published_at": "2026-07-15T06:19:56Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T07:04:27Z" }, { "id": "achuthvp-postinstall-poc-2026-07-15", "display_name": "@achuthvp/postinstall-poc", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@achuthvp/postinstall-poc", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5741", "osv_published_at": "2026-06-13T20:24:46Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T09:15:21Z", "flagged_at": null, "confirmed_at": "2026-07-15T09:15:21Z", "osv_earliest_published_at": "2026-06-13T20:24:46Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T09:15:23Z" }, { "id": "hkyyy-portal-widget-helper-0601-2026-07-15", "display_name": "@hkyyy/portal-widget-helper-0601", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@hkyyy/portal-widget-helper-0601", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10648", "osv_published_at": "2026-07-15T02:53:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T09:15:23Z", "flagged_at": null, "confirmed_at": "2026-07-15T09:15:23Z", "osv_earliest_published_at": "2026-07-15T02:53:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T09:15:32Z" }, { "id": "magda-semantic-indexer-sdk-2026-07-15", "display_name": "@magda/semantic-indexer-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@magda/semantic-indexer-sdk", "ecosystem": "npm", "versions": [ "6.1.0-alpha.0" ], "osv_entries": [ { "osv_id": "MAL-2025-47009", "osv_published_at": "2025-09-10T09:51:31Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T09:15:25Z", "flagged_at": null, "confirmed_at": "2026-07-15T09:15:25Z", "osv_earliest_published_at": "2025-09-10T09:51:31Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T09:15:41Z" }, { "id": "sauruslord-libsignal-2026-07-15", "display_name": "@sauruslord/libsignal", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@sauruslord/libsignal", "ecosystem": "npm", "versions": [ "2.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10659", "osv_published_at": "2026-07-15T05:14:18Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T09:15:26Z", "flagged_at": null, "confirmed_at": "2026-07-15T09:15:26Z", "osv_earliest_published_at": "2026-07-15T05:14:18Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T09:15:50Z" }, { "id": "chain-as-log-2026-07-15", "display_name": "chain-as-log", "campaign": null, "detection_source": "osv", "packages": [ { "package": "chain-as-log", "ecosystem": "npm", "versions": [ "3.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10668", "osv_published_at": "2026-07-15T07:56:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T09:15:28Z", "flagged_at": null, "confirmed_at": "2026-07-15T09:15:28Z", "osv_earliest_published_at": "2026-07-15T07:56:38Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T09:16:00Z" }, { "id": "dbconnectify-2026-07-15", "display_name": "dbconnectify", "campaign": null, "detection_source": "osv", "packages": [ { "package": "dbconnectify", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10669", "osv_published_at": "2026-07-15T07:55:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T09:15:30Z", "flagged_at": null, "confirmed_at": "2026-07-15T09:15:30Z", "osv_earliest_published_at": "2026-07-15T07:55:37Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T09:16:09Z" }, { "id": "eslintcmd-2026-07-15", "display_name": "eslintcmd", "campaign": null, "detection_source": "osv", "packages": [ { "package": "eslintcmd", "ecosystem": "npm", "versions": [ "0.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10670", "osv_published_at": "2026-07-15T07:55:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T09:15:31Z", "flagged_at": null, "confirmed_at": "2026-07-15T09:15:31Z", "osv_earliest_published_at": "2026-07-15T07:55:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T09:16:18Z" }, { "id": "gpu-accelerator-2026-07-15", "display_name": "gpu-accelerator", "campaign": null, "detection_source": "osv", "packages": [ { "package": "gpu-accelerator", "ecosystem": "npm", "versions": [ "1.4.3" ], "osv_entries": [ { "osv_id": "MAL-2026-5980", "osv_published_at": "2026-06-17T04:26:18Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T09:15:35Z", "flagged_at": null, "confirmed_at": "2026-07-15T09:15:35Z", "osv_earliest_published_at": "2026-06-17T04:26:18Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T09:16:29Z" }, { "id": "hashd-edu-2026-07-15", "display_name": "hashd-edu", "campaign": null, "detection_source": "osv", "packages": [ { "package": "hashd-edu", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2", "1.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-6302", "osv_published_at": "2026-06-23T15:24:26Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T09:15:36Z", "flagged_at": null, "confirmed_at": "2026-07-15T09:15:36Z", "osv_earliest_published_at": "2026-06-23T15:24:26Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T09:16:37Z" }, { "id": "install-skia-2026-07-15", "display_name": "install-skia", "campaign": null, "detection_source": "osv", "packages": [ { "package": "install-skia", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10650", "osv_published_at": "2026-07-14T23:41:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T09:15:38Z", "flagged_at": null, "confirmed_at": "2026-07-15T09:15:38Z", "osv_earliest_published_at": "2026-07-14T23:41:49Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T09:16:47Z" }, { "id": "iwsdk-2026-07-15", "display_name": "iwsdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "iwsdk", "ecosystem": "npm", "versions": [ "22.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10651", "osv_published_at": "2026-07-14T23:41:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T09:15:39Z", "flagged_at": null, "confirmed_at": "2026-07-15T09:15:39Z", "osv_earliest_published_at": "2026-07-14T23:41:49Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T09:16:57Z" }, { "id": "ldpbootstrap-jquery-2026-07-15", "display_name": "ldpbootstrap-jquery", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ldpbootstrap-jquery", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.14", "1.0.16", "1.0.2", "1.0.3", "1.0.4", "1.0.5", "1.0.6", "1.0.7" ], "osv_entries": [ { "osv_id": "MAL-2026-5790", "osv_published_at": "2026-06-15T15:53:31Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T09:15:44Z", "flagged_at": null, "confirmed_at": "2026-07-15T09:15:44Z", "osv_earliest_published_at": "2026-06-15T15:53:31Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T09:17:17Z" }, { "id": "sauruslord-baileys-2026-07-15", "display_name": "sauruslord-baileys", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sauruslord-baileys", "ecosystem": "npm", "versions": [ "3.0.0", "3.0.1", "3.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10661", "osv_published_at": "2026-07-15T05:14:17Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T09:15:49Z", "flagged_at": null, "confirmed_at": "2026-07-15T09:15:49Z", "osv_earliest_published_at": "2026-07-15T05:14:17Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T09:17:43Z" }, { "id": "spytrack-2026-07-15", "display_name": "spytrack", "campaign": null, "detection_source": "osv", "packages": [ { "package": "spytrack", "ecosystem": "npm", "versions": [ "1.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10671", "osv_published_at": "2026-07-15T07:56:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T09:15:52Z", "flagged_at": null, "confirmed_at": "2026-07-15T09:15:52Z", "osv_earliest_published_at": "2026-07-15T07:56:21Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T09:18:00Z" }, { "id": "ssweb-wp-2026-07-15", "display_name": "ssweb-wp", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ssweb-wp", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10662", "osv_published_at": "2026-07-15T05:14:18Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T09:15:54Z", "flagged_at": null, "confirmed_at": "2026-07-15T09:15:54Z", "osv_earliest_published_at": "2026-07-15T05:14:18Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T09:18:09Z" }, { "id": "webpack-session-cache-2026-07-15", "display_name": "webpack-session-cache", "campaign": null, "detection_source": "osv", "packages": [ { "package": "webpack-session-cache", "ecosystem": "npm", "versions": [ "0.1.4" ], "osv_entries": [ { "osv_id": "MAL-2026-10653", "osv_published_at": "2026-07-15T03:41:32Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T09:15:55Z", "flagged_at": null, "confirmed_at": "2026-07-15T09:15:55Z", "osv_earliest_published_at": "2026-07-15T03:41:32Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T09:18:18Z" }, { "id": "fhkry-x-baileys-2026-07-15", "display_name": "@fhkry/x-baileys", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@fhkry/x-baileys", "ecosystem": "npm", "versions": [ "1.0.0", "1.1.0", "1.2.0", "1.3.0", "1.4.0", "1.5.0", "1.6.0", "1.7.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10665", "osv_published_at": "2026-07-15T06:35:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T10:47:27Z", "flagged_at": null, "confirmed_at": "2026-07-15T10:47:27Z", "osv_earliest_published_at": "2026-07-15T06:35:37Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T10:47:29Z" }, { "id": "northstart-sdk-2026-07-15", "display_name": "northstart-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "northstart-sdk", "ecosystem": "pypi", "versions": [ "0.1.0", "0.2.0", "0.2.1", "0.2.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10672", "osv_published_at": "2026-07-15T10:15:13Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T10:47:33Z", "flagged_at": null, "confirmed_at": "2026-07-15T10:47:33Z", "osv_earliest_published_at": "2026-07-15T10:15:13Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T10:47:41Z" }, { "id": "gulp-jscrambler-2026-07-15", "display_name": "gulp-jscrambler", "campaign": null, "detection_source": "osv", "packages": [ { "package": "gulp-jscrambler", "ecosystem": "npm", "versions": [ "8.6.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10673", "osv_published_at": "2026-07-15T10:03:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T11:02:47Z", "flagged_at": null, "confirmed_at": "2026-07-15T11:02:47Z", "osv_earliest_published_at": "2026-07-15T10:03:12Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T11:02:50Z" }, { "id": "jscrambler-metro-plugin-2026-07-15", "display_name": "jscrambler-metro-plugin", "campaign": null, "detection_source": "osv", "packages": [ { "package": "jscrambler-metro-plugin", "ecosystem": "npm", "versions": [ "9.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10674", "osv_published_at": "2026-07-15T10:01:57Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T11:02:49Z", "flagged_at": null, "confirmed_at": "2026-07-15T11:02:49Z", "osv_earliest_published_at": "2026-07-15T10:01:57Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T11:02:58Z" }, { "id": "ac-raf-emitter-2026-07-15", "display_name": "ac-raf-emitter", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ac-raf-emitter", "ecosystem": "npm", "versions": [ "3.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10675", "osv_published_at": "2026-07-15T10:39:15Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T11:41:53Z", "flagged_at": null, "confirmed_at": "2026-07-15T11:41:53Z", "osv_earliest_published_at": "2026-07-15T10:39:15Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T11:41:56Z" }, { "id": "commonjs-assert-2026-07-15", "display_name": "commonjs-assert", "campaign": null, "detection_source": "osv", "packages": [ { "package": "commonjs-assert", "ecosystem": "npm", "versions": [ "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-10676", "osv_published_at": "2026-07-15T10:42:17Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T11:41:55Z", "flagged_at": null, "confirmed_at": "2026-07-15T11:41:55Z", "osv_earliest_published_at": "2026-07-15T10:42:17Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T11:42:04Z" }, { "id": "deployowl-2026-07-15", "display_name": "deployowl", "campaign": null, "detection_source": "osv", "packages": [ { "package": "deployowl", "ecosystem": "npm", "versions": [ "2.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10677", "osv_published_at": "2026-07-15T11:28:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T11:41:56Z", "flagged_at": null, "confirmed_at": "2026-07-15T11:41:56Z", "osv_earliest_published_at": "2026-07-15T11:28:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T11:42:13Z" }, { "id": "ls-env-config-2026-07-15", "display_name": "ls-env-config", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ls-env-config", "ecosystem": "npm", "versions": [ "1.0.5" ], "osv_entries": [ { "osv_id": "MAL-2026-10678", "osv_published_at": "2026-07-15T11:30:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T11:41:58Z", "flagged_at": null, "confirmed_at": "2026-07-15T11:41:58Z", "osv_earliest_published_at": "2026-07-15T11:30:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T11:42:21Z" }, { "id": "rakibox-2026-07-15", "display_name": "rakibox", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rakibox", "ecosystem": "npm", "versions": [ "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10679", "osv_published_at": "2026-07-15T11:30:59Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T11:41:59Z", "flagged_at": null, "confirmed_at": "2026-07-15T11:41:59Z", "osv_earliest_published_at": "2026-07-15T11:30:59Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T11:42:30Z" }, { "id": "xyq-drama-skill-2026-07-15", "display_name": "xyq-drama-skill", "campaign": null, "detection_source": "osv", "packages": [ { "package": "xyq-drama-skill", "ecosystem": "pypi", "versions": [ "0.1.0", "0.2.0", "0.3.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10681", "osv_published_at": "2026-07-15T14:29:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T15:53:19Z", "flagged_at": null, "confirmed_at": "2026-07-15T15:53:19Z", "osv_earliest_published_at": "2026-07-15T14:29:25Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T15:53:21Z" }, { "id": "code-formatter-setup-2026-07-15", "display_name": "code-formatter-setup", "campaign": null, "detection_source": "osv", "packages": [ { "package": "code-formatter-setup", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10682", "osv_published_at": "2026-07-15T15:45:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T16:38:59Z", "flagged_at": null, "confirmed_at": "2026-07-15T16:38:59Z", "osv_earliest_published_at": "2026-07-15T15:45:12Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T16:39:01Z" }, { "id": "formatters-ts-2026-07-15", "display_name": "formatters.ts", "campaign": null, "detection_source": "osv", "packages": [ { "package": "formatters.ts", "ecosystem": "npm", "versions": [ "14.2.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10683", "osv_published_at": "2026-07-15T15:38:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T16:39:00Z", "flagged_at": null, "confirmed_at": "2026-07-15T16:39:00Z", "osv_earliest_published_at": "2026-07-15T15:38:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T16:39:10Z" }, { "id": "react-hook-scripts-2026-07-15", "display_name": "react-hook-scripts", "campaign": null, "detection_source": "osv", "packages": [ { "package": "react-hook-scripts", "ecosystem": "npm", "versions": [ "5.4.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10684", "osv_published_at": "2026-07-15T15:45:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T16:39:02Z", "flagged_at": null, "confirmed_at": "2026-07-15T16:39:02Z", "osv_earliest_published_at": "2026-07-15T15:45:21Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T16:39:18Z" }, { "id": "trongridweb-2026-07-15", "display_name": "trongridweb", "campaign": null, "detection_source": "osv", "packages": [ { "package": "trongridweb", "ecosystem": "pypi", "versions": [ "0.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10685", "osv_published_at": "2026-07-15T15:33:11Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T16:39:05Z", "flagged_at": null, "confirmed_at": "2026-07-15T16:39:05Z", "osv_earliest_published_at": "2026-07-15T15:33:11Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T16:39:27Z" }, { "id": "ddh-libraries-analytics-2026-07-15", "display_name": "@ddh-libraries/analytics", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@ddh-libraries/analytics", "ecosystem": "npm", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10686", "osv_published_at": "2026-07-15T17:11:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T17:40:11Z", "flagged_at": null, "confirmed_at": "2026-07-15T17:40:11Z", "osv_earliest_published_at": "2026-07-15T17:11:07Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T17:40:13Z" }, { "id": "selparsecss-selector-2026-07-15", "display_name": "selparsecss-selector", "campaign": null, "detection_source": "osv", "packages": [ { "package": "selparsecss-selector", "ecosystem": "npm", "versions": [ "1.0.0", "1.1.0", "2.0.0", "2.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10687", "osv_published_at": "2026-07-15T17:54:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T18:05:37Z", "flagged_at": null, "confirmed_at": "2026-07-15T18:05:37Z", "osv_earliest_published_at": "2026-07-15T17:54:33Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T18:05:39Z" }, { "id": "log-guru-2026-07-15", "display_name": "log-guru", "campaign": null, "detection_source": "osv", "packages": [ { "package": "log-guru", "ecosystem": "pypi", "versions": [ "0.7.8" ], "osv_entries": [ { "osv_id": "MAL-2026-10688", "osv_published_at": "2026-07-15T17:29:10Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T18:05:41Z", "flagged_at": null, "confirmed_at": "2026-07-15T18:05:41Z", "osv_earliest_published_at": "2026-07-15T17:29:10Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T18:05:50Z" }, { "id": "pylogora-2026-07-15", "display_name": "pylogora", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pylogora", "ecosystem": "pypi", "versions": [ "0.7.8" ], "osv_entries": [ { "osv_id": "MAL-2026-10689", "osv_published_at": "2026-07-15T17:30:11Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T18:05:43Z", "flagged_at": null, "confirmed_at": "2026-07-15T18:05:43Z", "osv_earliest_published_at": "2026-07-15T17:30:11Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T18:05:59Z" }, { "id": "qwen-asr-pvt-2026-07-15", "display_name": "qwen-asr-pvt", "campaign": null, "detection_source": "osv", "packages": [ { "package": "qwen-asr-pvt", "ecosystem": "pypi", "versions": [ "0.0.6" ], "osv_entries": [ { "osv_id": "MAL-2026-10690", "osv_published_at": "2026-07-15T17:53:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T18:05:44Z", "flagged_at": null, "confirmed_at": "2026-07-15T18:05:44Z", "osv_earliest_published_at": "2026-07-15T17:53:25Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T18:06:10Z" }, { "id": "rhynpm-2026-07-15", "display_name": "rhynpm", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rhynpm", "ecosystem": "npm", "versions": [ "0.0.1-0" ], "osv_entries": [ { "osv_id": "MAL-2025-32206", "osv_published_at": "2025-08-14T18:52:04Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T21:49:47Z", "flagged_at": null, "confirmed_at": "2026-07-15T21:49:47Z", "osv_earliest_published_at": "2025-08-14T18:52:04Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T21:49:49Z" }, { "id": "ua-parser-js-2026-07-15", "display_name": "ua-parser-js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ua-parser-js", "ecosystem": "npm", "versions": [ "0.7.29", "0.8.0", "1.0.0" ], "osv_entries": [ { "osv_id": "GHSA-pjwm-rvh2-c87w", "osv_published_at": "2021-10-22T20:38:14Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-15T23:50:14Z", "flagged_at": null, "confirmed_at": "2026-07-15T23:50:14Z", "osv_earliest_published_at": "2021-10-22T20:38:14Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-15T23:50:16Z" }, { "id": "http-req-lite-2026-07-16", "display_name": "http-req-lite", "campaign": null, "detection_source": "osv", "packages": [ { "package": "http-req-lite", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10699", "osv_published_at": "2026-07-16T13:11:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T13:48:19Z", "flagged_at": null, "confirmed_at": "2026-07-16T13:48:19Z", "osv_earliest_published_at": "2026-07-16T13:11:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T13:48:21Z" }, { "id": "time-format-kit-2026-07-16", "display_name": "time-format-kit", "campaign": null, "detection_source": "osv", "packages": [ { "package": "time-format-kit", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10700", "osv_published_at": "2026-07-16T14:26:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T14:46:14Z", "flagged_at": null, "confirmed_at": "2026-07-16T14:46:14Z", "osv_earliest_published_at": "2026-07-16T14:26:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:20:43Z" }, { "id": "discord-telemetry-2026-07-16", "display_name": "discord-telemetry", "campaign": null, "detection_source": "osv", "packages": [ { "package": "discord-telemetry", "ecosystem": "pypi", "versions": [ "0.1.0", "0.1.1", "0.1.2", "0.1.3", "0.1.4", "0.1.5" ], "osv_entries": [ { "osv_id": "MAL-2026-10701", "osv_published_at": "2026-07-16T14:12:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T14:46:18Z", "flagged_at": null, "confirmed_at": "2026-07-16T14:46:18Z", "osv_earliest_published_at": "2026-07-16T14:12:05Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T14:46:25Z" }, { "id": "discordia-telemetria-2026-07-16", "display_name": "discordia-telemetria", "campaign": null, "detection_source": "osv", "packages": [ { "package": "discordia-telemetria", "ecosystem": "pypi", "versions": [ "0.1.1", "0.1.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10702", "osv_published_at": "2026-07-16T16:25:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T17:46:49Z", "flagged_at": null, "confirmed_at": "2026-07-16T17:46:49Z", "osv_earliest_published_at": "2026-07-16T16:25:06Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T17:46:56Z" }, { "id": "across-toolkit-eslint-config-2026-07-16", "display_name": "@across-toolkit/eslint-config", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@across-toolkit/eslint-config", "ecosystem": "npm", "versions": [ "99.0.0", "99.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10703", "osv_published_at": "2026-07-16T18:30:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:05:18Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:05:18Z", "osv_earliest_published_at": "2026-07-16T18:30:05Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:05:21Z" }, { "id": "across-toolkit-typescript-config-2026-07-16", "display_name": "@across-toolkit/typescript-config", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@across-toolkit/typescript-config", "ecosystem": "npm", "versions": [ "99.0.0", "99.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10704", "osv_published_at": "2026-07-16T18:34:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:06:29Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:06:29Z", "osv_earliest_published_at": "2026-07-16T18:34:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:06:33Z" }, { "id": "agent-link-agent-2026-07-16", "display_name": "@agent-link/agent", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@agent-link/agent", "ecosystem": "npm", "versions": [ "0.1.269" ], "osv_entries": [ { "osv_id": "MAL-2026-10705", "osv_published_at": "2026-07-16T18:41:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:06:47Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:06:47Z", "osv_earliest_published_at": "2026-07-16T18:41:12Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:06:51Z" }, { "id": "agentvox-host-2026-07-16", "display_name": "@agentvox/host", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@agentvox/host", "ecosystem": "npm", "versions": [ "0.1.5" ], "osv_entries": [ { "osv_id": "MAL-2026-10706", "osv_published_at": "2026-07-16T18:45:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:07:25Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:07:25Z", "osv_earliest_published_at": "2026-07-16T18:45:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:07:29Z" }, { "id": "ai-support-agent-cli-2026-07-16", "display_name": "@ai-support-agent/cli", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@ai-support-agent/cli", "ecosystem": "npm", "versions": [ "0.3.2-beta.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10707", "osv_published_at": "2026-07-16T18:48:58Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:07:27Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:07:27Z", "osv_earliest_published_at": "2026-07-16T18:48:58Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:07:40Z" }, { "id": "aicommander-agent-2026-07-16", "display_name": "@aicommander/agent", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@aicommander/agent", "ecosystem": "npm", "versions": [ "1.0.34" ], "osv_entries": [ { "osv_id": "MAL-2026-10708", "osv_published_at": "2026-07-16T18:48:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:08:25Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:08:25Z", "osv_earliest_published_at": "2026-07-16T18:48:49Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:08:29Z" }, { "id": "cyberrant-rantai-rantai-2026-07-16", "display_name": "@cyberrant-rantai/rantai", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@cyberrant-rantai/rantai", "ecosystem": "npm", "versions": [ "1.0.15" ], "osv_entries": [ { "osv_id": "MAL-2026-10709", "osv_published_at": "2026-07-16T18:47:27Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:08:27Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:08:27Z", "osv_earliest_published_at": "2026-07-16T18:47:27Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:08:39Z" }, { "id": "equans-services-codex-2026-07-16", "display_name": "@equans-services/codex", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@equans-services/codex", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10710", "osv_published_at": "2026-07-16T18:37:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:08:29Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:08:29Z", "osv_earliest_published_at": "2026-07-16T18:37:21Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:08:49Z" }, { "id": "funny-booth-agent-core-2026-07-16", "display_name": "@funny-booth/agent-core", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@funny-booth/agent-core", "ecosystem": "npm", "versions": [ "0.1.1", "0.1.2", "0.1.3", "0.1.4", "0.1.5", "0.1.6" ], "osv_entries": [ { "osv_id": "MAL-2026-10711", "osv_published_at": "2026-07-16T18:33:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:09:42Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:09:42Z", "osv_earliest_published_at": "2026-07-16T18:33:35Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:09:46Z" }, { "id": "hibachi-xyz-common-2026-07-16", "display_name": "@hibachi-xyz/common", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@hibachi-xyz/common", "ecosystem": "npm", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10712", "osv_published_at": "2026-07-16T18:35:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:10:12Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:10:12Z", "osv_earliest_published_at": "2026-07-16T18:35:03Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:10:17Z" }, { "id": "hibachi-xyz-config-2026-07-16", "display_name": "@hibachi-xyz/config", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@hibachi-xyz/config", "ecosystem": "npm", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10713", "osv_published_at": "2026-07-16T18:34:43Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:12:36Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:12:36Z", "osv_earliest_published_at": "2026-07-16T18:34:43Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:12:40Z" }, { "id": "hibachi-xyz-sdk-2026-07-16", "display_name": "@hibachi-xyz/sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@hibachi-xyz/sdk", "ecosystem": "npm", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10714", "osv_published_at": "2026-07-16T18:34:17Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:12:53Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:12:53Z", "osv_earliest_published_at": "2026-07-16T18:34:17Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:12:57Z" }, { "id": "hibachi-xyz-types-2026-07-16", "display_name": "@hibachi-xyz/types", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@hibachi-xyz/types", "ecosystem": "npm", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10715", "osv_published_at": "2026-07-16T18:34:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:13:10Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:13:10Z", "osv_earliest_published_at": "2026-07-16T18:34:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:13:14Z" }, { "id": "hibachi-xyz-ui-2026-07-16", "display_name": "@hibachi-xyz/ui", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@hibachi-xyz/ui", "ecosystem": "npm", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10716", "osv_published_at": "2026-07-16T18:34:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:13:27Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:13:27Z", "osv_earliest_published_at": "2026-07-16T18:34:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:13:31Z" }, { "id": "onescience-onecode-2026-07-16", "display_name": "@onescience/onecode", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@onescience/onecode", "ecosystem": "npm", "versions": [ "1.14.50-202607161038", "1.14.50-202607161139", "1.14.50-202607161710" ], "osv_entries": [ { "osv_id": "MAL-2026-10717", "osv_published_at": "2026-07-16T18:41:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:13:45Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:13:45Z", "osv_earliest_published_at": "2026-07-16T18:41:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:13:49Z" }, { "id": "sciagent-cli-2026-07-16", "display_name": "@sciagent/cli", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@sciagent/cli", "ecosystem": "npm", "versions": [ "1.0.68", "1.0.69" ], "osv_entries": [ { "osv_id": "MAL-2026-10718", "osv_published_at": "2026-07-16T18:42:59Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:13:47Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:13:47Z", "osv_earliest_published_at": "2026-07-16T18:42:59Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:13:59Z" }, { "id": "thepayulink-server-2026-07-16", "display_name": "@thepayulink/server", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@thepayulink/server", "ecosystem": "npm", "versions": [ "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10719", "osv_published_at": "2026-07-16T18:45:45Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:13:50Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:13:50Z", "osv_earliest_published_at": "2026-07-16T18:45:45Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:14:19Z" }, { "id": "vibelet-cli-2026-07-16", "display_name": "@vibelet/cli", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@vibelet/cli", "ecosystem": "npm", "versions": [ "1.2.154" ], "osv_entries": [ { "osv_id": "MAL-2026-10720", "osv_published_at": "2026-07-16T18:39:32Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:13:52Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:13:52Z", "osv_earliest_published_at": "2026-07-16T18:39:32Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:14:29Z" }, { "id": "whalent-agent-core-2026-07-16", "display_name": "@whalent/agent-core", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@whalent/agent-core", "ecosystem": "npm", "versions": [ "0.3.230", "0.3.231", "0.3.232", "0.3.233" ], "osv_entries": [ { "osv_id": "MAL-2026-10722", "osv_published_at": "2026-07-16T18:41:02Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:13:54Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:13:54Z", "osv_earliest_published_at": "2026-07-16T18:41:02Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:14:39Z" }, { "id": "whalent-agent-2026-07-16", "display_name": "@whalent/agent", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@whalent/agent", "ecosystem": "npm", "versions": [ "0.3.231" ], "osv_entries": [ { "osv_id": "MAL-2026-10721", "osv_published_at": "2026-07-16T18:46:02Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:13:55Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:13:55Z", "osv_earliest_published_at": "2026-07-16T18:46:02Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:14:50Z" }, { "id": "yeaft-webchat-agent-2026-07-16", "display_name": "@yeaft/webchat-agent", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@yeaft/webchat-agent", "ecosystem": "npm", "versions": [ "1.0.171" ], "osv_entries": [ { "osv_id": "MAL-2026-10723", "osv_published_at": "2026-07-16T18:44:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:13:57Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:13:57Z", "osv_earliest_published_at": "2026-07-16T18:44:35Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:15:00Z" }, { "id": "yuandc-aica-2026-07-16", "display_name": "@yuandc/aica", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@yuandc/aica", "ecosystem": "npm", "versions": [ "0.1.1", "0.1.4" ], "osv_entries": [ { "osv_id": "MAL-2026-10724", "osv_published_at": "2026-07-16T18:38:56Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:13:59Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:13:59Z", "osv_earliest_published_at": "2026-07-16T18:38:56Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:15:11Z" }, { "id": "agentto-2026-07-16", "display_name": "agentto", "campaign": null, "detection_source": "osv", "packages": [ { "package": "agentto", "ecosystem": "npm", "versions": [ "0.5.36" ], "osv_entries": [ { "osv_id": "MAL-2026-10725", "osv_published_at": "2026-07-16T18:44:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:14:00Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:14:00Z", "osv_earliest_published_at": "2026-07-16T18:44:25Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:15:21Z" }, { "id": "amdocs-auth-package-2026-07-16", "display_name": "amdocs-auth-package", "campaign": null, "detection_source": "osv", "packages": [ { "package": "amdocs-auth-package", "ecosystem": "npm", "versions": [ "114.2.1", "115.2.1" ], "osv_entries": [ { "osv_id": "MAL-2025-6694", "osv_published_at": "2025-08-03T04:02:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:14:03Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:14:03Z", "osv_earliest_published_at": "2025-08-03T04:02:38Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:15:42Z" }, { "id": "astro-2026-07-16", "display_name": "astro", "campaign": null, "detection_source": "osv", "packages": [ { "package": "astro", "ecosystem": "npm", "versions": [ "7.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10726", "osv_published_at": "2026-07-16T18:39:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:14:05Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:14:05Z", "osv_earliest_published_at": "2026-07-16T18:39:39Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:15:53Z" }, { "id": "bvm-core-2026-07-16", "display_name": "bvm-core", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bvm-core", "ecosystem": "npm", "versions": [ "1.1.42", "1.1.43" ], "osv_entries": [ { "osv_id": "MAL-2026-10728", "osv_published_at": "2026-07-16T18:46:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:14:08Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:14:08Z", "osv_earliest_published_at": "2026-07-16T18:46:49Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:16:16Z" }, { "id": "channel-worker-2026-07-16", "display_name": "channel-worker", "campaign": null, "detection_source": "osv", "packages": [ { "package": "channel-worker", "ecosystem": "npm", "versions": [ "2.5.39" ], "osv_entries": [ { "osv_id": "MAL-2026-10729", "osv_published_at": "2026-07-16T18:47:19Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:14:11Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:14:11Z", "osv_earliest_published_at": "2026-07-16T18:47:19Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:16:36Z" }, { "id": "codeam-cli-2026-07-16", "display_name": "codeam-cli", "campaign": null, "detection_source": "osv", "packages": [ { "package": "codeam-cli", "ecosystem": "npm", "versions": [ "2.61.1", "2.61.3" ], "osv_entries": [ { "osv_id": "MAL-2026-10730", "osv_published_at": "2026-07-16T18:45:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:14:13Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:14:13Z", "osv_earliest_published_at": "2026-07-16T18:45:06Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:16:46Z" }, { "id": "date-utils-light-2026-07-16", "display_name": "date-utils-light", "campaign": null, "detection_source": "osv", "packages": [ { "package": "date-utils-light", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10731", "osv_published_at": "2026-07-16T18:37:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:14:14Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:14:14Z", "osv_earliest_published_at": "2026-07-16T18:37:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:16:56Z" }, { "id": "hehehe-2026-07-16", "display_name": "hehehe", "campaign": null, "detection_source": "osv", "packages": [ { "package": "hehehe", "ecosystem": "npm", "versions": [ "2.0.1", "2.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10732", "osv_published_at": "2026-07-16T18:41:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:14:16Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:14:16Z", "osv_earliest_published_at": "2026-07-16T18:41:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-17T01:05:46Z" }, { "id": "idlive-document-capture-web-2026-07-16", "display_name": "idlive-document-capture-web", "campaign": null, "detection_source": "osv", "packages": [ { "package": "idlive-document-capture-web", "ecosystem": "npm", "versions": [ "14.2.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10733", "osv_published_at": "2026-07-16T18:37:30Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:14:17Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:14:17Z", "osv_earliest_published_at": "2026-07-16T18:37:30Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:17:16Z" }, { "id": "infrastructure-common-2026-07-16", "display_name": "infrastructure-common", "campaign": null, "detection_source": "osv", "packages": [ { "package": "infrastructure-common", "ecosystem": "npm", "versions": [ "99.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-10734", "osv_published_at": "2026-07-16T18:38:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:14:18Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:14:18Z", "osv_earliest_published_at": "2026-07-16T18:38:23Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:17:26Z" }, { "id": "internallib-v907-2026-07-16", "display_name": "internallib_v907", "campaign": null, "detection_source": "osv", "packages": [ { "package": "internallib_v907", "ecosystem": "npm", "versions": [ "1.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-10691", "osv_published_at": "2026-07-15T23:59:04Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:14:20Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:14:20Z", "osv_earliest_published_at": "2026-07-15T23:59:04Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:17:36Z" }, { "id": "isite-2026-07-16", "display_name": "isite", "campaign": null, "detection_source": "osv", "packages": [ { "package": "isite", "ecosystem": "npm", "versions": [ "2026.7.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10735", "osv_published_at": "2026-07-16T18:34:56Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:14:21Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:14:21Z", "osv_earliest_published_at": "2026-07-16T18:34:56Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:17:45Z" }, { "id": "loader1-2026-07-16", "display_name": "loader1", "campaign": null, "detection_source": "osv", "packages": [ { "package": "loader1", "ecosystem": "npm", "versions": [ "2.1.2", "2.1.3", "2.1.6", "2.1.7" ], "osv_entries": [ { "osv_id": "MAL-2026-10696", "osv_published_at": "2026-07-16T08:13:04Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:14:23Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:14:23Z", "osv_earliest_published_at": "2026-07-16T08:13:04Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:17:55Z" }, { "id": "memtry-cli-2026-07-16", "display_name": "memtry-cli", "campaign": null, "detection_source": "osv", "packages": [ { "package": "memtry-cli", "ecosystem": "npm", "versions": [ "1.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-10736", "osv_published_at": "2026-07-16T18:47:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:14:24Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:14:24Z", "osv_earliest_published_at": "2026-07-16T18:47:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:18:05Z" }, { "id": "mmagrt-2026-07-16", "display_name": "mmagrt", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mmagrt", "ecosystem": "npm", "versions": [ "0.1.10" ], "osv_entries": [ { "osv_id": "MAL-2026-10737", "osv_published_at": "2026-07-16T18:37:14Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:14:26Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:14:26Z", "osv_earliest_published_at": "2026-07-16T18:37:14Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:18:15Z" }, { "id": "mui-option-2026-07-16", "display_name": "mui-option", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mui-option", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10738", "osv_published_at": "2026-07-16T18:36:24Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:14:27Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:14:27Z", "osv_earliest_published_at": "2026-07-16T18:36:24Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:18:24Z" }, { "id": "mw-server-util-2026-07-16", "display_name": "mw-server-util", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mw-server-util", "ecosystem": "npm", "versions": [ "2.0.0", "2.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10739", "osv_published_at": "2026-07-16T18:37:57Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:14:29Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:14:29Z", "osv_earliest_published_at": "2026-07-16T18:37:57Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:18:35Z" }, { "id": "myreviews-core-2026-07-16", "display_name": "myreviews-core", "campaign": null, "detection_source": "osv", "packages": [ { "package": "myreviews-core", "ecosystem": "npm", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10740", "osv_published_at": "2026-07-16T18:38:13Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:14:30Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:14:30Z", "osv_earliest_published_at": "2026-07-16T18:38:13Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:18:45Z" }, { "id": "netcontrol-agent-2026-07-16", "display_name": "netcontrol-agent", "campaign": null, "detection_source": "osv", "packages": [ { "package": "netcontrol-agent", "ecosystem": "npm", "versions": [ "1.0.5" ], "osv_entries": [ { "osv_id": "MAL-2026-10741", "osv_published_at": "2026-07-16T18:40:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:14:31Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:14:31Z", "osv_earliest_published_at": "2026-07-16T18:40:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:18:55Z" }, { "id": "node-as-api-2026-07-16", "display_name": "node-as-api", "campaign": null, "detection_source": "osv", "packages": [ { "package": "node-as-api", "ecosystem": "npm", "versions": [ "2.1.6" ], "osv_entries": [ { "osv_id": "MAL-2026-10742", "osv_published_at": "2026-07-16T18:33:15Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:14:33Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:14:33Z", "osv_earliest_published_at": "2026-07-16T18:33:15Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:19:04Z" }, { "id": "nordpass-2026-07-16", "display_name": "nordpass", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nordpass", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.2", "1.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-10743", "osv_published_at": "2026-07-16T18:40:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:14:34Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:14:34Z", "osv_earliest_published_at": "2026-07-16T06:35:57Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-17T03:18:08Z" }, { "id": "patchwork-os-2026-07-16", "display_name": "patchwork-os", "campaign": null, "detection_source": "osv", "packages": [ { "package": "patchwork-os", "ecosystem": "npm", "versions": [ "1.1.0-beta.3.canary.414", "1.1.0-beta.3.canary.415", "1.1.0-beta.3.canary.416", "1.1.0-beta.3.canary.417" ], "osv_entries": [ { "osv_id": "MAL-2026-10744", "osv_published_at": "2026-07-16T18:46:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:14:36Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:14:36Z", "osv_earliest_published_at": "2026-07-16T18:46:25Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:19:24Z" }, { "id": "phantomx-tool-client-2026-07-16", "display_name": "phantomx-tool-client", "campaign": null, "detection_source": "osv", "packages": [ { "package": "phantomx-tool-client", "ecosystem": "npm", "versions": [ "1.0.8" ], "osv_entries": [ { "osv_id": "MAL-2026-10745", "osv_published_at": "2026-07-16T18:45:27Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:14:37Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:14:37Z", "osv_earliest_published_at": "2026-07-16T18:45:27Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:19:33Z" }, { "id": "sakuraai-2026-07-16", "display_name": "sakuraai", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sakuraai", "ecosystem": "npm", "versions": [ "0.0.11" ], "osv_entries": [ { "osv_id": "MAL-2026-10746", "osv_published_at": "2026-07-16T18:44:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:14:39Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:14:39Z", "osv_earliest_published_at": "2026-07-16T18:44:06Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:19:43Z" }, { "id": "sensorium-mcp-2026-07-16", "display_name": "sensorium-mcp", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sensorium-mcp", "ecosystem": "npm", "versions": [ "3.0.95" ], "osv_entries": [ { "osv_id": "MAL-2026-10747", "osv_published_at": "2026-07-16T18:41:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:14:40Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:14:40Z", "osv_earliest_published_at": "2026-07-16T18:41:49Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:19:53Z" }, { "id": "string-formatter-pro-2026-07-16", "display_name": "string-formatter-pro", "campaign": null, "detection_source": "osv", "packages": [ { "package": "string-formatter-pro", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10748", "osv_published_at": "2026-07-16T18:33:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:14:41Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:14:41Z", "osv_earliest_published_at": "2026-07-16T18:33:06Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:20:03Z" }, { "id": "sync-grove-2026-07-16", "display_name": "sync-grove", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sync-grove", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10749", "osv_published_at": "2026-07-16T18:35:11Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:14:43Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:14:43Z", "osv_earliest_published_at": "2026-07-16T18:35:11Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:20:13Z" }, { "id": "telemetry-metrics-2026-07-16", "display_name": "telemetry-metrics", "campaign": null, "detection_source": "osv", "packages": [ { "package": "telemetry-metrics", "ecosystem": "npm", "versions": [ "0.2.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10750", "osv_published_at": "2026-07-16T18:45:17Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:14:44Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:14:44Z", "osv_earliest_published_at": "2026-07-16T18:45:17Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:20:23Z" }, { "id": "vanexa-agent-2026-07-16", "display_name": "vanexa-agent", "campaign": null, "detection_source": "osv", "packages": [ { "package": "vanexa-agent", "ecosystem": "npm", "versions": [ "1.1.10", "1.1.9" ], "osv_entries": [ { "osv_id": "MAL-2026-10751", "osv_published_at": "2026-07-16T18:39:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:14:49Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:14:49Z", "osv_earliest_published_at": "2026-07-16T18:39:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:20:53Z" }, { "id": "vor8zakon-2026-07-16", "display_name": "vor8zakon", "campaign": null, "detection_source": "osv", "packages": [ { "package": "vor8zakon", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10694", "osv_published_at": "2026-07-16T07:28:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:14:50Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:14:50Z", "osv_earliest_published_at": "2026-07-16T07:28:12Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:21:03Z" }, { "id": "xxdxa-2026-07-16", "display_name": "xxdxa", "campaign": null, "detection_source": "osv", "packages": [ { "package": "xxdxa", "ecosystem": "npm", "versions": [ "1.0.1", "1.0.2", "1.0.3", "1.0.4", "1.0.5", "1.0.7" ], "osv_entries": [ { "osv_id": "MAL-2026-10752", "osv_published_at": "2026-07-16T18:36:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:14:52Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:14:52Z", "osv_earliest_published_at": "2026-07-16T18:36:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:21:13Z" }, { "id": "a3s-code-2026-07-16", "display_name": "a3s-code", "campaign": null, "detection_source": "osv", "packages": [ { "package": "a3s-code", "ecosystem": "pypi", "versions": [ "5.2.8", "5.3.3" ], "osv_entries": [ { "osv_id": "MAL-2026-10753", "osv_published_at": "2026-07-16T18:42:27Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:15:14Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:15:14Z", "osv_earliest_published_at": "2026-07-16T18:42:27Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:21:23Z" }, { "id": "airflow-provider-spirit-2026-07-16", "display_name": "airflow-provider-spirit", "campaign": null, "detection_source": "osv", "packages": [ { "package": "airflow-provider-spirit", "ecosystem": "pypi", "versions": [ "0.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10754", "osv_published_at": "2026-07-16T18:41:57Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:15:15Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:15:15Z", "osv_earliest_published_at": "2026-07-16T18:41:57Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:21:33Z" }, { "id": "captcha-solve-api-2026-07-16", "display_name": "captcha-solve-api", "campaign": null, "detection_source": "osv", "packages": [ { "package": "captcha-solve-api", "ecosystem": "pypi", "versions": [ "0.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10755", "osv_published_at": "2026-07-16T18:42:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:15:16Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:15:16Z", "osv_earliest_published_at": "2026-07-16T18:42:07Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:21:43Z" }, { "id": "darkglitch-2026-07-16", "display_name": "darkglitch", "campaign": null, "detection_source": "osv", "packages": [ { "package": "darkglitch", "ecosystem": "pypi", "versions": [ "1.2.0", "1.2.9" ], "osv_entries": [ { "osv_id": "MAL-2026-10756", "osv_published_at": "2026-07-16T18:43:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:15:18Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:15:18Z", "osv_earliest_published_at": "2026-07-16T18:43:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-22T21:11:04Z", "observed_at": "2026-07-16T19:15:18Z", "ingested_at": "2026-07-16T19:15:18Z", "source_published_at": "2026-07-16T18:43:08Z", "ledger_committed_at": "2026-07-22T21:11:04Z" }, { "id": "dde-common-2026-07-16", "display_name": "dde-common", "campaign": null, "detection_source": "osv", "packages": [ { "package": "dde-common", "ecosystem": "pypi", "versions": [ "0.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10757", "osv_published_at": "2026-07-16T18:43:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:15:19Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:15:19Z", "osv_earliest_published_at": "2026-07-16T18:43:48Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:22:03Z" }, { "id": "mfq-private-encoder-2026-07-16", "display_name": "mfq-private-encoder", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mfq-private-encoder", "ecosystem": "pypi", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10758", "osv_published_at": "2026-07-16T18:48:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:15:21Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:15:21Z", "osv_earliest_published_at": "2026-07-16T18:48:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:22:13Z" }, { "id": "ryry-cli-2026-07-16", "display_name": "ryry-cli", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ryry-cli", "ecosystem": "pypi", "versions": [ "6.26", "6.28" ], "osv_entries": [ { "osv_id": "MAL-2026-10759", "osv_published_at": "2026-07-16T18:39:47Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T19:15:23Z", "flagged_at": null, "confirmed_at": "2026-07-16T19:15:23Z", "osv_earliest_published_at": "2026-07-16T18:39:47Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T19:22:26Z" }, { "id": "local-mcp-2026-07-16", "display_name": "local-mcp", "campaign": null, "detection_source": "osv", "packages": [ { "package": "local-mcp", "ecosystem": "npm", "versions": [ "3.0.340" ], "osv_entries": [ { "osv_id": "MAL-2026-4601", "osv_published_at": "2026-05-20T08:14:15Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T21:11:53Z", "flagged_at": null, "confirmed_at": "2026-07-16T21:11:53Z", "osv_earliest_published_at": "2026-05-20T08:14:15Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T21:13:38Z" }, { "id": "abseil-py-2026-07-16", "display_name": "abseil-py", "campaign": null, "detection_source": "osv", "packages": [ { "package": "abseil-py", "ecosystem": "pypi", "versions": [ "0.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10760", "osv_published_at": "2026-07-16T20:50:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-16T21:29:15Z", "flagged_at": null, "confirmed_at": "2026-07-16T21:29:15Z", "osv_earliest_published_at": "2026-07-16T20:50:52Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-16T21:29:18Z" }, { "id": "trongridev-2026-07-17", "display_name": "trongridev", "campaign": null, "detection_source": "osv", "packages": [ { "package": "trongridev", "ecosystem": "pypi", "versions": [ "0.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10768", "osv_published_at": "2026-07-17T11:32:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-17T12:45:46Z", "flagged_at": null, "confirmed_at": "2026-07-17T12:45:46Z", "osv_earliest_published_at": "2026-07-17T11:32:05Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-17T12:45:48Z" }, { "id": "easyway2-2026-07-17", "display_name": "easyway2", "campaign": null, "detection_source": "osv", "packages": [ { "package": "easyway2", "ecosystem": "npm", "versions": [ "1.0.3", "1.0.7" ], "osv_entries": [ { "osv_id": "MAL-2026-10769", "osv_published_at": "2026-07-17T12:44:58Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-17T13:01:02Z", "flagged_at": null, "confirmed_at": "2026-07-17T13:01:02Z", "osv_earliest_published_at": "2026-07-17T12:44:58Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-17T14:53:31Z" }, { "id": "govpkg-2026-07-17", "display_name": "govpkg", "campaign": null, "detection_source": "osv", "packages": [ { "package": "govpkg", "ecosystem": "pypi", "versions": [ "0.1.0", "0.2.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10770", "osv_published_at": "2026-07-17T13:49:45Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-17T14:53:33Z", "flagged_at": null, "confirmed_at": "2026-07-17T14:53:33Z", "osv_earliest_published_at": "2026-07-17T13:49:45Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-17T14:53:40Z" }, { "id": "trongridme-2026-07-17", "display_name": "trongridme", "campaign": null, "detection_source": "osv", "packages": [ { "package": "trongridme", "ecosystem": "pypi", "versions": [ "0.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10771", "osv_published_at": "2026-07-17T21:17:19Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-17T21:30:49Z", "flagged_at": null, "confirmed_at": "2026-07-17T21:30:49Z", "osv_earliest_published_at": "2026-07-17T21:17:19Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-17T21:30:51Z" }, { "id": "edgecommons-edgecommons-2026-07-18", "display_name": "@edgecommons/edgecommons", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@edgecommons/edgecommons", "ecosystem": "npm", "versions": [ "0.0.1-0" ], "osv_entries": [ { "osv_id": "MAL-2026-10762", "osv_published_at": "2026-07-16T00:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-18T02:03:07Z", "flagged_at": null, "confirmed_at": "2026-07-18T02:03:07Z", "osv_earliest_published_at": "2026-07-16T00:00:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-18T02:03:09Z" }, { "id": "edgecommons-streamlog-node-2026-07-18", "display_name": "@edgecommons/streamlog-node", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@edgecommons/streamlog-node", "ecosystem": "npm", "versions": [ "0.0.1-0" ], "osv_entries": [ { "osv_id": "MAL-2026-10763", "osv_published_at": "2026-07-16T00:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-18T02:03:08Z", "flagged_at": null, "confirmed_at": "2026-07-18T02:03:08Z", "osv_earliest_published_at": "2026-07-16T00:00:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-18T02:03:18Z" }, { "id": "syft-acp-atoms-2026-07-18", "display_name": "syft-acp-atoms", "campaign": null, "detection_source": "osv", "packages": [ { "package": "syft-acp-atoms", "ecosystem": "npm", "versions": [ "0.0.1-0" ], "osv_entries": [ { "osv_id": "MAL-2026-10764", "osv_published_at": "2026-07-16T00:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-18T02:03:15Z", "flagged_at": null, "confirmed_at": "2026-07-18T02:03:15Z", "osv_earliest_published_at": "2026-07-16T00:00:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-18T02:03:31Z" }, { "id": "syft-acp-core-2026-07-18", "display_name": "syft-acp-core", "campaign": null, "detection_source": "osv", "packages": [ { "package": "syft-acp-core", "ecosystem": "npm", "versions": [ "0.0.1-0" ], "osv_entries": [ { "osv_id": "MAL-2026-10765", "osv_published_at": "2026-07-16T00:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-18T02:03:17Z", "flagged_at": null, "confirmed_at": "2026-07-18T02:03:17Z", "osv_earliest_published_at": "2026-07-16T00:00:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-18T02:03:38Z" }, { "id": "syft-acp-uikit-2026-07-18", "display_name": "syft-acp-uikit", "campaign": null, "detection_source": "osv", "packages": [ { "package": "syft-acp-uikit", "ecosystem": "npm", "versions": [ "0.0.1-0" ], "osv_entries": [ { "osv_id": "MAL-2026-10766", "osv_published_at": "2026-07-16T00:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-18T02:03:18Z", "flagged_at": null, "confirmed_at": "2026-07-18T02:03:18Z", "osv_earliest_published_at": "2026-07-16T00:00:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-18T02:03:46Z" }, { "id": "n8n-nodes-api-finder-2026-07-18", "display_name": "n8n-nodes-api-finder", "campaign": null, "detection_source": "osv", "packages": [ { "package": "n8n-nodes-api-finder", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10774", "osv_published_at": "2026-07-17T12:16:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-18T07:14:55Z", "flagged_at": null, "confirmed_at": "2026-07-18T07:14:55Z", "osv_earliest_published_at": "2026-07-17T12:16:35Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-22T21:09:12Z", "observed_at": "2026-07-18T07:14:55Z", "ingested_at": "2026-07-18T07:14:55Z", "source_published_at": "2026-07-17T12:16:35Z", "ledger_committed_at": "2026-07-22T21:09:12Z" }, { "id": "n8n-nodes-devops-utils-2026-07-18", "display_name": "n8n-nodes-devops-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "n8n-nodes-devops-utils", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.2", "1.0.3", "1.0.4", "1.0.5", "1.0.6", "1.0.7" ], "osv_entries": [ { "osv_id": "MAL-2026-10775", "osv_published_at": "2026-07-17T13:26:34Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-18T07:14:56Z", "flagged_at": null, "confirmed_at": "2026-07-18T07:14:56Z", "osv_earliest_published_at": "2026-07-17T13:26:34Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-22T21:09:23Z", "observed_at": "2026-07-18T07:14:56Z", "ingested_at": "2026-07-18T07:14:56Z", "source_published_at": "2026-07-17T13:26:34Z", "ledger_committed_at": "2026-07-22T21:09:23Z" }, { "id": "n8n-nodes-final-mile-2026-07-18", "display_name": "n8n-nodes-final-mile", "campaign": null, "detection_source": "osv", "packages": [ { "package": "n8n-nodes-final-mile", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2", "1.0.3", "1.0.4", "1.0.5" ], "osv_entries": [ { "osv_id": "MAL-2026-10776", "osv_published_at": "2026-07-17T13:26:59Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-18T07:14:58Z", "flagged_at": null, "confirmed_at": "2026-07-18T07:14:58Z", "osv_earliest_published_at": "2026-07-17T13:26:59Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-22T21:09:32Z", "observed_at": "2026-07-18T07:14:58Z", "ingested_at": "2026-07-18T07:14:58Z", "source_published_at": "2026-07-17T13:26:59Z", "ledger_committed_at": "2026-07-22T21:09:32Z" }, { "id": "n8n-nodes-probe-2026-07-18", "display_name": "n8n-nodes-probe", "campaign": null, "detection_source": "osv", "packages": [ { "package": "n8n-nodes-probe", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2", "1.0.3", "1.0.5", "1.0.6" ], "osv_entries": [ { "osv_id": "MAL-2026-10777", "osv_published_at": "2026-07-17T13:26:26Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-18T07:15:00Z", "flagged_at": null, "confirmed_at": "2026-07-18T07:15:00Z", "osv_earliest_published_at": "2026-07-17T13:26:26Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-22T21:10:09Z", "observed_at": "2026-07-18T07:15:00Z", "ingested_at": "2026-07-18T07:15:00Z", "source_published_at": "2026-07-17T13:26:26Z", "ledger_committed_at": "2026-07-22T21:10:09Z" }, { "id": "relativity-pdfjs-dist-2026-07-18", "display_name": "relativity-pdfjs-dist", "campaign": null, "detection_source": "osv", "packages": [ { "package": "relativity-pdfjs-dist", "ecosystem": "npm", "versions": [ "5.8.2", "99.9.9" ], "osv_entries": [ { "osv_id": "MAL-2026-10778", "osv_published_at": "2026-07-18T09:05:46Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-18T09:20:49Z", "flagged_at": null, "confirmed_at": "2026-07-18T09:20:49Z", "osv_earliest_published_at": "2026-07-18T09:05:46Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-18T10:06:33Z" }, { "id": "mlflow-ui-2026-07-18", "display_name": "mlflow-ui", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mlflow-ui", "ecosystem": "pypi", "versions": [ "2.7.1", "2.7.2", "2.7.3" ], "osv_entries": [ { "osv_id": "MAL-2026-10779", "osv_published_at": "2026-07-18T11:43:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-18T12:29:29Z", "flagged_at": null, "confirmed_at": "2026-07-18T12:29:29Z", "osv_earliest_published_at": "2026-07-18T11:43:51Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-18T12:29:32Z" }, { "id": "injectivelabs-utils-2026-07-19", "display_name": "@injectivelabs/utils", "campaign": "solana-labs", "detection_source": "npm_deprecation", "packages": [ { "package": "@injectivelabs/utils", "ecosystem": "npm", "versions": [ "1.20.21" ], "osv_entries": [] } ], "malware_type": "deprecated_release", "attestd_detected_at": "2026-07-19T16:09:41Z", "flagged_at": null, "confirmed_at": "2026-07-19T16:09:41Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40injectivelabs%2Futils", "ledger_commit_at": "2026-07-21T23:07:32Z" }, { "id": "data-parser-utils-2026-07-19", "display_name": "data-parser-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "data-parser-utils", "ecosystem": "pypi", "versions": [ "2.4.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10780", "osv_published_at": "2026-07-19T19:51:18Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-19T20:27:08Z", "flagged_at": null, "confirmed_at": "2026-07-19T20:27:08Z", "osv_earliest_published_at": "2026-07-19T19:51:18Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-19T20:27:10Z" }, { "id": "cal-rd-2026-07-20", "display_name": "cal_rd", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cal_rd", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-226w-6hhj-69hp", "osv_published_at": "2020-09-03T19:06:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:00:25Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:00:25Z", "osv_earliest_published_at": "2020-09-03T19:06:52Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:00:27Z" }, { "id": "openssl-js-2026-07-20", "display_name": "openssl.js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "openssl.js", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-22gq-x6pg-752j", "osv_published_at": "2018-08-29T23:45:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:00:26Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:00:26Z", "osv_earliest_published_at": "2018-08-29T23:45:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:00:36Z" }, { "id": "sqliter-2026-07-20", "display_name": "sqliter", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sqliter", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "GHSA-22j5-38qv-pxx7", "osv_published_at": "2018-07-23T20:50:04Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:00:28Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:00:28Z", "osv_earliest_published_at": "2018-07-23T20:50:04Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:00:44Z" }, { "id": "nuxt-vite-builder-2026-07-20", "display_name": "@nuxt/vite-builder", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@nuxt/vite-builder", "ecosystem": "npm", "versions": [ "3.8.1" ], "osv_entries": [ { "osv_id": "GHSA-2452-6xj8-jh47", "osv_published_at": "2025-01-27T11:31:14Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:00:29Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:00:29Z", "osv_earliest_published_at": "2025-01-27T11:31:14Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:00:54Z" }, { "id": "hdeky-2026-07-20", "display_name": "hdeky", "campaign": null, "detection_source": "osv", "packages": [ { "package": "hdeky", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-255r-pghp-r5wh", "osv_published_at": "2020-09-03T17:05:34Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:00:31Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:00:31Z", "osv_earliest_published_at": "2020-09-03T17:05:34Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:01:02Z" }, { "id": "rrgod-2026-07-20", "display_name": "rrgod", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rrgod", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-277p-xwpp-3jf7", "osv_published_at": "2020-09-02T15:49:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:00:33Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:00:33Z", "osv_earliest_published_at": "2020-09-02T15:49:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:01:12Z" }, { "id": "mcp-watch-2026-07-20", "display_name": "mcp-watch", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mcp-watch", "ecosystem": "npm", "versions": [ "0.1.2" ], "osv_entries": [ { "osv_id": "GHSA-27m7-ffhq-jqrm", "osv_published_at": "2025-12-02T00:38:14Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:00:35Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:00:35Z", "osv_earliest_published_at": "2025-12-02T00:38:14Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:01:23Z" }, { "id": "buffes-xor-2026-07-20", "display_name": "buffes-xor", "campaign": null, "detection_source": "osv", "packages": [ { "package": "buffes-xor", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-28f4-mjfq-qrvf", "osv_published_at": "2020-09-03T22:18:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:00:36Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:00:36Z", "osv_earliest_published_at": "2020-09-03T22:18:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:01:33Z" }, { "id": "ember-power-timepicker-2026-07-20", "display_name": "ember-power-timepicker", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ember-power-timepicker", "ecosystem": "npm", "versions": [ "1.0.8" ], "osv_entries": [ { "osv_id": "GHSA-28f8-hqmc-7ph8", "osv_published_at": "2020-09-11T21:19:09Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:00:37Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:00:37Z", "osv_earliest_published_at": "2020-09-11T21:19:09Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:01:41Z" }, { "id": "nginxbeautifier-2026-07-20", "display_name": "nginxbeautifier", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nginxbeautifier", "ecosystem": "npm", "versions": [ "1.0.14" ], "osv_entries": [ { "osv_id": "GHSA-28xx-8j99-m32j", "osv_published_at": "2020-09-01T20:37:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:00:38Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:00:38Z", "osv_earliest_published_at": "2020-09-01T20:37:25Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:01:49Z" }, { "id": "web3-eht-2026-07-20", "display_name": "web3-eht", "campaign": null, "detection_source": "osv", "packages": [ { "package": "web3-eht", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-29fh-xcjr-p7rx", "osv_published_at": "2020-09-03T17:02:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:00:40Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:00:40Z", "osv_earliest_published_at": "2020-09-03T17:02:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:01:57Z" }, { "id": "bcion-2026-07-20", "display_name": "bcion", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bcion", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-2fwq-wx47-hm6x", "osv_published_at": "2020-09-04T15:31:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:00:41Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:00:41Z", "osv_earliest_published_at": "2020-09-04T15:31:39Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:02:06Z" }, { "id": "river-mock-2026-07-20", "display_name": "river-mock", "campaign": null, "detection_source": "osv", "packages": [ { "package": "river-mock", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-2h3x-95c6-885r", "osv_published_at": "2020-09-03T17:46:46Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:00:42Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:00:42Z", "osv_earliest_published_at": "2020-09-03T17:46:46Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:02:14Z" }, { "id": "commander-js-2026-07-20", "display_name": "commander-js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "commander-js", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-2hqf-qqmq-pgpp", "osv_published_at": "2020-09-02T15:48:16Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:00:43Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:00:43Z", "osv_earliest_published_at": "2020-09-02T15:48:16Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:02:21Z" }, { "id": "baes-x-2026-07-20", "display_name": "baes-x", "campaign": null, "detection_source": "osv", "packages": [ { "package": "baes-x", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-2jm5-2cqf-6vw9", "osv_published_at": "2020-09-04T15:30:32Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:00:44Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:00:44Z", "osv_earliest_published_at": "2020-09-04T15:30:32Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:02:29Z" }, { "id": "ruffer-xor-2026-07-20", "display_name": "ruffer-xor", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ruffer-xor", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-2mxc-m4c3-wqhq", "osv_published_at": "2020-09-03T22:50:46Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:00:45Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:00:45Z", "osv_earliest_published_at": "2020-09-03T22:50:46Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:02:37Z" }, { "id": "another-date-picker-2026-07-20", "display_name": "another-date-picker", "campaign": null, "detection_source": "osv", "packages": [ { "package": "another-date-picker", "ecosystem": "npm", "versions": [ "2.0.43" ], "osv_entries": [ { "osv_id": "GHSA-2p62-c4rm-mr72", "osv_published_at": "2020-09-01T19:44:57Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:00:46Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:00:46Z", "osv_earliest_published_at": "2020-09-01T19:44:57Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:02:46Z" }, { "id": "codify-2026-07-20", "display_name": "codify", "campaign": null, "detection_source": "osv", "packages": [ { "package": "codify", "ecosystem": "npm", "versions": [ "0.3.1" ], "osv_entries": [ { "osv_id": "GHSA-2q6w-rxf3-4wc9", "osv_published_at": "2020-09-01T19:49:18Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:00:48Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:00:48Z", "osv_earliest_published_at": "2020-09-01T19:49:18Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:02:55Z" }, { "id": "motiv-scss-2026-07-20", "display_name": "motiv.scss", "campaign": null, "detection_source": "osv", "packages": [ { "package": "motiv.scss", "ecosystem": "npm", "versions": [ "0.4.20" ], "osv_entries": [ { "osv_id": "GHSA-2vqq-jgxx-fxjc", "osv_published_at": "2020-09-11T21:24:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:00:50Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:00:50Z", "osv_earliest_published_at": "2020-09-11T21:24:33Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:03:08Z" }, { "id": "bufger-xor-2026-07-20", "display_name": "bufger-xor", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bufger-xor", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-2w8q-69fh-9gq6", "osv_published_at": "2020-09-03T22:25:09Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:00:51Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:00:51Z", "osv_earliest_published_at": "2020-09-03T22:25:09Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:03:16Z" }, { "id": "nodecaffe-2026-07-20", "display_name": "nodecaffe", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nodecaffe", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-2wpq-vvw6-67wr", "osv_published_at": "2018-08-29T23:38:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:00:52Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:00:52Z", "osv_earliest_published_at": "2018-08-29T23:38:35Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:03:24Z" }, { "id": "ng-ui-library-2026-07-20", "display_name": "ng-ui-library", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ng-ui-library", "ecosystem": "npm", "versions": [ "1.0.987" ], "osv_entries": [ { "osv_id": "GHSA-2xw5-3767-qxvm", "osv_published_at": "2020-09-11T21:21:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:00:54Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:00:54Z", "osv_earliest_published_at": "2020-09-11T21:21:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:03:34Z" }, { "id": "xrpl-2026-07-20", "display_name": "xrpl", "campaign": null, "detection_source": "osv", "packages": [ { "package": "xrpl", "ecosystem": "npm", "versions": [ "2.14.2", "4.2.1" ], "osv_entries": [ { "osv_id": "GHSA-33qr-m49q-rxfx", "osv_published_at": "2025-04-22T18:57:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:00:56Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:00:56Z", "osv_earliest_published_at": "2025-04-22T18:57:48Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:03:46Z" }, { "id": "renovate-2026-07-20", "display_name": "renovate", "campaign": null, "detection_source": "osv", "packages": [ { "package": "renovate", "ecosystem": "npm", "versions": [ "31.51.0", "32.124.0", "32.135.0", "35.63.0", "39.218.0", "39.53.0" ], "osv_entries": [ { "osv_id": "GHSA-36j9-mx87-2cff", "osv_published_at": "2026-01-13T20:28:41Z" }, { "osv_id": "GHSA-3f44-xw83-3pmg", "osv_published_at": "2026-01-13T20:29:12Z" }, { "osv_id": "GHSA-fr4j-65pv-gjjj", "osv_published_at": "2026-01-13T20:28:16Z" }, { "osv_id": "GHSA-pfq2-hh62-7m96", "osv_published_at": "2026-01-13T19:54:29Z" }, { "osv_id": "GHSA-xjr7-3c3g-m763", "osv_published_at": "2026-01-13T20:29:00Z" }, { "osv_id": "GHSA-xv56-3wq5-9997", "osv_published_at": "2026-01-13T19:57:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:00:58Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:00:58Z", "osv_earliest_published_at": "2026-01-13T19:54:29Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T04:01:16Z" }, { "id": "we3b-2026-07-20", "display_name": "we3b", "campaign": null, "detection_source": "osv", "packages": [ { "package": "we3b", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-36r8-9qq7-mh43", "osv_published_at": "2020-09-03T17:02:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:00:59Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:00:59Z", "osv_earliest_published_at": "2020-09-03T17:02:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:04:06Z" }, { "id": "zemen-2026-07-20", "display_name": "zemen", "campaign": null, "detection_source": "osv", "packages": [ { "package": "zemen", "ecosystem": "npm", "versions": [ "0.0.5" ], "osv_entries": [ { "osv_id": "GHSA-377f-vvrc-9wgg", "osv_published_at": "2020-09-03T19:09:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:01:01Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:01:01Z", "osv_earliest_published_at": "2020-09-03T19:09:07Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:04:16Z" }, { "id": "bitcoijns-lib-2026-07-20", "display_name": "bitcoijns-lib", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bitcoijns-lib", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-37vc-gwvp-6cgv", "osv_published_at": "2020-09-04T15:42:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:01:02Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:01:02Z", "osv_earliest_published_at": "2020-09-04T15:42:49Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:04:24Z" }, { "id": "nozbe-watermelondb-2026-07-20", "display_name": "@nozbe/watermelondb", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@nozbe/watermelondb", "ecosystem": "npm", "versions": [ "0.16.0" ], "osv_entries": [ { "osv_id": "GHSA-38f9-m297-6q9g", "osv_published_at": "2020-06-03T21:57:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:01:03Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:01:03Z", "osv_earliest_published_at": "2020-06-03T21:57:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:04:32Z" }, { "id": "electorn-2026-07-20", "display_name": "electorn", "campaign": null, "detection_source": "osv", "packages": [ { "package": "electorn", "ecosystem": "npm", "versions": [ "10.0.0" ], "osv_entries": [ { "osv_id": "GHSA-38hx-3542-8fh3", "osv_published_at": "2020-10-01T17:09:56Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:01:05Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:01:05Z", "osv_earliest_published_at": "2020-10-01T17:09:56Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:04:40Z" }, { "id": "nodes-js-2026-07-20", "display_name": "nodes.js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nodes.js", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-38vq-cjh5-vw7x", "osv_published_at": "2020-09-03T18:13:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:01:06Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:01:06Z", "osv_earliest_published_at": "2020-09-03T18:13:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:04:48Z" }, { "id": "bs58chek-2026-07-20", "display_name": "bs58chek", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bs58chek", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-3cpj-mj3q-82wr", "osv_published_at": "2020-09-04T16:49:43Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:01:07Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:01:07Z", "osv_earliest_published_at": "2020-09-04T16:49:43Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:04:58Z" }, { "id": "buffe2-xor-2026-07-20", "display_name": "buffe2-xor", "campaign": null, "detection_source": "osv", "packages": [ { "package": "buffe2-xor", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-3f97-rj68-2pjf", "osv_published_at": "2020-09-03T21:48:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:01:09Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:01:09Z", "osv_earliest_published_at": "2020-09-03T21:48:35Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:05:15Z" }, { "id": "coffee-project-2026-07-20", "display_name": "coffee-project", "campaign": null, "detection_source": "osv", "packages": [ { "package": "coffee-project", "ecosystem": "npm", "versions": [ "1.7.5" ], "osv_entries": [ { "osv_id": "GHSA-3fv6-q5xv-fhpw", "osv_published_at": "2020-09-01T19:50:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:01:11Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:01:11Z", "osv_earliest_published_at": "2020-09-01T19:50:23Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:05:23Z" }, { "id": "coinpayment-2026-07-20", "display_name": "coinpayment", "campaign": null, "detection_source": "osv", "packages": [ { "package": "coinpayment", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-3h99-v4qw-p2h5", "osv_published_at": "2020-09-03T19:41:56Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:01:12Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:01:12Z", "osv_earliest_published_at": "2020-09-03T19:41:56Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:05:31Z" }, { "id": "buffer-xov-2026-07-20", "display_name": "buffer-xov", "campaign": null, "detection_source": "osv", "packages": [ { "package": "buffer-xov", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-3h9m-9g3g-5wqx", "osv_published_at": "2020-09-03T22:13:14Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:01:13Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:01:13Z", "osv_earliest_published_at": "2020-09-03T22:13:14Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:05:40Z" }, { "id": "js-sia3-2026-07-20", "display_name": "js-sia3", "campaign": null, "detection_source": "osv", "packages": [ { "package": "js-sia3", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-3mhm-jvqj-fvhg", "osv_published_at": "2020-09-03T23:09:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:01:14Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:01:14Z", "osv_earliest_published_at": "2020-09-03T23:09:37Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:05:48Z" }, { "id": "mssql-node-2026-07-20", "display_name": "mssql-node", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mssql-node", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "GHSA-3p8f-j2vw-7hw9", "osv_published_at": "2018-11-09T17:43:44Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:01:15Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:01:15Z", "osv_earliest_published_at": "2018-11-09T17:43:44Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:05:59Z" }, { "id": "sqlserver-2026-07-20", "display_name": "sqlserver", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sqlserver", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "GHSA-3rh7-vm4x-q2hp", "osv_published_at": "2018-11-09T17:49:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:01:16Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:01:16Z", "osv_earliest_published_at": "2018-11-09T17:49:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:06:07Z" }, { "id": "simple-alipay-2026-07-20", "display_name": "simple-alipay", "campaign": null, "detection_source": "osv", "packages": [ { "package": "simple-alipay", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "GHSA-3wh2-2pp3-2823", "osv_published_at": "2020-09-01T20:35:18Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:01:17Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:01:17Z", "osv_earliest_published_at": "2020-09-01T20:35:18Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:06:16Z" }, { "id": "s3asy-2026-07-20", "display_name": "s3asy", "campaign": null, "detection_source": "osv", "packages": [ { "package": "s3asy", "ecosystem": "npm", "versions": [ "0.4.8" ], "osv_entries": [ { "osv_id": "GHSA-3wjm-33mw-h388", "osv_published_at": "2020-09-01T20:34:14Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:01:18Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:01:18Z", "osv_earliest_published_at": "2020-09-01T20:34:14Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:06:23Z" }, { "id": "ffmepg-2026-07-20", "display_name": "ffmepg", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ffmepg", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "GHSA-3wxq-7r8m-qpmg", "osv_published_at": "2018-08-29T23:56:30Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:01:19Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:01:19Z", "osv_earliest_published_at": "2018-08-29T23:56:30Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:06:31Z" }, { "id": "pandora-doomsday-2026-07-20", "display_name": "pandora-doomsday", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pandora-doomsday", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-428f-mh7w-6w2x", "osv_published_at": "2020-09-01T18:56:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:01:21Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:01:21Z", "osv_earliest_published_at": "2020-09-01T18:56:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:06:38Z" }, { "id": "fs-extar-2026-07-20", "display_name": "fs-extar", "campaign": null, "detection_source": "osv", "packages": [ { "package": "fs-extar", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-435c-qcpm-wjw5", "osv_published_at": "2020-09-03T17:05:43Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:01:22Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:01:22Z", "osv_earliest_published_at": "2020-09-03T17:05:43Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:06:47Z" }, { "id": "hw-trnasport-u2f-2026-07-20", "display_name": "hw-trnasport-u2f", "campaign": null, "detection_source": "osv", "packages": [ { "package": "hw-trnasport-u2f", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-4363-x42f-xph6", "osv_published_at": "2020-09-03T17:05:14Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:01:23Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:01:23Z", "osv_earliest_published_at": "2020-09-03T17:05:14Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:06:56Z" }, { "id": "fastify-2026-07-20", "display_name": "fastify", "campaign": null, "detection_source": "osv", "packages": [ { "package": "fastify", "ecosystem": "npm", "versions": [ "4.0.0" ], "osv_entries": [ { "osv_id": "GHSA-455w-c45v-86rg", "osv_published_at": "2022-10-11T13:45:14Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:01:24Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:01:24Z", "osv_earliest_published_at": "2022-10-11T13:45:14Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:07:05Z" }, { "id": "css-transform-support-2026-07-20", "display_name": "css_transform_support", "campaign": null, "detection_source": "osv", "packages": [ { "package": "css_transform_support", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "GHSA-45cp-hpc9-8347", "osv_published_at": "2020-09-01T19:52:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:01:25Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:01:25Z", "osv_earliest_published_at": "2020-09-01T19:52:35Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:07:16Z" }, { "id": "grunt-radical-2026-07-20", "display_name": "grunt-radical", "campaign": null, "detection_source": "osv", "packages": [ { "package": "grunt-radical", "ecosystem": "npm", "versions": [ "0.0.14" ], "osv_entries": [ { "osv_id": "GHSA-4627-w373-375v", "osv_published_at": "2020-09-11T21:22:24Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:01:27Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:01:27Z", "osv_earliest_published_at": "2020-09-11T21:22:24Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:07:24Z" }, { "id": "mx-nested-menu-2026-07-20", "display_name": "mx-nested-menu", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mx-nested-menu", "ecosystem": "npm", "versions": [ "0.1.30" ], "osv_entries": [ { "osv_id": "GHSA-48hw-37g6-3gw4", "osv_published_at": "2020-09-03T02:35:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:01:28Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:01:28Z", "osv_earliest_published_at": "2020-09-03T02:35:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:07:32Z" }, { "id": "malicious-npm-package-2026-07-20", "display_name": "malicious-npm-package", "campaign": null, "detection_source": "osv", "packages": [ { "package": "malicious-npm-package", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-49c6-3wr4-8jr4", "osv_published_at": "2020-09-04T15:05:26Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:01:29Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:01:29Z", "osv_earliest_published_at": "2020-09-04T15:05:26Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:07:42Z" }, { "id": "rc-calendar-jhorst-2026-07-20", "display_name": "rc-calendar-jhorst", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rc-calendar-jhorst", "ecosystem": "npm", "versions": [ "8.4.3" ], "osv_entries": [ { "osv_id": "GHSA-4c87-gg2q-fc6m", "osv_published_at": "2020-09-01T20:31:04Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:01:31Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:01:31Z", "osv_earliest_published_at": "2020-09-01T20:31:04Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:07:51Z" }, { "id": "sj-labc-2026-07-20", "display_name": "sj-labc", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sj-labc", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-4fqg-89cc-5pv5", "osv_published_at": "2020-09-04T14:58:44Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:01:32Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:01:32Z", "osv_earliest_published_at": "2020-09-04T14:58:44Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:07:59Z" }, { "id": "http-proxy-js-2026-07-20", "display_name": "http-proxy.js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "http-proxy.js", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "GHSA-4g54-95xv-f353", "osv_published_at": "2018-08-29T23:16:56Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:01:33Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:01:33Z", "osv_earliest_published_at": "2018-08-29T23:16:56Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:08:07Z" }, { "id": "nuxt-rspack-builder-2026-07-20", "display_name": "@nuxt/rspack-builder", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@nuxt/rspack-builder", "ecosystem": "npm", "versions": [ "3.12.2", "3.15.4", "4.0.0-alpha.1" ], "osv_entries": [ { "osv_id": "GHSA-4gf7-ff8x-hq99", "osv_published_at": "2025-01-27T11:31:41Z" }, { "osv_id": "GHSA-6m52-m754-pw2g", "osv_published_at": "2026-05-19T15:51:14Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:01:34Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:01:34Z", "osv_earliest_published_at": "2025-01-27T11:31:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:15:43Z" }, { "id": "nuxt-webpack-builder-2026-07-20", "display_name": "@nuxt/webpack-builder", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@nuxt/webpack-builder", "ecosystem": "npm", "versions": [ "3.0.0", "3.15.4", "4.0.0-alpha.1" ], "osv_entries": [ { "osv_id": "GHSA-4gf7-ff8x-hq99", "osv_published_at": "2025-01-27T11:31:41Z" }, { "osv_id": "GHSA-6m52-m754-pw2g", "osv_published_at": "2026-05-19T15:51:14Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:01:36Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:01:36Z", "osv_earliest_published_at": "2025-01-27T11:31:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:15:50Z" }, { "id": "sj-tw-abc-2026-07-20", "display_name": "sj-tw-abc", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sj-tw-abc", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-4hfc-fv33-ph9p", "osv_published_at": "2020-09-03T23:26:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:01:37Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:01:37Z", "osv_earliest_published_at": "2020-09-03T23:26:33Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:08:32Z" }, { "id": "tiar-2026-07-20", "display_name": "tiar", "campaign": null, "detection_source": "osv", "packages": [ { "package": "tiar", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-4hjg-w3ww-38c6", "osv_published_at": "2020-09-03T18:03:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:01:39Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:01:39Z", "osv_earliest_published_at": "2020-09-03T18:03:49Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:08:40Z" }, { "id": "buffer-8or-2026-07-20", "display_name": "buffer-8or", "campaign": null, "detection_source": "osv", "packages": [ { "package": "buffer-8or", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-4hm7-73ch-vm59", "osv_published_at": "2020-09-03T21:49:43Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:01:40Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:01:40Z", "osv_earliest_published_at": "2020-09-03T21:49:43Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:08:49Z" }, { "id": "bs85check-2026-07-20", "display_name": "bs85check", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bs85check", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-4hq8-v42x-9wx3", "osv_published_at": "2020-09-04T16:51:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:01:41Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:01:41Z", "osv_earliest_published_at": "2020-09-04T16:51:52Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:08:57Z" }, { "id": "slush-fullstack-framework-2026-07-20", "display_name": "slush-fullstack-framework", "campaign": null, "detection_source": "osv", "packages": [ { "package": "slush-fullstack-framework", "ecosystem": "npm", "versions": [ "0.9.2" ], "osv_entries": [ { "osv_id": "GHSA-4j54-mmmv-hjpm", "osv_published_at": "2020-09-03T19:17:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:01:42Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:01:42Z", "osv_earliest_published_at": "2020-09-03T19:17:51Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:09:05Z" }, { "id": "matrix-js-sdk-2026-07-20", "display_name": "matrix-js-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "matrix-js-sdk", "ecosystem": "npm", "versions": [ "9.11.0" ], "osv_entries": [ { "osv_id": "GHSA-4jf8-g8wp-cx7c", "osv_published_at": "2024-10-15T18:07:26Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:01:43Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:01:43Z", "osv_earliest_published_at": "2024-10-15T18:07:26Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:09:13Z" }, { "id": "coinstrig-2026-07-20", "display_name": "coinstrig", "campaign": null, "detection_source": "osv", "packages": [ { "package": "coinstrig", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-4m3j-h8f2-4xh4", "osv_published_at": "2020-09-03T19:41:31Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:01:44Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:01:44Z", "osv_earliest_published_at": "2020-09-03T19:41:31Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:09:23Z" }, { "id": "bitcroe-lib-2026-07-20", "display_name": "bitcroe-lib", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bitcroe-lib", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-4m3p-x2hp-2pgx", "osv_published_at": "2020-09-04T16:45:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:01:46Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:01:46Z", "osv_earliest_published_at": "2020-09-04T16:45:23Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:09:32Z" }, { "id": "multer-2026-07-20", "display_name": "multer", "campaign": null, "detection_source": "osv", "packages": [ { "package": "multer", "ecosystem": "npm", "versions": [ "1.4.4-lts.1" ], "osv_entries": [ { "osv_id": "GHSA-4pg4-qvpc-4q3h", "osv_published_at": "2025-05-19T22:16:30Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:01:47Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:01:47Z", "osv_earliest_published_at": "2025-05-19T22:16:30Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:09:40Z" }, { "id": "css-transform-step-2026-07-20", "display_name": "css_transform_step", "campaign": null, "detection_source": "osv", "packages": [ { "package": "css_transform_step", "ecosystem": "npm", "versions": [ "1.0.6" ], "osv_entries": [ { "osv_id": "GHSA-4rx9-58m7-gr8w", "osv_published_at": "2020-09-01T19:53:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:01:48Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:01:48Z", "osv_earliest_published_at": "2020-09-01T19:53:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:09:50Z" }, { "id": "react-datepicker-plus-2026-07-20", "display_name": "react-datepicker-plus", "campaign": null, "detection_source": "osv", "packages": [ { "package": "react-datepicker-plus", "ecosystem": "npm", "versions": [ "2.4.2" ], "osv_entries": [ { "osv_id": "GHSA-4wcx-c9c4-89p2", "osv_published_at": "2020-09-11T21:23:30Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:01:50Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:01:50Z", "osv_earliest_published_at": "2020-09-11T21:23:30Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:10:00Z" }, { "id": "node-opencv-2026-07-20", "display_name": "node-opencv", "campaign": null, "detection_source": "osv", "packages": [ { "package": "node-opencv", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "GHSA-4x37-5rh2-hp8c", "osv_published_at": "2018-08-29T23:50:59Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:01:51Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:01:51Z", "osv_earliest_published_at": "2018-08-29T23:50:59Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:10:08Z" }, { "id": "comander-2026-07-20", "display_name": "comander", "campaign": null, "detection_source": "osv", "packages": [ { "package": "comander", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-4xg9-g7qj-jhg4", "osv_published_at": "2020-09-03T20:46:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:01:53Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:01:53Z", "osv_earliest_published_at": "2020-09-03T20:46:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:10:18Z" }, { "id": "js-3ha3-2026-07-20", "display_name": "js-3ha3", "campaign": null, "detection_source": "osv", "packages": [ { "package": "js-3ha3", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-52c9-458g-whrf", "osv_published_at": "2020-09-03T22:58:17Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:01:54Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:01:54Z", "osv_earliest_published_at": "2020-09-03T22:58:17Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:10:28Z" }, { "id": "buffer-xmr-2026-07-20", "display_name": "buffer-xmr", "campaign": null, "detection_source": "osv", "packages": [ { "package": "buffer-xmr", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-5327-gfq5-8f4m", "osv_published_at": "2020-09-03T21:56:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:01:56Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:01:56Z", "osv_earliest_published_at": "2020-09-03T21:56:23Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:10:36Z" }, { "id": "buffermxor-2026-07-20", "display_name": "buffermxor", "campaign": null, "detection_source": "osv", "packages": [ { "package": "buffermxor", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-536f-268f-6gxc", "osv_published_at": "2020-09-03T22:17:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:01:57Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:01:57Z", "osv_earliest_published_at": "2020-09-03T22:17:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:10:44Z" }, { "id": "angular-location-update-2026-07-20", "display_name": "angular-location-update", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angular-location-update", "ecosystem": "npm", "versions": [ "0.0.3" ], "osv_entries": [ { "osv_id": "GHSA-53jx-4wwh-gcqj", "osv_published_at": "2020-09-11T21:11:34Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:01:58Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:01:58Z", "osv_earliest_published_at": "2020-09-11T21:11:34Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:10:53Z" }, { "id": "xoc-2026-07-20", "display_name": "xoc", "campaign": null, "detection_source": "osv", "packages": [ { "package": "xoc", "ecosystem": "npm", "versions": [ "1.0.7" ], "osv_entries": [ { "osv_id": "GHSA-54cr-gv8w-8324", "osv_published_at": "2020-09-01T20:36:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:02:00Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:02:00Z", "osv_earliest_published_at": "2020-09-01T20:36:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:11:03Z" }, { "id": "qingting-2026-07-20", "display_name": "qingting", "campaign": null, "detection_source": "osv", "packages": [ { "package": "qingting", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-559q-92vx-xvjp", "osv_published_at": "2020-09-03T17:44:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:02:01Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:02:01Z", "osv_earliest_published_at": "2020-09-03T17:44:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:11:14Z" }, { "id": "vue-backbone-2026-07-20", "display_name": "vue-backbone", "campaign": null, "detection_source": "osv", "packages": [ { "package": "vue-backbone", "ecosystem": "npm", "versions": [ "0.1.2" ], "osv_entries": [ { "osv_id": "GHSA-5635-9mvj-r6hp", "osv_published_at": "2020-09-03T02:34:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:02:02Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:02:02Z", "osv_earliest_published_at": "2020-09-03T02:34:39Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:11:22Z" }, { "id": "ks-sha3-2026-07-20", "display_name": "ks-sha3", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ks-sha3", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-563h-49v8-g7x4", "osv_published_at": "2020-09-03T23:17:01Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:02:03Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:02:03Z", "osv_earliest_published_at": "2020-09-03T23:17:01Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:11:30Z" }, { "id": "device-mqtt-2026-07-20", "display_name": "device-mqtt", "campaign": null, "detection_source": "osv", "packages": [ { "package": "device-mqtt", "ecosystem": "npm", "versions": [ "1.0.11" ], "osv_entries": [ { "osv_id": "GHSA-563h-697m-j7x5", "osv_published_at": "2020-09-03T19:18:58Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:02:04Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:02:04Z", "osv_earliest_published_at": "2020-09-03T19:18:58Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:11:38Z" }, { "id": "react-dates-sc-2026-07-20", "display_name": "react-dates-sc", "campaign": null, "detection_source": "osv", "packages": [ { "package": "react-dates-sc", "ecosystem": "npm", "versions": [ "0.3.0" ], "osv_entries": [ { "osv_id": "GHSA-5645-gc7h-98h8", "osv_published_at": "2020-09-01T20:32:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:02:05Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:02:05Z", "osv_earliest_published_at": "2020-09-01T20:32:07Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:11:47Z" }, { "id": "radicjs-2026-07-20", "display_name": "radicjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "radicjs", "ecosystem": "npm", "versions": [ "0.2.1" ], "osv_entries": [ { "osv_id": "GHSA-56r9-v65c-34jm", "osv_published_at": "2020-09-03T02:33:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:02:07Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:02:07Z", "osv_earliest_published_at": "2020-09-03T02:33:37Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:11:55Z" }, { "id": "secure-identity-login-module-2026-07-20", "display_name": "secure_identity_login_module", "campaign": null, "detection_source": "osv", "packages": [ { "package": "secure_identity_login_module", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-59x8-7wx6-4hj9", "osv_published_at": "2020-09-03T17:47:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:02:08Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:02:08Z", "osv_earliest_published_at": "2020-09-03T17:47:52Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:12:03Z" }, { "id": "noderequest-2026-07-20", "display_name": "noderequest", "campaign": null, "detection_source": "osv", "packages": [ { "package": "noderequest", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "GHSA-5cv7-r488-wc5x", "osv_published_at": "2018-09-17T20:39:17Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:02:09Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:02:09Z", "osv_earliest_published_at": "2018-09-17T20:39:17Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:12:12Z" }, { "id": "xmldom-2026-07-20", "display_name": "xmldom", "campaign": null, "detection_source": "osv", "packages": [ { "package": "xmldom", "ecosystem": "npm", "versions": [ "0.6.0" ], "osv_entries": [ { "osv_id": "GHSA-5fg8-2547-mr8q", "osv_published_at": "2021-08-03T16:57:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:02:11Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:02:11Z", "osv_earliest_published_at": "2021-08-03T16:57:05Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:12:22Z" }, { "id": "buffeb-xor-2026-07-20", "display_name": "buffeb-xor", "campaign": null, "detection_source": "osv", "packages": [ { "package": "buffeb-xor", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-5ggx-g294-qj3q", "osv_published_at": "2020-09-03T21:47:29Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:02:13Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:02:13Z", "osv_earliest_published_at": "2020-09-03T21:47:29Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:12:34Z" }, { "id": "opencv-js-2026-07-20", "display_name": "opencv.js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "opencv.js", "ecosystem": "npm", "versions": [ "1.2.1" ], "osv_entries": [ { "osv_id": "GHSA-5hxw-r847-qfwp", "osv_published_at": "2018-08-29T23:47:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:02:14Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:02:14Z", "osv_earliest_published_at": "2018-08-29T23:47:07Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:12:41Z" }, { "id": "node-ftp-2026-07-20", "display_name": "node-ftp", "campaign": null, "detection_source": "osv", "packages": [ { "package": "node-ftp", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-5jgp-pg4f-q8vj", "osv_published_at": "2020-09-03T19:55:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:02:15Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:02:15Z", "osv_earliest_published_at": "2020-09-03T19:55:42Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:12:49Z" }, { "id": "mssql-js-2026-07-20", "display_name": "mssql.js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mssql.js", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "GHSA-5mhv-9qw8-j63g", "osv_published_at": "2018-11-09T17:43:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:02:16Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:02:16Z", "osv_earliest_published_at": "2018-11-09T17:43:03Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:12:57Z" }, { "id": "mogoose-2026-07-20", "display_name": "mogoose", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mogoose", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-5mm9-55c9-p5r7", "osv_published_at": "2020-09-03T19:53:31Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:02:17Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:02:17Z", "osv_earliest_published_at": "2020-09-03T19:53:31Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:13:05Z" }, { "id": "precode-js-2026-07-20", "display_name": "precode.js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "precode.js", "ecosystem": "npm", "versions": [ "1.1.1" ], "osv_entries": [ { "osv_id": "GHSA-5w4r-wwc3-6qcp", "osv_published_at": "2020-09-11T21:23:29Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:02:18Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:02:18Z", "osv_earliest_published_at": "2020-09-11T21:23:29Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:13:13Z" }, { "id": "js-shas-2026-07-20", "display_name": "js-shas", "campaign": null, "detection_source": "osv", "packages": [ { "package": "js-shas", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-5wq6-v5cw-jvfr", "osv_published_at": "2020-09-03T23:03:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:02:20Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:02:20Z", "osv_earliest_published_at": "2020-09-03T23:03:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:13:23Z" }, { "id": "bitcoisnj-lib-2026-07-20", "display_name": "bitcoisnj-lib", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bitcoisnj-lib", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-629c-j867-3v45", "osv_published_at": "2020-09-04T16:41:04Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:02:22Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:02:22Z", "osv_earliest_published_at": "2020-09-04T16:41:04Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:13:35Z" }, { "id": "js-sja3-2026-07-20", "display_name": "js-sja3", "campaign": null, "detection_source": "osv", "packages": [ { "package": "js-sja3", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-6343-m2qr-66gf", "osv_published_at": "2020-09-03T23:10:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:02:23Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:02:23Z", "osv_earliest_published_at": "2020-09-03T23:10:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:13:43Z" }, { "id": "jsmsha3-2026-07-20", "display_name": "jsmsha3", "campaign": null, "detection_source": "osv", "packages": [ { "package": "jsmsha3", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-657v-jjf8-83gh", "osv_published_at": "2020-09-03T23:14:55Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:02:25Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:02:25Z", "osv_earliest_published_at": "2020-09-03T23:14:55Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:13:53Z" }, { "id": "budfer-xor-2026-07-20", "display_name": "budfer-xor", "campaign": null, "detection_source": "osv", "packages": [ { "package": "budfer-xor", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-6584-gfwm-3vc3", "osv_published_at": "2020-09-03T21:43:01Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:02:26Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:02:26Z", "osv_earliest_published_at": "2020-09-03T21:43:01Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:14:01Z" }, { "id": "sb58-2026-07-20", "display_name": "sb58", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sb58", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-674r-xx4c-gj7x", "osv_published_at": "2020-09-03T17:04:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:02:28Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:02:28Z", "osv_earliest_published_at": "2020-09-03T17:04:05Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:14:13Z" }, { "id": "babel-traverse-2026-07-20", "display_name": "@babel/traverse", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@babel/traverse", "ecosystem": "npm", "versions": [ "8.0.0-alpha.0" ], "osv_entries": [ { "osv_id": "GHSA-67hx-6x53-jw92", "osv_published_at": "2023-10-16T13:55:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:02:29Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:02:29Z", "osv_earliest_published_at": "2023-10-16T13:55:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:14:21Z" }, { "id": "jr-sha3-2026-07-20", "display_name": "jr-sha3", "campaign": null, "detection_source": "osv", "packages": [ { "package": "jr-sha3", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-67mp-pcv9-vvq6", "osv_published_at": "2020-09-03T22:57:14Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:02:31Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:02:31Z", "osv_earliest_published_at": "2020-09-03T22:57:14Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:14:32Z" }, { "id": "malicious-do-not-install-2026-07-20", "display_name": "malicious-do-not-install", "campaign": null, "detection_source": "osv", "packages": [ { "package": "malicious-do-not-install", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-6879-xr95-5gf4", "osv_published_at": "2020-09-03T17:20:15Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:02:33Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:02:33Z", "osv_earliest_published_at": "2020-09-03T17:20:15Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:14:42Z" }, { "id": "sj-tw-sec-2026-07-20", "display_name": "sj-tw-sec", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sj-tw-sec", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-692h-g37c-qv44", "osv_published_at": "2020-09-03T23:25:30Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:02:34Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:02:34Z", "osv_earliest_published_at": "2020-09-03T23:25:30Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:14:50Z" }, { "id": "js-shc3-2026-07-20", "display_name": "js-shc3", "campaign": null, "detection_source": "osv", "packages": [ { "package": "js-shc3", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-69mf-2cw2-38m8", "osv_published_at": "2020-09-03T23:04:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:02:35Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:02:35Z", "osv_earliest_published_at": "2020-09-03T23:04:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:14:58Z" }, { "id": "discord-js-user-2026-07-20", "display_name": "discord.js-user", "campaign": null, "detection_source": "osv", "packages": [ { "package": "discord.js-user", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-69r6-7h4f-9p7q", "osv_published_at": "2020-09-03T20:41:01Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:02:36Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:02:36Z", "osv_earliest_published_at": "2020-09-03T20:41:01Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:15:06Z" }, { "id": "sqlite-js-2026-07-20", "display_name": "sqlite.js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sqlite.js", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "GHSA-6f34-pq9f-36vf", "osv_published_at": "2018-07-23T20:50:29Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:02:38Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:02:38Z", "osv_earliest_published_at": "2018-07-23T20:50:29Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:15:17Z" }, { "id": "bunfer-xor-2026-07-20", "display_name": "bunfer-xor", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bunfer-xor", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-6f93-xj8r-jp82", "osv_published_at": "2020-09-03T22:28:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:02:39Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:02:39Z", "osv_earliest_published_at": "2020-09-03T22:28:21Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:15:25Z" }, { "id": "jquey-2026-07-20", "display_name": "jquey", "campaign": null, "detection_source": "osv", "packages": [ { "package": "jquey", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "GHSA-6fjr-m7v6-fpg9", "osv_published_at": "2018-08-06T21:41:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:02:40Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:02:40Z", "osv_earliest_published_at": "2018-08-06T21:41:38Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:15:33Z" }, { "id": "cicada-render-2026-07-20", "display_name": "cicada-render", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cicada-render", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-6m6m-j2hm-pxrg", "osv_published_at": "2020-09-03T17:37:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:02:44Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:02:44Z", "osv_earliest_published_at": "2020-09-03T17:37:05Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:15:59Z" }, { "id": "hs-sha3-2026-07-20", "display_name": "hs-sha3", "campaign": null, "detection_source": "osv", "packages": [ { "package": "hs-sha3", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-6mrq-7r7m-hh4p", "osv_published_at": "2020-09-03T22:52:58Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:02:46Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:02:46Z", "osv_earliest_published_at": "2020-09-03T22:52:58Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:16:07Z" }, { "id": "superhappyfuntime-2026-07-20", "display_name": "superhappyfuntime", "campaign": null, "detection_source": "osv", "packages": [ { "package": "superhappyfuntime", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-6qgx-f452-7699", "osv_published_at": "2020-09-03T23:28:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:02:47Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:02:47Z", "osv_earliest_published_at": "2020-09-03T23:28:39Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:16:18Z" }, { "id": "buffer-por-2026-07-20", "display_name": "buffer-por", "campaign": null, "detection_source": "osv", "packages": [ { "package": "buffer-por", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-6xg2-cf6h-x4v8", "osv_published_at": "2020-09-03T21:53:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:02:48Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:02:48Z", "osv_earliest_published_at": "2020-09-03T21:53:05Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:16:26Z" }, { "id": "cuffer-xor-2026-07-20", "display_name": "cuffer-xor", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cuffer-xor", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-6xm4-p6r2-mwrc", "osv_published_at": "2020-09-03T22:47:30Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:02:49Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:02:49Z", "osv_earliest_published_at": "2020-09-03T22:47:30Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:16:34Z" }, { "id": "8-9-4-2026-07-20", "display_name": "8.9.4", "campaign": null, "detection_source": "osv", "packages": [ { "package": "8.9.4", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-725f-3pw7-rq6x", "osv_published_at": "2020-09-03T21:09:47Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:02:51Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:02:51Z", "osv_earliest_published_at": "2020-09-03T21:09:47Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:16:44Z" }, { "id": "babelcli-2026-07-20", "display_name": "babelcli", "campaign": null, "detection_source": "osv", "packages": [ { "package": "babelcli", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "GHSA-72hv-rp4q-q7f3", "osv_published_at": "2018-08-29T23:57:14Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:02:52Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:02:52Z", "osv_earliest_published_at": "2018-08-29T23:57:14Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:16:52Z" }, { "id": "crpyto-js-2026-07-20", "display_name": "crpyto-js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "crpyto-js", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-73c6-vwjh-g3qh", "osv_published_at": "2020-09-03T19:40:46Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:02:53Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:02:53Z", "osv_earliest_published_at": "2020-09-03T19:40:46Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:17:00Z" }, { "id": "coa-2026-07-20", "display_name": "coa", "campaign": null, "detection_source": "osv", "packages": [ { "package": "coa", "ecosystem": "npm", "versions": [ "2.0.3", "2.0.4", "2.1.1", "2.1.3", "3.0.1", "3.1.3" ], "osv_entries": [ { "osv_id": "GHSA-73qr-pfmq-6rp8", "osv_published_at": "2021-11-04T16:22:28Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:02:56Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:02:56Z", "osv_earliest_published_at": "2021-11-04T16:22:28Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:17:11Z" }, { "id": "buffep-xor-2026-07-20", "display_name": "buffep-xor", "campaign": null, "detection_source": "osv", "packages": [ { "package": "buffep-xor", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-73wv-v82c-xmqv", "osv_published_at": "2020-09-03T21:50:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:02:57Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:02:57Z", "osv_earliest_published_at": "2020-09-03T21:50:51Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:17:19Z" }, { "id": "bitconijs-lib-2026-07-20", "display_name": "bitconijs-lib", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bitconijs-lib", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-74hh-4rcv-pp27", "osv_published_at": "2020-09-04T16:44:19Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:02:58Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:02:58Z", "osv_earliest_published_at": "2020-09-04T16:44:19Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:17:28Z" }, { "id": "bpi39-2026-07-20", "display_name": "bpi39", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bpi39", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-762c-v946-pf25", "osv_published_at": "2020-09-04T16:47:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:02:59Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:02:59Z", "osv_earliest_published_at": "2020-09-04T16:47:33Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:17:36Z" }, { "id": "js-shq3-2026-07-20", "display_name": "js-shq3", "campaign": null, "detection_source": "osv", "packages": [ { "package": "js-shq3", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-766v-7gjx-55hf", "osv_published_at": "2020-09-03T23:08:34Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:03:00Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:03:00Z", "osv_earliest_published_at": "2020-09-03T23:08:34Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:17:43Z" }, { "id": "zs-sha3-2026-07-20", "display_name": "zs-sha3", "campaign": null, "detection_source": "osv", "packages": [ { "package": "zs-sha3", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-7696-qr5q-pg37", "osv_published_at": "2020-09-03T23:19:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:03:01Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:03:01Z", "osv_earliest_published_at": "2020-09-03T23:19:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:17:51Z" }, { "id": "js-base64-int-2026-07-20", "display_name": "js-base64-int", "campaign": null, "detection_source": "osv", "packages": [ { "package": "js-base64-int", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-76qf-6mvw-c5hm", "osv_published_at": "2020-09-03T19:45:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:03:02Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:03:02Z", "osv_earliest_published_at": "2020-09-03T19:45:42Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:17:59Z" }, { "id": "ngx-pica-2026-07-20", "display_name": "ngx-pica", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ngx-pica", "ecosystem": "npm", "versions": [ "1.1.5" ], "osv_entries": [ { "osv_id": "GHSA-76wf-2xcf-6wmx", "osv_published_at": "2020-09-03T00:31:28Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:03:03Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:03:03Z", "osv_earliest_published_at": "2020-09-03T00:31:28Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:18:08Z" }, { "id": "js-wha3-2026-07-20", "display_name": "js-wha3", "campaign": null, "detection_source": "osv", "packages": [ { "package": "js-wha3", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-785g-gx74-gr39", "osv_published_at": "2020-09-03T23:12:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:03:05Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:03:05Z", "osv_earliest_published_at": "2020-09-03T23:12:48Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:18:18Z" }, { "id": "jquery-airload-2026-07-20", "display_name": "jquery-airload", "campaign": null, "detection_source": "osv", "packages": [ { "package": "jquery-airload", "ecosystem": "npm", "versions": [ "0.2.5" ], "osv_entries": [ { "osv_id": "GHSA-78p3-96hc-3j47", "osv_published_at": "2020-09-03T19:11:17Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:03:06Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:03:06Z", "osv_earliest_published_at": "2020-09-03T19:11:17Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:18:26Z" }, { "id": "bignum-2026-07-20", "display_name": "bignum", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bignum", "ecosystem": "npm", "versions": [ "0.12.2" ], "osv_entries": [ { "osv_id": "GHSA-7cgc-fjv4-52x6", "osv_published_at": "2023-05-24T16:43:58Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:03:07Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:03:07Z", "osv_earliest_published_at": "2023-05-24T16:43:58Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:18:34Z" }, { "id": "beffer-xor-2026-07-20", "display_name": "beffer-xor", "campaign": null, "detection_source": "osv", "packages": [ { "package": "beffer-xor", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-7cvf-p83w-48q6", "osv_published_at": "2020-09-03T21:37:29Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:03:08Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:03:08Z", "osv_earliest_published_at": "2020-09-03T21:37:29Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:18:43Z" }, { "id": "buffez-xor-2026-07-20", "display_name": "buffez-xor", "campaign": null, "detection_source": "osv", "packages": [ { "package": "buffez-xor", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-7frr-c83r-fm22", "osv_published_at": "2020-09-03T22:20:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:03:09Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:03:09Z", "osv_earliest_published_at": "2020-09-03T22:20:49Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:18:52Z" }, { "id": "bconi-2026-07-20", "display_name": "bconi", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bconi", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-7j93-5m2h-rvjx", "osv_published_at": "2020-09-04T15:32:46Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:03:11Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:03:11Z", "osv_earliest_published_at": "2020-09-04T15:32:46Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:19:02Z" }, { "id": "pdfjs-dist-2026-07-20", "display_name": "pdfjs-dist", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pdfjs-dist", "ecosystem": "npm", "versions": [ "2.0.0" ], "osv_entries": [ { "osv_id": "GHSA-7jg2-jgv3-fmr4", "osv_published_at": "2022-05-14T01:22:02Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:03:12Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:03:12Z", "osv_earliest_published_at": "2022-05-14T01:22:02Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:19:10Z" }, { "id": "bwffer-xor-2026-07-20", "display_name": "bwffer-xor", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bwffer-xor", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-7qg7-6g3g-8vxg", "osv_published_at": "2020-09-03T22:46:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:03:13Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:03:13Z", "osv_earliest_published_at": "2020-09-03T22:46:25Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:19:20Z" }, { "id": "ion-parser-2026-07-20", "display_name": "ion-parser", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ion-parser", "ecosystem": "npm", "versions": [ "0.5.2" ], "osv_entries": [ { "osv_id": "GHSA-7vrv-5m2h-rjw9", "osv_published_at": "2022-07-26T00:01:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:03:15Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:03:15Z", "osv_earliest_published_at": "2022-07-26T00:01:05Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:19:29Z" }, { "id": "rceat-2026-07-20", "display_name": "rceat", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rceat", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-7w7c-867m-4mqc", "osv_published_at": "2020-09-03T17:04:55Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:03:16Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:03:16Z", "osv_earliest_published_at": "2020-09-03T17:04:55Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:19:38Z" }, { "id": "1337qq-js-2026-07-20", "display_name": "1337qq-js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "1337qq-js", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-7wgh-5q4q-6wx5", "osv_published_at": "2020-09-04T17:30:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:03:17Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:03:17Z", "osv_earliest_published_at": "2020-09-04T17:30:39Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:19:46Z" }, { "id": "bpi66-2026-07-20", "display_name": "bpi66", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bpi66", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-7xc4-793x-25jp", "osv_published_at": "2020-09-04T16:48:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:03:18Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:03:18Z", "osv_earliest_published_at": "2020-09-04T16:48:38Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:19:54Z" }, { "id": "an0n-chat-lib-2026-07-20", "display_name": "an0n-chat-lib", "campaign": null, "detection_source": "osv", "packages": [ { "package": "an0n-chat-lib", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-7xcv-wvr7-4h6p", "osv_published_at": "2021-01-29T18:12:19Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:03:19Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:03:19Z", "osv_earliest_published_at": "2021-01-29T18:12:19Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:20:02Z" }, { "id": "bufner-xor-2026-07-20", "display_name": "bufner-xor", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bufner-xor", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-7xf6-cpxm-5mx9", "osv_published_at": "2020-09-03T22:27:18Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:03:20Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:03:20Z", "osv_earliest_published_at": "2020-09-03T22:27:18Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:20:10Z" }, { "id": "js-cha3-2026-07-20", "display_name": "js-cha3", "campaign": null, "detection_source": "osv", "packages": [ { "package": "js-cha3", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-7xf9-74cp-8hx3", "osv_published_at": "2020-09-03T22:59:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:03:21Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:03:21Z", "osv_earliest_published_at": "2020-09-03T22:59:21Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:20:19Z" }, { "id": "json-serializer-2026-07-20", "display_name": "json-serializer", "campaign": null, "detection_source": "osv", "packages": [ { "package": "json-serializer", "ecosystem": "npm", "versions": [ "2.0.10" ], "osv_entries": [ { "osv_id": "GHSA-7xfq-xh6v-4mrm", "osv_published_at": "2020-09-01T20:27:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:03:22Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:03:22Z", "osv_earliest_published_at": "2020-09-01T20:27:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:20:27Z" }, { "id": "pm-controls-2026-07-20", "display_name": "pm-controls", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pm-controls", "ecosystem": "npm", "versions": [ "1.1.8" ], "osv_entries": [ { "osv_id": "GHSA-84qj-9qf2-q92r", "osv_published_at": "2020-09-03T00:32:30Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:03:24Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:03:24Z", "osv_earliest_published_at": "2020-09-03T00:32:30Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:20:35Z" }, { "id": "buffdr-xor-2026-07-20", "display_name": "buffdr-xor", "campaign": null, "detection_source": "osv", "packages": [ { "package": "buffdr-xor", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-8549-p68h-m9mc", "osv_published_at": "2020-09-03T21:46:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:03:25Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:03:25Z", "osv_earliest_published_at": "2020-09-03T21:46:21Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:20:44Z" }, { "id": "mariadb-2026-07-20", "display_name": "mariadb", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mariadb", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "GHSA-85fq-56wq-gmcf", "osv_published_at": "2018-07-18T18:28:17Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:03:26Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:03:26Z", "osv_earliest_published_at": "2018-07-18T18:28:17Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:20:54Z" }, { "id": "bitcion-ops-2026-07-20", "display_name": "bitcion-ops", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bitcion-ops", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-85q4-v37c-wfpc", "osv_published_at": "2020-09-04T15:39:28Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:03:27Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:03:27Z", "osv_earliest_published_at": "2020-09-04T15:39:28Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:21:02Z" }, { "id": "diamond-clien-2026-07-20", "display_name": "diamond-clien", "campaign": null, "detection_source": "osv", "packages": [ { "package": "diamond-clien", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-86gv-xpwv-jprc", "osv_published_at": "2020-09-03T17:36:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:03:28Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:03:28Z", "osv_earliest_published_at": "2020-09-03T17:36:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:21:10Z" }, { "id": "react-pdf-2026-07-20", "display_name": "react-pdf", "campaign": null, "detection_source": "osv", "packages": [ { "package": "react-pdf", "ecosystem": "npm", "versions": [ "8.0.0" ], "osv_entries": [ { "osv_id": "GHSA-87hq-q4gp-9wr4", "osv_published_at": "2024-05-07T16:48:59Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:03:30Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:03:30Z", "osv_earliest_published_at": "2024-05-07T16:48:59Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:21:20Z" }, { "id": "bs-sha3-2026-07-20", "display_name": "bs-sha3", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bs-sha3", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-88xx-23mf-rcj2", "osv_published_at": "2020-09-03T22:51:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:03:32Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:03:32Z", "osv_earliest_published_at": "2020-09-03T22:51:52Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:21:31Z" }, { "id": "jw-sha3-2026-07-20", "display_name": "jw-sha3", "campaign": null, "detection_source": "osv", "packages": [ { "package": "jw-sha3", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-8g3r-968r-c644", "osv_published_at": "2020-09-03T23:15:58Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:03:34Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:03:34Z", "osv_earliest_published_at": "2020-09-03T23:15:58Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:21:44Z" }, { "id": "bugfer-xor-2026-07-20", "display_name": "bugfer-xor", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bugfer-xor", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-8g64-9cm2-838j", "osv_published_at": "2020-09-03T22:29:26Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:03:35Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:03:35Z", "osv_earliest_published_at": "2020-09-03T22:29:26Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:21:52Z" }, { "id": "bp66-2026-07-20", "display_name": "bp66", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bp66", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-8gc6-65mm-xr6r", "osv_published_at": "2020-09-04T16:46:28Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:03:36Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:03:36Z", "osv_earliest_published_at": "2020-09-04T16:46:28Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:22:01Z" }, { "id": "mysqljs-2026-07-20", "display_name": "mysqljs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mysqljs", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-8gv6-g7vp-hr34", "osv_published_at": "2020-09-01T18:58:47Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:03:38Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:03:38Z", "osv_earliest_published_at": "2020-09-01T18:58:47Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:22:09Z" }, { "id": "harmlesspackage-2026-07-20", "display_name": "harmlesspackage", "campaign": null, "detection_source": "osv", "packages": [ { "package": "harmlesspackage", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-8hmr-w35f-3qgj", "osv_published_at": "2020-09-03T21:07:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:03:39Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:03:39Z", "osv_earliest_published_at": "2020-09-03T21:07:37Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:22:18Z" }, { "id": "bitcoin-sweep-2026-07-20", "display_name": "bitcoin-sweep", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bitcoin-sweep", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-8hqw-qp6r-vqcm", "osv_published_at": "2020-09-04T16:40:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:03:40Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:03:40Z", "osv_earliest_published_at": "2020-09-04T16:40:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:22:28Z" }, { "id": "btffer-xor-2026-07-20", "display_name": "btffer-xor", "campaign": null, "detection_source": "osv", "packages": [ { "package": "btffer-xor", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-8hrq-9wm7-v3jw", "osv_published_at": "2020-09-03T21:39:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:03:41Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:03:41Z", "osv_earliest_published_at": "2020-09-03T21:39:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:22:36Z" }, { "id": "uglyfi-js-2026-07-20", "display_name": "uglyfi.js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "uglyfi.js", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-8jf2-cq6v-w234", "osv_published_at": "2020-09-03T21:10:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:03:43Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:03:43Z", "osv_earliest_published_at": "2020-09-03T21:10:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:22:46Z" }, { "id": "ali-contributors-2026-07-20", "display_name": "ali-contributors", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ali-contributors", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-8m5v-f2wp-wqr9", "osv_published_at": "2020-09-03T17:30:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:03:44Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:03:44Z", "osv_earliest_published_at": "2020-09-03T17:30:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:22:54Z" }, { "id": "hdkye-2026-07-20", "display_name": "hdkye", "campaign": null, "detection_source": "osv", "packages": [ { "package": "hdkye", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-8pwx-j4r6-5v38", "osv_published_at": "2020-09-03T17:05:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:03:48Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:03:48Z", "osv_earliest_published_at": "2020-09-03T17:05:25Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:23:08Z" }, { "id": "appx-compiler-2026-07-20", "display_name": "appx-compiler", "campaign": null, "detection_source": "osv", "packages": [ { "package": "appx-compiler", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-8q2c-2396-hf7j", "osv_published_at": "2020-09-03T17:34:55Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:03:49Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:03:49Z", "osv_earliest_published_at": "2020-09-03T17:34:55Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:23:20Z" }, { "id": "radic-util-2026-07-20", "display_name": "radic-util", "campaign": null, "detection_source": "osv", "packages": [ { "package": "radic-util", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "GHSA-8qh7-xw58-3ww7", "osv_published_at": "2020-09-11T21:25:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:03:50Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:03:50Z", "osv_earliest_published_at": "2020-09-11T21:25:37Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:23:29Z" }, { "id": "freshdom-2026-07-20", "display_name": "freshdom", "campaign": null, "detection_source": "osv", "packages": [ { "package": "freshdom", "ecosystem": "npm", "versions": [ "0.0.6" ], "osv_entries": [ { "osv_id": "GHSA-8qm2-24qc-c4qg", "osv_published_at": "2020-09-01T19:57:56Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:03:51Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:03:51Z", "osv_earliest_published_at": "2020-09-01T19:57:56Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:23:37Z" }, { "id": "nodefabric-2026-07-20", "display_name": "nodefabric", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nodefabric", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "GHSA-8qp3-pvwc-2g4p", "osv_published_at": "2018-07-23T20:49:58Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:03:52Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:03:52Z", "osv_earliest_published_at": "2018-07-23T20:49:58Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:23:45Z" }, { "id": "another-date-range-picker-2026-07-20", "display_name": "another-date-range-picker", "campaign": null, "detection_source": "osv", "packages": [ { "package": "another-date-range-picker", "ecosystem": "npm", "versions": [ "4.1.48" ], "osv_entries": [ { "osv_id": "GHSA-8rxg-9g6f-vq9p", "osv_published_at": "2020-09-01T19:46:01Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:03:54Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:03:54Z", "osv_earliest_published_at": "2020-09-01T19:46:01Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:23:56Z" }, { "id": "axioss-2026-07-20", "display_name": "axioss", "campaign": null, "detection_source": "osv", "packages": [ { "package": "axioss", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-8w9j-6wg6-qv4f", "osv_published_at": "2020-09-03T19:41:17Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:03:56Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:03:56Z", "osv_earliest_published_at": "2020-09-03T19:41:17Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:24:05Z" }, { "id": "ripedm160-2026-07-20", "display_name": "ripedm160", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ripedm160", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-9272-59x2-gwf2", "osv_published_at": "2020-09-03T17:04:13Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:03:57Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:03:57Z", "osv_earliest_published_at": "2020-09-03T17:04:13Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:24:14Z" }, { "id": "bitconid-rpc-2026-07-20", "display_name": "bitconid-rpc", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bitconid-rpc", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-9298-m7jf-55h2", "osv_published_at": "2020-09-04T16:42:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:03:58Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:03:58Z", "osv_earliest_published_at": "2020-09-04T16:42:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:24:22Z" }, { "id": "impala-2026-07-20", "display_name": "impala", "campaign": null, "detection_source": "osv", "packages": [ { "package": "impala", "ecosystem": "npm", "versions": [ "1.1.7" ], "osv_entries": [ { "osv_id": "GHSA-92px-q4w8-hrr5", "osv_published_at": "2020-09-01T19:56:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:03:59Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:03:59Z", "osv_earliest_published_at": "2020-09-01T19:56:52Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:24:30Z" }, { "id": "modlibrary-2026-07-20", "display_name": "modlibrary", "campaign": null, "detection_source": "osv", "packages": [ { "package": "modlibrary", "ecosystem": "npm", "versions": [ "0.1.1" ], "osv_entries": [ { "osv_id": "GHSA-94m7-w873-6wwf", "osv_published_at": "2020-09-01T20:28:56Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:04:01Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:04:01Z", "osv_earliest_published_at": "2020-09-01T20:28:56Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:24:41Z" }, { "id": "js-rha3-2026-07-20", "display_name": "js-rha3", "campaign": null, "detection_source": "osv", "packages": [ { "package": "js-rha3", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-95cg-3r4g-7w6j", "osv_published_at": "2020-09-03T23:01:29Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:04:02Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:04:02Z", "osv_earliest_published_at": "2020-09-03T23:01:29Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:24:49Z" }, { "id": "node-ipc-2026-07-20", "display_name": "node-ipc", "campaign": null, "detection_source": "osv", "packages": [ { "package": "node-ipc", "ecosystem": "npm", "versions": [ "10.1.1" ], "osv_entries": [ { "osv_id": "GHSA-97m3-w2cp-4xx6", "osv_published_at": "2022-03-16T23:54:32Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:04:03Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:04:03Z", "osv_earliest_published_at": "2022-03-16T23:54:32Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:24:57Z" }, { "id": "bs58chcek-2026-07-20", "display_name": "bs58chcek", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bs58chcek", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-97mp-9g5c-6c93", "osv_published_at": "2020-09-04T16:50:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:04:04Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:04:04Z", "osv_earliest_published_at": "2020-09-04T16:50:48Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:25:06Z" }, { "id": "babel-loqder-2026-07-20", "display_name": "babel-loqder", "campaign": null, "detection_source": "osv", "packages": [ { "package": "babel-loqder", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-9cph-cqqh-36pw", "osv_published_at": "2020-09-04T15:29:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:04:05Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:04:05Z", "osv_earliest_published_at": "2020-09-04T15:29:25Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:25:15Z" }, { "id": "jasmin-2026-07-20", "display_name": "jasmin", "campaign": null, "detection_source": "osv", "packages": [ { "package": "jasmin", "ecosystem": "npm", "versions": [ "0.0.3" ], "osv_entries": [ { "osv_id": "GHSA-9cq4-mhmr-84gm", "osv_published_at": "2020-09-01T20:26:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:04:06Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:04:06Z", "osv_earliest_published_at": "2020-09-01T20:26:49Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:25:23Z" }, { "id": "vitest-2026-07-20", "display_name": "vitest", "campaign": null, "detection_source": "osv", "packages": [ { "package": "vitest", "ecosystem": "npm", "versions": [ "0.0.125", "1.0.0", "2.0.0", "3.0.0" ], "osv_entries": [ { "osv_id": "GHSA-9crc-q9x8-hgqq", "osv_published_at": "2025-02-04T17:00:57Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:04:08Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:04:08Z", "osv_earliest_published_at": "2025-02-04T17:00:57Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:25:31Z" }, { "id": "gruntcli-2026-07-20", "display_name": "gruntcli", "campaign": null, "detection_source": "osv", "packages": [ { "package": "gruntcli", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "GHSA-9fg5-f5pj-rwcc", "osv_published_at": "2018-11-09T17:43:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:04:09Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:04:09Z", "osv_earliest_published_at": "2018-11-09T17:43:52Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:25:40Z" }, { "id": "boogeyman-2026-07-20", "display_name": "boogeyman", "campaign": null, "detection_source": "osv", "packages": [ { "package": "boogeyman", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-9hc2-w9gg-q6jw", "osv_published_at": "2020-09-01T21:07:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:04:11Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:04:11Z", "osv_earliest_published_at": "2020-09-01T21:07:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:25:52Z" }, { "id": "grunt-radic-2026-07-20", "display_name": "grunt-radic", "campaign": null, "detection_source": "osv", "packages": [ { "package": "grunt-radic", "ecosystem": "npm", "versions": [ "0.1.1" ], "osv_entries": [ { "osv_id": "GHSA-9p49-cwh3-4qhf", "osv_published_at": "2020-09-11T21:21:19Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:04:14Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:04:14Z", "osv_earliest_published_at": "2020-09-11T21:21:19Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:26:07Z" }, { "id": "parse-server-2026-07-20", "display_name": "parse-server", "campaign": null, "detection_source": "osv", "packages": [ { "package": "parse-server", "ecosystem": "npm", "versions": [ "6.0.0" ], "osv_entries": [ { "osv_id": "GHSA-9prm-jqwx-45x9", "osv_published_at": "2023-05-31T23:39:15Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:04:15Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:04:15Z", "osv_earliest_published_at": "2023-05-31T23:39:15Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:26:15Z" }, { "id": "flatmap-stream-2026-07-20", "display_name": "flatmap-stream", "campaign": null, "detection_source": "osv", "packages": [ { "package": "flatmap-stream", "ecosystem": "npm", "versions": [ "0.1.1" ], "osv_entries": [ { "osv_id": "GHSA-9x64-5r7x-2q53", "osv_published_at": "2020-09-01T21:21:32Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:04:18Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:04:18Z", "osv_earliest_published_at": "2020-09-01T21:21:32Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:26:29Z" }, { "id": "nodemssql-2026-07-20", "display_name": "nodemssql", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nodemssql", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "GHSA-9xgh-xgw5-p5cw", "osv_published_at": "2018-11-09T17:42:54Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:04:19Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:04:19Z", "osv_earliest_published_at": "2018-11-09T17:42:54Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:26:37Z" }, { "id": "fuffer-xor-2026-07-20", "display_name": "fuffer-xor", "campaign": null, "detection_source": "osv", "packages": [ { "package": "fuffer-xor", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-c2g6-57fp-22wp", "osv_published_at": "2020-09-03T22:48:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:04:20Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:04:20Z", "osv_earliest_published_at": "2020-09-03T22:48:35Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:26:48Z" }, { "id": "crossenv-2026-07-20", "display_name": "crossenv", "campaign": null, "detection_source": "osv", "packages": [ { "package": "crossenv", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "GHSA-c2m4-w5hm-vqjw", "osv_published_at": "2018-08-29T23:05:46Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:04:21Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:04:21Z", "osv_earliest_published_at": "2018-08-29T23:05:46Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:26:56Z" }, { "id": "sparkies-2026-07-20", "display_name": "sparkies", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sparkies", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-c4fm-46gm-4469", "osv_published_at": "2020-09-03T20:00:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:04:23Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:04:23Z", "osv_earliest_published_at": "2020-09-03T20:00:05Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:27:05Z" }, { "id": "buffer-xnr-2026-07-20", "display_name": "buffer-xnr", "campaign": null, "detection_source": "osv", "packages": [ { "package": "buffer-xnr", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-c4hh-fg8x-6h9p", "osv_published_at": "2020-09-03T21:57:29Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:04:24Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:04:24Z", "osv_earliest_published_at": "2020-09-03T21:57:29Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:27:13Z" }, { "id": "cxct-2026-07-20", "display_name": "cxct", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cxct", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-c5xm-m64m-f2vq", "osv_published_at": "2020-09-04T15:23:47Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:04:25Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:04:25Z", "osv_earliest_published_at": "2020-09-04T15:23:47Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:27:21Z" }, { "id": "github-jquery-widgets-2026-07-20", "display_name": "github-jquery-widgets", "campaign": null, "detection_source": "osv", "packages": [ { "package": "github-jquery-widgets", "ecosystem": "npm", "versions": [ "0.1.2" ], "osv_entries": [ { "osv_id": "GHSA-c722-pv5w-cfg2", "osv_published_at": "2020-09-11T21:20:14Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:04:26Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:04:26Z", "osv_earliest_published_at": "2020-09-11T21:20:14Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:27:31Z" }, { "id": "impala-bmap-2026-07-20", "display_name": "@impala/bmap", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@impala/bmap", "ecosystem": "npm", "versions": [ "1.0.3" ], "osv_entries": [ { "osv_id": "GHSA-c82c-8pjw-6829", "osv_published_at": "2020-09-01T19:41:45Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:04:27Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:04:27Z", "osv_earliest_published_at": "2020-09-01T19:41:45Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:27:39Z" }, { "id": "dossier-2026-07-20", "display_name": "dossier", "campaign": null, "detection_source": "osv", "packages": [ { "package": "dossier", "ecosystem": "npm", "versions": [ "0.0.4" ], "osv_entries": [ { "osv_id": "GHSA-c8h6-89q2-mgv8", "osv_published_at": "2020-09-01T19:55:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:04:30Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:04:30Z", "osv_earliest_published_at": "2020-09-01T19:55:48Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:27:50Z" }, { "id": "electron-markdownify-2026-07-20", "display_name": "electron-markdownify", "campaign": null, "detection_source": "osv", "packages": [ { "package": "electron-markdownify", "ecosystem": "npm", "versions": [ "1.4.1" ], "osv_entries": [ { "osv_id": "GHSA-c942-mfmp-p4fh", "osv_published_at": "2022-10-19T19:00:17Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:04:31Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:04:31Z", "osv_earliest_published_at": "2022-10-19T19:00:17Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:27:58Z" }, { "id": "cofee-script-2026-07-20", "display_name": "cofee-script", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cofee-script", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "GHSA-c9rj-pgxv-84jc", "osv_published_at": "2018-08-06T20:12:46Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:04:32Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:04:32Z", "osv_earliest_published_at": "2018-08-06T20:12:46Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:28:07Z" }, { "id": "conistring-2026-07-20", "display_name": "conistring", "campaign": null, "detection_source": "osv", "packages": [ { "package": "conistring", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-cfc5-x58f-869w", "osv_published_at": "2020-09-03T19:40:55Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:04:34Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:04:34Z", "osv_earliest_published_at": "2020-09-03T19:40:55Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:28:18Z" }, { "id": "ghost-2026-07-20", "display_name": "ghost", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ghost", "ecosystem": "npm", "versions": [ "0.7.2", "5.43.0", "6.0.0" ], "osv_entries": [ { "osv_id": "GHSA-cgc2-rcrh-qr5x", "osv_published_at": "2026-03-03T20:01:21Z" }, { "osv_id": "GHSA-gv6q-2m97-882h", "osv_published_at": "2026-01-28T16:11:59Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:04:35Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:04:35Z", "osv_earliest_published_at": "2026-01-28T16:11:59Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:36:04Z" }, { "id": "ecuvre-2026-07-20", "display_name": "ecuvre", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ecuvre", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-cgvm-rvfv-c92r", "osv_published_at": "2020-09-03T17:05:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:04:36Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:04:36Z", "osv_earliest_published_at": "2020-09-03T17:05:51Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:28:34Z" }, { "id": "bufver-xor-2026-07-20", "display_name": "bufver-xor", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bufver-xor", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-cr4x-w2v7-4mmf", "osv_published_at": "2020-09-03T22:26:13Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:04:37Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:04:37Z", "osv_earliest_published_at": "2020-09-03T22:26:13Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:28:44Z" }, { "id": "singale-2026-07-20", "display_name": "singale", "campaign": null, "detection_source": "osv", "packages": [ { "package": "singale", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-crfh-jmv2-2f9v", "osv_published_at": "2020-09-03T17:03:11Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:04:39Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:04:39Z", "osv_earliest_published_at": "2020-09-03T17:03:11Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:28:54Z" }, { "id": "my-very-own-package-2026-07-20", "display_name": "my-very-own-package", "campaign": null, "detection_source": "osv", "packages": [ { "package": "my-very-own-package", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-crr2-ph72-c52g", "osv_published_at": "2020-09-03T17:27:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:04:40Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:04:40Z", "osv_earliest_published_at": "2020-09-03T17:27:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:29:03Z" }, { "id": "oauth-validator-2026-07-20", "display_name": "oauth-validator", "campaign": null, "detection_source": "osv", "packages": [ { "package": "oauth-validator", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "GHSA-cxcf-78mr-wpg7", "osv_published_at": "2020-09-01T20:29:59Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:04:41Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:04:41Z", "osv_earliest_published_at": "2020-09-01T20:29:59Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:29:11Z" }, { "id": "undici-2026-07-20", "display_name": "undici", "campaign": null, "detection_source": "osv", "packages": [ { "package": "undici", "ecosystem": "npm", "versions": [ "6.0.0", "7.0.0" ], "osv_entries": [ { "osv_id": "GHSA-f269-vfmq-vjvj", "osv_published_at": "2026-03-13T20:07:26Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:04:48Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:04:48Z", "osv_earliest_published_at": "2026-03-13T20:07:26Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:29:34Z" }, { "id": "buffer-zor-2026-07-20", "display_name": "buffer-zor", "campaign": null, "detection_source": "osv", "packages": [ { "package": "buffer-zor", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-f294-27fc-wgj7", "osv_published_at": "2020-09-03T22:16:31Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:04:49Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:04:49Z", "osv_earliest_published_at": "2020-09-03T22:16:31Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:29:42Z" }, { "id": "buffar-xor-2026-07-20", "display_name": "buffar-xor", "campaign": null, "detection_source": "osv", "packages": [ { "package": "buffar-xor", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-f64g-whxf-w8f2", "osv_published_at": "2020-09-03T21:44:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:04:54Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:04:54Z", "osv_earliest_published_at": "2020-09-03T21:44:06Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:30:05Z" }, { "id": "buffer-xo2-2026-07-20", "display_name": "buffer-xo2", "campaign": null, "detection_source": "osv", "packages": [ { "package": "buffer-xo2", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-f72h-wf57-7xwh", "osv_published_at": "2020-09-03T21:58:34Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:04:55Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:04:55Z", "osv_earliest_published_at": "2020-09-03T21:58:34Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:30:15Z" }, { "id": "yeoman-genrator-2026-07-20", "display_name": "yeoman-genrator", "campaign": null, "detection_source": "osv", "packages": [ { "package": "yeoman-genrator", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-f7g4-fm4c-54m9", "osv_published_at": "2020-09-03T21:06:31Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:04:56Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:04:56Z", "osv_earliest_published_at": "2020-09-03T21:06:31Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:30:23Z" }, { "id": "path-to-regxep-2026-07-20", "display_name": "path-to-regxep", "campaign": null, "detection_source": "osv", "packages": [ { "package": "path-to-regxep", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-f7gc-6hcj-wc42", "osv_published_at": "2020-09-03T17:05:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:04:57Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:04:57Z", "osv_earliest_published_at": "2020-09-03T17:05:06Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:30:32Z" }, { "id": "js-she3-2026-07-20", "display_name": "js-she3", "campaign": null, "detection_source": "osv", "packages": [ { "package": "js-she3", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-f8jj-45fj-44r6", "osv_published_at": "2020-09-03T23:05:43Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:04:58Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:04:58Z", "osv_earliest_published_at": "2020-09-03T23:05:43Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:30:40Z" }, { "id": "bictore-lib-2026-07-20", "display_name": "bictore-lib", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bictore-lib", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-f8vf-6hwg-hw55", "osv_published_at": "2020-09-04T15:38:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:05:00Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:05:00Z", "osv_earliest_published_at": "2020-09-04T15:38:21Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:30:49Z" }, { "id": "coinstirng-2026-07-20", "display_name": "coinstirng", "campaign": null, "detection_source": "osv", "packages": [ { "package": "coinstirng", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-ff6g-gm92-rf32", "osv_published_at": "2020-09-03T19:42:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:05:01Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:05:01Z", "osv_earliest_published_at": "2020-09-03T19:42:06Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:30:58Z" }, { "id": "kraken-api-2026-07-20", "display_name": "kraken-api", "campaign": null, "detection_source": "osv", "packages": [ { "package": "kraken-api", "ecosystem": "npm", "versions": [ "0.1.8" ], "osv_entries": [ { "osv_id": "GHSA-fgfj-rj24-mj7q", "osv_published_at": "2020-09-02T21:47:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:05:02Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:05:02Z", "osv_earliest_published_at": "2020-09-02T21:47:08Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:31:07Z" }, { "id": "ecruve-2026-07-20", "display_name": "ecruve", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ecruve", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-fpf2-pr3j-4cm3", "osv_published_at": "2020-09-03T17:06:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:05:04Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:05:04Z", "osv_earliest_published_at": "2020-09-03T17:06:06Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:31:19Z" }, { "id": "cxt-2026-07-20", "display_name": "cxt", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cxt", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-fpgg-r39h-3x5x", "osv_published_at": "2020-09-03T17:06:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:05:05Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:05:05Z", "osv_earliest_published_at": "2020-09-03T17:06:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:31:27Z" }, { "id": "babel-plugin-transform-modules-systemjs-2026-07-20", "display_name": "@babel/plugin-transform-modules-systemjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@babel/plugin-transform-modules-systemjs", "ecosystem": "npm", "versions": [ "7.12.0", "8.0.0-alpha.0" ], "osv_entries": [ { "osv_id": "GHSA-fv7c-fp4j-7gwp", "osv_published_at": "2026-05-08T20:34:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:05:09Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:05:09Z", "osv_earliest_published_at": "2026-05-08T20:34:07Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:31:50Z" }, { "id": "discordi-js-2026-07-20", "display_name": "discordi.js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "discordi.js", "ecosystem": "npm", "versions": [ "14.0.3" ], "osv_entries": [ { "osv_id": "GHSA-fv9m-f7w4-889c", "osv_published_at": "2018-08-06T21:43:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:05:11Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:05:11Z", "osv_earliest_published_at": "2018-08-06T21:43:03Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:31:59Z" }, { "id": "serilize-2026-07-20", "display_name": "serilize", "campaign": null, "detection_source": "osv", "packages": [ { "package": "serilize", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-fw76-p9p2-6pvf", "osv_published_at": "2020-09-03T19:58:58Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:05:12Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:05:12Z", "osv_earliest_published_at": "2020-09-03T19:58:58Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:32:07Z" }, { "id": "react-server-native-2026-07-20", "display_name": "react-server-native", "campaign": null, "detection_source": "osv", "packages": [ { "package": "react-server-native", "ecosystem": "npm", "versions": [ "0.0.7" ], "osv_entries": [ { "osv_id": "GHSA-fwvp-x5gj-773j", "osv_published_at": "2020-09-01T20:33:10Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:05:13Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:05:13Z", "osv_earliest_published_at": "2020-09-01T20:33:10Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:32:15Z" }, { "id": "bs58chekc-2026-07-20", "display_name": "bs58chekc", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bs58chekc", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-fwvq-x4j9-hr5f", "osv_published_at": "2020-09-03T19:43:09Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:05:14Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:05:14Z", "osv_earliest_published_at": "2020-09-03T19:43:09Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:32:23Z" }, { "id": "uploader-plugin-2026-07-20", "display_name": "uploader-plugin", "campaign": null, "detection_source": "osv", "packages": [ { "package": "uploader-plugin", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "GHSA-fx6f-fpfv-5hmc", "osv_published_at": "2020-09-03T19:10:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:05:15Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:05:15Z", "osv_earliest_published_at": "2020-09-03T19:10:12Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:32:31Z" }, { "id": "buffer-yor-2026-07-20", "display_name": "buffer-yor", "campaign": null, "detection_source": "osv", "packages": [ { "package": "buffer-yor", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-g2c4-4m64-vxm3", "osv_published_at": "2020-09-03T22:15:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:05:17Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:05:17Z", "osv_earliest_published_at": "2020-09-03T22:15:25Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:32:39Z" }, { "id": "rc-2026-07-20", "display_name": "rc", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rc", "ecosystem": "npm", "versions": [ "1.2.9", "1.3.9", "2.3.9" ], "osv_entries": [ { "osv_id": "GHSA-g2q5-5433-rhrf", "osv_published_at": "2021-11-04T16:24:44Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:05:18Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:05:18Z", "osv_earliest_published_at": "2021-11-04T16:24:44Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:32:48Z" }, { "id": "js-shi3-2026-07-20", "display_name": "js-shi3", "campaign": null, "detection_source": "osv", "packages": [ { "package": "js-shi3", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-g37j-v5gh-g25c", "osv_published_at": "2020-09-03T23:06:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:05:19Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:05:19Z", "osv_earliest_published_at": "2020-09-03T23:06:48Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:32:57Z" }, { "id": "mogodb-core-2026-07-20", "display_name": "mogodb-core", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mogodb-core", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-g4m3-rpxr-h7vg", "osv_published_at": "2020-09-03T19:52:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:05:20Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:05:20Z", "osv_earliest_published_at": "2020-09-03T19:52:25Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:33:06Z" }, { "id": "hsf-clients-2026-07-20", "display_name": "hsf-clients", "campaign": null, "detection_source": "osv", "packages": [ { "package": "hsf-clients", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-g5q2-fcg9-j526", "osv_published_at": "2020-09-03T17:40:18Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:05:21Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:05:21Z", "osv_earliest_published_at": "2020-09-03T17:40:18Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:33:14Z" }, { "id": "sdfjghlkfjdshlkjdhsfg-2026-07-20", "display_name": "sdfjghlkfjdshlkjdhsfg", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sdfjghlkfjdshlkjdhsfg", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-gcfc-mgg3-8j2c", "osv_published_at": "2020-09-03T18:11:29Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:05:50Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:05:50Z", "osv_earliest_published_at": "2020-09-03T18:11:29Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:34:48Z" }, { "id": "jc-sha3-2026-07-20", "display_name": "jc-sha3", "campaign": null, "detection_source": "osv", "packages": [ { "package": "jc-sha3", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-gfj6-p24g-6hpm", "osv_published_at": "2020-09-03T22:55:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:05:51Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:05:51Z", "osv_earliest_published_at": "2020-09-03T22:55:06Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:34:57Z" }, { "id": "leetlog-2026-07-20", "display_name": "leetlog", "campaign": null, "detection_source": "osv", "packages": [ { "package": "leetlog", "ecosystem": "npm", "versions": [ "0.1.2" ], "osv_entries": [ { "osv_id": "GHSA-gfm8-g3vm-53jh", "osv_published_at": "2020-09-03T17:21:19Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:05:52Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:05:52Z", "osv_earliest_published_at": "2020-09-03T17:21:19Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:35:07Z" }, { "id": "node-fabric-2026-07-20", "display_name": "node-fabric", "campaign": null, "detection_source": "osv", "packages": [ { "package": "node-fabric", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "GHSA-gfv4-2vhm-486m", "osv_published_at": "2018-07-23T20:50:10Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:05:54Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:05:54Z", "osv_earliest_published_at": "2018-07-23T20:50:10Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:35:15Z" }, { "id": "leaflet-gpx-2026-07-20", "display_name": "leaflet-gpx", "campaign": null, "detection_source": "osv", "packages": [ { "package": "leaflet-gpx", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "GHSA-gjc9-932x-c59p", "osv_published_at": "2020-09-03T00:34:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:05:55Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:05:55Z", "osv_earliest_published_at": "2020-09-03T00:34:33Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:35:23Z" }, { "id": "ripmed160-2026-07-20", "display_name": "ripmed160", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ripmed160", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-gmjp-776j-2394", "osv_published_at": "2020-09-03T17:04:24Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:05:56Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:05:56Z", "osv_earliest_published_at": "2020-09-03T17:04:24Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:35:31Z" }, { "id": "buffer-xob-2026-07-20", "display_name": "buffer-xob", "campaign": null, "detection_source": "osv", "packages": [ { "package": "buffer-xob", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-gpg2-7r7j-4pm9", "osv_published_at": "2020-09-03T22:09:56Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:05:58Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:05:58Z", "osv_earliest_published_at": "2020-09-03T22:09:56Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:35:39Z" }, { "id": "juffer-xor-2026-07-20", "display_name": "juffer-xor", "campaign": null, "detection_source": "osv", "packages": [ { "package": "juffer-xor", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-gqq4-937c-2282", "osv_published_at": "2020-09-03T22:49:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:05:59Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:05:59Z", "osv_earliest_published_at": "2020-09-03T22:49:42Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:35:47Z" }, { "id": "tryghost-portal-2026-07-20", "display_name": "@tryghost/portal", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@tryghost/portal", "ecosystem": "npm", "versions": [ "2.29.1", "2.52.0" ], "osv_entries": [ { "osv_id": "GHSA-gv6q-2m97-882h", "osv_published_at": "2026-01-28T16:11:59Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:06:00Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:06:00Z", "osv_earliest_published_at": "2026-01-28T16:11:59Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:35:56Z" }, { "id": "bs85-2026-07-20", "display_name": "bs85", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bs85", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-gvm7-8fq3-qjj2", "osv_published_at": "2020-09-03T19:43:18Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:06:03Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:06:03Z", "osv_earliest_published_at": "2020-09-03T19:43:18Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:36:12Z" }, { "id": "log-symboles-2026-07-20", "display_name": "log-symboles", "campaign": null, "detection_source": "osv", "packages": [ { "package": "log-symboles", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-h232-fpqx-mqgr", "osv_published_at": "2020-09-03T21:03:15Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:06:04Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:06:04Z", "osv_earliest_published_at": "2020-09-03T21:03:15Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:36:20Z" }, { "id": "owl-orchard-apple-sunshine-2026-07-20", "display_name": "owl-orchard-apple-sunshine", "campaign": null, "detection_source": "osv", "packages": [ { "package": "owl-orchard-apple-sunshine", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-h24p-2c3m-5qf4", "osv_published_at": "2020-09-03T23:23:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:06:05Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:06:05Z", "osv_earliest_published_at": "2020-09-03T23:23:23Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:36:29Z" }, { "id": "buffer-xos-2026-07-20", "display_name": "buffer-xos", "campaign": null, "detection_source": "osv", "packages": [ { "package": "buffer-xos", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-h2j3-gg8w-4858", "osv_published_at": "2020-09-03T22:12:09Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:06:07Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:06:07Z", "osv_earliest_published_at": "2020-09-03T22:12:09Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:36:39Z" }, { "id": "ali-contributor-2026-07-20", "display_name": "ali-contributor", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ali-contributor", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-h3m2-h22h-695r", "osv_published_at": "2020-09-03T17:29:31Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:06:08Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:06:08Z", "osv_earliest_published_at": "2020-09-03T17:29:31Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:36:47Z" }, { "id": "text-qrcode-2026-07-20", "display_name": "text-qrcode", "campaign": null, "detection_source": "osv", "packages": [ { "package": "text-qrcode", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-h5vj-f7r9-w564", "osv_published_at": "2020-09-01T21:22:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:06:10Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:06:10Z", "osv_earliest_published_at": "2020-09-01T21:22:35Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:36:57Z" }, { "id": "js-sla3-2026-07-20", "display_name": "js-sla3", "campaign": null, "detection_source": "osv", "packages": [ { "package": "js-sla3", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-h6m3-cx24-9626", "osv_published_at": "2020-09-03T23:11:45Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:06:11Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:06:11Z", "osv_earliest_published_at": "2020-09-03T23:11:45Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:37:07Z" }, { "id": "blingjs-2026-07-20", "display_name": "blingjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "blingjs", "ecosystem": "npm", "versions": [ "0.0.4" ], "osv_entries": [ { "osv_id": "GHSA-hfc6-79wv-5hpw", "osv_published_at": "2020-09-01T19:48:13Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:06:13Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:06:13Z", "osv_earliest_published_at": "2020-09-01T19:48:13Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:37:17Z" }, { "id": "wbe3-2026-07-20", "display_name": "wbe3", "campaign": null, "detection_source": "osv", "packages": [ { "package": "wbe3", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-hg7w-2pf7-mxm2", "osv_published_at": "2020-09-03T17:02:31Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:06:15Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:06:15Z", "osv_earliest_published_at": "2020-09-03T17:02:31Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:37:27Z" }, { "id": "coinstrng-2026-07-20", "display_name": "coinstrng", "campaign": null, "detection_source": "osv", "packages": [ { "package": "coinstrng", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-hj5w-xgw9-w4rj", "osv_published_at": "2020-09-03T19:41:44Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:06:16Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:06:16Z", "osv_earliest_published_at": "2020-09-03T19:41:44Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:37:36Z" }, { "id": "lodahs-2026-07-20", "display_name": "lodahs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "lodahs", "ecosystem": "npm", "versions": [ "0.0.1" ], "osv_entries": [ { "osv_id": "GHSA-hm6q-r2jc-cpqh", "osv_published_at": "2019-12-16T19:29:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:06:17Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:06:17Z", "osv_earliest_published_at": "2019-12-16T19:29:33Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:37:44Z" }, { "id": "js-sha7-2026-07-20", "display_name": "js-sha7", "campaign": null, "detection_source": "osv", "packages": [ { "package": "js-sha7", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-hvgc-mggg-pxr2", "osv_published_at": "2020-09-03T23:02:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:06:18Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:06:18Z", "osv_earliest_published_at": "2020-09-03T23:02:33Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:37:54Z" }, { "id": "bictoinjs-lib-2026-07-20", "display_name": "bictoinjs-lib", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bictoinjs-lib", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-hwh3-fhf6-73x9", "osv_published_at": "2020-09-04T15:36:09Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:06:19Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:06:19Z", "osv_earliest_published_at": "2020-09-04T15:36:09Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:38:02Z" }, { "id": "cross-env-js-2026-07-20", "display_name": "cross-env.js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cross-env.js", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-hwhq-3hrj-v6v5", "osv_published_at": "2020-09-01T19:00:54Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:06:20Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:06:20Z", "osv_earliest_published_at": "2020-09-01T19:00:54Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:38:10Z" }, { "id": "eslint-config-eslint-2026-07-20", "display_name": "eslint-config-eslint", "campaign": null, "detection_source": "osv", "packages": [ { "package": "eslint-config-eslint", "ecosystem": "npm", "versions": [ "5.0.2" ], "osv_entries": [ { "osv_id": "GHSA-hxxf-q3w9-4xgw", "osv_published_at": "2018-07-12T19:52:02Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:06:22Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:06:22Z", "osv_earliest_published_at": "2018-07-12T19:52:02Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:38:18Z" }, { "id": "eslint-scope-2026-07-20", "display_name": "eslint-scope", "campaign": null, "detection_source": "osv", "packages": [ { "package": "eslint-scope", "ecosystem": "npm", "versions": [ "3.7.2" ], "osv_entries": [ { "osv_id": "GHSA-hxxf-q3w9-4xgw", "osv_published_at": "2018-07-12T19:52:02Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:06:23Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:06:23Z", "osv_earliest_published_at": "2018-07-12T19:52:02Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:38:26Z" }, { "id": "coffe-script-2026-07-20", "display_name": "coffe-script", "campaign": null, "detection_source": "osv", "packages": [ { "package": "coffe-script", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "GHSA-j49g-mp79-5vm5", "osv_published_at": "2018-08-06T20:06:29Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:06:24Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:06:24Z", "osv_earliest_published_at": "2018-08-06T20:06:29Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:38:37Z" }, { "id": "pensi-scheduler-2026-07-20", "display_name": "pensi-scheduler", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pensi-scheduler", "ecosystem": "npm", "versions": [ "1.1.3" ], "osv_entries": [ { "osv_id": "GHSA-j4ch-mw66-xmqv", "osv_published_at": "2020-09-03T19:16:44Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:06:25Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:06:25Z", "osv_earliest_published_at": "2020-09-03T19:16:44Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:38:45Z" }, { "id": "anthropic-ai-claude-agent-sdk-2026-07-20", "display_name": "@anthropic-ai/claude-agent-sdk", "campaign": "anthropic-ai", "detection_source": "npm_registry", "packages": [ { "package": "@anthropic-ai/claude-agent-sdk", "ecosystem": "npm", "versions": [ "0.2.88" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:06:54Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:06:54Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40anthropic-ai%2Fclaude-agent-sdk", "ledger_commit_at": "2026-07-20T03:38:55Z" }, { "id": "anthropic-ai-claude-code-2026-07-20", "display_name": "@anthropic-ai/claude-code", "campaign": "anthropic-ai", "detection_source": "npm_registry", "packages": [ { "package": "@anthropic-ai/claude-code", "ecosystem": "npm", "versions": [ "2.1.88" ], "osv_entries": [ { "osv_id": "GHSA-jh7p-qr78-84p7", "osv_published_at": "2026-01-21T01:00:31Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:06:55Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:06:55Z", "osv_earliest_published_at": "2026-01-21T01:00:31Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40anthropic-ai%2Fclaude-code", "ledger_commit_at": "2026-07-20T03:42:51Z" }, { "id": "browserbasehq-stagehand-2026-07-20", "display_name": "@browserbasehq/stagehand", "campaign": "anthropic-ai", "detection_source": "npm_registry", "packages": [ { "package": "@browserbasehq/stagehand", "ecosystem": "npm", "versions": [ "3.0.4" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:07:00Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:07:00Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40browserbasehq%2Fstagehand", "ledger_commit_at": "2026-07-20T03:39:07Z" }, { "id": "larksuite-cli-2026-07-20", "display_name": "@larksuite/cli", "campaign": "anthropic-ai", "detection_source": "npm_registry", "packages": [ { "package": "@larksuite/cli", "ecosystem": "npm", "versions": [ "0.0.2", "0.0.3", "0.0.4" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:07:08Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:07:08Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40larksuite%2Fcli", "ledger_commit_at": "2026-07-20T03:39:14Z" }, { "id": "mastra-ai-sdk-2026-07-20", "display_name": "@mastra/ai-sdk", "campaign": "anthropic-ai", "detection_source": "npm_registry", "packages": [ { "package": "@mastra/ai-sdk", "ecosystem": "npm", "versions": [ "1.4.6" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:07:09Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:07:09Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40mastra%2Fai-sdk", "ledger_commit_at": "2026-07-20T03:39:21Z" }, { "id": "mastra-core-2026-07-20", "display_name": "@mastra/core", "campaign": "anthropic-ai", "detection_source": "npm_registry", "packages": [ { "package": "@mastra/core", "ecosystem": "npm", "versions": [ "1.42.1" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:07:10Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:07:10Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40mastra%2Fcore", "ledger_commit_at": "2026-07-20T03:39:27Z" }, { "id": "mastra-schema-compat-2026-07-20", "display_name": "@mastra/schema-compat", "campaign": "anthropic-ai", "detection_source": "npm_registry", "packages": [ { "package": "@mastra/schema-compat", "ecosystem": "npm", "versions": [ "1.2.12" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:07:11Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:07:11Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40mastra%2Fschema-compat", "ledger_commit_at": "2026-07-20T03:39:34Z" }, { "id": "mimo-ai-mimocode-windows-x64-2026-07-20", "display_name": "@mimo-ai/mimocode-windows-x64", "campaign": "anthropic-ai", "detection_source": "npm_registry", "packages": [ { "package": "@mimo-ai/mimocode-windows-x64", "ecosystem": "npm", "versions": [ "0.1.0", "0.1.0-preview.1", "0.1.1-preview.0", "0.1.1-preview.1" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:07:12Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:07:12Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40mimo-ai%2Fmimocode-windows-x64", "ledger_commit_at": "2026-07-20T03:39:40Z" }, { "id": "parallel-web-ai-sdk-tools-2026-07-20", "display_name": "@parallel-web/ai-sdk-tools", "campaign": "anthropic-ai", "detection_source": "npm_registry", "packages": [ { "package": "@parallel-web/ai-sdk-tools", "ecosystem": "npm", "versions": [ "0.1.1-canary.80bf7f3" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:07:15Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:07:15Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40parallel-web%2Fai-sdk-tools", "ledger_commit_at": "2026-07-20T03:39:46Z" }, { "id": "posthog-ai-2026-07-20", "display_name": "@posthog/ai", "campaign": "anthropic-ai", "detection_source": "npm_registry", "packages": [ { "package": "@posthog/ai", "ecosystem": "npm", "versions": [ "7.1.2" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:07:16Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:07:16Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40posthog%2Fai", "ledger_commit_at": "2026-07-20T03:39:53Z" }, { "id": "strands-agents-sdk-2026-07-20", "display_name": "@strands-agents/sdk", "campaign": "anthropic-ai", "detection_source": "npm_registry", "packages": [ { "package": "@strands-agents/sdk", "ecosystem": "npm", "versions": [ "0.0.3", "0.0.4" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:07:19Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:07:19Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40strands-agents%2Fsdk", "ledger_commit_at": "2026-07-20T03:39:59Z" }, { "id": "ai-retry-2026-07-20", "display_name": "ai-retry", "campaign": "anthropic-ai", "detection_source": "npm_registry", "packages": [ { "package": "ai-retry", "ecosystem": "npm", "versions": [ "0.0.0", "0.0.1-alpha.5" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:07:24Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:07:24Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/ai-retry", "ledger_commit_at": "2026-07-20T03:40:05Z" }, { "id": "ai-sdk-ollama-2026-07-20", "display_name": "ai-sdk-ollama", "campaign": "anthropic-ai", "detection_source": "npm_registry", "packages": [ { "package": "ai-sdk-ollama", "ecosystem": "npm", "versions": [ "0.13.1", "1.1.1", "2.2.1", "3.8.5" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:07:25Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:07:25Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/ai-sdk-ollama", "ledger_commit_at": "2026-07-20T03:40:12Z" }, { "id": "mastra-2026-07-20", "display_name": "mastra", "campaign": "anthropic-ai", "detection_source": "npm_registry", "packages": [ { "package": "mastra", "ecosystem": "npm", "versions": [ "1.13.1" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:07:27Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:07:27Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/mastra", "ledger_commit_at": "2026-07-20T03:40:19Z" }, { "id": "venice-ai-sdk-provider-2026-07-20", "display_name": "venice-ai-sdk-provider", "campaign": "anthropic-ai", "detection_source": "npm_registry", "packages": [ { "package": "venice-ai-sdk-provider", "ecosystem": "npm", "versions": [ "1.1.1", "1.1.15", "1.1.2", "1.1.3", "1.1.4" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:07:32Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:07:32Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/venice-ai-sdk-provider", "ledger_commit_at": "2026-07-20T03:40:25Z" }, { "id": "z-ai-web-dev-sdk-2026-07-20", "display_name": "z-ai-web-dev-sdk", "campaign": "anthropic-ai", "detection_source": "npm_registry", "packages": [ { "package": "z-ai-web-dev-sdk", "ecosystem": "npm", "versions": [ "0.0.12-beta.3", "0.0.12-beta.4" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:07:33Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:07:33Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/z-ai-web-dev-sdk", "ledger_commit_at": "2026-07-20T03:40:31Z" }, { "id": "antd-cloud-2026-07-20", "display_name": "antd-cloud", "campaign": null, "detection_source": "osv", "packages": [ { "package": "antd-cloud", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-j4vm-hg8g-g9qv", "osv_published_at": "2020-09-03T17:33:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:07:33Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:07:33Z", "osv_earliest_published_at": "2020-09-03T17:33:50Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:40:37Z" }, { "id": "dictum-js-2026-07-20", "display_name": "dictum.js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "dictum.js", "ecosystem": "npm", "versions": [ "1.0.5" ], "osv_entries": [ { "osv_id": "GHSA-j5jc-jf8f-86q7", "osv_published_at": "2020-09-01T20:38:30Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:07:35Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:07:35Z", "osv_earliest_published_at": "2020-09-01T20:38:30Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:40:45Z" }, { "id": "jekyll-for-github-projects-2026-07-20", "display_name": "jekyll-for-github-projects", "campaign": null, "detection_source": "osv", "packages": [ { "package": "jekyll-for-github-projects", "ecosystem": "npm", "versions": [ "0.2.12" ], "osv_entries": [ { "osv_id": "GHSA-j5qg-46p9-w2rp", "osv_published_at": "2020-09-03T00:33:32Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:07:36Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:07:36Z", "osv_earliest_published_at": "2020-09-03T00:33:32Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:40:54Z" }, { "id": "ns-sha3-2026-07-20", "display_name": "ns-sha3", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ns-sha3", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-j67m-jg9p-ppg4", "osv_published_at": "2020-09-03T23:18:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:07:37Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:07:37Z", "osv_earliest_published_at": "2020-09-03T23:18:05Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:41:02Z" }, { "id": "node-openssl-2026-07-20", "display_name": "node-openssl", "campaign": null, "detection_source": "osv", "packages": [ { "package": "node-openssl", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "GHSA-j68r-23hj-xf9c", "osv_published_at": "2018-10-10T17:28:14Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:07:38Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:07:38Z", "osv_earliest_published_at": "2018-10-10T17:28:14Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:41:10Z" }, { "id": "buffer-xoz-2026-07-20", "display_name": "buffer-xoz", "campaign": null, "detection_source": "osv", "packages": [ { "package": "buffer-xoz", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-j6x7-42x2-hpcf", "osv_published_at": "2020-09-03T22:14:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:07:39Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:07:39Z", "osv_earliest_published_at": "2020-09-03T22:14:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:41:18Z" }, { "id": "nodemailer-js-2026-07-20", "display_name": "nodemailer.js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nodemailer.js", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "GHSA-j866-8vxx-27hx", "osv_published_at": "2018-08-29T23:43:53Z" } ] }, { "package": "nodemailer-js", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "GHSA-xh56-3f5w-9h25", "osv_published_at": "2018-08-29T23:40:01Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:07:40Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:07:40Z", "osv_earliest_published_at": "2018-08-29T23:40:01Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T04:00:19Z" }, { "id": "serializes-2026-07-20", "display_name": "serializes", "campaign": null, "detection_source": "osv", "packages": [ { "package": "serializes", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-j899-348x-h3rq", "osv_published_at": "2020-09-03T19:57:54Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:07:41Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:07:41Z", "osv_earliest_published_at": "2020-09-03T19:57:54Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:41:34Z" }, { "id": "retcodelog-2026-07-20", "display_name": "retcodelog", "campaign": null, "detection_source": "osv", "packages": [ { "package": "retcodelog", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-j8hw-49gg-vq3w", "osv_published_at": "2020-09-03T17:45:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:07:43Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:07:43Z", "osv_earliest_published_at": "2020-09-03T17:45:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:41:43Z" }, { "id": "mogobd-2026-07-20", "display_name": "mogobd", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mogobd", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-jchg-g94r-64qg", "osv_published_at": "2020-09-03T19:50:10Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:07:44Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:07:44Z", "osv_earliest_published_at": "2020-09-03T19:50:10Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:41:53Z" }, { "id": "body-parse-xml-2026-07-20", "display_name": "body-parse-xml", "campaign": null, "detection_source": "osv", "packages": [ { "package": "body-parse-xml", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-jcmh-9fvm-j39w", "osv_published_at": "2020-09-03T19:42:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:07:45Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:07:45Z", "osv_earliest_published_at": "2020-09-03T19:42:23Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:42:01Z" }, { "id": "iie-viz-2026-07-20", "display_name": "iie-viz", "campaign": null, "detection_source": "osv", "packages": [ { "package": "iie-viz", "ecosystem": "npm", "versions": [ "1.0.4" ], "osv_entries": [ { "osv_id": "GHSA-jf55-rgpx-p6rx", "osv_published_at": "2020-09-03T19:12:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:07:47Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:07:47Z", "osv_earliest_published_at": "2020-09-03T19:12:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:42:12Z" }, { "id": "cage-js-2026-07-20", "display_name": "cage-js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cage-js", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-jf8x-wg7f-p3w8", "osv_published_at": "2020-09-03T18:22:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:07:48Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:07:48Z", "osv_earliest_published_at": "2020-09-03T18:22:33Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:42:20Z" }, { "id": "alico-2026-07-20", "display_name": "alico", "campaign": null, "detection_source": "osv", "packages": [ { "package": "alico", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-jfx5-7mr2-g8hg", "osv_published_at": "2020-09-03T17:31:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:07:49Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:07:49Z", "osv_earliest_published_at": "2020-09-03T17:31:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:42:29Z" }, { "id": "js-sxa3-2026-07-20", "display_name": "js-sxa3", "campaign": null, "detection_source": "osv", "packages": [ { "package": "js-sxa3", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-jh67-3wqw-cvhr", "osv_published_at": "2020-09-03T23:13:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:07:52Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:07:52Z", "osv_earliest_published_at": "2020-09-03T23:13:52Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:42:43Z" }, { "id": "anarchy-2026-07-20", "display_name": "anarchy", "campaign": null, "detection_source": "osv", "packages": [ { "package": "anarchy", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-jjhg-qw5v-r8xx", "osv_published_at": "2020-09-03T19:01:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:07:54Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:07:54Z", "osv_earliest_published_at": "2020-09-03T19:01:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:42:57Z" }, { "id": "jquery-js-2026-07-20", "display_name": "jquery.js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "jquery.js", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "GHSA-jp27-cwp2-5qqr", "osv_published_at": "2018-07-23T20:54:24Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:07:55Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:07:55Z", "osv_earliest_published_at": "2018-07-23T20:54:24Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:43:05Z" }, { "id": "buffer-xop-2026-07-20", "display_name": "buffer-xop", "campaign": null, "detection_source": "osv", "packages": [ { "package": "buffer-xop", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-jqjg-v355-hr9q", "osv_published_at": "2020-09-03T22:11:02Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:07:57Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:07:57Z", "osv_earliest_published_at": "2020-09-03T22:11:02Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:43:18Z" }, { "id": "bictoind-rpc-2026-07-20", "display_name": "bictoind-rpc", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bictoind-rpc", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-jqvv-r4w3-8f7w", "osv_published_at": "2020-09-04T15:35:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:07:58Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:07:58Z", "osv_earliest_published_at": "2020-09-04T15:35:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:43:27Z" }, { "id": "b5ffer-xor-2026-07-20", "display_name": "b5ffer-xor", "campaign": null, "detection_source": "osv", "packages": [ { "package": "b5ffer-xor", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-jvfv-jhw9-jmpp", "osv_published_at": "2020-09-03T21:23:09Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:07:59Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:07:59Z", "osv_earliest_published_at": "2020-09-03T21:23:09Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:43:36Z" }, { "id": "load-from-cwd-or-npm-2026-07-20", "display_name": "load-from-cwd-or-npm", "campaign": null, "detection_source": "osv", "packages": [ { "package": "load-from-cwd-or-npm", "ecosystem": "npm", "versions": [ "3.0.2" ], "osv_entries": [ { "osv_id": "GHSA-jxf5-7x3j-8j9m", "osv_published_at": "2020-09-03T18:19:14Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:08:01Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:08:01Z", "osv_earliest_published_at": "2020-09-03T18:19:14Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:43:46Z" }, { "id": "awesome-react-utility-2026-07-20", "display_name": "awesome_react_utility", "campaign": null, "detection_source": "osv", "packages": [ { "package": "awesome_react_utility", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "GHSA-m25q-fwg4-9v2p", "osv_published_at": "2020-09-01T19:47:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:08:02Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:08:02Z", "osv_earliest_published_at": "2020-09-01T19:47:07Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:43:54Z" }, { "id": "crytpo-js-2026-07-20", "display_name": "crytpo-js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "crytpo-js", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-m4fq-xh7w-jhfm", "osv_published_at": "2020-09-03T19:39:46Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:08:04Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:08:04Z", "osv_earliest_published_at": "2020-09-03T19:39:46Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:44:07Z" }, { "id": "sailclothjs-2026-07-20", "display_name": "sailclothjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sailclothjs", "ecosystem": "npm", "versions": [ "1.2.6" ], "osv_entries": [ { "osv_id": "GHSA-m5pf-5894-jmx7", "osv_published_at": "2020-09-03T19:08:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:08:06Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:08:06Z", "osv_earliest_published_at": "2020-09-03T19:08:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:44:17Z" }, { "id": "wallet-address-vaildator-2026-07-20", "display_name": "wallet-address-vaildator", "campaign": null, "detection_source": "osv", "packages": [ { "package": "wallet-address-vaildator", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-m6q2-9pfm-2wvr", "osv_published_at": "2020-09-03T17:02:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:08:08Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:08:08Z", "osv_earliest_published_at": "2020-09-03T17:02:49Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:44:29Z" }, { "id": "cofeescript-2026-07-20", "display_name": "cofeescript", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cofeescript", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "GHSA-m6wh-m8m8-6xx5", "osv_published_at": "2018-08-06T20:05:28Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:08:09Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:08:09Z", "osv_earliest_published_at": "2018-08-06T20:05:28Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:44:37Z" }, { "id": "signqle-2026-07-20", "display_name": "signqle", "campaign": null, "detection_source": "osv", "packages": [ { "package": "signqle", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-m794-qv59-gj7c", "osv_published_at": "2020-09-03T17:03:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:08:10Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:08:10Z", "osv_earliest_published_at": "2020-09-03T17:03:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:44:46Z" }, { "id": "libubx-2026-07-20", "display_name": "libubx", "campaign": null, "detection_source": "osv", "packages": [ { "package": "libubx", "ecosystem": "npm", "versions": [ "1.0.3" ], "osv_entries": [ { "osv_id": "GHSA-m7xv-7p93-g6q8", "osv_published_at": "2020-09-03T00:35:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:08:11Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:08:11Z", "osv_earliest_published_at": "2020-09-03T00:35:35Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:44:53Z" }, { "id": "eslint-config-airbnb-standard-2026-07-20", "display_name": "eslint-config-airbnb-standard", "campaign": null, "detection_source": "osv", "packages": [ { "package": "eslint-config-airbnb-standard", "ecosystem": "npm", "versions": [ "2.0.0" ], "osv_entries": [ { "osv_id": "GHSA-m852-866j-69j8", "osv_published_at": "2020-09-01T20:47:01Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:08:12Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:08:12Z", "osv_earliest_published_at": "2020-09-01T20:47:01Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:45:02Z" }, { "id": "maybemaliciouspackage-2026-07-20", "display_name": "maybemaliciouspackage", "campaign": null, "detection_source": "osv", "packages": [ { "package": "maybemaliciouspackage", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-m9r7-q9fc-qwx5", "osv_published_at": "2020-09-03T17:22:24Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:08:14Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:08:14Z", "osv_earliest_published_at": "2020-09-03T17:22:24Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:45:12Z" }, { "id": "coffescript-2026-07-20", "display_name": "coffescript", "campaign": null, "detection_source": "osv", "packages": [ { "package": "coffescript", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "GHSA-mc9x-v9xg-25pm", "osv_published_at": "2018-08-06T20:12:54Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:08:15Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:08:15Z", "osv_earliest_published_at": "2018-08-06T20:12:54Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:45:20Z" }, { "id": "loadyaml-2026-07-20", "display_name": "loadyaml", "campaign": null, "detection_source": "osv", "packages": [ { "package": "loadyaml", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "GHSA-mfc2-93pr-jf92", "osv_published_at": "2020-10-01T17:10:15Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:08:16Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:08:16Z", "osv_earliest_published_at": "2020-10-01T17:10:15Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:45:27Z" }, { "id": "bsae-x-2026-07-20", "display_name": "bsae-x", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bsae-x", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-mgff-xpg3-3gwc", "osv_published_at": "2020-09-03T19:42:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:08:17Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:08:17Z", "osv_earliest_published_at": "2020-09-03T19:42:25Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:45:36Z" }, { "id": "event-stream-2026-07-20", "display_name": "event-stream", "campaign": null, "detection_source": "osv", "packages": [ { "package": "event-stream", "ecosystem": "npm", "versions": [ "3.3.6" ], "osv_entries": [ { "osv_id": "GHSA-mh6f-8j2x-4483", "osv_published_at": "2018-11-26T23:58:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:08:18Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:08:18Z", "osv_earliest_published_at": "2018-11-26T23:58:21Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:45:44Z" }, { "id": "colne-2026-07-20", "display_name": "colne", "campaign": null, "detection_source": "osv", "packages": [ { "package": "colne", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-mhxg-pr3j-v9gr", "osv_published_at": "2020-09-03T19:41:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:08:20Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:08:20Z", "osv_earliest_published_at": "2020-09-03T19:41:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:45:54Z" }, { "id": "buffer-xgr-2026-07-20", "display_name": "buffer-xgr", "campaign": null, "detection_source": "osv", "packages": [ { "package": "buffer-xgr", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-mp55-2274-4pj8", "osv_published_at": "2020-09-03T21:54:09Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:08:22Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:08:22Z", "osv_earliest_published_at": "2020-09-03T21:54:09Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:46:04Z" }, { "id": "midway-dataproxy-2026-07-20", "display_name": "midway-dataproxy", "campaign": null, "detection_source": "osv", "packages": [ { "package": "midway-dataproxy", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-mq9h-cwc2-6j5r", "osv_published_at": "2020-09-03T17:42:27Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:08:23Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:08:23Z", "osv_earliest_published_at": "2020-09-03T17:42:27Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:46:12Z" }, { "id": "geoheat-2026-07-20", "display_name": "geoheat", "campaign": null, "detection_source": "osv", "packages": [ { "package": "geoheat", "ecosystem": "npm", "versions": [ "1.3.2" ], "osv_entries": [ { "osv_id": "GHSA-p32g-242c-76h3", "osv_published_at": "2020-09-11T21:14:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:08:25Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:08:25Z", "osv_earliest_published_at": "2020-09-11T21:14:49Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:46:25Z" }, { "id": "j3-sha3-2026-07-20", "display_name": "j3-sha3", "campaign": null, "detection_source": "osv", "packages": [ { "package": "j3-sha3", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-p3jx-g34v-q56j", "osv_published_at": "2020-09-03T22:54:02Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:08:27Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:08:27Z", "osv_earliest_published_at": "2020-09-03T22:54:02Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:46:37Z" }, { "id": "bitcionjslib-2026-07-20", "display_name": "bitcionjslib", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bitcionjslib", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-p4mf-4qvh-w8g5", "osv_published_at": "2020-09-04T15:41:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:08:28Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:08:28Z", "osv_earliest_published_at": "2020-09-04T15:41:42Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:46:45Z" }, { "id": "bmap-2026-07-20", "display_name": "bmap", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bmap", "ecosystem": "npm", "versions": [ "1.0.3" ], "osv_entries": [ { "osv_id": "GHSA-p59g-6cqr-m73w", "osv_published_at": "2020-09-03T20:45:27Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:08:29Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:08:29Z", "osv_earliest_published_at": "2020-09-03T20:45:27Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:46:54Z" }, { "id": "siganle-2026-07-20", "display_name": "siganle", "campaign": null, "detection_source": "osv", "packages": [ { "package": "siganle", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-p5p2-rhc3-wmf3", "osv_published_at": "2020-09-03T17:03:31Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:08:31Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:08:31Z", "osv_earliest_published_at": "2020-09-03T17:03:31Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:47:01Z" }, { "id": "evil-package-2026-07-20", "display_name": "evil-package", "campaign": null, "detection_source": "osv", "packages": [ { "package": "evil-package", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-p62r-jf56-h429", "osv_published_at": "2020-09-03T20:29:58Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:08:32Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:08:32Z", "osv_earliest_published_at": "2020-09-03T20:29:58Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:47:10Z" }, { "id": "buffur-xor-2026-07-20", "display_name": "buffur-xor", "campaign": null, "detection_source": "osv", "packages": [ { "package": "buffur-xor", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-p7qp-3fh7-pv4p", "osv_published_at": "2020-09-03T22:24:04Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:08:33Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:08:33Z", "osv_earliest_published_at": "2020-09-03T22:24:04Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:47:17Z" }, { "id": "scroool-2026-07-20", "display_name": "scroool", "campaign": null, "detection_source": "osv", "packages": [ { "package": "scroool", "ecosystem": "npm", "versions": [ "0.1.7" ], "osv_entries": [ { "osv_id": "GHSA-p7w2-mc6m-mfx2", "osv_published_at": "2020-09-11T21:22:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:08:34Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:08:34Z", "osv_earliest_published_at": "2020-09-11T21:22:25Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:47:26Z" }, { "id": "portionfatty12-2026-07-20", "display_name": "portionfatty12", "campaign": null, "detection_source": "osv", "packages": [ { "package": "portionfatty12", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-p8fm-w787-x6x3", "osv_published_at": "2020-09-02T15:50:28Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:08:35Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:08:35Z", "osv_earliest_published_at": "2020-09-02T15:50:28Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:47:34Z" }, { "id": "bufber-xor-2026-07-20", "display_name": "bufber-xor", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bufber-xor", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-p9g3-vpvp-hcj5", "osv_published_at": "2020-09-03T21:41:55Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:08:36Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:08:36Z", "osv_earliest_published_at": "2020-09-03T21:41:55Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:47:42Z" }, { "id": "wallet-address-validtaor-2026-07-20", "display_name": "wallet-address-validtaor", "campaign": null, "detection_source": "osv", "packages": [ { "package": "wallet-address-validtaor", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-pc7q-c837-3wjq", "osv_published_at": "2020-09-03T17:02:58Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:08:37Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:08:37Z", "osv_earliest_published_at": "2020-09-03T17:02:58Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:47:50Z" }, { "id": "fangrong-xoc-2026-07-20", "display_name": "@fangrong/xoc", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@fangrong/xoc", "ecosystem": "npm", "versions": [ "1.0.6" ], "osv_entries": [ { "osv_id": "GHSA-pjxp-f379-6284", "osv_published_at": "2020-09-03T19:13:27Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:08:41Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:08:41Z", "osv_earliest_published_at": "2020-09-03T19:13:27Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:48:10Z" }, { "id": "bqffer-xor-2026-07-20", "display_name": "bqffer-xor", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bqffer-xor", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-pxqp-mv67-g528", "osv_published_at": "2020-09-03T21:38:34Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:08:47Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:08:47Z", "osv_earliest_published_at": "2020-09-03T21:38:34Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:48:36Z" }, { "id": "js-regular-2026-07-20", "display_name": "js-regular", "campaign": null, "detection_source": "osv", "packages": [ { "package": "js-regular", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-qcc9-q247-3m2m", "osv_published_at": "2020-09-03T19:46:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:08:50Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:08:50Z", "osv_earliest_published_at": "2020-09-03T19:46:49Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:48:49Z" }, { "id": "matrix-react-sdk-2026-07-20", "display_name": "matrix-react-sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "matrix-react-sdk", "ecosystem": "npm", "versions": [ "3.18.0" ], "osv_entries": [ { "osv_id": "GHSA-qcvh-p9jq-wp8v", "osv_published_at": "2024-10-15T18:11:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:08:51Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:08:51Z", "osv_earliest_published_at": "2024-10-15T18:11:51Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:48:58Z" }, { "id": "deasyncp-2026-07-20", "display_name": "deasyncp", "campaign": null, "detection_source": "osv", "packages": [ { "package": "deasyncp", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-qfc9-x7gv-27jr", "osv_published_at": "2020-09-03T18:12:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:08:52Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:08:52Z", "osv_earliest_published_at": "2020-09-03T18:12:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:49:07Z" }, { "id": "metamask-sdk-2026-07-20", "display_name": "@metamask/sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@metamask/sdk", "ecosystem": "npm", "versions": [ "0.16.0" ], "osv_entries": [ { "osv_id": "GHSA-qj3p-xc97-xw74", "osv_published_at": "2025-09-15T13:55:56Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:08:54Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:08:54Z", "osv_earliest_published_at": "2025-09-15T13:55:56Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:49:19Z" }, { "id": "metamask-sdk-communication-layer-2026-07-20", "display_name": "@metamask/sdk-communication-layer", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@metamask/sdk-communication-layer", "ecosystem": "npm", "versions": [ "0.16.0" ], "osv_entries": [ { "osv_id": "GHSA-qj3p-xc97-xw74", "osv_published_at": "2025-09-15T13:55:56Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:08:56Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:08:56Z", "osv_earliest_published_at": "2025-09-15T13:55:56Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:49:29Z" }, { "id": "metamask-sdk-react-2026-07-20", "display_name": "@metamask/sdk-react", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@metamask/sdk-react", "ecosystem": "npm", "versions": [ "0.16.0" ], "osv_entries": [ { "osv_id": "GHSA-qj3p-xc97-xw74", "osv_published_at": "2025-09-15T13:55:56Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:08:58Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:08:58Z", "osv_earliest_published_at": "2025-09-15T13:55:56Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:49:38Z" }, { "id": "proxy-js-2026-07-20", "display_name": "proxy.js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "proxy.js", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "GHSA-qj73-v688-wqxf", "osv_published_at": "2018-08-29T23:19:13Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:08:59Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:08:59Z", "osv_earliest_published_at": "2018-08-29T23:19:13Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:49:46Z" }, { "id": "luna-mock-2026-07-20", "display_name": "luna-mock", "campaign": null, "detection_source": "osv", "packages": [ { "package": "luna-mock", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-qm4q-f956-fg64", "osv_published_at": "2020-09-03T17:39:13Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:09:00Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:09:00Z", "osv_earliest_published_at": "2020-09-03T17:39:13Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:49:55Z" }, { "id": "bitcionjs-2026-07-20", "display_name": "bitcionjs", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bitcionjs", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-qmgf-fp85-55gr", "osv_published_at": "2020-09-04T15:40:34Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:09:01Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:09:01Z", "osv_earliest_published_at": "2020-09-04T15:40:34Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:50:02Z" }, { "id": "d3-js-2026-07-20", "display_name": "d3.js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "d3.js", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "GHSA-qmjg-g86h-6rc9", "osv_published_at": "2018-07-23T21:00:28Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:09:03Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:09:03Z", "osv_earliest_published_at": "2018-07-23T21:00:28Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:50:10Z" }, { "id": "angular-material-sidenav-rnd-2026-07-20", "display_name": "angular-material-sidenav-rnd", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angular-material-sidenav-rnd", "ecosystem": "npm", "versions": [ "0.1.1" ], "osv_entries": [ { "osv_id": "GHSA-qmxf-fxq7-w59f", "osv_published_at": "2020-09-01T19:43:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:09:04Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:09:04Z", "osv_earliest_published_at": "2020-09-01T19:43:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:50:19Z" }, { "id": "babel-laoder-2026-07-20", "display_name": "babel-laoder", "campaign": null, "detection_source": "osv", "packages": [ { "package": "babel-laoder", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-qp6m-jqfr-2f7v", "osv_published_at": "2020-09-04T15:27:11Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:09:05Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:09:05Z", "osv_earliest_published_at": "2020-09-04T15:27:11Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:50:27Z" }, { "id": "discord-fix-2026-07-20", "display_name": "discord-fix", "campaign": null, "detection_source": "osv", "packages": [ { "package": "discord-fix", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-qv2g-99x4-45x6", "osv_published_at": "2021-01-29T18:12:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:09:07Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:09:07Z", "osv_earliest_published_at": "2021-01-29T18:12:07Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:50:39Z" }, { "id": "whiskeysockets-baileys-2026-07-20", "display_name": "@whiskeysockets/baileys", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@whiskeysockets/baileys", "ecosystem": "npm", "versions": [ "7.0.0-rc.1" ], "osv_entries": [ { "osv_id": "GHSA-qvv5-jq5g-4cgg", "osv_published_at": "2026-06-10T19:33:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:09:08Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:09:08Z", "osv_earliest_published_at": "2026-06-10T19:33:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:50:50Z" }, { "id": "baileys-2026-07-20", "display_name": "baileys", "campaign": null, "detection_source": "osv", "packages": [ { "package": "baileys", "ecosystem": "npm", "versions": [ "7.0.0-rc.1" ], "osv_entries": [ { "osv_id": "GHSA-qvv5-jq5g-4cgg", "osv_published_at": "2026-06-10T19:33:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:09:10Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:09:10Z", "osv_earliest_published_at": "2026-06-10T19:33:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:50:58Z" }, { "id": "dhkey-2026-07-20", "display_name": "dhkey", "campaign": null, "detection_source": "osv", "packages": [ { "package": "dhkey", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-qxrj-x7rm-2h49", "osv_published_at": "2020-09-03T17:05:59Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:09:11Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:09:11Z", "osv_earliest_published_at": "2020-09-03T17:05:59Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:51:07Z" }, { "id": "axios-http-2026-07-20", "display_name": "axios-http", "campaign": null, "detection_source": "osv", "packages": [ { "package": "axios-http", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-r2rg-683g-ff96", "osv_published_at": "2020-09-03T19:40:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:09:12Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:09:12Z", "osv_earliest_published_at": "2020-09-03T19:40:12Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:51:15Z" }, { "id": "arsenic-tabasco-cyborg-peanut-butter-2026-07-20", "display_name": "arsenic-tabasco-cyborg-peanut-butter", "campaign": null, "detection_source": "osv", "packages": [ { "package": "arsenic-tabasco-cyborg-peanut-butter", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-r742-7j4h-hjr8", "osv_published_at": "2020-09-03T23:27:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:09:13Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:09:13Z", "osv_earliest_published_at": "2020-09-03T23:27:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:51:24Z" }, { "id": "commandre-2026-07-20", "display_name": "commandre", "campaign": null, "detection_source": "osv", "packages": [ { "package": "commandre", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-r8hx-3qx6-hxq9", "osv_published_at": "2020-09-03T19:41:14Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:09:15Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:09:15Z", "osv_earliest_published_at": "2020-09-03T19:41:14Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:51:34Z" }, { "id": "buffgr-xor-2026-07-20", "display_name": "buffgr-xor", "campaign": null, "detection_source": "osv", "packages": [ { "package": "buffgr-xor", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-r9cj-xj33-4q42", "osv_published_at": "2020-09-03T22:21:54Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:09:16Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:09:16Z", "osv_earliest_published_at": "2020-09-03T22:21:54Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:51:43Z" }, { "id": "alipayjsapi-2026-07-20", "display_name": "alipayjsapi", "campaign": null, "detection_source": "osv", "packages": [ { "package": "alipayjsapi", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-rjhc-w3fj-j6x9", "osv_published_at": "2020-09-03T17:32:45Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:09:18Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:09:18Z", "osv_earliest_published_at": "2020-09-03T17:32:45Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:51:55Z" }, { "id": "require-port-2026-07-20", "display_name": "require-port", "campaign": null, "detection_source": "osv", "packages": [ { "package": "require-port", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-rrvm-gqq8-q2wx", "osv_published_at": "2020-09-03T21:05:26Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:09:20Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:09:20Z", "osv_earliest_published_at": "2020-09-03T21:05:26Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:52:07Z" }, { "id": "bitcoimjs-lib-2026-07-20", "display_name": "bitcoimjs-lib", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bitcoimjs-lib", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-rv6q-p3x7-43fx", "osv_published_at": "2020-09-04T16:37:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:09:21Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:09:21Z", "osv_earliest_published_at": "2020-09-04T16:37:50Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:52:16Z" }, { "id": "buffer-xkr-2026-07-20", "display_name": "buffer-xkr", "campaign": null, "detection_source": "osv", "packages": [ { "package": "buffer-xkr", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-rw53-q8x7-ccx8", "osv_published_at": "2020-09-03T21:55:17Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:09:23Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:09:23Z", "osv_earliest_published_at": "2020-09-03T21:55:17Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:52:28Z" }, { "id": "riped160-2026-07-20", "display_name": "riped160", "campaign": null, "detection_source": "osv", "packages": [ { "package": "riped160", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-rwcq-qpm6-7867", "osv_published_at": "2020-09-03T17:04:32Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:09:24Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:09:24Z", "osv_earliest_published_at": "2020-09-03T17:04:32Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:52:36Z" }, { "id": "tkinter-2026-07-20", "display_name": "tkinter", "campaign": null, "detection_source": "osv", "packages": [ { "package": "tkinter", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-rwg6-3fmj-w4wx", "osv_published_at": "2018-11-01T14:47:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:09:25Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:09:25Z", "osv_earliest_published_at": "2018-11-01T14:47:21Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:52:45Z" }, { "id": "bitcoimd-rpc-2026-07-20", "display_name": "bitcoimd-rpc", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bitcoimd-rpc", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-rwmv-c7v8-v9vf", "osv_published_at": "2020-09-04T16:36:45Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:09:27Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:09:27Z", "osv_earliest_published_at": "2020-09-04T16:36:45Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:52:53Z" }, { "id": "pnpm-2026-07-20", "display_name": "pnpm", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pnpm", "ecosystem": "npm", "versions": [ "11.0.0" ], "osv_entries": [ { "osv_id": "GHSA-rxhj-4m44-96r4", "osv_published_at": "2026-06-26T22:59:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:09:28Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:09:28Z", "osv_earliest_published_at": "2026-06-26T22:59:48Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:53:01Z" }, { "id": "pyramid-proportion-2026-07-20", "display_name": "pyramid-proportion", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pyramid-proportion", "ecosystem": "npm", "versions": [ "1.0.5" ], "osv_entries": [ { "osv_id": "GHSA-v6vv-hhqc-6hh2", "osv_published_at": "2020-09-03T19:15:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:09:29Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:09:29Z", "osv_earliest_published_at": "2020-09-03T19:15:37Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:53:09Z" }, { "id": "fabric-js-2026-07-20", "display_name": "fabric-js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "fabric-js", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "GHSA-v73m-fjxv-w4rh", "osv_published_at": "2018-07-23T20:50:18Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:09:30Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:09:30Z", "osv_earliest_published_at": "2018-07-23T20:50:18Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:53:18Z" }, { "id": "bitcoin-osp-2026-07-20", "display_name": "bitcoin-osp", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bitcoin-osp", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-v8g7-9qv2-j865", "osv_published_at": "2020-09-04T16:38:55Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:09:31Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:09:31Z", "osv_earliest_published_at": "2020-09-04T16:38:55Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:53:26Z" }, { "id": "k0a-multer-2026-07-20", "display_name": "k0a_multer", "campaign": null, "detection_source": "osv", "packages": [ { "package": "k0a_multer", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-v95x-h953-x7fg", "osv_published_at": "2020-09-03T19:47:55Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:09:32Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:09:32Z", "osv_earliest_published_at": "2020-09-03T19:47:55Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:53:34Z" }, { "id": "js-qha3-2026-07-20", "display_name": "js-qha3", "campaign": null, "detection_source": "osv", "packages": [ { "package": "js-qha3", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-vf5m-q45w-8mh9", "osv_published_at": "2020-09-03T23:00:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:09:34Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:09:34Z", "osv_earliest_published_at": "2020-09-03T23:00:25Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:53:46Z" }, { "id": "bubfer-xor-2026-07-20", "display_name": "bubfer-xor", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bubfer-xor", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-vm67-mh96-95mq", "osv_published_at": "2020-09-03T21:40:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:09:36Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:09:36Z", "osv_earliest_published_at": "2020-09-03T21:40:48Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:53:56Z" }, { "id": "bb-builder-2026-07-20", "display_name": "bb-builder", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bb-builder", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-vm6v-w6q2-mrrq", "osv_published_at": "2020-09-03T19:20:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:09:37Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:09:37Z", "osv_earliest_published_at": "2020-09-03T19:20:05Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:54:04Z" }, { "id": "ember-cli-babe-2026-07-20", "display_name": "ember_cli_babe", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ember_cli_babe", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-vm7j-4rj6-mw2p", "osv_published_at": "2020-09-03T21:08:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:09:38Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:09:38Z", "osv_earliest_published_at": "2020-09-03T21:08:42Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:54:12Z" }, { "id": "dynamo-schema-2026-07-20", "display_name": "dynamo-schema", "campaign": null, "detection_source": "osv", "packages": [ { "package": "dynamo-schema", "ecosystem": "npm", "versions": [ "0.0.3" ], "osv_entries": [ { "osv_id": "GHSA-vp8g-53fw-r9f2", "osv_published_at": "2020-09-01T19:54:44Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:09:39Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:09:39Z", "osv_earliest_published_at": "2020-09-01T19:54:44Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:54:21Z" }, { "id": "scryptys-2026-07-20", "display_name": "scryptys", "campaign": null, "detection_source": "osv", "packages": [ { "package": "scryptys", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-vrxj-4qhw-5vwq", "osv_published_at": "2020-09-03T17:03:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:09:40Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:09:40Z", "osv_earliest_published_at": "2020-09-03T17:03:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:54:29Z" }, { "id": "m-backdoor-2026-07-20", "display_name": "m-backdoor", "campaign": null, "detection_source": "osv", "packages": [ { "package": "m-backdoor", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-vv52-3mrp-455m", "osv_published_at": "2020-09-03T15:53:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:09:41Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:09:41Z", "osv_earliest_published_at": "2020-09-03T15:53:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:54:37Z" }, { "id": "smb-2026-07-20", "display_name": "smb", "campaign": null, "detection_source": "osv", "packages": [ { "package": "smb", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "GHSA-vv6q-9cfw-4c83", "osv_published_at": "2018-08-29T23:20:27Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:09:43Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:09:43Z", "osv_earliest_published_at": "2018-08-29T23:20:27Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:54:45Z" }, { "id": "scrytsy-2026-07-20", "display_name": "scrytsy", "campaign": null, "detection_source": "osv", "packages": [ { "package": "scrytsy", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-vv7g-pjw9-4qj9", "osv_published_at": "2020-09-03T17:03:56Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:09:44Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:09:44Z", "osv_earliest_published_at": "2020-09-03T17:03:56Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:54:54Z" }, { "id": "babel-loadre-2026-07-20", "display_name": "babel-loadre", "campaign": null, "detection_source": "osv", "packages": [ { "package": "babel-loadre", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-vvfh-mvjv-w38q", "osv_published_at": "2020-09-04T15:28:19Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:09:45Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:09:45Z", "osv_earliest_published_at": "2020-09-04T15:28:19Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:55:02Z" }, { "id": "hpmm-2026-07-20", "display_name": "hpmm", "campaign": null, "detection_source": "osv", "packages": [ { "package": "hpmm", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-vxfp-qmpq-6826", "osv_published_at": "2020-09-03T17:38:09Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:09:46Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:09:46Z", "osv_earliest_published_at": "2020-09-03T17:38:09Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:55:10Z" }, { "id": "kindspells-astro-shield-2026-07-20", "display_name": "@kindspells/astro-shield", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@kindspells/astro-shield", "ecosystem": "npm", "versions": [ "1.2.0" ], "osv_entries": [ { "osv_id": "GHSA-w387-5qqw-7g8m", "osv_published_at": "2024-03-29T19:03:59Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:09:47Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:09:47Z", "osv_earliest_published_at": "2024-03-29T19:03:59Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:55:18Z" }, { "id": "mogodb-2026-07-20", "display_name": "mogodb", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mogodb", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-w3pp-wp5v-fjvp", "osv_published_at": "2020-09-03T19:51:18Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:09:49Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:09:49Z", "osv_earliest_published_at": "2020-09-03T19:51:18Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:55:28Z" }, { "id": "midway-xtpl-2026-07-20", "display_name": "midway-xtpl", "campaign": null, "detection_source": "osv", "packages": [ { "package": "midway-xtpl", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-w65v-hx54-xrqx", "osv_published_at": "2020-09-03T17:41:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:09:52Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:09:52Z", "osv_earliest_published_at": "2020-09-03T17:41:23Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:55:46Z" }, { "id": "stream-combine-2026-07-20", "display_name": "stream-combine", "campaign": null, "detection_source": "osv", "packages": [ { "package": "stream-combine", "ecosystem": "npm", "versions": [ "2.0.2" ], "osv_entries": [ { "osv_id": "GHSA-w6xj-45gv-fw35", "osv_published_at": "2020-09-02T15:57:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:09:54Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:09:54Z", "osv_earliest_published_at": "2020-09-02T15:57:06Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:55:54Z" }, { "id": "sonatype-2026-07-20", "display_name": "sonatype", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sonatype", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-w8fh-pvq2-x8c4", "osv_published_at": "2021-01-29T18:11:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:09:55Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:09:55Z", "osv_earliest_published_at": "2021-01-29T18:11:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:56:05Z" }, { "id": "angular-bmap-2026-07-20", "display_name": "angular-bmap", "campaign": null, "detection_source": "osv", "packages": [ { "package": "angular-bmap", "ecosystem": "npm", "versions": [ "0.0.9" ], "osv_entries": [ { "osv_id": "GHSA-w8hg-mxvh-9h57", "osv_published_at": "2020-09-01T19:42:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:09:56Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:09:56Z", "osv_earliest_published_at": "2020-09-01T19:42:49Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:56:14Z" }, { "id": "bitconi-ops-2026-07-20", "display_name": "bitconi-ops", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bitconi-ops", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-w9hw-v97w-g5f5", "osv_published_at": "2020-09-04T16:43:14Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:09:58Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:09:58Z", "osv_earliest_published_at": "2020-09-04T16:43:14Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:56:24Z" }, { "id": "bufder-xor-2026-07-20", "display_name": "bufder-xor", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bufder-xor", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-w9q5-mvc6-5cw3", "osv_published_at": "2020-09-03T21:45:13Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:10:00Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:10:00Z", "osv_earliest_published_at": "2020-09-03T21:45:13Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:56:34Z" }, { "id": "bip30-2026-07-20", "display_name": "bip30", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bip30", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-wch2-46wj-6x5j", "osv_published_at": "2020-09-04T15:37:15Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:10:02Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:10:02Z", "osv_earliest_published_at": "2020-09-04T15:37:15Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:56:45Z" }, { "id": "node-spdy-2026-07-20", "display_name": "node-spdy", "campaign": null, "detection_source": "osv", "packages": [ { "package": "node-spdy", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-wfjh-3hq2-r276", "osv_published_at": "2020-09-03T19:56:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:10:03Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:10:03Z", "osv_earliest_published_at": "2020-09-03T19:56:48Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:56:53Z" }, { "id": "buffer-hor-2026-07-20", "display_name": "buffer-hor", "campaign": null, "detection_source": "osv", "packages": [ { "package": "buffer-hor", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-wh87-3959-vfrq", "osv_published_at": "2020-09-03T21:51:58Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:10:05Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:10:05Z", "osv_earliest_published_at": "2020-09-03T21:51:58Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:57:05Z" }, { "id": "import-mysql-2026-07-20", "display_name": "import-mysql", "campaign": null, "detection_source": "osv", "packages": [ { "package": "import-mysql", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-whjr-jj69-7prm", "osv_published_at": "2020-09-03T19:44:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:10:06Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:10:06Z", "osv_earliest_published_at": "2020-09-03T19:44:35Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:57:13Z" }, { "id": "fast-requests-2026-07-20", "display_name": "fast-requests", "campaign": null, "detection_source": "osv", "packages": [ { "package": "fast-requests", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-wjf2-7f9g-86f5", "osv_published_at": "2020-09-03T18:23:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:10:07Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:10:07Z", "osv_earliest_published_at": "2020-09-03T18:23:38Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:57:21Z" }, { "id": "buvfer-xor-2026-07-20", "display_name": "buvfer-xor", "campaign": null, "detection_source": "osv", "packages": [ { "package": "buvfer-xor", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-wjpj-gmc3-5w56", "osv_published_at": "2020-09-03T22:30:31Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:10:08Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:10:08Z", "osv_earliest_published_at": "2020-09-03T22:30:31Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:57:29Z" }, { "id": "koa-body-parse-2026-07-20", "display_name": "koa-body-parse", "campaign": null, "detection_source": "osv", "packages": [ { "package": "koa-body-parse", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-wqgq-mfvj-6qxp", "osv_published_at": "2020-09-03T19:49:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:10:10Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:10:10Z", "osv_earliest_published_at": "2020-09-03T19:49:03Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:57:42Z" }, { "id": "nodeffmpeg-2026-07-20", "display_name": "nodeffmpeg", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nodeffmpeg", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "GHSA-wqh4-27cc-j8f2", "osv_published_at": "2018-08-29T23:36:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:10:12Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:10:12Z", "osv_earliest_published_at": "2018-08-29T23:36:48Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:57:50Z" }, { "id": "buffmr-xor-2026-07-20", "display_name": "buffmr-xor", "campaign": null, "detection_source": "osv", "packages": [ { "package": "buffmr-xor", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-wv39-cgmm-cq29", "osv_published_at": "2020-09-03T22:23:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:10:13Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:10:13Z", "osv_earliest_published_at": "2020-09-03T22:23:00Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:57:59Z" }, { "id": "nodesqlite-2026-07-20", "display_name": "nodesqlite", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nodesqlite", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "GHSA-wwf2-5cj8-jx6w", "osv_published_at": "2018-07-23T20:50:21Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:10:14Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:10:14Z", "osv_earliest_published_at": "2018-07-23T20:50:21Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:58:07Z" }, { "id": "file-logging-2026-07-20", "display_name": "file-logging", "campaign": null, "detection_source": "osv", "packages": [ { "package": "file-logging", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-wwwg-6r7f-9c9h", "osv_published_at": "2020-09-03T19:43:28Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:10:15Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:10:15Z", "osv_earliest_published_at": "2020-09-03T19:43:28Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:58:16Z" }, { "id": "deepseek-tui-2026-07-20", "display_name": "deepseek-tui", "campaign": null, "detection_source": "osv", "packages": [ { "package": "deepseek-tui", "ecosystem": "npm", "versions": [ "0.3.0" ], "osv_entries": [ { "osv_id": "GHSA-wx44-2q6h-j6p8", "osv_published_at": "2026-05-14T20:29:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:10:16Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:10:16Z", "osv_earliest_published_at": "2026-05-14T20:29:33Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:58:24Z" }, { "id": "deepseek-tui-cli-2026-07-20", "display_name": "deepseek-tui-cli", "campaign": null, "detection_source": "osv", "packages": [ { "package": "deepseek-tui-cli", "ecosystem": "npm", "versions": [ "0.3.0" ], "osv_entries": [ { "osv_id": "GHSA-wx44-2q6h-j6p8", "osv_published_at": "2026-05-14T20:29:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:10:17Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:10:17Z", "osv_earliest_published_at": "2026-05-14T20:29:33Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:58:32Z" }, { "id": "pizza-pasta-2026-07-20", "display_name": "pizza-pasta", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pizza-pasta", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-wxrm-2h86-v95f", "osv_published_at": "2020-09-03T21:04:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:10:18Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:10:18Z", "osv_earliest_published_at": "2020-09-03T21:04:20Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:58:40Z" }, { "id": "node-buc-2026-07-20", "display_name": "node-buc", "campaign": null, "detection_source": "osv", "packages": [ { "package": "node-buc", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-x3m6-rprw-862w", "osv_published_at": "2020-09-03T17:43:31Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:10:20Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:10:20Z", "osv_earliest_published_at": "2020-09-03T17:43:31Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:58:48Z" }, { "id": "buffev-xor-2026-07-20", "display_name": "buffev-xor", "campaign": null, "detection_source": "osv", "packages": [ { "package": "buffev-xor", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-x3w4-mrmv-cw2x", "osv_published_at": "2020-09-03T22:19:44Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:10:21Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:10:21Z", "osv_earliest_published_at": "2020-09-03T22:19:44Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:58:57Z" }, { "id": "mysql-koa-2026-07-20", "display_name": "mysql-koa", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mysql-koa", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-x45v-pvpg-hcrh", "osv_published_at": "2020-09-03T19:54:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:10:22Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:10:22Z", "osv_earliest_published_at": "2020-09-03T19:54:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:59:05Z" }, { "id": "rate-map-2026-07-20", "display_name": "rate-map", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rate-map", "ecosystem": "npm", "versions": [ "1.0.3" ], "osv_entries": [ { "osv_id": "GHSA-x48m-gp6r-gp4v", "osv_published_at": "2020-09-03T18:21:26Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:10:23Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:10:23Z", "osv_earliest_published_at": "2020-09-03T18:21:26Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:59:13Z" }, { "id": "node-sqlite-2026-07-20", "display_name": "node-sqlite", "campaign": null, "detection_source": "osv", "packages": [ { "package": "node-sqlite", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "GHSA-x52f-h74p-9jh8", "osv_published_at": "2018-07-23T21:00:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:10:24Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:10:24Z", "osv_earliest_published_at": "2018-07-23T21:00:07Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:59:22Z" }, { "id": "rpc-websocket-2026-07-20", "display_name": "rpc-websocket", "campaign": null, "detection_source": "osv", "packages": [ { "package": "rpc-websocket", "ecosystem": "npm", "versions": [ "0.7.7" ], "osv_entries": [ { "osv_id": "GHSA-x87g-rgrh-r6g3", "osv_published_at": "2020-09-03T17:07:15Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:10:26Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:10:26Z", "osv_earliest_published_at": "2020-09-03T17:07:15Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:59:36Z" }, { "id": "jq-sha3-2026-07-20", "display_name": "jq-sha3", "campaign": null, "detection_source": "osv", "packages": [ { "package": "jq-sha3", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-x8m7-cv39-xmg9", "osv_published_at": "2020-09-03T22:56:10Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:10:27Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:10:27Z", "osv_earliest_published_at": "2020-09-03T22:56:10Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:59:44Z" }, { "id": "cordova-plugin-china-picker-2026-07-20", "display_name": "cordova-plugin-china-picker", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cordova-plugin-china-picker", "ecosystem": "npm", "versions": [ "1.0.910" ], "osv_entries": [ { "osv_id": "GHSA-x9gm-qxhh-rf75", "osv_published_at": "2020-09-01T19:51:28Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:10:29Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:10:29Z", "osv_earliest_published_at": "2020-09-01T19:51:28Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T03:59:53Z" }, { "id": "commanedr-2026-07-20", "display_name": "commanedr", "campaign": null, "detection_source": "osv", "packages": [ { "package": "commanedr", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-xcgx-27q5-7634", "osv_published_at": "2020-09-03T19:41:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:10:30Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:10:30Z", "osv_earliest_published_at": "2020-09-03T19:41:05Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T04:00:02Z" }, { "id": "nodesass-2026-07-20", "display_name": "nodesass", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nodesass", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-xfmw-2vmm-579c", "osv_published_at": "2020-09-01T18:59:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:10:31Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:10:31Z", "osv_earliest_published_at": "2020-09-01T18:59:50Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T04:00:11Z" }, { "id": "cionstring-2026-07-20", "display_name": "cionstring", "campaign": null, "detection_source": "osv", "packages": [ { "package": "cionstring", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-xh8g-j88w-6v59", "osv_published_at": "2020-09-03T19:42:16Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:10:33Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:10:33Z", "osv_earliest_published_at": "2020-09-03T19:42:16Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T04:00:27Z" }, { "id": "degbu-2026-07-20", "display_name": "degbu", "campaign": null, "detection_source": "osv", "packages": [ { "package": "degbu", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-xr3g-4gg5-w3wq", "osv_published_at": "2020-09-03T17:06:14Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:10:36Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:10:36Z", "osv_earliest_published_at": "2020-09-03T17:06:14Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T04:00:48Z" }, { "id": "bictoin-ops-2026-07-20", "display_name": "bictoin-ops", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bictoin-ops", "ecosystem": "npm", "versions": [ "0.0.0" ], "osv_entries": [ { "osv_id": "GHSA-xrrg-wfwc-c7r3", "osv_published_at": "2020-09-04T15:33:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:10:37Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:10:37Z", "osv_earliest_published_at": "2020-09-04T15:33:52Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T04:00:56Z" }, { "id": "openai-codex-2026-07-20", "display_name": "@openai/codex", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@openai/codex", "ecosystem": "npm", "versions": [ "0.23.0" ], "osv_entries": [ { "osv_id": "GHSA-xrxf-jgv3-qmrm", "osv_published_at": "2026-04-14T15:30:34Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:10:38Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:10:38Z", "osv_earliest_published_at": "2026-04-14T15:30:34Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T04:01:05Z" }, { "id": "ngx-context-menu-2026-07-20", "display_name": "ngx-context-menu", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ngx-context-menu", "ecosystem": "npm", "versions": [ "0.0.26" ], "osv_entries": [ { "osv_id": "GHSA-xwg3-gjxh-c8pm", "osv_published_at": "2020-09-03T19:14:32Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T03:10:40Z", "flagged_at": null, "confirmed_at": "2026-07-20T03:10:40Z", "osv_earliest_published_at": "2020-09-03T19:14:32Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T04:01:25Z" }, { "id": "telebot-bot-run-2026-07-20", "display_name": "telebot-bot-run", "campaign": null, "detection_source": "osv", "packages": [ { "package": "telebot-bot-run", "ecosystem": "pypi", "versions": [ "0.3", "0.4", "0.5" ], "osv_entries": [ { "osv_id": "MAL-2026-10863", "osv_published_at": "2026-07-20T02:36:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T04:57:15Z", "flagged_at": null, "confirmed_at": "2026-07-20T04:57:15Z", "osv_earliest_published_at": "2026-07-20T02:36:22Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T16:08:34Z" }, { "id": "kimichat-2026-07-20", "display_name": "kimichat", "campaign": null, "detection_source": "osv", "packages": [ { "package": "kimichat", "ecosystem": "pypi", "versions": [ "0.1.0", "0.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10864", "osv_published_at": "2026-07-20T05:07:32Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T06:14:20Z", "flagged_at": null, "confirmed_at": "2026-07-20T06:14:20Z", "osv_earliest_published_at": "2026-07-20T05:07:32Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T16:06:37Z" }, { "id": "kimitalk-2026-07-20", "display_name": "kimitalk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "kimitalk", "ecosystem": "pypi", "versions": [ "0.1.0", "0.1.1", "0.1.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10865", "osv_published_at": "2026-07-20T05:12:24Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T06:14:22Z", "flagged_at": null, "confirmed_at": "2026-07-20T06:14:22Z", "osv_earliest_published_at": "2026-07-20T05:12:24Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T16:06:55Z" }, { "id": "nemopush-2026-07-20", "display_name": "nemopush", "campaign": null, "detection_source": "osv", "packages": [ { "package": "nemopush", "ecosystem": "pypi", "versions": [ "0.1.0", "0.1.1", "0.1.2", "0.1.3" ], "osv_entries": [ { "osv_id": "MAL-2026-10866", "osv_published_at": "2026-07-20T05:15:31Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T06:14:25Z", "flagged_at": null, "confirmed_at": "2026-07-20T06:14:25Z", "osv_earliest_published_at": "2026-07-20T05:15:31Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T16:07:27Z" }, { "id": "vantrala-2026-07-20", "display_name": "vantrala", "campaign": null, "detection_source": "osv", "packages": [ { "package": "vantrala", "ecosystem": "pypi", "versions": [ "0.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10867", "osv_published_at": "2026-07-20T05:19:03Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T06:15:01Z", "flagged_at": null, "confirmed_at": "2026-07-20T06:15:01Z", "osv_earliest_published_at": "2026-07-20T05:19:03Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-20T16:11:02Z" }, { "id": "neroteam-v1-2026-07-20", "display_name": "neroteam-v1", "campaign": null, "detection_source": "osv", "packages": [ { "package": "neroteam-v1", "ecosystem": "pypi", "versions": [ "1.0.0", "1.0.1", "1.0.2", "1.0.3", "1.0.4", "1.0.5", "1.0.6", "1.0.7" ], "osv_entries": [ { "osv_id": "MAL-2026-10868", "osv_published_at": "2026-07-20T08:06:19Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T09:18:45Z", "flagged_at": null, "confirmed_at": "2026-07-20T09:18:45Z", "osv_earliest_published_at": "2026-07-20T08:06:19Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-21T05:08:10Z" }, { "id": "paperclip-ai-2026-07-20", "display_name": "paperclip-ai", "campaign": null, "detection_source": "osv", "packages": [ { "package": "paperclip-ai", "ecosystem": "pypi", "versions": [ "0.1.0", "0.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10869", "osv_published_at": "2026-07-20T09:12:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T10:35:42Z", "flagged_at": null, "confirmed_at": "2026-07-20T10:35:42Z", "osv_earliest_published_at": "2026-07-20T09:12:35Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-21T10:32:31Z" }, { "id": "atlaskit-internal--smart-card-hover-card-2026-07-20", "display_name": "@atlaskit-internal_.smart-card/hover-card", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@atlaskit-internal_.smart-card/hover-card", "ecosystem": "npm", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10870", "osv_published_at": "2026-07-20T10:17:11Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T13:23:04Z", "flagged_at": null, "confirmed_at": "2026-07-20T13:23:04Z", "osv_earliest_published_at": "2026-07-20T10:17:11Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-21T22:25:17Z" }, { "id": "azure-lab-services-ml-ts-2026-07-20", "display_name": "@azure-lab-services/ml-ts", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@azure-lab-services/ml-ts", "ecosystem": "npm", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10871", "osv_published_at": "2026-07-20T10:17:13Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T13:24:16Z", "flagged_at": null, "confirmed_at": "2026-07-20T13:24:16Z", "osv_earliest_published_at": "2026-07-20T10:17:13Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-21T22:30:13Z" }, { "id": "sip-lab-2026-07-20", "display_name": "sip-lab", "campaign": "azure-lab-services", "detection_source": "npm_registry", "packages": [ { "package": "sip-lab", "ecosystem": "npm", "versions": [ "1.41.1" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T13:25:26Z", "flagged_at": null, "confirmed_at": "2026-07-20T13:25:26Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/sip-lab", "ledger_commit_at": "2026-07-21T22:35:10Z" }, { "id": "dxcl-account-js-2026-07-20", "display_name": "@dxcl/account-js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@dxcl/account-js", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-10872", "osv_published_at": "2026-07-20T10:19:29Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T13:26:39Z", "flagged_at": null, "confirmed_at": "2026-07-20T13:26:39Z", "osv_earliest_published_at": "2026-07-20T10:19:29Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-21T22:40:30Z" }, { "id": "dxcl-customer-js-2026-07-20", "display_name": "@dxcl/customer-js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@dxcl/customer-js", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-10873", "osv_published_at": "2026-07-20T10:19:30Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T13:26:41Z", "flagged_at": null, "confirmed_at": "2026-07-20T13:26:41Z", "osv_earliest_published_at": "2026-07-20T10:19:30Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-21T22:40:46Z" }, { "id": "dxcl-fund-js-2026-07-20", "display_name": "@dxcl/fund-js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@dxcl/fund-js", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-10874", "osv_published_at": "2026-07-20T10:19:30Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T13:26:43Z", "flagged_at": null, "confirmed_at": "2026-07-20T13:26:43Z", "osv_earliest_published_at": "2026-07-20T10:19:30Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-21T22:41:04Z" }, { "id": "dxcl-http-common-js-2026-07-20", "display_name": "@dxcl/http-common-js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@dxcl/http-common-js", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-10875", "osv_published_at": "2026-07-20T10:19:31Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T13:26:45Z", "flagged_at": null, "confirmed_at": "2026-07-20T13:26:45Z", "osv_earliest_published_at": "2026-07-20T10:19:31Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-21T22:41:18Z" }, { "id": "dxcl-indicators-js-2026-07-20", "display_name": "@dxcl/indicators-js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@dxcl/indicators-js", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-10876", "osv_published_at": "2026-07-20T10:19:32Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T13:26:46Z", "flagged_at": null, "confirmed_at": "2026-07-20T13:26:46Z", "osv_earliest_published_at": "2026-07-20T10:19:32Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-21T22:41:34Z" }, { "id": "dxcl-log-function-js-2026-07-20", "display_name": "@dxcl/log-function-js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@dxcl/log-function-js", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-10877", "osv_published_at": "2026-07-20T10:19:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T13:26:48Z", "flagged_at": null, "confirmed_at": "2026-07-20T13:26:48Z", "osv_earliest_published_at": "2026-07-20T10:19:38Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-21T22:41:49Z" }, { "id": "dxcl-transaction-js-2026-07-20", "display_name": "@dxcl/transaction-js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@dxcl/transaction-js", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-10878", "osv_published_at": "2026-07-20T10:19:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T13:26:50Z", "flagged_at": null, "confirmed_at": "2026-07-20T13:26:50Z", "osv_earliest_published_at": "2026-07-20T10:19:39Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-21T22:42:05Z" }, { "id": "dxcl-user-js-2026-07-20", "display_name": "@dxcl/user-js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@dxcl/user-js", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-10879", "osv_published_at": "2026-07-20T10:19:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T13:26:51Z", "flagged_at": null, "confirmed_at": "2026-07-20T13:26:51Z", "osv_earliest_published_at": "2026-07-20T10:19:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-21T22:42:20Z" }, { "id": "irys-solutions-odesa-main-2026-07-20", "display_name": "@irys-solutions/odesa-main", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@irys-solutions/odesa-main", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10881", "osv_published_at": "2026-07-20T10:22:26Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T13:27:06Z", "flagged_at": null, "confirmed_at": "2026-07-20T13:27:06Z", "osv_earliest_published_at": "2026-07-20T10:22:26Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-21T22:43:53Z" }, { "id": "public-for-cdao-backend-2026-07-20", "display_name": "@public-for-cdao/backend", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@public-for-cdao/backend", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-10882", "osv_published_at": "2026-07-20T10:26:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T13:28:36Z", "flagged_at": null, "confirmed_at": "2026-07-20T13:28:36Z", "osv_earliest_published_at": "2026-07-20T10:26:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-21T22:50:37Z" }, { "id": "public-for-cdao-bot-2026-07-20", "display_name": "@public-for-cdao/bot", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@public-for-cdao/bot", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-10883", "osv_published_at": "2026-07-20T10:26:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T13:29:20Z", "flagged_at": null, "confirmed_at": "2026-07-20T13:29:20Z", "osv_earliest_published_at": "2026-07-20T10:26:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-21T22:53:33Z" }, { "id": "public-for-cdao-contracts-2026-07-20", "display_name": "@public-for-cdao/contracts", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@public-for-cdao/contracts", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-10884", "osv_published_at": "2026-07-20T10:26:43Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T13:29:41Z", "flagged_at": null, "confirmed_at": "2026-07-20T13:29:41Z", "osv_earliest_published_at": "2026-07-20T10:26:43Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-21T22:55:08Z" }, { "id": "public-for-cdao-core-2026-07-20", "display_name": "@public-for-cdao/core", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@public-for-cdao/core", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-10885", "osv_published_at": "2026-07-20T10:26:45Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T13:29:59Z", "flagged_at": null, "confirmed_at": "2026-07-20T13:29:59Z", "osv_earliest_published_at": "2026-07-20T10:26:45Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-21T22:56:37Z" }, { "id": "public-for-cdao-deploy-2026-07-20", "display_name": "@public-for-cdao/deploy", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@public-for-cdao/deploy", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-10886", "osv_published_at": "2026-07-20T10:26:46Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T13:30:18Z", "flagged_at": null, "confirmed_at": "2026-07-20T13:30:18Z", "osv_earliest_published_at": "2026-07-20T10:26:46Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-21T22:57:58Z" }, { "id": "public-for-cdao-sdk-2026-07-20", "display_name": "@public-for-cdao/sdk", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@public-for-cdao/sdk", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-10887", "osv_published_at": "2026-07-20T10:26:46Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T13:30:36Z", "flagged_at": null, "confirmed_at": "2026-07-20T13:30:36Z", "osv_earliest_published_at": "2026-07-20T10:26:46Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-21T22:59:25Z" }, { "id": "public-for-cdao-signer-2026-07-20", "display_name": "@public-for-cdao/signer", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@public-for-cdao/signer", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-10888", "osv_published_at": "2026-07-20T10:26:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T13:30:55Z", "flagged_at": null, "confirmed_at": "2026-07-20T13:30:55Z", "osv_earliest_published_at": "2026-07-20T10:26:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-21T23:00:52Z" }, { "id": "public-for-cdao-utils-2026-07-20", "display_name": "@public-for-cdao/utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@public-for-cdao/utils", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-10889", "osv_published_at": "2026-07-20T10:26:56Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T13:31:16Z", "flagged_at": null, "confirmed_at": "2026-07-20T13:31:16Z", "osv_earliest_published_at": "2026-07-20T10:26:56Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-21T23:02:29Z" }, { "id": "solana-labs-ancor-2026-07-20", "display_name": "@solana-labs/ancor", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@solana-labs/ancor", "ecosystem": "npm", "versions": [ "1.0.3", "1.0.4", "1.0.5", "1.0.6", "1.98.103", "1.98.105", "1.98.107", "1.98.108", "1.98.109", "1.98.110", "1.98.111", "1.98.112" ], "osv_entries": [ { "osv_id": "MAL-2026-5786", "osv_published_at": "2026-06-15T17:17:17Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T13:31:43Z", "flagged_at": null, "confirmed_at": "2026-07-20T13:31:43Z", "osv_earliest_published_at": "2026-06-15T17:17:17Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-21T23:04:42Z" }, { "id": "injectivelabs-exceptions-2026-07-20", "display_name": "@injectivelabs/exceptions", "campaign": "solana-labs", "detection_source": "npm_registry", "packages": [ { "package": "@injectivelabs/exceptions", "ecosystem": "npm", "versions": [ "1.20.21" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T13:32:17Z", "flagged_at": null, "confirmed_at": "2026-07-20T13:32:17Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40injectivelabs%2Fexceptions", "ledger_commit_at": "2026-07-21T23:07:10Z" }, { "id": "injectivelabs-ts-types-2026-07-20", "display_name": "@injectivelabs/ts-types", "campaign": "solana-labs", "detection_source": "npm_registry", "packages": [ { "package": "@injectivelabs/ts-types", "ecosystem": "npm", "versions": [ "1.20.21" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T13:32:18Z", "flagged_at": null, "confirmed_at": "2026-07-20T13:32:18Z", "osv_earliest_published_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/%40injectivelabs%2Fts-types", "ledger_commit_at": "2026-07-21T23:07:21Z" }, { "id": "solana-labs-spl-toke-2026-07-20", "display_name": "@solana-labs/spl-toke", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@solana-labs/spl-toke", "ecosystem": "npm", "versions": [ "1.0.2", "1.0.3", "1.0.4", "1.98.103", "1.98.105", "1.98.107", "1.98.108", "1.98.109", "1.98.110" ], "osv_entries": [ { "osv_id": "MAL-2026-5787", "osv_published_at": "2026-06-15T17:15:36Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T13:33:06Z", "flagged_at": null, "confirmed_at": "2026-07-20T13:33:06Z", "osv_earliest_published_at": "2026-06-15T17:15:36Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-21T23:10:47Z" }, { "id": "solana-labs-web3-js-2026-07-20", "display_name": "@solana-labs/web3.js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@solana-labs/web3.js", "ecosystem": "npm", "versions": [ "1.0.2", "1.0.3", "1.0.4", "1.0.5", "1.98.102", "1.98.104", "1.98.107", "1.98.108", "1.98.109", "1.98.110", "1.98.111" ], "osv_entries": [ { "osv_id": "MAL-2026-5525", "osv_published_at": "2026-06-10T18:37:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T13:33:26Z", "flagged_at": null, "confirmed_at": "2026-07-20T13:33:26Z", "osv_earliest_published_at": "2026-06-10T18:37:05Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-21T23:12:19Z" }, { "id": "solana-labs-web3js-2026-07-20", "display_name": "@solana-labs/web3js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@solana-labs/web3js", "ecosystem": "npm", "versions": [ "1.0.2", "1.0.3", "1.0.4", "1.98.103", "1.98.105", "1.98.107", "1.98.108", "1.98.109", "1.98.110", "1.98.111", "1.98.112" ], "osv_entries": [ { "osv_id": "MAL-2026-5788", "osv_published_at": "2026-06-15T17:15:14Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T13:33:46Z", "flagged_at": null, "confirmed_at": "2026-07-20T13:33:46Z", "osv_earliest_published_at": "2026-06-15T17:15:14Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-21T23:13:51Z" }, { "id": "su-doughnym-metrics-js-2026-07-20", "display_name": "@su-doughnym/metrics-js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@su-doughnym/metrics-js", "ecosystem": "npm", "versions": [ "99.99.99" ], "osv_entries": [ { "osv_id": "MAL-2026-6409", "osv_published_at": "2026-06-25T02:16:09Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T13:34:09Z", "flagged_at": null, "confirmed_at": "2026-07-20T13:34:09Z", "osv_earliest_published_at": "2026-06-25T02:16:09Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-21T23:15:38Z" }, { "id": "bytecraft-2026-07-20", "display_name": "bytecraft", "campaign": null, "detection_source": "osv", "packages": [ { "package": "bytecraft", "ecosystem": "npm", "versions": [ "1.5.0", "2.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10891", "osv_published_at": "2026-07-20T10:36:27Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T13:34:41Z", "flagged_at": null, "confirmed_at": "2026-07-20T13:34:41Z", "osv_earliest_published_at": "2026-07-20T10:36:27Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-21T23:19:18Z" }, { "id": "ccl-component-resources-2026-07-20", "display_name": "ccl-component-resources", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ccl-component-resources", "ecosystem": "npm", "versions": [ "99.1.0" ], "osv_entries": [ { "osv_id": "MAL-2024-1959", "osv_published_at": "2024-06-25T12:32:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T13:34:45Z", "flagged_at": null, "confirmed_at": "2026-07-20T13:34:45Z", "osv_earliest_published_at": "2024-06-25T12:32:40Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-21T23:19:49Z" }, { "id": "claude-code-timer-2026-07-20", "display_name": "claude-code-timer", "campaign": null, "detection_source": "osv", "packages": [ { "package": "claude-code-timer", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10892", "osv_published_at": "2026-07-20T10:37:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T13:34:56Z", "flagged_at": null, "confirmed_at": "2026-07-20T13:34:56Z", "osv_earliest_published_at": "2026-07-20T10:37:25Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-21T23:21:27Z" }, { "id": "dgxeon-soket-2026-07-20", "display_name": "dgxeon-soket", "campaign": null, "detection_source": "osv", "packages": [ { "package": "dgxeon-soket", "ecosystem": "npm", "versions": [ "2.0.0", "3.0.0", "4.0.0", "5.0.0", "6.0.0", "7.0.0", "7.0.1", "7.0.2", "7.0.3" ], "osv_entries": [ { "osv_id": "MAL-2026-1074", "osv_published_at": "2026-02-27T16:29:27Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T13:35:12Z", "flagged_at": null, "confirmed_at": "2026-07-20T13:35:12Z", "osv_earliest_published_at": "2026-02-27T16:29:27Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-21T23:23:10Z" }, { "id": "ecto-cargo-wk1tm59a-2026-07-20", "display_name": "ecto-cargo-wk1tm59a", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ecto-cargo-wk1tm59a", "ecosystem": "npm", "versions": [ "99.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10893", "osv_published_at": "2026-07-20T10:40:54Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T13:35:15Z", "flagged_at": null, "confirmed_at": "2026-07-20T13:35:15Z", "osv_earliest_published_at": "2026-07-20T10:40:54Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-21T23:23:31Z" }, { "id": "exodus-checkout-2026-07-20", "display_name": "exodus-checkout", "campaign": null, "detection_source": "osv", "packages": [ { "package": "exodus-checkout", "ecosystem": "npm", "versions": [ "99.0.0-canary.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10894", "osv_published_at": "2026-07-20T10:42:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T13:35:19Z", "flagged_at": null, "confirmed_at": "2026-07-20T13:35:19Z", "osv_earliest_published_at": "2026-07-20T10:42:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-21T23:24:03Z" }, { "id": "exodus-payments-2026-07-20", "display_name": "exodus-payments", "campaign": null, "detection_source": "osv", "packages": [ { "package": "exodus-payments", "ecosystem": "npm", "versions": [ "99.0.0-canary.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10895", "osv_published_at": "2026-07-20T10:42:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T13:35:21Z", "flagged_at": null, "confirmed_at": "2026-07-20T13:35:21Z", "osv_earliest_published_at": "2026-07-20T10:42:42Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-21T23:24:17Z" }, { "id": "flow-eslint-oxidized-2026-07-20", "display_name": "flow-eslint-oxidized", "campaign": null, "detection_source": "osv", "packages": [ { "package": "flow-eslint-oxidized", "ecosystem": "npm", "versions": [ "0.0.1", "74.2.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10896", "osv_published_at": "2026-07-20T10:43:41Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T13:35:28Z", "flagged_at": null, "confirmed_at": "2026-07-20T13:35:28Z", "osv_earliest_published_at": "2026-07-20T10:43:41Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-21T23:25:12Z" }, { "id": "housecall-ui-2026-07-20", "display_name": "housecall-ui", "campaign": null, "detection_source": "osv", "packages": [ { "package": "housecall-ui", "ecosystem": "npm", "versions": [ "99.9.2" ], "osv_entries": [ { "osv_id": "MAL-2026-5446", "osv_published_at": "2026-06-09T17:23:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-20T13:35:41Z", "flagged_at": null, "confirmed_at": "2026-07-20T13:35:41Z", "osv_earliest_published_at": "2026-06-09T17:23:49Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-21T23:26:39Z" }, { "id": "react-tabulix-core-2026-07-22", "display_name": "react-tabulix-core", "campaign": null, "detection_source": "osv", "packages": [ { "package": "react-tabulix-core", "ecosystem": "npm", "versions": [ "0.1.3" ], "osv_entries": [ { "osv_id": "MAL-2026-10987", "osv_published_at": "2026-07-21T12:01:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-22T04:41:40Z", "flagged_at": null, "confirmed_at": "2026-07-22T04:41:40Z", "osv_earliest_published_at": "2026-07-21T12:01:12Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-22T04:41:43Z" }, { "id": "react-tabulix-ui-2026-07-22", "display_name": "react-tabulix-ui", "campaign": null, "detection_source": "osv", "packages": [ { "package": "react-tabulix-ui", "ecosystem": "npm", "versions": [ "0.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10988", "osv_published_at": "2026-07-21T16:05:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-22T04:41:41Z", "flagged_at": null, "confirmed_at": "2026-07-22T04:41:41Z", "osv_earliest_published_at": "2026-07-21T16:05:53Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-22T04:41:51Z" }, { "id": "react-tabulix-virtual-2026-07-22", "display_name": "react-tabulix-virtual", "campaign": null, "detection_source": "osv", "packages": [ { "package": "react-tabulix-virtual", "ecosystem": "npm", "versions": [ "0.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10989", "osv_published_at": "2026-07-21T14:01:07Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-22T04:41:43Z", "flagged_at": null, "confirmed_at": "2026-07-22T04:41:43Z", "osv_earliest_published_at": "2026-07-21T14:01:07Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-22T04:42:00Z" }, { "id": "apexfdn-apex-2026-07-22", "display_name": "@apexfdn/apex", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@apexfdn/apex", "ecosystem": "npm", "versions": [ "1.0.1", "1.0.10", "1.0.11", "1.0.12", "1.0.13", "1.0.14", "1.0.15", "1.0.16", "1.0.17", "1.0.18", "1.0.19", "1.0.2", "1.0.20", "1.0.21", "1.0.22", "1.0.23", "1.0.24", "1.0.25", "1.0.26", "1.0.27", "1.0.28", "1.0.29", "1.0.3", "1.0.30", "1.0.31", "1.0.32", "1.0.4", "1.0.5", "1.0.6", "1.0.7", "1.0.8", "1.0.9" ], "osv_entries": [ { "osv_id": "MAL-2026-10979", "osv_published_at": "2026-07-21T21:00:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-22T04:41:49Z", "flagged_at": null, "confirmed_at": "2026-07-22T04:41:49Z", "osv_earliest_published_at": "2026-07-21T21:00:37Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-22T04:42:08Z" }, { "id": "animated-octo-spoon-2026-07-22", "display_name": "animated-octo-spoon", "campaign": null, "detection_source": "osv", "packages": [ { "package": "animated-octo-spoon", "ecosystem": "pypi", "versions": [ "0.1.0", "0.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10985", "osv_published_at": "2026-07-21T15:24:17Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-22T04:41:56Z", "flagged_at": null, "confirmed_at": "2026-07-22T04:41:56Z", "osv_earliest_published_at": "2026-07-21T15:24:17Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-22T04:42:26Z" }, { "id": "comp-colors-2026-07-22", "display_name": "comp-colors", "campaign": null, "detection_source": "osv", "packages": [ { "package": "comp-colors", "ecosystem": "pypi", "versions": [ "0.1.5" ], "osv_entries": [ { "osv_id": "MAL-2026-10986", "osv_published_at": "2026-07-21T20:44:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-22T04:41:58Z", "flagged_at": null, "confirmed_at": "2026-07-22T04:41:58Z", "osv_earliest_published_at": "2026-07-21T20:44:12Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-22T04:42:35Z" }, { "id": "make-helper-2026-07-22", "display_name": "make-helper", "campaign": null, "detection_source": "osv", "packages": [ { "package": "make-helper", "ecosystem": "pypi", "versions": [ "0.1.0", "0.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10991", "osv_published_at": "2026-07-22T09:26:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-22T10:27:47Z", "flagged_at": null, "confirmed_at": "2026-07-22T10:27:47Z", "osv_earliest_published_at": "2026-07-22T09:26:25Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-22T10:27:49Z" }, { "id": "dev-helper-bg-2026-07-22", "display_name": "dev-helper-bg", "campaign": null, "detection_source": "osv", "packages": [ { "package": "dev-helper-bg", "ecosystem": "pypi", "versions": [ "0.1.3", "0.1.4", "0.1.6", "0.1.7" ], "osv_entries": [ { "osv_id": "MAL-2026-10992", "osv_published_at": "2026-07-22T10:24:34Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-22T11:33:33Z", "flagged_at": null, "confirmed_at": "2026-07-22T11:33:33Z", "osv_earliest_published_at": "2026-07-22T10:24:34Z", "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-22T11:33:35Z" }, { "id": "torch-musa-2026-07-22", "display_name": "torch-musa", "campaign": null, "detection_source": "osv", "packages": [ { "package": "torch-musa", "ecosystem": "pypi", "versions": [ "0.0.0", "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10993", "osv_published_at": "2026-07-22T18:09:16Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-22T18:45:52Z", "flagged_at": null, "confirmed_at": "2026-07-22T18:45:52Z", "osv_earliest_published_at": "2026-07-22T18:09:16Z", "source_published_at": "2026-07-22T18:09:16Z", "observed_at": "2026-07-22T18:45:52Z", "ingested_at": "2026-07-22T18:45:52Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-22T18:45:55Z", "ledger_committed_at": "2026-07-22T18:45:55Z" }, { "id": "app-data-ist-2026-07-22", "display_name": "app-data-ist", "campaign": null, "detection_source": "osv", "packages": [ { "package": "app-data-ist", "ecosystem": "npm", "versions": [ "2.1.6" ], "osv_entries": [ { "osv_id": "MAL-2026-10994", "osv_published_at": "2026-07-22T20:25:42Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-22T20:37:58Z", "flagged_at": null, "confirmed_at": "2026-07-22T20:37:58Z", "osv_earliest_published_at": "2026-07-22T20:25:42Z", "source_published_at": "2026-07-22T20:25:42Z", "observed_at": "2026-07-22T20:37:58Z", "ingested_at": "2026-07-22T20:37:58Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-22T20:38:01Z", "ledger_committed_at": "2026-07-22T20:38:01Z" }, { "id": "habingeer-2026-07-22", "display_name": "habingeer", "campaign": null, "detection_source": "osv", "packages": [ { "package": "habingeer", "ecosystem": "npm", "versions": [ "2.1.6" ], "osv_entries": [ { "osv_id": "MAL-2026-10995", "osv_published_at": "2026-07-22T20:27:26Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-22T20:38:00Z", "flagged_at": null, "confirmed_at": "2026-07-22T20:38:00Z", "osv_earliest_published_at": "2026-07-22T20:27:26Z", "source_published_at": "2026-07-22T20:27:26Z", "observed_at": "2026-07-22T20:38:00Z", "ingested_at": "2026-07-22T20:38:00Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-22T20:38:10Z", "ledger_committed_at": "2026-07-22T20:38:10Z" }, { "id": "init-js-examples-2026-07-22", "display_name": "init-js-examples", "campaign": null, "detection_source": "osv", "packages": [ { "package": "init-js-examples", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10996", "osv_published_at": "2026-07-22T20:24:58Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-22T20:38:01Z", "flagged_at": null, "confirmed_at": "2026-07-22T20:38:01Z", "osv_earliest_published_at": "2026-07-22T20:24:58Z", "source_published_at": "2026-07-22T20:24:58Z", "observed_at": "2026-07-22T20:38:01Z", "ingested_at": "2026-07-22T20:38:01Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-22T20:38:20Z", "ledger_committed_at": "2026-07-22T20:38:20Z" }, { "id": "n8n-nodes-http-probe-2026-07-22", "display_name": "n8n-nodes-http-probe", "campaign": null, "detection_source": "osv", "packages": [ { "package": "n8n-nodes-http-probe", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10997", "osv_published_at": "2026-07-22T20:29:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-22T20:38:06Z", "flagged_at": null, "confirmed_at": "2026-07-22T20:38:06Z", "osv_earliest_published_at": "2026-07-22T20:29:33Z", "source_published_at": "2026-07-22T20:29:33Z", "observed_at": "2026-07-22T20:38:06Z", "ingested_at": "2026-07-22T20:38:06Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-22T21:09:41Z", "ledger_committed_at": "2026-07-22T21:09:41Z" }, { "id": "n8n-nodes-port-scanner-2026-07-22", "display_name": "n8n-nodes-port-scanner", "campaign": null, "detection_source": "osv", "packages": [ { "package": "n8n-nodes-port-scanner", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10998", "osv_published_at": "2026-07-22T20:29:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-22T20:38:08Z", "flagged_at": null, "confirmed_at": "2026-07-22T20:38:08Z", "osv_earliest_published_at": "2026-07-22T20:29:00Z", "source_published_at": "2026-07-22T20:29:00Z", "observed_at": "2026-07-22T20:38:08Z", "ingested_at": "2026-07-22T20:38:08Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-22T21:10:00Z", "ledger_committed_at": "2026-07-22T21:10:00Z" }, { "id": "n8n-nodes-task-runner-2026-07-22", "display_name": "n8n-nodes-task-runner", "campaign": null, "detection_source": "osv", "packages": [ { "package": "n8n-nodes-task-runner", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.16", "1.0.2", "1.0.3", "1.0.4", "1.0.5", "1.0.6", "1.0.7", "1.0.8", "1.0.9" ], "osv_entries": [ { "osv_id": "MAL-2026-10999", "osv_published_at": "2026-07-22T20:24:15Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-22T20:38:11Z", "flagged_at": null, "confirmed_at": "2026-07-22T20:38:11Z", "osv_earliest_published_at": "2026-07-22T20:24:15Z", "source_published_at": "2026-07-22T20:24:15Z", "observed_at": "2026-07-22T20:38:11Z", "ingested_at": "2026-07-22T20:38:11Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-22T21:10:36Z", "ledger_committed_at": "2026-07-22T21:10:36Z" }, { "id": "application-util-2026-07-22", "display_name": "application-util", "campaign": null, "detection_source": "osv", "packages": [ { "package": "application-util", "ecosystem": "npm", "versions": [ "2.1.6" ], "osv_entries": [ { "osv_id": "MAL-2026-11000", "osv_published_at": "2026-07-22T20:40:28Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-22T21:08:42Z", "flagged_at": null, "confirmed_at": "2026-07-22T21:08:42Z", "osv_earliest_published_at": "2026-07-22T20:40:28Z", "source_published_at": "2026-07-22T20:40:28Z", "observed_at": "2026-07-22T21:08:42Z", "ingested_at": "2026-07-22T21:08:42Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-22T21:08:45Z", "ledger_committed_at": "2026-07-22T21:08:45Z" }, { "id": "date-format-utils-xz-2026-07-22", "display_name": "date-format-utils-xz", "campaign": null, "detection_source": "osv", "packages": [ { "package": "date-format-utils-xz", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2", "1.0.3", "1.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-11001", "osv_published_at": "2026-07-22T20:39:24Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-22T21:08:44Z", "flagged_at": null, "confirmed_at": "2026-07-22T21:08:44Z", "osv_earliest_published_at": "2026-07-21T00:00:00Z", "source_published_at": "2026-07-21T00:00:00Z", "observed_at": "2026-07-22T21:08:44Z", "ingested_at": "2026-07-22T21:08:44Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-24T06:49:42Z", "ledger_committed_at": "2026-07-24T06:49:42Z" }, { "id": "habinger-2026-07-22", "display_name": "habinger", "campaign": null, "detection_source": "osv", "packages": [ { "package": "habinger", "ecosystem": "npm", "versions": [ "2.1.6" ], "osv_entries": [ { "osv_id": "MAL-2026-11002", "osv_published_at": "2026-07-22T20:39:58Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-22T21:08:45Z", "flagged_at": null, "confirmed_at": "2026-07-22T21:08:45Z", "osv_earliest_published_at": "2026-07-22T20:39:58Z", "source_published_at": "2026-07-22T20:39:58Z", "observed_at": "2026-07-22T21:08:45Z", "ingested_at": "2026-07-22T21:08:45Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-22T21:09:03Z", "ledger_committed_at": "2026-07-22T21:09:03Z" }, { "id": "n8n-nodes-net-utils-2026-07-22", "display_name": "n8n-nodes-net-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "n8n-nodes-net-utils", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-11003", "osv_published_at": "2026-07-22T20:36:06Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-22T21:08:54Z", "flagged_at": null, "confirmed_at": "2026-07-22T21:08:54Z", "osv_earliest_published_at": "2026-07-22T20:36:06Z", "source_published_at": "2026-07-22T20:36:06Z", "observed_at": "2026-07-22T21:08:54Z", "ingested_at": "2026-07-22T21:08:54Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-22T21:09:50Z", "ledger_committed_at": "2026-07-22T21:09:50Z" }, { "id": "n8n-nodes-pwn-2026-07-22", "display_name": "n8n-nodes-pwn", "campaign": null, "detection_source": "osv", "packages": [ { "package": "n8n-nodes-pwn", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.5", "1.0.6", "1.0.7", "1.0.8" ], "osv_entries": [ { "osv_id": "MAL-2026-11004", "osv_published_at": "2026-07-22T20:33:47Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-22T21:09:00Z", "flagged_at": null, "confirmed_at": "2026-07-22T21:09:00Z", "osv_earliest_published_at": "2026-07-22T20:33:47Z", "source_published_at": "2026-07-22T20:33:47Z", "observed_at": "2026-07-22T21:09:00Z", "ingested_at": "2026-07-22T21:09:00Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-22T21:10:18Z", "ledger_committed_at": "2026-07-22T21:10:18Z" }, { "id": "n8n-nodes-quick-utils-2026-07-22", "display_name": "n8n-nodes-quick-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "n8n-nodes-quick-utils", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-11005", "osv_published_at": "2026-07-22T20:32:15Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-22T21:09:02Z", "flagged_at": null, "confirmed_at": "2026-07-22T21:09:02Z", "osv_earliest_published_at": "2026-07-22T20:32:15Z", "source_published_at": "2026-07-22T20:32:15Z", "observed_at": "2026-07-22T21:09:02Z", "ingested_at": "2026-07-22T21:09:02Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-22T21:10:27Z", "ledger_committed_at": "2026-07-22T21:10:27Z" }, { "id": "n8n-nodes-utils-helper-2026-07-22", "display_name": "n8n-nodes-utils-helper", "campaign": null, "detection_source": "osv", "packages": [ { "package": "n8n-nodes-utils-helper", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-11006", "osv_published_at": "2026-07-22T20:31:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-22T21:09:06Z", "flagged_at": null, "confirmed_at": "2026-07-22T21:09:06Z", "osv_earliest_published_at": "2026-07-22T20:31:48Z", "source_published_at": "2026-07-22T20:31:48Z", "observed_at": "2026-07-22T21:09:06Z", "ingested_at": "2026-07-22T21:09:06Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-22T21:10:45Z", "ledger_committed_at": "2026-07-22T21:10:45Z" }, { "id": "web3-terminal-2026-07-22", "display_name": "web3-terminal", "campaign": null, "detection_source": "osv", "packages": [ { "package": "web3-terminal", "ecosystem": "npm", "versions": [ "2.1.6" ], "osv_entries": [ { "osv_id": "MAL-2026-11007", "osv_published_at": "2026-07-22T20:40:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-22T21:09:08Z", "flagged_at": null, "confirmed_at": "2026-07-22T21:09:08Z", "osv_earliest_published_at": "2026-07-22T20:40:05Z", "source_published_at": "2026-07-22T20:40:05Z", "observed_at": "2026-07-22T21:09:08Z", "ingested_at": "2026-07-22T21:09:08Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-22T21:10:55Z", "ledger_committed_at": "2026-07-22T21:10:55Z" }, { "id": "hardhat-gas-tracker-2026-07-22", "display_name": "hardhat-gas-tracker", "campaign": null, "detection_source": "osv", "packages": [ { "package": "hardhat-gas-tracker", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-11020", "osv_published_at": "2026-07-22T23:22:56Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-22T23:32:32Z", "flagged_at": null, "confirmed_at": "2026-07-22T23:32:32Z", "osv_earliest_published_at": "2026-07-22T23:22:56Z", "source_published_at": "2026-07-22T23:22:56Z", "observed_at": "2026-07-22T23:32:32Z", "ingested_at": "2026-07-22T23:32:32Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-22T23:32:34Z", "ledger_committed_at": "2026-07-22T23:32:34Z" }, { "id": "jupyterlab-2026-07-23", "display_name": "jupyterlab", "campaign": null, "detection_source": "osv", "packages": [ { "package": "jupyterlab", "ecosystem": "pypi", "versions": [ "0.0.1", "0.0.10", "0.0.13", "0.0.2", "0.0.3", "0.0.4", "0.0.5", "0.0.6", "0.0.7", "0.0.8", "0.0.9", "0.1.1", "0.1.2", "0.10.0", "0.11.0", "0.11.1", "0.11.2", "0.11.3", "0.12.0", "0.12.1", "0.13.0", "0.13.1", "0.13.2", "0.14.0", "0.15.0", "0.15.1", "0.16.0", "0.16.2", "0.17.0", "0.17.1", "0.17.2", "0.17.4", "0.17.5", "0.18.0", "0.18.0.dev1", "0.18.1", "0.19.0", "0.2.0", "0.20.0", "0.20.0rc1", "0.20.1", "0.20.2", "0.20.3", "0.20.4", "0.21.0", "0.21.0rc1", "0.21.0rc2", "0.21.0rc3", "0.21.0rc4", "0.21.0rc5", "0.22.0", "0.22.0rc0", "0.22.1", "0.23.0", "0.23.0rc0", "0.23.0rc1", "0.23.1", "0.23.2", "0.24.0", "0.24.0rc0", "0.24.0rc1", "0.24.0rc2", "0.24.1", "0.25.0", "0.25.0rc0", "0.25.0rc1", "0.25.1", "0.25.2", "0.25.2rc0", "0.26.0", "0.26.0rc0", "0.26.0rc1", "0.26.1", "0.26.2", "0.26.3", "0.26.4", "0.26.5", "0.27.0", "0.27.0rc0", "0.27.0rc1", "0.27.0rc2", "0.27.0rc3", "0.27.0rc4", "0.27.0rc5", "0.27.1", "0.27.2", "0.28.0", "0.28.0rc0", "0.28.0rc1", "0.28.0rc2", "0.28.0rc3", "0.28.1", "0.28.10", "0.28.11", "0.28.12", "0.28.13", "0.28.14", "0.28.15", "0.28.2", "0.28.3", "0.28.4", "0.28.5", "0.28.6", "0.28.7", "0.28.8", "0.29.0", "0.29.0rc0", "0.29.1", "0.29.2", "0.3.0", "0.30.0", "0.30.0rc0", "0.30.0rc1", "0.30.1", "0.30.2", "0.30.3", "0.30.4", "0.30.5", "0.30.6", "0.31.0", "0.31.0rc0", "0.31.0rc1", "0.31.0rc2", "0.31.1", "0.31.10", "0.31.11", "0.31.12", "0.31.2", "0.31.3", "0.31.4", "0.31.5", "0.31.6", "0.31.7", "0.31.8", "0.31.9", "0.32.0", "0.32.0rc0", "0.32.0rc1", "0.32.1", "0.33.0", "0.33.0rc0", "0.33.0rc1", "0.33.1", "0.33.10", "0.33.11", "0.33.12", "0.33.2", "0.33.3", "0.33.4", "0.33.5", "0.33.6", "0.33.7", "0.33.8", "0.33.9", "0.34.0", "0.34.0rc0", "0.34.0rc1", "0.34.0rc2", "0.34.1", "0.34.10", "0.34.11", "0.34.12", "0.34.2", "0.34.3", "0.34.4", "0.34.5", "0.34.6", "0.34.7", "0.34.8", "0.34.9", "0.35.0", "0.35.0rc0", "0.35.0rc1", "0.35.0rc2", "0.35.1", "0.35.2", "0.35.3", "0.35.4", "0.35.5", "0.35.6", "0.4.0", "0.4.1", "0.5.0", "0.6.0", "0.7.0", "0.8.0", "0.9.0", "0.9.1", "1.0.0", "1.0.0a0", "1.0.0a1", "1.0.0a10", "1.0.0a2", "1.0.0a3", "1.0.0a4", "1.0.0a5", "1.0.0a6", "1.0.0a7", "1.0.0a8", "1.0.0a9", "1.0.0rc0", "1.0.0rc1", "1.0.1", "1.0.10", "1.0.2", "1.0.3", "1.0.4", "1.0.5", "1.0.6", "1.0.7", "1.0.9", "1.1.0", "1.1.0a0", "1.1.0a1", "1.1.0a2", "1.1.0rc0", "1.1.1", "1.1.2", "1.1.3", "1.1.4", "1.1.5", "1.2.0", "1.2.0a0", "1.2.0a1", "1.2.0a2", "1.2.0a3", "1.2.0rc0", "1.2.1", "1.2.10", "1.2.11", "1.2.12", "1.2.13", "1.2.14", "1.2.15", "1.2.16", "1.2.17", "1.2.18", "1.2.19", "1.2.2", "1.2.20", "1.2.21", "1.2.3", "1.2.4", "1.2.5", "1.2.6", "1.2.7", "1.2.8", "1.2.9", "2.0.0", "2.0.0a0", "2.0.0a1", "2.0.0a3", "2.0.0a4", "2.0.0b1", "2.0.0b2", "2.0.0b3", "2.0.0rc0", "2.0.0rc1", "2.0.0rc2", "2.0.1", "2.0.1rc0", "2.0.2", "2.1.0", "2.1.0a0", "2.1.0b0", "2.1.0rc0", "2.1.1", "2.1.2", "2.1.3", "2.1.4", "2.1.5", "2.2.0", "2.2.0a0", "2.2.0a1", "2.2.0rc1", "2.2.1", "2.2.10", "2.2.2", "2.2.4", "2.2.5", "2.2.6", "2.2.7", "2.2.8", "2.2.9", "2.3.0", "2.3.0a0", "2.3.0a1", "2.3.0a2", "2.3.0rc0", "2.3.1", "2.3.2", "3.0.0", "3.0.0a0", "3.0.0a10", "3.0.0a11", "3.0.0a12", "3.0.0a13", "3.0.0a14", "3.0.0a3", "3.0.0a4", "3.0.0a5", "3.0.0a6", "3.0.0a7", "3.0.0a8", "3.0.0a9", "3.0.0b1", "3.0.0b2", "3.0.0b3", "3.0.0b4", "3.0.0b6", "3.0.0b7", "3.0.0b8", "3.0.0rc0", "3.0.0rc1", "3.0.0rc10", "3.0.0rc11", "3.0.0rc12", "3.0.0rc13", "3.0.0rc14", "3.0.0rc15", "3.0.0rc2", "3.0.0rc3", "3.0.0rc4", "3.0.0rc5", "3.0.0rc6", "3.0.0rc7", "3.0.0rc8", "3.0.0rc9", "3.0.1", "3.0.10", "3.0.11", "3.0.12", "3.0.13", "3.0.14", "3.0.15", "3.0.16", "3.0.17", "3.0.18", "3.0.2", "3.0.3", "3.0.4", "3.0.5", "3.0.6", "3.0.7", "3.0.8", "3.0.9", "3.1.0", "3.1.0a0", "3.1.0a1", "3.1.0a10", "3.1.0a11", "3.1.0a12", "3.1.0a13", "3.1.0a2", "3.1.0a3", "3.1.0a4", "3.1.0a5", "3.1.0a6", "3.1.0a7", "3.1.0a8", "3.1.0a9", "3.1.0b0", "3.1.0b1", "3.1.0rc1", "3.1.0rc2", "3.1.1", "3.1.10", "3.1.11", "3.1.12", "3.1.13", "3.1.14", "3.1.16", "3.1.17", "3.1.18", "3.1.19", "3.1.2", "3.1.4", "3.1.6", "3.1.7", "3.1.8", "3.1.9", "3.2.0", "3.2.0a0", "3.2.0a1", "3.2.0b0", "3.2.0rc0", "3.2.1", "3.2.2", "3.2.3", "3.2.4", "3.2.5", "3.2.6", "3.2.7", "3.2.8", "3.2.9", "3.3.0", "3.3.0a1", "3.3.0a2", "3.3.0a3", "3.3.0b0", "3.3.0rc0", "3.3.1", "3.3.2", "3.3.3", "3.3.4", "3.4.0", "3.4.0a0", "3.4.0b0", "3.4.0rc0", "3.4.1", "3.4.2", "3.4.3", "3.4.4", "3.4.5", "3.4.6", "3.4.7", "3.4.8", "3.5.0", "3.5.0a0", "3.5.0b0", "3.5.0rc0", "3.5.1", "3.5.2", "3.5.3", "3.6.0", "3.6.0a0", "3.6.0a1", "3.6.0a2", "3.6.0a3", "3.6.0a4", "3.6.0a5", "3.6.0b0", "3.6.0rc0", "3.6.0rc1", "3.6.1", "3.6.2", "3.6.3", "3.6.4", "3.6.5", "3.6.6", "3.6.7", "3.6.8", "4.0.0", "4.0.0a0", "4.0.0a1", "4.0.0a10", "4.0.0a11", "4.0.0a12", "4.0.0a13", "4.0.0a14", "4.0.0a15", "4.0.0a16", "4.0.0a17", "4.0.0a18", "4.0.0a19", "4.0.0a20", "4.0.0a21", "4.0.0a22", "4.0.0a23", "4.0.0a24", "4.0.0a25", "4.0.0a26", "4.0.0a27", "4.0.0a28", "4.0.0a29", "4.0.0a3", "4.0.0a30", "4.0.0a31", "4.0.0a32", "4.0.0a33", "4.0.0a34", "4.0.0a35", "4.0.0a36", "4.0.0a4", "4.0.0a6", "4.0.0a7", "4.0.0a8", "4.0.0a9", "4.0.0b0", "4.0.0b1", "4.0.0b2", "4.0.0rc0", "4.0.0rc1", "4.0.1", "4.0.10", "4.0.11", "4.0.12", "4.0.13", "4.0.2", "4.0.3", "4.0.4", "4.0.5", "4.0.6", "4.0.7", "4.0.8", "4.0.9", "4.1.0", "4.1.0a1", "4.1.0a2", "4.1.0a3", "4.1.0a4", "4.1.0b0", "4.1.0b1", "4.1.0b2", "4.1.0rc0", "4.1.0rc1", "4.1.1", "4.1.2", "4.1.3", "4.1.4", "4.1.5", "4.1.6", "4.1.7", "4.1.8", "4.2.0", "4.2.0a0", "4.2.0a1", "4.2.0a2", "4.2.0b0", "4.2.0b1", "4.2.0b2", "4.2.0b3", "4.2.0rc0", "4.2.1", "4.2.2", "4.2.3", "4.2.4", "4.2.5", "4.2.6", "4.2.7", "4.3.0", "4.3.0a0", "4.3.0a1", "4.3.0a2", "4.3.0b0", "4.3.0b1", "4.3.0b2", "4.3.0b3", "4.3.0rc0", "4.3.0rc1", "4.3.1", "4.3.2", "4.3.3", "4.3.4", "4.3.5", "4.3.6", "4.3.7", "4.3.8", "4.4.0", "4.4.0a0", "4.4.0a1", "4.4.0a2", "4.4.0a3", "4.4.0b0", "4.4.0b1", "4.4.0b2", "4.4.0rc0", "4.4.0rc1", "4.4.1", "4.4.10", "4.4.2", "4.4.3", "4.4.4", "4.4.5", "4.4.6", "4.4.7", "4.4.8", "4.4.9", "4.5.0", "4.5.0a0", "4.5.0a1", "4.5.0a2", "4.5.0a3", "4.5.0a4", "4.5.0b0", "4.5.0b1", "4.5.0rc0", "4.5.0rc1", "4.5.1", "4.5.2", "4.5.3", "4.5.4", "4.5.5", "4.5.6", "4.5.7", "4.5.8", "4.5.9", "4.6.0", "4.6.1" ], "osv_entries": [ { "osv_id": "GHSA-gx64-gj6p-pc4c", "osv_published_at": "2026-07-22T23:14:44Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-23T02:29:03Z", "flagged_at": null, "confirmed_at": "2026-07-23T02:29:03Z", "osv_earliest_published_at": "2026-07-22T23:14:44Z", "source_published_at": "2026-07-22T23:14:44Z", "observed_at": "2026-07-23T02:29:03Z", "ingested_at": "2026-07-23T02:29:03Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-23T02:29:05Z", "ledger_committed_at": "2026-07-23T02:29:05Z" }, { "id": "ibreak-2026-07-23", "display_name": "ibreak", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ibreak", "ecosystem": "pypi", "versions": [ "0.1.2", "0.1.3", "0.1.4" ], "osv_entries": [ { "osv_id": "MAL-2026-10909", "osv_published_at": "2026-07-20T10:13:16Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-23T08:28:46Z", "flagged_at": null, "confirmed_at": "2026-07-23T08:28:46Z", "osv_earliest_published_at": "2026-07-20T10:13:16Z", "source_published_at": "2026-07-20T10:13:16Z", "observed_at": "2026-07-23T08:28:46Z", "ingested_at": "2026-07-23T08:28:46Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-23T08:29:10Z", "ledger_committed_at": "2026-07-23T08:29:10Z" }, { "id": "mysupergoodpython-2026-07-23", "display_name": "mysupergoodpython", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mysupergoodpython", "ecosystem": "pypi", "versions": [ "0.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10910", "osv_published_at": "2026-07-20T10:13:29Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-23T08:28:48Z", "flagged_at": null, "confirmed_at": "2026-07-23T08:28:48Z", "osv_earliest_published_at": "2026-07-20T10:13:29Z", "source_published_at": "2026-07-20T10:13:29Z", "observed_at": "2026-07-23T08:28:48Z", "ingested_at": "2026-07-23T08:28:48Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-23T08:29:19Z", "ledger_committed_at": "2026-07-23T08:29:19Z" }, { "id": "mysuperlicense-2026-07-23", "display_name": "mysuperlicense", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mysuperlicense", "ecosystem": "pypi", "versions": [ "0.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10911", "osv_published_at": "2026-07-20T10:13:29Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-23T08:28:49Z", "flagged_at": null, "confirmed_at": "2026-07-23T08:28:49Z", "osv_earliest_published_at": "2026-07-20T10:13:29Z", "source_published_at": "2026-07-20T10:13:29Z", "observed_at": "2026-07-23T08:28:49Z", "ingested_at": "2026-07-23T08:28:49Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-23T08:29:29Z", "ledger_committed_at": "2026-07-23T08:29:29Z" }, { "id": "shark-e2e-bnsneo-2026-07-23", "display_name": "shark-e2e-bnsneo", "campaign": null, "detection_source": "osv", "packages": [ { "package": "shark-e2e-bnsneo", "ecosystem": "pypi", "versions": [ "0.2.10", "0.2.9", "0.3.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10912", "osv_published_at": "2026-07-20T10:13:52Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-23T08:28:50Z", "flagged_at": null, "confirmed_at": "2026-07-23T08:28:50Z", "osv_earliest_published_at": "2026-07-20T10:13:52Z", "source_published_at": "2026-07-20T10:13:52Z", "observed_at": "2026-07-23T08:28:50Z", "ingested_at": "2026-07-23T08:28:50Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-23T08:29:38Z", "ledger_committed_at": "2026-07-23T08:29:38Z" }, { "id": "workspace-lint-2026-07-23", "display_name": "workspace-lint", "campaign": null, "detection_source": "osv", "packages": [ { "package": "workspace-lint", "ecosystem": "npm", "versions": [ "0.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10112", "osv_published_at": "2026-07-10T02:59:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-23T08:34:15Z", "flagged_at": null, "confirmed_at": "2026-07-23T08:34:15Z", "osv_earliest_published_at": "2026-07-10T02:59:00Z", "source_published_at": "2026-07-10T02:59:00Z", "observed_at": "2026-07-23T08:34:15Z", "ingested_at": "2026-07-23T08:34:15Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-23T08:34:19Z", "ledger_committed_at": "2026-07-23T08:34:19Z" }, { "id": "workspace-scripts-2026-07-23", "display_name": "workspace-scripts", "campaign": null, "detection_source": "osv", "packages": [ { "package": "workspace-scripts", "ecosystem": "npm", "versions": [ "0.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10113", "osv_published_at": "2026-07-10T02:59:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-23T08:34:16Z", "flagged_at": null, "confirmed_at": "2026-07-23T08:34:16Z", "osv_earliest_published_at": "2026-07-10T02:59:00Z", "source_published_at": "2026-07-10T02:59:00Z", "observed_at": "2026-07-23T08:34:16Z", "ingested_at": "2026-07-23T08:34:16Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-23T08:34:28Z", "ledger_committed_at": "2026-07-23T08:34:28Z" }, { "id": "motiondnb-2026-07-23", "display_name": "motiondnb", "campaign": null, "detection_source": "osv", "packages": [ { "package": "motiondnb", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10145", "osv_published_at": "2026-07-10T16:24:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-23T08:34:17Z", "flagged_at": null, "confirmed_at": "2026-07-23T08:34:17Z", "osv_earliest_published_at": "2026-07-10T16:24:50Z", "source_published_at": "2026-07-10T16:24:50Z", "observed_at": "2026-07-23T08:34:17Z", "ingested_at": "2026-07-23T08:34:17Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-23T08:34:37Z", "ledger_committed_at": "2026-07-23T08:34:37Z" }, { "id": "ng-search-api-2026-07-23", "display_name": "ng-search-api", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ng-search-api", "ecosystem": "npm", "versions": [ "99.9.1" ], "osv_entries": [ { "osv_id": "MAL-2026-10146", "osv_published_at": "2026-07-10T16:24:50Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-23T08:34:18Z", "flagged_at": null, "confirmed_at": "2026-07-23T08:34:18Z", "osv_earliest_published_at": "2026-07-10T16:24:50Z", "source_published_at": "2026-07-10T16:24:50Z", "observed_at": "2026-07-23T08:34:18Z", "ingested_at": "2026-07-23T08:34:18Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-23T08:34:46Z", "ledger_committed_at": "2026-07-23T08:34:46Z" }, { "id": "kirkland-2026-07-23", "display_name": "kirkland", "campaign": null, "detection_source": "osv", "packages": [ { "package": "kirkland", "ecosystem": "npm", "versions": [ "1.1.2" ], "osv_entries": [ { "osv_id": "MAL-2026-10331", "osv_published_at": "2026-07-13T06:27:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-23T08:34:32Z", "flagged_at": null, "confirmed_at": "2026-07-23T08:34:32Z", "osv_earliest_published_at": "2026-07-13T06:27:39Z", "source_published_at": "2026-07-13T06:27:39Z", "observed_at": "2026-07-23T08:34:32Z", "ingested_at": "2026-07-23T08:34:32Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-23T08:35:35Z", "ledger_committed_at": "2026-07-23T08:35:35Z" }, { "id": "solana-rpc-client-2026-07-23", "display_name": "solana-rpc-client", "campaign": null, "detection_source": "osv", "packages": [ { "package": "solana-rpc-client", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10898", "osv_published_at": "2026-07-20T10:59:11Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-23T08:35:25Z", "flagged_at": null, "confirmed_at": "2026-07-23T08:35:25Z", "osv_earliest_published_at": "2026-07-20T10:59:11Z", "source_published_at": "2026-07-20T10:59:11Z", "observed_at": "2026-07-23T08:35:25Z", "ingested_at": "2026-07-23T08:35:25Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-23T08:38:56Z", "ledger_committed_at": "2026-07-23T08:38:56Z" }, { "id": "solana-web3-fixed-2026-07-23", "display_name": "solana-web3-fixed", "campaign": null, "detection_source": "osv", "packages": [ { "package": "solana-web3-fixed", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10899", "osv_published_at": "2026-07-20T10:59:12Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-23T08:35:26Z", "flagged_at": null, "confirmed_at": "2026-07-23T08:35:26Z", "osv_earliest_published_at": "2026-07-20T10:59:12Z", "source_published_at": "2026-07-20T10:59:12Z", "observed_at": "2026-07-23T08:35:26Z", "ingested_at": "2026-07-23T08:35:26Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-23T08:39:06Z", "ledger_committed_at": "2026-07-23T08:39:06Z" }, { "id": "solana-web3-fork-2026-07-23", "display_name": "solana-web3-fork", "campaign": null, "detection_source": "osv", "packages": [ { "package": "solana-web3-fork", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10900", "osv_published_at": "2026-07-20T10:59:23Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-23T08:35:27Z", "flagged_at": null, "confirmed_at": "2026-07-23T08:35:27Z", "osv_earliest_published_at": "2026-07-20T10:59:23Z", "source_published_at": "2026-07-20T10:59:23Z", "observed_at": "2026-07-23T08:35:27Z", "ingested_at": "2026-07-23T08:35:27Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-23T08:39:15Z", "ledger_committed_at": "2026-07-23T08:39:15Z" }, { "id": "solana-web3-lts-2026-07-23", "display_name": "solana-web3-lts", "campaign": null, "detection_source": "osv", "packages": [ { "package": "solana-web3-lts", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10901", "osv_published_at": "2026-07-20T10:59:24Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-23T08:35:28Z", "flagged_at": null, "confirmed_at": "2026-07-23T08:35:28Z", "osv_earliest_published_at": "2026-07-20T10:59:24Z", "source_published_at": "2026-07-20T10:59:24Z", "observed_at": "2026-07-23T08:35:28Z", "ingested_at": "2026-07-23T08:35:28Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-23T08:39:24Z", "ledger_committed_at": "2026-07-23T08:39:24Z" }, { "id": "solana-web3-patched-2026-07-23", "display_name": "solana-web3-patched", "campaign": null, "detection_source": "osv", "packages": [ { "package": "solana-web3-patched", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10902", "osv_published_at": "2026-07-20T10:59:24Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-23T08:35:30Z", "flagged_at": null, "confirmed_at": "2026-07-23T08:35:30Z", "osv_earliest_published_at": "2026-07-20T10:59:24Z", "source_published_at": "2026-07-20T10:59:24Z", "observed_at": "2026-07-23T08:35:30Z", "ingested_at": "2026-07-23T08:35:30Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-23T08:39:34Z", "ledger_committed_at": "2026-07-23T08:39:34Z" }, { "id": "solana-web3-stable-2026-07-23", "display_name": "solana-web3-stable", "campaign": null, "detection_source": "osv", "packages": [ { "package": "solana-web3-stable", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10903", "osv_published_at": "2026-07-20T10:59:24Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-23T08:35:31Z", "flagged_at": null, "confirmed_at": "2026-07-23T08:35:31Z", "osv_earliest_published_at": "2026-07-20T10:59:24Z", "source_published_at": "2026-07-20T10:59:24Z", "observed_at": "2026-07-23T08:35:31Z", "ingested_at": "2026-07-23T08:35:31Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-23T08:39:44Z", "ledger_committed_at": "2026-07-23T08:39:44Z" }, { "id": "solana-web3-v1-2026-07-23", "display_name": "solana-web3-v1", "campaign": null, "detection_source": "osv", "packages": [ { "package": "solana-web3-v1", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10904", "osv_published_at": "2026-07-20T10:59:25Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-23T08:35:32Z", "flagged_at": null, "confirmed_at": "2026-07-23T08:35:32Z", "osv_earliest_published_at": "2026-07-20T10:59:25Z", "source_published_at": "2026-07-20T10:59:25Z", "observed_at": "2026-07-23T08:35:32Z", "ingested_at": "2026-07-23T08:35:32Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-23T08:39:53Z", "ledger_committed_at": "2026-07-23T08:39:53Z" }, { "id": "win-build-utils-2026-07-23", "display_name": "win-build-utils", "campaign": null, "detection_source": "osv", "packages": [ { "package": "win-build-utils", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10905", "osv_published_at": "2026-07-20T11:04:39Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-23T08:35:34Z", "flagged_at": null, "confirmed_at": "2026-07-23T08:35:34Z", "osv_earliest_published_at": "2026-07-20T11:04:39Z", "source_published_at": "2026-07-20T11:04:39Z", "observed_at": "2026-07-23T08:35:34Z", "ingested_at": "2026-07-23T08:35:34Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-23T08:40:02Z", "ledger_committed_at": "2026-07-23T08:40:02Z" }, { "id": "your-unique-package-name1337-2026-07-23", "display_name": "your-unique-package-name1337", "campaign": null, "detection_source": "osv", "packages": [ { "package": "your-unique-package-name1337", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10906", "osv_published_at": "2026-07-20T11:05:26Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-23T08:35:35Z", "flagged_at": null, "confirmed_at": "2026-07-23T08:35:35Z", "osv_earliest_published_at": "2026-07-20T11:05:26Z", "source_published_at": "2026-07-20T11:05:26Z", "observed_at": "2026-07-23T08:35:35Z", "ingested_at": "2026-07-23T08:35:35Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-23T08:40:11Z", "ledger_committed_at": "2026-07-23T08:40:11Z" }, { "id": "ng-vzbootstrap-2026-07-23", "display_name": "ng-vzbootstrap", "campaign": null, "detection_source": "osv", "packages": [ { "package": "ng-vzbootstrap", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-1100", "osv_published_at": "2026-03-01T17:14:48Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-23T08:36:15Z", "flagged_at": null, "confirmed_at": "2026-07-23T08:36:15Z", "osv_earliest_published_at": "2026-03-01T17:14:48Z", "source_published_at": "2026-03-01T17:14:48Z", "observed_at": "2026-07-23T08:36:15Z", "ingested_at": "2026-07-23T08:36:15Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-23T08:42:43Z", "ledger_committed_at": "2026-07-23T08:42:43Z" }, { "id": "mvn-runtime-2026-07-23", "display_name": "mvn-runtime", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mvn-runtime", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-1202", "osv_published_at": "2026-03-03T06:48:16Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-23T08:36:35Z", "flagged_at": null, "confirmed_at": "2026-07-23T08:36:35Z", "osv_earliest_published_at": "2026-03-03T06:48:16Z", "source_published_at": "2026-03-03T06:48:16Z", "observed_at": "2026-07-23T08:36:35Z", "ingested_at": "2026-07-23T08:36:35Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-23T08:43:59Z", "ledger_committed_at": "2026-07-23T08:43:59Z" }, { "id": "js-shared-modules-2026-07-23", "display_name": "js-shared-modules", "campaign": null, "detection_source": "osv", "packages": [ { "package": "js-shared-modules", "ecosystem": "npm", "versions": [ "1.11.6" ], "osv_entries": [ { "osv_id": "MAL-2026-5098", "osv_published_at": "2026-05-31T10:18:28Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-23T08:36:53Z", "flagged_at": null, "confirmed_at": "2026-07-23T08:36:53Z", "osv_earliest_published_at": "2026-05-31T10:18:28Z", "source_published_at": "2026-05-31T10:18:28Z", "observed_at": "2026-07-23T08:36:53Z", "ingested_at": "2026-07-23T08:36:53Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-23T08:44:58Z", "ledger_committed_at": "2026-07-23T08:44:58Z" }, { "id": "solana-web3-community-2026-07-23", "display_name": "solana-web3-community", "campaign": null, "detection_source": "osv", "packages": [ { "package": "solana-web3-community", "ecosystem": "npm", "versions": [ "1.0.3", "1.0.4", "1.0.5" ], "osv_entries": [ { "osv_id": "MAL-2026-5560", "osv_published_at": "2026-06-11T02:58:17Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-23T08:37:20Z", "flagged_at": null, "confirmed_at": "2026-07-23T08:37:20Z", "osv_earliest_published_at": "2026-06-11T02:58:17Z", "source_published_at": "2026-06-11T02:58:17Z", "observed_at": "2026-07-23T08:37:20Z", "ingested_at": "2026-07-23T08:37:20Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-23T08:46:13Z", "ledger_committed_at": "2026-07-23T08:46:13Z" }, { "id": "sea-bound-siren-2026-07-23", "display_name": "sea-bound-siren", "campaign": null, "detection_source": "osv", "packages": [ { "package": "sea-bound-siren", "ecosystem": "npm", "versions": [ "9999.0.0", "9999.0.1", "9999.0.2", "9999.0.3", "9999.0.4" ], "osv_entries": [ { "osv_id": "MAL-2026-5693", "osv_published_at": "2026-06-12T14:32:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-23T08:37:34Z", "flagged_at": null, "confirmed_at": "2026-07-23T08:37:34Z", "osv_earliest_published_at": "2026-06-12T14:32:51Z", "source_published_at": "2026-06-12T14:32:51Z", "observed_at": "2026-07-23T08:37:34Z", "ingested_at": "2026-07-23T08:37:34Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-23T08:46:53Z", "ledger_committed_at": "2026-07-23T08:46:53Z" }, { "id": "params-valid-js-2026-07-23", "display_name": "params-valid-js", "campaign": null, "detection_source": "osv", "packages": [ { "package": "params-valid-js", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-5988", "osv_published_at": "2026-06-17T04:22:54Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-23T08:38:07Z", "flagged_at": null, "confirmed_at": "2026-07-23T08:38:07Z", "osv_earliest_published_at": "2026-06-17T04:22:54Z", "source_published_at": "2026-06-17T04:22:54Z", "observed_at": "2026-07-23T08:38:07Z", "ingested_at": "2026-07-23T08:38:07Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-23T08:48:37Z", "ledger_committed_at": "2026-07-23T08:48:37Z" }, { "id": "govapkg-2026-07-23", "display_name": "govapkg", "campaign": null, "detection_source": "osv", "packages": [ { "package": "govapkg", "ecosystem": "pypi", "versions": [ "0.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-11031", "osv_published_at": "2026-07-23T20:06:38Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-23T21:06:37Z", "flagged_at": null, "confirmed_at": "2026-07-23T21:06:37Z", "osv_earliest_published_at": "2026-07-23T20:06:38Z", "source_published_at": "2026-07-23T20:06:38Z", "observed_at": "2026-07-23T21:06:37Z", "ingested_at": "2026-07-23T21:06:37Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-23T21:09:39Z", "ledger_committed_at": "2026-07-23T21:09:39Z" }, { "id": "react-tabulix-extended-2026-07-24", "display_name": "react-tabulix-extended", "campaign": null, "detection_source": "osv", "packages": [ { "package": "react-tabulix-extended", "ecosystem": "npm", "versions": [ "0.1.7" ], "osv_entries": [ { "osv_id": "MAL-2026-11040", "osv_published_at": "2026-07-22T13:00:59Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-24T00:52:55Z", "flagged_at": null, "confirmed_at": "2026-07-24T00:52:55Z", "osv_earliest_published_at": "2026-07-22T13:00:59Z", "source_published_at": "2026-07-22T13:00:59Z", "observed_at": "2026-07-24T00:52:55Z", "ingested_at": "2026-07-24T00:52:55Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-24T00:52:58Z", "ledger_committed_at": "2026-07-24T00:52:58Z" }, { "id": "daylightqc-date-fmt-lite-2026-07-24", "display_name": "@daylightqc/date-fmt-lite", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@daylightqc/date-fmt-lite", "ecosystem": "npm", "versions": [ "1.0.0", "1.0.1", "1.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-11041", "osv_published_at": "2026-07-24T02:57:49Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-24T04:42:36Z", "flagged_at": null, "confirmed_at": "2026-07-24T04:42:36Z", "osv_earliest_published_at": "2026-07-24T02:57:49Z", "source_published_at": "2026-07-24T02:57:49Z", "observed_at": "2026-07-24T04:42:36Z", "ingested_at": "2026-07-24T04:42:36Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-24T04:42:38Z", "ledger_committed_at": "2026-07-24T04:42:38Z" }, { "id": "faust-cont-2026-07-24", "display_name": "faust-cont", "campaign": null, "detection_source": "osv", "packages": [ { "package": "faust-cont", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-11042", "osv_published_at": "2026-07-21T00:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-24T06:49:42Z", "flagged_at": null, "confirmed_at": "2026-07-24T06:49:42Z", "osv_earliest_published_at": "2026-07-21T00:00:00Z", "source_published_at": "2026-07-21T00:00:00Z", "observed_at": "2026-07-24T06:49:42Z", "ingested_at": "2026-07-24T06:49:42Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-24T06:49:51Z", "ledger_committed_at": "2026-07-24T06:49:51Z" }, { "id": "tailwind-gutenberg-block-zero-2026-07-24", "display_name": "tailwind-gutenberg-block-zero", "campaign": null, "detection_source": "osv", "packages": [ { "package": "tailwind-gutenberg-block-zero", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-11044", "osv_published_at": "2026-07-20T00:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-24T07:16:13Z", "flagged_at": null, "confirmed_at": "2026-07-24T07:16:13Z", "osv_earliest_published_at": "2026-07-20T00:00:00Z", "source_published_at": "2026-07-20T00:00:00Z", "observed_at": "2026-07-24T07:16:13Z", "ingested_at": "2026-07-24T07:16:13Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-24T07:16:16Z", "ledger_committed_at": "2026-07-24T07:16:16Z" }, { "id": "supplyhub-2026-07-24", "display_name": "supplyhub", "campaign": null, "detection_source": "osv", "packages": [ { "package": "supplyhub", "ecosystem": "npm", "versions": [ "1.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-11043", "osv_published_at": "2026-07-20T00:00:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-24T07:16:16Z", "flagged_at": null, "confirmed_at": "2026-07-24T07:16:16Z", "osv_earliest_published_at": "2026-07-20T00:00:00Z", "source_published_at": "2026-07-20T00:00:00Z", "observed_at": "2026-07-24T07:16:16Z", "ingested_at": "2026-07-24T07:16:16Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-24T07:16:26Z", "ledger_committed_at": "2026-07-24T07:16:26Z" }, { "id": "subapp-pkg-util-2026-07-24", "display_name": "subapp-pkg-util", "campaign": null, "detection_source": "osv", "packages": [ { "package": "subapp-pkg-util", "ecosystem": "npm", "versions": [ "99.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-11045", "osv_published_at": "2026-07-24T06:42:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-24T08:32:29Z", "flagged_at": null, "confirmed_at": "2026-07-24T08:32:29Z", "osv_earliest_published_at": "2026-07-24T06:42:00Z", "source_published_at": "2026-07-24T06:42:00Z", "observed_at": "2026-07-24T08:32:29Z", "ingested_at": "2026-07-24T08:32:29Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-24T08:32:31Z", "ledger_committed_at": "2026-07-24T08:32:31Z" }, { "id": "intel-cicd-repo-infrastructure-2026-07-24", "display_name": "intel-cicd-repo-infrastructure", "campaign": null, "detection_source": "osv", "packages": [ { "package": "intel-cicd-repo-infrastructure", "ecosystem": "pypi", "versions": [ "0.0.0", "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-11046", "osv_published_at": "2026-07-24T10:10:17Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-24T10:31:26Z", "flagged_at": null, "confirmed_at": "2026-07-24T10:31:26Z", "osv_earliest_published_at": "2026-07-24T10:10:17Z", "source_published_at": "2026-07-24T10:10:17Z", "observed_at": "2026-07-24T10:31:26Z", "ingested_at": "2026-07-24T10:31:26Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-24T10:31:30Z", "ledger_committed_at": "2026-07-24T10:31:30Z" }, { "id": "karpatkey-2026-07-24", "display_name": "karpatkey", "campaign": null, "detection_source": "osv", "packages": [ { "package": "karpatkey", "ecosystem": "pypi", "versions": [ "2.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-11047", "osv_published_at": "2026-07-24T09:21:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-24T10:31:28Z", "flagged_at": null, "confirmed_at": "2026-07-24T10:31:28Z", "osv_earliest_published_at": "2026-07-24T09:21:35Z", "source_published_at": "2026-07-24T09:21:35Z", "observed_at": "2026-07-24T10:31:28Z", "ingested_at": "2026-07-24T10:31:28Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-24T10:31:39Z", "ledger_committed_at": "2026-07-24T10:31:39Z" }, { "id": "karpatkit-2026-07-24", "display_name": "karpatkit", "campaign": null, "detection_source": "osv", "packages": [ { "package": "karpatkit", "ecosystem": "pypi", "versions": [ "2.1.0", "2.1.1" ], "osv_entries": [ { "osv_id": "MAL-2026-11048", "osv_published_at": "2026-07-24T09:22:28Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-24T10:31:29Z", "flagged_at": null, "confirmed_at": "2026-07-24T10:31:29Z", "osv_earliest_published_at": "2026-07-24T09:22:28Z", "source_published_at": "2026-07-24T09:22:28Z", "observed_at": "2026-07-24T10:31:29Z", "ingested_at": "2026-07-24T10:31:29Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-24T10:31:48Z", "ledger_committed_at": "2026-07-24T10:31:48Z" }, { "id": "roles-royce-2026-07-24", "display_name": "roles-royce", "campaign": null, "detection_source": "osv", "packages": [ { "package": "roles-royce", "ecosystem": "pypi", "versions": [ "2.1.0" ], "osv_entries": [ { "osv_id": "MAL-2026-10927", "osv_published_at": "2026-07-20T17:53:19Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-24T10:31:31Z", "flagged_at": null, "confirmed_at": "2026-07-24T10:31:31Z", "osv_earliest_published_at": "2026-07-20T17:53:19Z", "source_published_at": "2026-07-20T17:53:19Z", "observed_at": "2026-07-24T10:31:31Z", "ingested_at": "2026-07-24T10:31:31Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-24T10:31:58Z", "ledger_committed_at": "2026-07-24T10:31:58Z" }, { "id": "mrmustard-2026-07-24", "display_name": "mrmustard", "campaign": null, "detection_source": "osv", "packages": [ { "package": "mrmustard", "ecosystem": "pypi", "versions": [ "0.7.4" ], "osv_entries": [ { "osv_id": "MAL-2026-11049", "osv_published_at": "2026-07-24T14:10:00Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-24T15:25:10Z", "flagged_at": null, "confirmed_at": "2026-07-24T15:25:10Z", "osv_earliest_published_at": "2026-07-24T14:10:00Z", "source_published_at": "2026-07-24T14:10:00Z", "observed_at": "2026-07-24T15:25:10Z", "ingested_at": "2026-07-24T15:25:10Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-24T15:41:15Z", "ledger_committed_at": "2026-07-24T15:41:15Z" }, { "id": "discordnv-2026-07-24", "display_name": "discordnv", "campaign": null, "detection_source": "osv", "packages": [ { "package": "discordnv", "ecosystem": "pypi", "versions": [ "0.8.0" ], "osv_entries": [ { "osv_id": "MAL-2026-11050", "osv_published_at": "2026-07-24T19:14:19Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-24T20:13:06Z", "flagged_at": null, "confirmed_at": "2026-07-24T20:13:06Z", "osv_earliest_published_at": "2026-07-24T19:14:19Z", "source_published_at": "2026-07-24T19:14:19Z", "observed_at": "2026-07-24T20:13:06Z", "ingested_at": "2026-07-24T20:13:06Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-24T20:13:08Z", "ledger_committed_at": "2026-07-24T20:13:08Z" }, { "id": "trongridy-2026-07-24", "display_name": "trongridy", "campaign": null, "detection_source": "osv", "packages": [ { "package": "trongridy", "ecosystem": "pypi", "versions": [ "0.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-11051", "osv_published_at": "2026-07-24T21:59:44Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-24T22:42:59Z", "flagged_at": null, "confirmed_at": "2026-07-24T22:42:59Z", "osv_earliest_published_at": "2026-07-24T21:59:44Z", "source_published_at": "2026-07-24T21:59:44Z", "observed_at": "2026-07-24T22:42:59Z", "ingested_at": "2026-07-24T22:42:59Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-24T22:43:01Z", "ledger_committed_at": "2026-07-24T22:43:01Z" }, { "id": "fundraiserservicepp-2026-07-25", "display_name": "fundraiserservicepp", "campaign": null, "detection_source": "osv", "packages": [ { "package": "fundraiserservicepp", "ecosystem": "npm", "versions": [ "1.5.0" ], "osv_entries": [ { "osv_id": "MAL-2026-11055", "osv_published_at": "2026-07-25T08:20:10Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-25T08:58:36Z", "flagged_at": null, "confirmed_at": "2026-07-25T08:58:36Z", "osv_earliest_published_at": "2026-07-25T08:20:10Z", "source_published_at": "2026-07-25T08:20:10Z", "observed_at": "2026-07-25T08:58:36Z", "ingested_at": "2026-07-25T08:58:36Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-25T08:58:38Z", "ledger_committed_at": "2026-07-25T08:58:38Z" }, { "id": "f0-data-constructor-2026-07-25", "display_name": "f0-data-constructor", "campaign": null, "detection_source": "osv", "packages": [ { "package": "f0-data-constructor", "ecosystem": "npm", "versions": [ "28.0.0" ], "osv_entries": [ { "osv_id": "MAL-2023-1491", "osv_published_at": "2023-08-19T17:23:08Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-25T09:55:53Z", "flagged_at": null, "confirmed_at": "2026-07-25T09:55:53Z", "osv_earliest_published_at": "2023-08-19T17:23:08Z", "source_published_at": "2023-08-19T17:23:08Z", "observed_at": "2026-07-25T09:55:53Z", "ingested_at": "2026-07-25T09:55:53Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-25T09:55:56Z", "ledger_committed_at": "2026-07-25T09:55:56Z" }, { "id": "f0-fpti-tracking-manager-2026-07-25", "display_name": "f0-fpti-tracking-manager", "campaign": null, "detection_source": "osv", "packages": [ { "package": "f0-fpti-tracking-manager", "ecosystem": "npm", "versions": [ "28.0.0" ], "osv_entries": [ { "osv_id": "MAL-2023-8293", "osv_published_at": "2023-10-05T16:01:10Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-25T09:55:54Z", "flagged_at": null, "confirmed_at": "2026-07-25T09:55:54Z", "osv_earliest_published_at": "2023-10-05T16:01:10Z", "source_published_at": "2023-10-05T16:01:10Z", "observed_at": "2026-07-25T09:55:54Z", "ingested_at": "2026-07-25T09:55:54Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-25T09:56:05Z", "ledger_committed_at": "2026-07-25T09:56:05Z" }, { "id": "fundraiserserv-2026-07-25", "display_name": "fundraiserserv", "campaign": null, "detection_source": "osv", "packages": [ { "package": "fundraiserserv", "ecosystem": "npm", "versions": [ "28.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-5172", "osv_published_at": "2026-06-02T17:30:53Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-25T09:55:56Z", "flagged_at": null, "confirmed_at": "2026-07-25T09:55:56Z", "osv_earliest_published_at": "2026-06-02T17:30:53Z", "source_published_at": "2026-06-02T17:30:53Z", "observed_at": "2026-07-25T09:55:56Z", "ingested_at": "2026-07-25T09:55:56Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-25T09:56:16Z", "ledger_committed_at": "2026-07-25T09:56:16Z" }, { "id": "gpaas-paypal-2026-07-25", "display_name": "gpaas-paypal", "campaign": null, "detection_source": "osv", "packages": [ { "package": "gpaas-paypal", "ecosystem": "npm", "versions": [ "28.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-11056", "osv_published_at": "2026-07-25T09:28:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-25T09:55:58Z", "flagged_at": null, "confirmed_at": "2026-07-25T09:55:58Z", "osv_earliest_published_at": "2026-07-25T09:28:35Z", "source_published_at": "2026-07-25T09:28:35Z", "observed_at": "2026-07-25T09:55:58Z", "ingested_at": "2026-07-25T09:55:58Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-25T09:56:25Z", "ledger_committed_at": "2026-07-25T09:56:25Z" }, { "id": "merchantprefsservice-paypal-2026-07-25", "display_name": "merchantprefsservice-paypal", "campaign": null, "detection_source": "osv", "packages": [ { "package": "merchantprefsservice-paypal", "ecosystem": "npm", "versions": [ "28.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-11057", "osv_published_at": "2026-07-25T09:36:51Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-25T09:55:59Z", "flagged_at": null, "confirmed_at": "2026-07-25T09:55:59Z", "osv_earliest_published_at": "2026-07-25T09:36:51Z", "source_published_at": "2026-07-25T09:36:51Z", "observed_at": "2026-07-25T09:55:59Z", "ingested_at": "2026-07-25T09:55:59Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-25T09:56:35Z", "ledger_committed_at": "2026-07-25T09:56:35Z" }, { "id": "payoutsvettingserv-paypal-2026-07-25", "display_name": "payoutsvettingserv-paypal", "campaign": null, "detection_source": "osv", "packages": [ { "package": "payoutsvettingserv-paypal", "ecosystem": "npm", "versions": [ "28.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-11058", "osv_published_at": "2026-07-25T09:24:19Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-25T09:56:01Z", "flagged_at": null, "confirmed_at": "2026-07-25T09:56:01Z", "osv_earliest_published_at": "2026-07-25T09:24:19Z", "source_published_at": "2026-07-25T09:24:19Z", "observed_at": "2026-07-25T09:56:01Z", "ingested_at": "2026-07-25T09:56:01Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-25T09:56:46Z", "ledger_committed_at": "2026-07-25T09:56:46Z" }, { "id": "pp-react-ui5-2026-07-25", "display_name": "pp-react-ui5", "campaign": null, "detection_source": "osv", "packages": [ { "package": "pp-react-ui5", "ecosystem": "npm", "versions": [ "28.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-11059", "osv_published_at": "2026-07-25T09:28:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-25T09:56:02Z", "flagged_at": null, "confirmed_at": "2026-07-25T09:56:02Z", "osv_earliest_published_at": "2026-07-25T09:28:22Z", "source_published_at": "2026-07-25T09:28:22Z", "observed_at": "2026-07-25T09:56:02Z", "ingested_at": "2026-07-25T09:56:02Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-25T09:56:55Z", "ledger_committed_at": "2026-07-25T09:56:55Z" }, { "id": "f0-form-manipulator-2026-07-25", "display_name": "f0-form-manipulator", "campaign": null, "detection_source": "osv", "packages": [ { "package": "f0-form-manipulator", "ecosystem": "npm", "versions": [ "28.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-11060", "osv_published_at": "2026-07-25T09:44:24Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-25T10:41:45Z", "flagged_at": null, "confirmed_at": "2026-07-25T10:41:45Z", "osv_earliest_published_at": "2026-07-25T09:44:24Z", "source_published_at": "2026-07-25T09:44:24Z", "observed_at": "2026-07-25T10:41:45Z", "ingested_at": "2026-07-25T10:41:45Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-25T10:41:48Z", "ledger_committed_at": "2026-07-25T10:41:48Z" }, { "id": "identityscimapiserv-2026-07-25", "display_name": "identityscimapiserv", "campaign": null, "detection_source": "osv", "packages": [ { "package": "identityscimapiserv", "ecosystem": "npm", "versions": [ "28.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-11061", "osv_published_at": "2026-07-25T10:04:20Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-25T10:41:47Z", "flagged_at": null, "confirmed_at": "2026-07-25T10:41:47Z", "osv_earliest_published_at": "2026-07-25T10:04:20Z", "source_published_at": "2026-07-25T10:04:20Z", "observed_at": "2026-07-25T10:41:47Z", "ingested_at": "2026-07-25T10:41:47Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-25T10:41:58Z", "ledger_committed_at": "2026-07-25T10:41:58Z" }, { "id": "preferenceslifecycle-paypal-2026-07-25", "display_name": "preferenceslifecycle-paypal", "campaign": null, "detection_source": "osv", "packages": [ { "package": "preferenceslifecycle-paypal", "ecosystem": "npm", "versions": [ "28.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-11062", "osv_published_at": "2026-07-25T09:44:17Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-25T10:41:49Z", "flagged_at": null, "confirmed_at": "2026-07-25T10:41:49Z", "osv_earliest_published_at": "2026-07-25T09:44:17Z", "source_published_at": "2026-07-25T09:44:17Z", "observed_at": "2026-07-25T10:41:49Z", "ingested_at": "2026-07-25T10:41:49Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-25T10:42:08Z", "ledger_committed_at": "2026-07-25T10:42:08Z" }, { "id": "xo-member-components-2026-07-25", "display_name": "xo-member-components", "campaign": null, "detection_source": "osv", "packages": [ { "package": "xo-member-components", "ecosystem": "npm", "versions": [ "28.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-11063", "osv_published_at": "2026-07-25T09:54:22Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-25T10:41:50Z", "flagged_at": null, "confirmed_at": "2026-07-25T10:41:50Z", "osv_earliest_published_at": "2026-07-25T09:54:22Z", "source_published_at": "2026-07-25T09:54:22Z", "observed_at": "2026-07-25T10:41:50Z", "ingested_at": "2026-07-25T10:41:50Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-25T10:42:17Z", "ledger_committed_at": "2026-07-25T10:42:17Z" }, { "id": "page-navigation-2026-07-25", "display_name": "page-navigation", "campaign": null, "detection_source": "osv", "packages": [ { "package": "page-navigation", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-11064", "osv_published_at": "2026-07-25T11:48:24Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-25T12:08:53Z", "flagged_at": null, "confirmed_at": "2026-07-25T12:08:53Z", "osv_earliest_published_at": "2026-07-25T11:48:24Z", "source_published_at": "2026-07-25T11:48:24Z", "observed_at": "2026-07-25T12:08:53Z", "ingested_at": "2026-07-25T12:08:53Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-25T12:08:55Z", "ledger_committed_at": "2026-07-25T12:08:55Z" }, { "id": "swiper-angular-2026-07-25", "display_name": "swiper_angular", "campaign": null, "detection_source": "osv", "packages": [ { "package": "swiper_angular", "ecosystem": "npm", "versions": [ "5.9999.0" ], "osv_entries": [ { "osv_id": "MAL-2026-11065", "osv_published_at": "2026-07-25T16:30:40Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-25T16:59:39Z", "flagged_at": null, "confirmed_at": "2026-07-25T16:59:39Z", "osv_earliest_published_at": "2026-07-25T16:30:40Z", "source_published_at": "2026-07-25T16:30:40Z", "observed_at": "2026-07-25T16:59:39Z", "ingested_at": "2026-07-25T16:59:39Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-25T17:14:26Z", "ledger_committed_at": "2026-07-25T17:14:26Z" }, { "id": "ks-radar-radar-2026-07-25", "display_name": "@ks-radar/radar", "campaign": null, "detection_source": "osv", "packages": [ { "package": "@ks-radar/radar", "ecosystem": "npm", "versions": [ "22.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-11066", "osv_published_at": "2026-07-25T21:45:33Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-25T22:04:52Z", "flagged_at": null, "confirmed_at": "2026-07-25T22:04:52Z", "osv_earliest_published_at": "2026-07-25T21:45:33Z", "source_published_at": "2026-07-25T21:45:33Z", "observed_at": "2026-07-25T22:04:52Z", "ingested_at": "2026-07-25T22:04:52Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-25T22:04:54Z", "ledger_committed_at": "2026-07-25T22:04:54Z" }, { "id": "signalk-beluga-core-2026-07-25", "display_name": "signalk-beluga-core", "campaign": "ks-radar", "detection_source": "npm_registry", "packages": [ { "package": "signalk-beluga-core", "ecosystem": "npm", "versions": [ "0.2.0", "0.2.1" ], "osv_entries": [] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-25T22:06:10Z", "flagged_at": null, "confirmed_at": "2026-07-25T22:06:10Z", "osv_earliest_published_at": null, "source_published_at": null, "observed_at": "2026-07-25T22:06:10Z", "ingested_at": "2026-07-25T22:06:10Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://registry.npmjs.org/signalk-beluga-core", "ledger_commit_at": "2026-07-25T22:06:13Z", "ledger_committed_at": "2026-07-25T22:06:13Z" }, { "id": "blessclient-2026-07-25", "display_name": "blessclient", "campaign": null, "detection_source": "osv", "packages": [ { "package": "blessclient", "ecosystem": "pypi", "versions": [ "0.0.1", "0.0.2" ], "osv_entries": [ { "osv_id": "MAL-2026-11067", "osv_published_at": "2026-07-25T21:13:35Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-25T22:06:16Z", "flagged_at": null, "confirmed_at": "2026-07-25T22:06:16Z", "osv_earliest_published_at": "2026-07-25T21:13:35Z", "source_published_at": "2026-07-25T21:13:35Z", "observed_at": "2026-07-25T22:06:16Z", "ingested_at": "2026-07-25T22:06:16Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-25T22:06:23Z", "ledger_committed_at": "2026-07-25T22:06:23Z" }, { "id": "random-ua-generator-2026-07-26", "display_name": "random-ua-generator", "campaign": null, "detection_source": "osv", "packages": [ { "package": "random-ua-generator", "ecosystem": "pypi", "versions": [ "0.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-11068", "osv_published_at": "2026-07-26T19:36:57Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-26T20:31:02Z", "flagged_at": null, "confirmed_at": "2026-07-26T20:31:02Z", "osv_earliest_published_at": "2026-07-26T19:36:57Z", "source_published_at": "2026-07-26T19:36:57Z", "observed_at": "2026-07-26T20:31:02Z", "ingested_at": "2026-07-26T20:31:02Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-26T20:31:04Z", "ledger_committed_at": "2026-07-26T20:31:04Z" }, { "id": "semantic-router-2026-07-26", "display_name": "semantic-router", "campaign": null, "detection_source": "pypi_yank", "packages": [ { "package": "semantic-router", "ecosystem": "pypi", "versions": [ "0.1.10", "0.1.11", "0.1.12", "0.1.13", "0.1.14", "0.1.8", "0.1.9" ], "osv_entries": [] } ], "malware_type": "yanked_release", "attestd_detected_at": "2026-07-26T23:16:42Z", "flagged_at": null, "confirmed_at": "2026-07-26T23:16:42Z", "osv_earliest_published_at": null, "source_published_at": null, "observed_at": "2026-07-26T23:16:42Z", "ingested_at": "2026-07-26T23:16:42Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "https://pypi.org/pypi/semantic-router/json", "ledger_commit_at": "2026-07-26T23:16:45Z", "ledger_committed_at": "2026-07-26T23:16:45Z" }, { "id": "clerk-next-fix-auth-protection-2026-07-27", "display_name": "clerk-next-fix-auth-protection", "campaign": null, "detection_source": "osv", "packages": [ { "package": "clerk-next-fix-auth-protection", "ecosystem": "npm", "versions": [ "7.7.7", "8.8.8" ], "osv_entries": [ { "osv_id": "MAL-2026-11069", "osv_published_at": "2026-07-24T21:48:05Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-27T01:51:12Z", "flagged_at": null, "confirmed_at": "2026-07-27T01:51:12Z", "osv_earliest_published_at": "2026-07-24T21:48:05Z", "source_published_at": "2026-07-24T21:48:05Z", "observed_at": "2026-07-27T01:51:12Z", "ingested_at": "2026-07-27T01:51:12Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-27T01:51:14Z", "ledger_committed_at": "2026-07-27T01:51:14Z" }, { "id": "whs4-deu-2026-07-27", "display_name": "whs4_deu", "campaign": null, "detection_source": "osv", "packages": [ { "package": "whs4_deu", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-11070", "osv_published_at": "2026-07-25T16:15:37Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-27T01:51:13Z", "flagged_at": null, "confirmed_at": "2026-07-27T01:51:13Z", "osv_earliest_published_at": "2026-07-25T16:15:37Z", "source_published_at": "2026-07-25T16:15:37Z", "observed_at": "2026-07-27T01:51:13Z", "ingested_at": "2026-07-27T01:51:13Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-27T01:51:23Z", "ledger_committed_at": "2026-07-27T01:51:23Z" }, { "id": "whs4-eud-2026-07-27", "display_name": "whs4_eud", "campaign": null, "detection_source": "osv", "packages": [ { "package": "whs4_eud", "ecosystem": "npm", "versions": [ "1.0.1" ], "osv_entries": [ { "osv_id": "MAL-2026-11071", "osv_published_at": "2026-07-25T15:55:34Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-27T01:51:15Z", "flagged_at": null, "confirmed_at": "2026-07-27T01:51:15Z", "osv_earliest_published_at": "2026-07-25T15:55:34Z", "source_published_at": "2026-07-25T15:55:34Z", "observed_at": "2026-07-27T01:51:15Z", "ingested_at": "2026-07-27T01:51:15Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-27T01:51:31Z", "ledger_committed_at": "2026-07-27T01:51:31Z" }, { "id": "wsh4-edu-2026-07-27", "display_name": "wsh4_edu", "campaign": null, "detection_source": "osv", "packages": [ { "package": "wsh4_edu", "ecosystem": "npm", "versions": [ "1.0.0" ], "osv_entries": [ { "osv_id": "MAL-2026-11072", "osv_published_at": "2026-07-25T16:00:59Z" } ] } ], "malware_type": "malware", "attestd_detected_at": "2026-07-27T01:51:16Z", "flagged_at": null, "confirmed_at": "2026-07-27T01:51:16Z", "osv_earliest_published_at": "2026-07-25T16:00:59Z", "source_published_at": "2026-07-25T16:00:59Z", "observed_at": "2026-07-27T01:51:16Z", "ingested_at": "2026-07-27T01:51:16Z", "first_served_at": null, "hours_ahead_of_osv": null, "hours_ahead_of_press": null, "press_coverage_at": null, "press_urls": [], "advisory_url": "", "ledger_commit_at": "2026-07-27T01:51:40Z", "ledger_committed_at": "2026-07-27T01:51:40Z" } ]