目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1336

100%
← 返回恶意软件包
npm active

@whalent/agent-core

MAL-2026-10722
2026-08-05 22:03:05
OpenSSF Malicious Packages
该软件包被识别为恶意包。建议隔离受影响环境,并排查凭据泄露和异常网络连接。

Summary

Malicious code in @whalent/agent-core (npm)

凭据/密钥窃取
AI 分析整理qwen3.6
基于上游报告生成,请以下方原始证据为准。
公开使用量数据
统计周期
last-week
下载量
2,456
数据源
npmjs.org
下载量只代表仓库活动度,不等于已被入侵的安装数量。
永久样本归档NAS
版本状态大小SHA-256获取方式
0.3.230archivedVIP 下载
0.3.231unavailable
0.3.232unavailable
0.3.233unavailable
0.3.234unavailable
0.3.235unavailable
0.3.238unavailable
0.3.239unavailable
0.3.240unavailable
0.3.241unavailable
0.3.243unavailable
0.3.244unavailable
0.3.245unavailable
0.3.247unavailable
0.3.248unavailable
0.3.249unavailable
0.3.250unavailable
样本保存在内网 NAS 隔离区,不公开镜像地址;已开通会员可直接从平台下载。同步任务不会解压或执行样本。
受影响版本
EcosystemPackageVersion
npm@whalent/agent-core0.3.230
npm@whalent/agent-core0.3.231
npm@whalent/agent-core0.3.232
npm@whalent/agent-core0.3.233
npm@whalent/agent-core0.3.234
npm@whalent/agent-core0.3.235
npm@whalent/agent-core0.3.238
npm@whalent/agent-core0.3.239
npm@whalent/agent-core0.3.240
npm@whalent/agent-core0.3.241
npm@whalent/agent-core0.3.243
npm@whalent/agent-core0.3.244
npm@whalent/agent-core0.3.245
npm@whalent/agent-core0.3.247
npm@whalent/agent-core0.3.248
npm@whalent/agent-core0.3.249
npm@whalent/agent-core0.3.250
npm@whalent/agent-core0.3.251
npm@whalent/agent-core0.3.252
npm@whalent/agent-core0.3.253
npm@whalent/agent-core0.3.254
npm@whalent/agent-core0.3.255
npm@whalent/agent-core0.3.257
npm@whalent/agent-core0.3.258
npm@whalent/agent-core0.3.259
npm@whalent/agent-core0.3.261
npm@whalent/agent-core0.3.262
npm@whalent/agent-core0.3.263
npm@whalent/agent-core0.3.264
npm@whalent/agent-core0.3.265
npm@whalent/agent-core0.3.266
npm@whalent/agent-core0.3.268
npm@whalent/agent-core0.3.271
npm@whalent/agent-core0.3.273
npm@whalent/agent-core0.3.275
npm@whalent/agent-core0.3.276
npm@whalent/agent-core0.3.277
npm@whalent/agent-core0.3.278
npm@whalent/agent-core0.3.279
npm@whalent/agent-core0.3.280
npm@whalent/agent-core0.3.282
npm@whalent/agent-core0.3.288
npm@whalent/agent-core0.3.289
npm@whalent/agent-core0.3.291
npm@whalent/agent-core0.3.294
npm@whalent/agent-core0.3.295
npm@whalent/agent-core0.3.296
npm@whalent/agent-core0.3.297
npm@whalent/agent-core0.3.298
恶意行为说明OpenSSF OSV
上游来源证据
展开原始 OSV JSON
{"schema_version":"1.7.4","id":"MAL-2026-10722","published":"2026-07-16T18:41:02Z","modified":"2026-08-05T22:03:05.049646712Z","summary":"Malicious code in @whalent/agent-core (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (d8865ae7d25a498766280337f12ceea445a92bd6a6565e668651a79dbcc152e9)\nThe package's main/bin entry (dist/index.cjs) implements a remote agent that opens a WebSocket to a gateway configured via WHALENT_GATEWAY / WHALENT_TOKEN / WHALENT_PLATFORM_URL and, over that channel, drives local PTY sessions via node-pty, spawns shells against process.env.SHELL, bridges loopback services on 127.0.0.1:3389 (RDP) and 127.0.0.1:5900/5901 (VNC), and runs a Python Jupyter kernel sidecar (dist/jupyter_sidecar.py) that executes arbitrary NDJSON-delivered code cells. The remote party at the gateway therefore has interactive command and code execution on the installer's host, plus a channel to reach otherwise-loopback-bound RDP/VNC. The 13.6 MB dist/index.cjs is protected with obfuscator.io-style transforms — a rotated 105,426-entry string array, _0xNNNN identifier renaming, decoder wrappers, and control-flow flattening — hiding the gateway URLs, command dispatch, and upgrade logic from review. The bundle additionally contains an npmInstall code path plus WHALENT_NPM_REGISTRY and WHALENT_CORE_ENTRY environment configuration, and the README describes the package as one that is 'replaced by remote daemon upgrades', so the running agent can be instructed by the gateway to fetch and swap in a new version of @whalent/agent-core from a configurable registry, executing whatever code that fetched artifact contains. The net effect of installing and running this package is a persistent, remote-controlled RCE channel into the installer's machine with a self-update mechanism that can pull further code from a registry the remote party can influence.\n","affected":[{"package":{"name":"@whalent/agent-core","ecosystem":"npm"},"versions":["0.3.230","0.3.231","0.3.232","0.3.233","0.3.254","0.3.280","0.3.298","0.3.294","0.3.295","0.3.277","0.3.278","0.3.282","0.3.276","0.3.296","0.3.275","0.3.271","0.3.297","0.3.291","0.3.289","0.3.273","0.3.288","0.3.279","0.3.244","0.3.250","0.3.255","0.3.248","0.3.263","0.3.257","0.3.251","0.3.262","0.3.258","0.3.238","0.3.247","0.3.264","0.3.265","0.3.266","0.3.268","0.3.239","0.3.261","0.3.243","0.3.249","0.3.240","0.3.235","0.3.252","0.3.234","0.3.259","0.3.253","0.3.245","0.3.241"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"dist/index.cjs","sha256":"e19ad18fdc2487d3d8c1fb71355fef09a9ce9a80e706b57f2fd3156ae8281b79","tlsh":"0526084063c06859238b9ff77727b0e6e45f1c6e34484c9be118bd656ae6213faf5a30"},{"path":"README.md","sha256":"022b8307b02bf5349d0e86cae0ebda12bfe2d3fb9f9bfb306fef5b3782d00be6","tlsh":"87c08c7067ea27334a405b4ae02803f0cf2db5b872371c9cbf0253ede36857ea542698"}],"package_integrity":[{"filename":"agent-core-0.3.230.tgz","hashes":{"sha1":"f812a7c4acc426f5312ad9dbbe9454b56e65f71a","sha512_sri":"sha512-+TmUaSCguyoEFwiwYZjj0InbqOLJRczgtwdUiJk9dUijdkfvFP1dJXx5yqjmOrXU8joJFaiSM9yhxtSbmzBpMA=="}}]}}}],"references":[{"type":"PACKAGE","url":"https://www.npmjs.com/package/@whalent/agent-core/v/0.3.230"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@whalent/agent-core/v/0.3.231"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@whalent/agent-core/v/0.3.232"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@whalent/agent-core/v/0.3.233"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@whalent/agent-core/v/0.3.254"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@whalent/agent-core/v/0.3.280"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@whalent/agent-core/v/0.3.298"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@whalent/agent-core/v/0.3.294"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@whalent/agent-core/v/0.3.295"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@whalent/agent-core/v/0.3.277"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@whalent/agent-core/v/0.3.278"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@whalent/agent-core/v/0.3.282"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@whalent/agent-core/v/0.3.276"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@whalent/agent-core/v/0.3.296"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@whalent/agent-core/v/0.3.275"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@whalent/agent-core/v/0.3.271"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@whalent/agent-core/v/0.3.297"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@whalent/agent-core/v/0.3.291"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@whalent/agent-core/v/0.3.289"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@whalent/agent-core/v/0.3.273"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@whalent/agent-core/v/0.3.288"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@whalent/agent-core/v/0.3.279"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@whalent/agent-core/v/0.3.244"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@whalent/agent-core/v/0.3.250"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@whalent/agent-core/v/0.3.255"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@whalent/agent-core/v/0.3.248"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@whalent/agent-core/v/0.3.263"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@whalent/agent-core/v/0.3.257"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@whalent/agent-core/v/0.3.251"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@whalent/agent-core/v/0.3.262"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@whalent/agent-core/v/0.3.258"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@whalent/agent-core/v/0.3.238"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@whalent/agent-core/v/0.3.247"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@whalent/agent-core/v/0.3.264"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@whalent/agent-core/v/0.3.265"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@whalent/agent-core/v/0.3.266"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@whalent/agent-core/v/0.3.268"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@whalent/agent-core/v/0.3.239"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@whalent/agent-core/v/0.3.261"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@whalent/agent-core/v/0.3.243"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@whalent/agent-core/v/0.3.249"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@whalent/agent-core/v/0.3.240"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@whalent/agent-core/v/0.3.235"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@whalent/agent-core/v/0.3.252"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@whalent/agent-core/v/0.3.234"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@whalent/agent-core/v/0.3.259"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@whalent/agent-core/v/0.3.253"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@whalent/agent-core/v/0.3.245"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@whalent/agent-core/v/0.3.241"}],"database_specific":{"malicious-packages-origins":[{"id":"IN-MAL-2026-010759","import_time":"2026-07-16T18:54:03.119631435Z","modified_time":"2026-07-16T18:43:15Z","sha256":"46be592c948ce3d8346e8df384e2925b3d3d6011079b1033257395bc6f989f4e","source":"amazon-inspector","versions":["0.3.230"]},{"id":"IN-MAL-2026-010756","import_time":"2026-07-16T18:54:02.989746229Z","modified_time":"2026-07-16T18:42:52Z","sha256":"96088bf0c797b908d17f5ac937e019a9c65a8f7c02a9fe5d78e32b2dc5f64e8f","source":"amazon-inspector","versions":["0.3.231"]},{"id":"IN-MAL-2026-010752","import_time":"2026-07-16T18:54:02.801973608Z","modified_time":"2026-07-16T18:42:15Z","sha256":"dfa859fe59b5a5e6139dfb586748a1a49a1dbf95e1a4df9dd9360d54e358b632","source":"amazon-inspector","versions":["0.3.232"]},{"id":"IN-MAL-2026-010744","import_time":"2026-07-16T18:54:02.334183566Z","modified_time":"2026-07-16T18:41:02Z","sha256":"dfd40ffe52986a560961c8d4d9d7a3ec526813f9a2f335cef9c6884ca9f6d2cf","source":"amazon-inspector","versions":["0.3.233"]},{"id":"IN-MAL-2026-014795","import_time":"2026-08-05T13:08:47.048667688Z","modified_time":"2026-08-05T12:52:24Z","sha256":"811508b0151874b0105b396a1ad5993b7fee5015742b2b2220034eb3d93236a1","source":"amazon-inspector","versions":["0.3.254"]},{"id":"IN-MAL-2026-015924","import_time":"2026-08-05T21:31:24.279464873Z","modified_time":"2026-08-05T21:29:17Z","sha256":"14e7971e9132b8243ba12fcf61d6b749718c88e9c02e02f15471f721fe207bcd","source":"amazon-inspector","versions":["0.3.280"]},{"id":"IN-MAL-2026-015911","import_time":"2026-08-05T21:31:22.983483773Z","modified_time":"2026-08-05T21:27:18Z","sha256":"3107f0284317014c3df66adde3086c9294b6207256d5404e9279787ae6f81667","source":"amazon-inspector","versions":["0.3.298"]},{"id":"IN-MAL-2026-015914","import_time":"2026-08-05T21:31:23.2825051Z","modified_time":"2026-08-05T21:27:50Z","sha256":"90cd4fdc6d2a722921a9714c3cac69493db464a3c7e8a8a31ba12f1b5df2ad1d","source":"amazon-inspector","versions":["0.3.294"]},{"id":"IN-MAL-2026-015916","import_time":"2026-08-05T21:31:23.469087546Z","modified_time":"2026-08-05T21:28:06Z","sha256":"be658feb838b7653a7563627c0e7b80f41e91487c0a9b950e8062790d84d6978","source":"amazon-inspector","versions":["0.3.295"]},{"id":"IN-MAL-2026-015930","import_time":"2026-08-05T21:31:24.880844675Z","modified_time":"2026-08-05T21:30:12Z","sha256":"67e27f60a9673ab2e9676369114606e6b5757f3825969dee8d4b9b0074e3b54b","source":"amazon-inspector","versions":["0.3.277"]},{"id":"IN-MAL-2026-015928","import_time":"2026-08-05T21:31:24.697194471Z","modified_time":"2026-08-05T21:29:51Z","sha256":"7692218c096e4d081c0d4721255046c02675b8e7a576c0d753e1a6308e8f3606","source":"amazon-inspector","versions":["0.3.278"]},{"id":"IN-MAL-2026-015921","import_time":"2026-08-05T21:31:23.99190391Z","modified_time":"2026-08-05T21:28:49Z","sha256":"9017aac5656f4105fcfcf2984f6eea0cea4b131579ca385b1e7c6ea5d4dc11cb","source":"amazon-inspector","versions":["0.3.282"]},{"id":"IN-MAL-2026-015931","import_time":"2026-08-05T21:31:24.974482381Z","modified_time":"2026-08-05T21:30:21Z","sha256":"dc36f896d7d48928de1f657993ed80fb8cf729c12e96b4556b851e6b7515389d","source":"amazon-inspector","versions":["0.3.276"]},{"id":"IN-MAL-2026-015912","import_time":"2026-08-05T21:31:23.070684062Z","modified_time":"2026-08-05T21:27:33Z","sha256":"e02004353541b138d2453fb599789749f235a45c1da87578e2570959807b146c","source":"amazon-inspector","versions":["0.3.296"]},{"id":"IN-MAL-2026-015934","import_time":"2026-08-05T21:31:25.276149926Z","modified_time":"2026-08-05T21:30:43Z","sha256":"20ae409525f897a6bf13470423151c019808ababcc9455c1357dd7a0f26133ad","source":"amazon-inspector","versions":["0.3.275"]},{"id":"IN-MAL-2026-015935","import_time":"2026-08-05T21:31:25.366567961Z","modified_time":"2026-08-05T21:30:52Z","sha256":"63c0b08b0ef2d85b4cd3d7c71dcbf77fe7a2b9f760809ce02d0dd1e5c27bda6d","source":"amazon-inspector","versions":["0.3.271"]},{"id":"IN-MAL-2026-015909","import_time":"2026-08-05T21:31:22.794657049Z","modified_time":"2026-08-05T21:26:59Z","sha256":"7921089093342b0425ada24f1454c86bd0abf8273bcd7e249a1f50b8d476eb49","source":"amazon-inspector","versions":["0.3.297"]},{"id":"IN-MAL-2026-015915","import_time":"2026-08-05T21:31:23.374639152Z","modified_time":"2026-08-05T21:27:57Z","sha256":"84fff48eeb751d773ce91e440353fe03e2574234047a4c77de7f86a3a5755a15","source":"amazon-inspector","versions":["0.3.291"]},{"id":"IN-MAL-2026-015918","import_time":"2026-08-05T21:31:23.685084713Z","modified_time":"2026-08-05T21:28:24Z","sha256":"c9fc0fbee1fdeb89486d7662d5ab11c095ae9b5244e5c8352c7a4951ad25f746","source":"amazon-inspector","versions":["0.3.289"]},{"id":"IN-MAL-2026-015933","import_time":"2026-08-05T21:31:25.183558195Z","modified_time":"2026-08-05T21:30:36Z","sha256":"2cf17de651aab9a6dce831fd09935b61ef2dffc389e8424ac28045737e1121f6","source":"amazon-inspector","versions":["0.3.273"]},{"id":"IN-MAL-2026-015919","import_time":"2026-08-05T21:31:23.808483616Z","modified_time":"2026-08-05T21:28:33Z","sha256":"40a21e4cec6d3659c3887cac58aacb824e3f029cbf0dcfb67fcd59384a3d1539","source":"amazon-inspector","versions":["0.3.288"]},{"id":"IN-MAL-2026-015929","import_time":"2026-08-05T21:31:24.788300756Z","modified_time":"2026-08-05T21:30:01Z","sha256":"7c1a4e8bd6dc6eb76f7a30de424b0d6ca77aeb7894f7c8fa7272eea08c1a91ae","source":"amazon-inspector","versions":["0.3.279"]},{"id":"IN-MAL-2026-015973","import_time":"2026-08-05T22:01:18.995305608Z","modified_time":"2026-08-05T21:35:55Z","sha256":"fdb6b1fc231c90a2e858c93ec86b4450aaa47802e1dafd19dfc0468a70e59411","source":"amazon-inspector","versions":["0.3.244"]},{"id":"IN-MAL-2026-015962","import_time":"2026-08-05T22:01:17.808437378Z","modified_time":"2026-08-05T21:34:23Z","sha256":"152fd75b4369c54ada8784514bc26ebccaa9b17f5fd2c27d1983e46bc312d82e","source":"amazon-inspector","versions":["0.3.250"]},{"id":"IN-MAL-2026-015953","import_time":"2026-08-05T22:01:16.816882582Z","modified_time":"2026-08-05T21:33:17Z","sha256":"670458226a629127508676f55312dbc6129b865315d77e66eccc02dffe9454fc","source":"amazon-inspector","versions":["0.3.255"]},{"id":"IN-MAL-2026-015968","import_time":"2026-08-05T22:01:18.474506592Z","modified_time":"2026-08-05T21:35:15Z","sha256":"9e1b877e9a34e5ac9d87ff0be3b79c35ee81554b75caec48631a94cac57f1a28","source":"amazon-inspector","versions":["0.3.248"]},{"id":"IN-MAL-2026-015944","import_time":"2026-08-05T22:01:15.817818286Z","modified_time":"2026-08-05T21:32:05Z","sha256":"ab5ffafd216bc18c498742c4a24c80cc167f27f5e002cc3192a3a5b23e906899","source":"amazon-inspector","versions":["0.3.263"]},{"id":"IN-MAL-2026-015952","import_time":"2026-08-05T22:01:16.719120513Z","modified_time":"2026-08-05T21:33:09Z","sha256":"c5c5d74ab460a6011b6fc4125744a380b5a6dbda904c6ef4ea87921f9b7e3eeb","source":"amazon-inspector","versions":["0.3.257"]},{"id":"IN-MAL-2026-015960","import_time":"2026-08-05T22:01:17.58678545Z","modified_time":"2026-08-05T21:34:07Z","sha256":"d8865ae7d25a498766280337f12ceea445a92bd6a6565e668651a79dbcc152e9","source":"amazon-inspector","versions":["0.3.251"]},{"id":"IN-MAL-2026-015947","import_time":"2026-08-05T22:01:16.186147132Z","modified_time":"2026-08-05T21:32:30Z","sha256":"f3661b57629a28ec3c727257a68c239f071fd355af0a9193371b958bb4e365ed","source":"amazon-inspector","versions":["0.3.262"]},{"id":"IN-MAL-2026-015950","import_time":"2026-08-05T22:01:16.514844686Z","modified_time":"2026-08-05T21:32:53Z","sha256":"2ad557e95ad107b801c5025dfe6df4a7557ecfeb7a067ced1899a5e18af87e9f","source":"amazon-inspector","versions":["0.3.258"]},{"id":"IN-MAL-2026-015981","import_time":"2026-08-05T22:01:19.806299423Z","modified_time":"2026-08-05T21:37:00Z","sha256":"427d08ffc5069e53bf44cb776a2031107b51642946e0afc98a5773ea77bb66d3","source":"amazon-inspector","versions":["0.3.238"]},{"id":"IN-MAL-2026-015967","import_time":"2026-08-05T22:01:18.345937064Z","modified_time":"2026-08-05T21:35:05Z","sha256":"42d84ee02db23fc5f3a144e79e44d2baced3966000e533bd6a9ce6dc766ce6ec","source":"amazon-inspector","versions":["0.3.247"]},{"id":"IN-MAL-2026-015945","import_time":"2026-08-05T22:01:15.94235209Z","modified_time":"2026-08-05T21:32:13Z","sha256":"7221e74b8b8f3c7b271ce4870c1a11b04119eb043f5b9154da8e3eb5f6c0434c","source":"amazon-inspector","versions":["0.3.264"]},{"id":"IN-MAL-2026-015941","import_time":"2026-08-05T22:01:15.502589438Z","modified_time":"2026-08-05T21:31:41Z","sha256":"747b4ea4b26831b1472eb1fed85d7e5de73f82da9297661da3dd0380341518b2","source":"amazon-inspector","versions":["0.3.265"]},{"id":"IN-MAL-2026-015939","import_time":"2026-08-05T22:01:15.305828368Z","modified_time":"2026-08-05T21:31:25Z","sha256":"cd61157fdd8757783087e6e36ec9e6f26b57c6ef2c9a67d3f3ded4863e27aedb","source":"amazon-inspector","versions":["0.3.266"]},{"id":"IN-MAL-2026-015940","import_time":"2026-08-05T22:01:15.405434284Z","modified_time":"2026-08-05T21:31:35Z","sha256":"e1eb06c3a520c0c6a0ca155821dcdd466ae392519f550fec2951f788d9d557ce","source":"amazon-inspector","versions":["0.3.268"]},{"id":"IN-MAL-2026-015980","import_time":"2026-08-05T22:01:19.720550355Z","modified_time":"2026-08-05T21:36:52Z","sha256":"f4749bcc3f267bed496c864419c8aea50c7da89778bf40a0db7c29587ae22911","source":"amazon-inspector","versions":["0.3.239"]},{"id":"IN-MAL-2026-015951","import_time":"2026-08-05T22:01:16.621951347Z","modified_time":"2026-08-05T21:33:00Z","sha256":"61fa518c11906647a6c6b85c1a63f6cb64331b29395b00c984562c74ca2bce62","source":"amazon-inspector","versions":["0.3.261"]},{"id":"IN-MAL-2026-015974","import_time":"2026-08-05T22:01:19.086467552Z","modified_time":"2026-08-05T21:36:02Z","sha256":"854343cc54b4886963723dfc7bb22a01b5b785cec17792e1a96945d4bfde62e3","source":"amazon-inspector","versions":["0.3.243"]},{"id":"IN-MAL-2026-015963","import_time":"2026-08-05T22:01:17.949738333Z","modified_time":"2026-08-05T21:34:34Z","sha256":"d196c84a8abd7bb3c0c7bc5f4ef5c44b673101c0688ede0354a91487d21ff9b1","source":"amazon-inspector","versions":["0.3.249"]},{"id":"IN-MAL-2026-015978","import_time":"2026-08-05T22:01:19.486285911Z","modified_time":"2026-08-05T21:36:36Z","sha256":"ee2bbf0621f845b3c6a2f0e81cffdf3d9d5bc9f864f980a4ed0a3399d0574c70","source":"amazon-inspector","versions":["0.3.240"]},{"id":"IN-MAL-2026-015984","import_time":"2026-08-05T22:01:20.156322836Z","modified_time":"2026-08-05T21:37:26Z","sha256":"a734409d9b32151ce01007b7393327e8f424aa9e3ce25269a57fd473a9a4b793","source":"amazon-inspector","versions":["0.3.235"]},{"id":"IN-MAL-2026-015958","import_time":"2026-08-05T22:01:17.35168581Z","modified_time":"2026-08-05T21:33:54Z","sha256":"0cf38e885f27ac7b85d4e80ed6219791d994c1dd03b58746cad18c4445455f93","source":"amazon-inspector","versions":["0.3.252"]},{"id":"IN-MAL-2026-015983","import_time":"2026-08-05T22:01:20.026294158Z","modified_time":"2026-08-05T21:37:17Z","sha256":"88f2f39be4b0537b33881bd4b65fea4502d17ed4cbdb3f9621839e6047310270","source":"amazon-inspector","versions":["0.3.234"]},{"id":"IN-MAL-2026-015948","import_time":"2026-08-05T22:01:16.293908388Z","modified_time":"2026-08-05T21:32:37Z","sha256":"a44db0d52ec24be996ea81ad7451041e683d0350da9c7df7e0db5c1140f1586a","source":"amazon-inspector","versions":["0.3.259"]},{"id":"IN-MAL-2026-015955","import_time":"2026-08-05T22:01:17.047086455Z","modified_time":"2026-08-05T21:33:31Z","sha256":"b5ddda891167c7ea6944c17795818a343098a5eb9e4e9572db99ee3e38c71f5d","source":"amazon-inspector","versions":["0.3.253"]},{"id":"IN-MAL-2026-015970","import_time":"2026-08-05T22:01:18.673108676Z","modified_time":"2026-08-05T21:35:31Z","sha256":"b5e4230c0446c5ec41494d6f59475a851d4cc3efc81432addb7bf9ba33290f2c","source":"amazon-inspector","versions":["0.3.245"]},{"id":"IN-MAL-2026-015975","import_time":"2026-08-05T22:01:19.175847331Z","modified_time":"2026-08-05T21:36:13Z","sha256":"c41404d18abdaada9f5dfaa1f9edfcc2e9235ed1abce2dd291d414cf531fd758","source":"amazon-inspector","versions":["0.3.241"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"}]}

数据来源:OpenSSF Malicious Packages · Apache-2.0