MAL-2026-11252 Malicious code in build-time-metrics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware feae498c1a766e86bf16277cb25155aebc829bba8df487a86f88e7e66c1caf64 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11380 Malicious code in slowest-build-nodes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99f289163f5b86c32755596d6994cdf618b497111e781d5ab034d64d248d6b4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11406 Malicious code in unified-help-center-alpha (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a76f48c6cd4bfeda98c49e3c091e319501f5566227f6ad6cdb654c193fbe7582 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in broccoli-watcher-siphon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 045a48ee2e7fb0e492e451c0144cf9b6072f56fcffa8b69808b7cf8e3a0f5b10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in page_colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4263830f03bdc8ee0efe3cb0a419db9752ddf2c3f056b17182d1c8ba2b1f62ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11324 Malicious code in js-focus-within (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e58e32261d804de32d0431893480c6ccff46b04a4f50f48bdb72642f0fe5269 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11395 Malicious code in termly-namespace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f83eec21eb8c2f78782c7fffceb15b3b8b6bfc612feccc4c39378a47d1b85cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11285 Malicious code in easycommons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51e5eca4058ab71aaf0a525ba2b1ee47fee670f4a50118971c468ee4195c1018 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ethers-v6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 771d1539e3c3eecbc3411a9997e602a2fa8deabe2fcb88956e29d8525f8972f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in datdbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3722aafe66ac2c253aec711db7cd1b2d0604d326c1520278ed712b02242e44f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11402 Malicious code in time-to-reload (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae5b3b160cee5b4b48fd61cd4b3b3e8b1c97118b1ffcb0895fcd656d3faea62b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11290 Malicious code in ember-cli-deploy-secrets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e75fdf3524b33e98181630b607b31f8d9f45b24cbb04270f207e335761cbe88d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11350 Malicious code in pulleeelll (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6b3173a308b5738e4e3047a8125b432486042563101678e0182e95962b37f20 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11343 Malicious code in page_colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4263830f03bdc8ee0efe3cb0a419db9752ddf2c3f056b17182d1c8ba2b1f62ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11347 Malicious code in pjm-dls (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47f282ee2db6dd2a90b13809610357f28aea53a0135dc1445fd92c5f140eef27 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pullingpackageeeeeeeee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4224e482494116a176cc3738e50f3678bf9147ed6ff02a6720d890b6e563549e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pullingpackaged (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ff278946b863ce1334fc8565873bb2baf8f720e9ce156a940e407560677a6d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview pullingpackagee is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in pullingpackageeeeeeeeee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f91dfa4ff998df4408f931ab845cd0e8ee28ea87257ee5e16a9193be3182e851 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pullingpackageeeeeee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45246ee20e180e2fad7d173c631adc54422700c677af4295a9624000fc6146fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...