Malicious code in clo321-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0c9047321cb681b8b97850ee266a48bd5d192eab6133c686b9f7dc0aa5f68d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11405 Malicious code in ttest3333 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 038978444c8a53a83f087f204dadb716b4b371c0064477688cdbb31ebe89a6a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11261 Malicious code in clo321 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8f8fdfecbace0a3b861bac6a6ddbed0f00e2a235328f12edabb853cd6bd5e20 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in raydiums (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3fbaa5dc6f9b4df46fcb491e1a31924b028376844d5678688289fbae08b7099 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ttest3333 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 038978444c8a53a83f087f204dadb716b4b371c0064477688cdbb31ebe89a6a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11246 Malicious code in base-x-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02b128e2527188695a34b319908cae8e30d328c4ac38be36cdbb0957af15e443 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in base58-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e95c5d853c8abc6b99f2a1cc48dda77eb93a732e34c6f253f9451b1a9e7b4d1f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dash-merge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 533b218de7d9e1e925383f5f75cd29a4a2b6869e3d9a104907d4b0d133875a37 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11341 Malicious code in node-logger-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 34c9326339f3b11409e2afdb6f4ef3a338ce1fc23a1b8ea0511236e847118b5a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview node-logger-winston is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in node-logger-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 34c9326339f3b11409e2afdb6f4ef3a338ce1fc23a1b8ea0511236e847118b5a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in node-logger-winston

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @grua/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b0588f2a4e3843bee403528cb8502b7c4207d2ce3179e51649b3951f8a8d2b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11214 Malicious code in @grua/icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1eabb3f38128e34522c4bca5893ed0e64bcbc213ef2f617cce26e584c220c037 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview isix is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious code in dotenv-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7926abbca35dd3e5fa6c841ddff70fda3bc8330d2e427fe5747a23c264a4f45e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cocktail-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f45a5083ce0e2b15394bacf66030a45b9650c7e5050c35ffb4047c197d414ca3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in model-data-cache-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a5f728ad2fff044db6b02073523084d299a7e876770118b7c0a097ffd904c4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pjm-dls (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47f282ee2db6dd2a90b13809610357f28aea53a0135dc1445fd92c5f140eef27 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xp-node-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dacb3f21efc94ccf0bbcabc232b84f156d79b073feaf3e5bbfa40bbf998ba1d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...