npm
11 malicious packages published on 2026-11-07 (pypi 10, npm 1)
Including: qzc690385, qzc690383, qzc690382, genblaze-fal, pulumi-doppler, genblaze-atlascloud, dsh-notify-focus, reqnests…
What to do: snare checks lockfiles and installs against these automatically — `snare deps`.
33 malicious packages published on 2026-11-06 (npm 32, pypi 1)
Including: @cherrydotfun/miniapp-sdk, hello-bat-fwi9, tailwind-animationfound, modelsdesk, kampodine, automic-style-engine, monobomber, monopw…
What to do: snare checks lockfiles and installs against these automatically — `snare deps`.
56 malicious packages published on 2026-11-05 (npm 52, pypi 4)
Including: itc-actors-api, talk-lang, plain-lang, @db-tools/main-app, test1817, @gemshell/win32-x64, dsh-purge, mcp-teamviewer…
What to do: snare checks lockfiles and installs against these automatically — `snare deps`.
10 malicious packages published on 2026-11-04 (npm 10)
Including: @secauditb20y/sec-test-b1, @secaudita10x/sec-test-a1, @secauditb20y/sec-test-r3b, exnesss, dogmans-afterglow, nannnnnnnnn, doghack-afterglow, @saidddddddddd/somethingelse…
What to do: snare checks lockfiles and installs against these automatically — `snare deps`.
Malicious release of screenshot-desktop (npm) — 66,054 downloads last week
Malware in screenshot-desktop
What to do: Run `snare deps` in every project, and `snare deps --system`. If it was installed, rotate credentials: `snare rotate`.
18 malicious packages published on 2026-11-03 (npm 16, pypi 2)
Including: arbkit, bandkit, jailbreak-code, txnforge, print-hello-world-test-temp, @mntv-analysis/ui, @user-interface-common/common-styles, web-pixels-manager…
What to do: snare checks lockfiles and installs against these automatically — `snare deps`.
Elo JavaScript emitter has sandbox escape to arbitrary Node.js / browser code execution via unfiltered .constructor member access
Summary An unauthenticated attacker who controls a string passed to any Elo JavaScript-emission path — defaultFormats.elo.parse(), the bin/elo CLI, or the live browser playground at elo-lang.org/try — can execute arbitrary code in the host JavaScript runtime. A payload built from
What to do: Upgrade @enspirit/elo to 1.0.1 or later.
Elo Ruby backend has Remote Code Execution via unescaped #{...} interpolation in emitted string literals and subtype-constraint labels
Summary Elo's Ruby backend emits attacker-controlled text into Ruby double-quoted strings without escaping the # character. Because # begins Ruby's interpolation sequences — #{expr}, #@ivar, #@@cvar, #$gvar — and any expression wrapped in #{...} may use backticks for shell execut
What to do: Upgrade @enspirit/elo to 1.0.1 or later.
7 malicious packages published on 2026-11-02 (npm 7)
Including: @ifasn/mmdd-doc-mcp, @ifasn/mmd-doc-mcp, @ifasn/mdd-doc-mcp, @ifasn/md-doc-mcp, bfvkjmeikpwhqxc, internal-renderers, pandafortunerush
What to do: snare checks lockfiles and installs against these automatically — `snare deps`.
7 malicious packages published on 2026-11-01 (npm 4, pypi 2, rubygems 1)
Including: dsh-screenshot-native, atlassian-wallboard-plugin, macs-shoaibs-pro17, privacypass-py, hs-framework, @axon-web/icons, pystr-codec
What to do: snare checks lockfiles and installs against these automatically — `snare deps`.
More from npm
7 malicious packages published on 2026-10-31 (pypi 5, npm 2)
Signal K resources API path traversal can disclose the JWT signing secret and enable remote code execution
27 malicious packages published on 2026-10-30 (npm 23, pypi 4)
43 malicious packages published on 2026-10-29 (npm 40, pypi 3)
GitHub Launches npm Firewall to Block Malicious Packages Before Installation
Node2Shell: Reproducing CVE-2026-111497 in the Node.js Brotli decoder
21 malicious packages published on 2026-10-28 (npm 20, pypi 1)
27 malicious packages published on 2026-10-27 (npm 25, pypi 2)
better-auth: OAuth state can be used as a Magic Link to sign in as another user
53 malicious packages published on 2026-10-26 (npm 47, pypi 6)
Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware
15 malicious packages published on 2026-10-25 (npm 13, pypi 2)
AI coding agents hijacked using AGENTS.md file in Downloads folder
4 malicious packages published on 2026-10-24 (npm 4)
44 malicious packages published on 2026-10-23 (pypi 25, npm 19)
obsidian-tc HTTP transport lacks Origin/DNS-rebinding protection, enabling drive-by vault access on loopback
obsidian-tc tokens can access arbitrary configured vaults
Node2Shell: Node.js Brotli vulnerability allows remote code execution (CVE-2026-111497)