Index

19/01/190112bf4526ec13b9f6493b6d62178f181304d0446dc48f65ca3e84f2caf0cb 6d ago

190112bf4526ec13b9f6493b6d62178f181304d0446dc48f65ca3e84f2caf0cb O(Er)H(Po)

81% Masquerades as Windows notepad

UcRaAfuW Oct 10

54fe2f341136bd862eb89bd79acdde34402582726e279d8cfe8d05016e7b51d5 ✓ O(Er)H(Po)

index.html Oct 10

9cc991ad6f6b794da4203ef2be733248817887cdbf6e6549a9d5366a64d0d6fa O(Er)H(Po)

Exporter::Tiny::Manual::Etc.3pm Oct 6

f7cec3e63b4e3f420017311361edbdb2ba3e01422668476498865d2103e0f57b O(Er)H(Po)

0b93dc4389e3c9a66a35c324ae1e1ea722f9bc4c089c37dd164c7fd73025a6ff Oct 5

0b93dc4389e3c9a66a35c324ae1e1ea722f9bc4c089c37dd164c7fd73025a6ff ✓ O(Er)H(Po)

55% standard applet wrapper

CGZ2Cocv Oct 2

49572b5965ab3b30f5b25a1b22ba54532db7a33f44c569d86f053a8d1f3e81f9 ✓ O(Er)H(Po)

UcRaAfuW Oct 1

7fc120cb0c1d54ec8f8d960345b52c209233e72404cbb77efdf4061fe8c2f463 ✓ O(Er)H(Po)

arm64-img/2026-09-15-raspios-trixie-arm64.img/2026-09-15-raspios-trixie-arm64.img.d/1.img.d/usr/bin Sep 29 raspios

c56f2a593ab84b51dbb26040fa1338c513163b3bf5e982e16dff0ac439d991d6 O(Er)H(Po)

Backdoor.Win32.Agent.iqi Sep 12

0fb2de5d3343a6cc1582607a8453c47f91190a131e2db55de6c9681a04de870b O(Er)H(Po)

Backdoor.Win32.Verify.b Sep 12

eda4db741c857ec8adeb6962156f0ab7289b2cae3877a8b18736bb1bee65faa3 O(Er)H(Po)

Backdoor.Win32.Prorat.btg Sep 12

03df1982287d9c35289edaa183e4ef0584d0b88c014947a5109e6658af63bca5 O(Er)H(Po)

Backdoor.Win32.Prorat.19.afx Sep 12

562d5429518b2ff7de0fea59d33f12969df47770b302d4e1bcc610f4bb0f8fdb O(Er)H(Po)

Backdoor.Win32.Prorat.auj Sep 12

0afe9f3dcb32458724c3ec09ec820698d42f24e92e5c65139d638cda9094443a O(Er)H(Po)

Backdoor.Win32.Prorat.kw Sep 12

d9c2218905a1f314f977a9f7a086630a0c3137adca01c761a7215dcfeb5473ab O(Er)H(Po)

Backdoor.Win32.Assasin.11 Sep 12

67cd8f970e1229588e8d823ba0d8bba5977c64aecf421eb5a21a33b6f528a7a4 O(Er)H(Po)

Backdoor.Win32.Prorat.ct Sep 12

27280ac5b0fc69549310ef3de941f729cae17aa00e6c5ced1d15630ada4cad29 O(Er)H(Po)

Trojan-PSW.Win32.Agent.kwz Sep 12

fc718ce1af62436fa2322257930548afbabaa8891cd7b09e38218f7a4cbde8f7 O(Er)H(Po)

Trojan-PSW.Win32.Gamec.cx Sep 12

82d47e241bf01315754caedd83a37f51c2bc3bc251c4defe5356a5c2e8ac8fd4 O(Er)H(Po)

Trojan-Downloader.Win32.Zlob.mrz Sep 12

a9f66c8db2c2d794a7dfa2a5e4662668251f1cfb0f3d81121b53f1c4629454b4 O(Er)H(Po)

Trojan-GameThief.Win32.OnLineGames.dai Sep 12

cf6f7d2e0c8a936b3c58241c071631d9a280dfbb3056b491a75397c317ecd915 O(Er)H(Po)

Trojan-GameThief.Win32.OnLineGames.rzjz Sep 12

3699ce956ce378b4f5e5e618dec6a14e701f0bc9c5b56d06a9ee2130293ed05b O(Er)H(Po)

Trojan-GameThief.Win32.OnLineGames.aity Sep 12

c408ec897a2a404ec30b6367ee9f81756e380240e8c9a264b22cd7e3e94a3ad3 O(Er)H(Po)

100% Game thief trojan with hooks

Trojan-GameThief.Win32.OnLineGames.ryam Sep 12

711deaf7d313a8f74c7d3d68f6587d38575a343655ae10b0dd864be45e4ad634 O(Er)H(Po)

Trojan.Win32.Buzus.adjx Sep 12

7dcdeda12f473b516e5111ef37e870cea67867c7d3dfd7a4eb2c928cb84cb33b O(Er)H(Po)

93% Named Trojan, debugger evasion

Trojan.Win32.VB.fou Sep 12

afe66ef9ceb3caca3d64a204a0fbbf5c9fe366a1781d3e8a654aefd5ca4ce74b O(Er)H(Po)

96% Named Trojan, evasion APIs

Trojan.Win32.Buzus.zob Sep 12

2649b4aec71bcc19c20031f4ceaf08d96eb95a81d39d6d27362bff0f6ea95377 O(Er)H(Po)

91% Named Trojan, debugger evasion

Trojan.Win32.Buzus.adkx Sep 12

825874ea41d6264a19fa703fb9fbfa6b7ffcceaa58a6b2d9580c9abac09127ed O(Er)H(Po)

injection/staged

Trojan.Win32.Buzus.adjv Sep 12

5899c312531167375f30add6b1c7b8041a953f9405e29253361f574f5fd8e153 O(Er)H(Po)

injection/staged

Trojan.Win32.Buzus.abrw Sep 12

77ef01a0030c68a1e3a527ad3306281e6ebb310acb792100a811b7a4c422223d O(Er)H(Po)

injection/staged

Trojan.Win32.Buzus.acfn Sep 12

9595be697c0e795d6b5da41a2e9c28862cd65c992257eed0569f140776b923a2 O(Er)H(Po)

injection/staged

Trojan.Win32.Buzus.ajrb Sep 12

044f2fc80c6b6a25d4c2ca3433fd7b16a502139d9389e3285f3dfe4b704283f7 O(Er)H(Po)

injection/staged

Trojan.Win32.Buzus.adkd Sep 12

3c528ae5777b8001cea2204d4a66a19e883fe2d1f6448bfe8bca25b0a220a4f9 O(Er)H(Po)

93% Named Trojan, debugger evasion

Trojan-Dropper.Win32.VB.hko Sep 12

d89c081d12db0471bd474d3ce7afba0fe49527c06093c8263177f5007c02ebd7 O(Er)H(Po)

injection/staged

Trojan-Dropper.Win32.VB.fqk Sep 12

9f4f68a79b338d978b3c3f4fa485774710046c9914d8a94fca932da8113732c1 O(Er)H(Po)

injection/staged

Trojan-Dropper.Win32.VB.fpq Sep 12

e2ed701719d9786c56038a533d18bf4fa0313f089fe09e0a16c8db392bae16c8 O(Er)H(Po)

91% Named Trojan-Dropper, evasion strings

amazon-ssm-agent 3.3.4177.0_3 Amazon Simple Systems Manager Agent Jul 19 freebsd

0221e1c15f9eb672c704800c3fcc5285ce08a8afa33f330df51bcc922bc232c1 O(Er)H(Po)

Wei.Abp.Identity.Application.Contracts 4.3.5-beta.10 abp module 50,179 installs Jul 11 dotnet

97f42ec6d9d69ee72750fcda7c6fc94beac536d4650663d3de1833770197fbb8 O(Er)H(Po)

spikest3r/LumenLang spikest3r/lumenlang A lightweight, stack-based scripting language with a custom compiler, bytecode format, and virtual machine written in C++20. Jul 11 arch

59d75576e9d4c3b8ea35eb4ae0853ebfcef4515313d0a91b0aa0197b0190351b O(Er)H(Po)

Wei.Abp.Identity.Application.Contracts 4.3.4-beta.6 abp module 50,179 installs Jul 11 dotnet

49e5f8606756e29b83fa878a23aa9aaa1c4f3d45170486b5976c8eeff82fca18 O(Er)H(Po)

pipewire-dev 1.6.8-r0 pulseaudio dev Jul 9 wolfi

a26acde7958b170fc70a3500433fe63417fd9cc5b7444f57affd960b38b3be34 O(Er)H(Po)

sotruss 2.43-r11 Jul 6 wolfi

cc3b588595b4be08bd03c5f2675d53f450f73089cf4505d685efcb657876c334 O(Er)H(Po)

hope-agent-bin 0.16.0-1 Jul 6 arch

68213d1ae87fad1395cd1b26b376a496c2d5fc09fe8db1177fea327f53e5c6d7 O(Er)H(Po)

graphify-bin 0.9.7-1 Jul 5 arch

12ed4bebe45a8608f71d2f6b2d8b19538dbf98b9e41cce2f1d58b2b80fd56583 O(Er)H(Po)

57% Standard Arch Linux package build file

pine-pgp-filters-1.8 1.8 Jul 5 netbsd

90706d42daf2196f4b4744c6d3577c17d38b11aca8ff65f3eeb3d6259a196a7e O(Er)H(Po)

50% Archive contains escaping symlink

jd-gui-duo-bin 2.0.113-1 Jul 5 arch

144050101b4f773ccc003e25ae491c33006af9183f37ad0b16b877e5af228708 O(Er)H(Po)

44% Legitimate Java decompiler launcher script

skill-grade 0.1.0 Quality grader for Claude Code SKILL.md files. ESLint for AI agent skills. Jul 5 python

d56ef944acb60f4e79266503265baaf562857dff88b081322b1dff92b6edf283 O(Er)H(Po)

grantleetheme 26.04.3-1.fc45 Jul 5 fedora

9d54c576626fef9b24a5d3d2805efcb846e29d3000979e48d50a2a64acc4a9ff O(Er)H(Po)

poxml 26.04.3-1.fc45 Jul 5 fedora

efc8fc69bb56b4f4f64f6b1c6e03dbce1a30de54c595cca880bb11dba53f8b48 O(Er)H(Po)

ktnef 26.04.3-1.fc45 Jul 4 fedora

40d820583cf940d01e2355098e08d432e9d7b87767ea4c563874930688460b88 O(Er)H(Po)

83% Legitimate Fedora source package

graphify-bin 0.9.6-1 Jul 4 arch

368a1f5379e4efc9aac027d06c7e8b0de0fabc96510ba19000d94187946618c9 O(Er)H(Po)

hermes-agent-desktop-bin 0.7.3-1 Jul 4 arch

c1363cdee94129078df92e9a239154630768d0aa1e7e0e0b481de843565d7504 O(Er)H(Po)

opentelemetry-instrumentation-confluent-kafka 0.64b0 Jul 3 python

3b1e38a36e3078262a23f0a31c8e33a74010cd6baefda11c7cde8409c692e847 O(Er)H(Po)

fcitx5-hangul 5.1.10-1.fc45 Jul 3 fedora

f8fc8ad18f0b291d6fb9d80d678275ad9ce48b6e0609131f64d48fcaab16f61a O(Er)H(Po)

66% Legitimate source code

cinnamon-calendar-server 6.7.4^unstable-1.fc45 Jul 3 fedora

2d9ee2b59b28128c1d656a879a8db0e9f0746992cef57f412992108baad71ad9 O(Er)H(Po)

github.com/arp242/testing.vim v0.0.0-20200425090115-963d2c2488ee Jul 3 go

6c7adc0bb38f8c0df587538097bc3f23cb083b2c1498fc24409dbd69ed54ccaa O(Er)H(Po)

39% Legitimate Vim test script

hermes-agent-desktop-bin 0.7.2-1 Jul 3 arch

98ad2916abb30cf27da1cc222683e91f61a4e766fff693100f9c92c9b656f276 O(Er)H(Po)

54% Legitimate package build script

tclap-dev 1.4-r5 Jul 3 wolfi

1e0a101ee95039ea4ff3c3848fd9c369827e1db41a7660e7c764b3a05fdbd92b O(Er)H(Po)

openvpn-dev 2.7.1-r1 Jul 2 wolfi

de7152e6ca57996ffeceafb25c10cfaeef1abc36d493b4e33e5c8ebcb881d1f0 O(Er)H(Po)

72% Legitimate OpenVPN development package

github.com/grahamcampbell/Result-Type v1.1.3 Jul 2 go

c9d57072df39560a692729913bfada9a843d007799c5b2cce3096b6ba10a8741 O(Er)H(Po)

github.com/grahamcampbell/Result-Type v1.1.2 Jul 2 go

cd535d955fec9728d476173fc101a5d6a6cb9b5b86f1017dd317f1b03b661a61 O(Er)H(Po)

github.com/grahamcampbell/Result-Type v1.1.1 Jul 2 go

b56b7c7e9249166c059419dd7dffcf35e4c0823a3cb23497f2e557f2659931ce O(Er)H(Po)

71% Legitimate PHP library code

github.com/grahamcampbell/Result-Type v1.0.4 Jul 2 go

c52a180cd2a02caa711cecedd3aa5faab42bb35a5968a3cd5c5a029c091fd33f O(Er)H(Po)

github.com/grahamcampbell/Result-Type v1.0.2 Jul 2 go

b0f994d5d2feea35ab4038d17c64a0d846752078b84a8d12abc1b4c399aadefc O(Er)H(Po)

71% Legitimate PHP library code

docker-dind-28 28.5.2-r18 Jul 2 wolfi

c0cb93a76694fbe838b0dec17d7864e8a40ef6de160ca7e47e7626d26170802a O(Er)H(Po)

53% Legitimate Docker-in-Docker package

ver-check 0.0.44-r3 Jul 2 wolfi

68db859ea22e51d793f5e5e1d6ac218da2f3ba1e2e0ddf2d35077720955a384e O(Er)H(Po)

help-check 0.0.44-r3 Jul 2 wolfi

41d806d11bf64153b9e2069e21b7f98e4836508794776fa6610857df3fa6d8a5 O(Er)H(Po)

53% Legitimate package metadata and script

tw-pip-check 0.0.44-r3 Jul 2 wolfi

8122b76ac2b68d25fd3162931288544bae1ac2959037010c2618276b98179968 O(Er)H(Po)

gem-check 0.0.44-r3 Jul 2 wolfi

4dc7b812a264c214cfb25d2eb6ba91d32c15c271b75d6520253056b09bca3fe5 O(Er)H(Po)

53% Legitimate package metadata and scripts

simalchaudhari/spin Jul 2 github

79c5144b0f08ebac8884face34ca64c17fdfa405834e2e2a0751e675f2b02479 O(Er)H(Po)

85% Git history falsification and hook bypass

kreliannn/burger-shop-webiste Jul 2 github

b31aa5cf453092fcd2d846ec55d96c428f4caaaf37a1a1bbe4abba3456042bd8 O(Er)H(Po)

100% Git history falsification and force push

kreliannn/kreliannn Jul 2 github

ac6d1a3e4ebce21c47774dbdeab01d7198c97052347d9d89e61872729e52d896 O(Er)H(Po)

100% Git history falsification and force push

nurfarazi/safemailer Jul 2 github

c5abf7dce9fb88f0f8ed7086b052ab20aa0f81e034a280552ee7648081790a2f O(Er)H(Po)

100% Git history falsification and hook bypass

ExtUtils-XSpp 0.19 Jul 2 openbsd

00a7372695fc10f9f3a2fe3343ab758f3887ca35865520c2a2eb67b360c03d34 O(Er)H(Po)

60% Legitimate Perl module source code

gem-check 0.0.50-r1 Jul 2 wolfi

cba9bc0d557b2417ece64fc7fa8111aa5263dfe4b5b5defb8d1ec5b85e0c27b9 O(Er)H(Po)

53% Legitimate package metadata and scripts

help-check 0.0.50-r1 Jul 2 wolfi

12b308eaee54f36699b16c4474e8bec713bb3b8851c9bc47374a4e70a4c89775 O(Er)H(Po)

53% Legitimate package metadata and script

tw-pip-check 0.0.50-r1 Jul 2 wolfi

a916827807a648bf0a8ebadb8205b1908a8e183a4a7c40d33734d61717264bec O(Er)H(Po)

ver-check 0.0.50-r1 Jul 2 wolfi

e6ff6715e2910119bc7b2b9c0b8b7d26ea3c99d04397770b035da4739f44070c O(Er)H(Po)

53% Legitimate package metadata and script

perl-CSS-Minifier-XS 0.15-1.fc45 Jul 2 fedora

b56fdccde0b8004840ce9db517c37d8ee22ebbcace8719de32ad6c80b78f88f9 O(Er)H(Po)

75% Legitimate Fedora source RPM package

openvpn-dev 2.7.5-r0 Jul 2 wolfi

3ea3135d0d310e036e130b7269a70284172f6cde934059c3bbe26ca8bc606fb0 O(Er)H(Po)

72% Legitimate OpenVPN development package

mygui-tools 3.4.4-9.fc45 Jul 2 fedora

157dfd56a24fd224361df7cde6c80f42fcd79b5d601b401d7d5f8d137b4f045b O(Er)H(Po)

monodoc 6.14.1-4.fc45 Jul 2 fedora

51c111f0ea4b72f78f314ce803e7fa12d88ae42964ee8cd3cbe9286d13116491 O(Er)H(Po)

docker-dind-29 29.6.1-r15 Jul 2 wolfi

dbe983da8c051ebeb07cd220582aa8a392d6e761e87f0456615e5e06f57ba204 O(Er)H(Po)

nickjbedford/laravel-endpoints 0.4.0 The Laravel Endpoints framework provides an easy way to implement API endpoints in separate Responsable-style classes. 89 installs Jul 2 php

45786da9080ce6c5d4a0313c06c8ce2516ead6d6728977c350152c18fae7e31c O(Er)H(Po)

nickjbedford/laravel-endpoints 0.5.0 The Laravel Endpoints framework provides an easy way to implement API endpoints in separate Responsable-style classes. 89 installs Jul 2 php

25fe4939bb0de007239356c5ae52607c46c5e2f65e480b9b9e001541b2cdd996 O(Er)H(Po)

docker-dind-29 29.6.1-r14 Jul 2 wolfi

b39fd9a474e5add29addc8229a024253f8e249a78fee917dfc056fe1e4ca0002 O(Er)H(Po)

53% Legitimate Docker-in-Docker package

cuquantum 26.06.0.17 Jul 1 python

4065143a1541fd2d72877fd4ef29ba38707941e84dbea2e880c87896a23246d6 O(Er)H(Po)

67% Legitimate conda package test scripts

docker-dind-29 29.6.1-r13 Jul 1 wolfi

1256b09ec995569c4c523d1ef662a5fe753b6f299002b073c04889000a8f66fc O(Er)H(Po)

53% Legitimate Docker-in-Docker package

librecrypt 1.1.1-1 Jul 1 arch

4df584a25d874667aa9e3ce01e31939cca2c93c333a966dc23b8cbf42ea1787c O(Er)H(Po)

57% Standard package registry metadata

graphify-bin 0.9.4-1 Jul 1 arch

0d207f29f89ebb288bfedadfcc12f78c127458ecdb02b866cb5339809f7e384e O(Er)H(Po)

100% Legitimate AI code analysis tool

github.com/berkayk/laravel-onesignal v2.4.2+incompatible Jul 1 go

de3d33b930581eb5181b2bd5427eba21951acf17c5a400b70d6e7aa6eabcaf23 O(Er)H(Po)

deepin-start 5.9.49-bp156.3.36 Jul 1 opensuse

8beeedfa1f7f978f2593488369d70849c341753cef3703757498eeca450aa0c6 O(Er)H(Po)

libsmi 0.4.8-1.29 Jul 1 opensuse

86970c4ffd999dc9cfe5f886f281f70fd849382b9a613c9e3a8f1d659fbf3db9 O(Er)H(Po)

92% Standard package shell script

docker-dind-29 29.6.1-r12 Jul 1 wolfi

30aa5c655d1a57eeee105aa44cb4512c509acbcd7a0d9a342019cbe1f66322ee O(Er)H(Po)

53% Legitimate Docker-in-Docker package

docker-dind-29 29.6.1-r11 Jul 1 wolfi

290c1d3650ab5923303d765de44dfa0709a40d5caa66aaa093159c8e4d687e0e O(Er)H(Po)

53% Legitimate Docker-in-Docker package

haskell-binary-instances 1.0.5-19 Jul 1 arch

30017a90bd1b9d27274d7f7f57a8f7560c34ff155ca5cdc1ffd6fa9847f6a79e O(Er)H(Po)

92% Legitimate Haskell package archive

ipset-dev 7.24-r5 Jun 30 wolfi

4cb7eeb28d1bae5b329bb7153239f11dbb071a38a1fe857270ebfa9fea0e881c O(Er)H(Po)

60% Legitimate Linux header files

gcp-compute-persistent-disk-csi-driver-1.24-compat 1.24.0-r6 Jun 30 wolfi

26ff18d032a6888646eff78f4e5809c7c820ac513537da7be7e92c6fbc7cf710 O(Er)H(Po)

53% Legitimate GCP driver package

eigen 5.0.1-r3 Jun 30 wolfi

1a3e64dec576b7d47efd33872f6867f6b1904eacc29874b387c593a118596686 O(Er)H(Po)

96% Standard package metadata file

graphify-bin 0.9.3-1 Jun 30 arch

46313c99c87d98b8295857f91081ed8903632958528e4942f0b72f08b31eb923 O(Er)H(Po)

57% Legitimate Arch Linux package build script

powermanga 0.93.1-bp156.5.7 Jun 30 opensuse

fb39836be7b31ec6fad068a2fc0e5c8637f4e6981c71f77fb6273cfa1329dad7 O(Er)H(Po)

94% Standard Linux package wrapper script