Malicious Package

Overview testsetset is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

MAL-2026-11215 Malicious code in @meteora-sdk/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ec2029608b062badb250d90fac8d9e8f1ee6b7fca98113fc02eb2468c11186a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react.ja (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 930eacb3381ac6e0b0ef948a53188dfb1c7822c18dde0235ed54b541d995e49d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react.jd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 008700843ed05097ee21f8b83d03189f537561d672728b91715ce9ced41f5ecb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11368 Malicious code in react.ja (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 930eacb3381ac6e0b0ef948a53188dfb1c7822c18dde0235ed54b541d995e49d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in installreact (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3762f9636d7f389b56f82d58118b7f760e04cc418fb0c008ee30054c5413a6e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ekspress (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware baaf72c7a3dade7b78af529b3c79190314cbae671ac77f925a18c46284c47564 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11370 Malicious code in reakt.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ff2841f53f4e574cacaa4dc1c13955afd830ecc4e34c57ef2e773477efa19a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11307 Malicious code in express.ja (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b5e2c0bdef4cdd2a1717631e7cec1d0c7d7d945aa9e18ee73a53ff00debd0ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview reakt.js is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview react.j is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

MAL-2026-11364 Malicious code in reac.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a475a8f4fcdabfeeaab666f2e7ab900248f71d15004601f7d0e5fb2e02ecc1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in reac.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a475a8f4fcdabfeeaab666f2e7ab900248f71d15004601f7d0e5fb2e02ecc1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in expres.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e2eb125cd826b1578646fdd06af4c5649ab6b31c1a39afc768bbc62bfdae0d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview ekspress is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious code in chalk-butons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0dc8638246791bb1c397834fde03907cdea6430e7da22bd9cd581964426d52d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chalk-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ece655dd7e91fffbda3bf623e600cd48eab1155796c4752237a2911887d1d456 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview chalk-button is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-11398 Malicious code in testtwix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 156314ac4405e3a399f43088b706e128ab5aad61f32cd5ec0e415af37feda23b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview clo2 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...