MAL-2026-11406 Malicious code in unified-help-center-alpha (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a76f48c6cd4bfeda98c49e3c091e319501f5566227f6ad6cdb654c193fbe7582 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11289 Malicious code in ember-cli-deploy-derploy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92ef0bde2aabf74dbd75073a6cb7ce71165ba8fb32dec2e49f707337becea0eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11250 Malicious code in bn.js-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4eccbfe4e4b1d1f41ac92b7f2e636fc3fc43b35561b3d574c024d5f13ce292d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11347 Malicious code in pjm-dls (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47f282ee2db6dd2a90b13809610357f28aea53a0135dc1445fd92c5f140eef27 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11324 Malicious code in js-focus-within (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e58e32261d804de32d0431893480c6ccff46b04a4f50f48bdb72642f0fe5269 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11238 Malicious code in apihost (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db86bf96ebb268d3b0c11f456ca9b45669fc71ed912b5fff5eed4163601ed846 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11271 Malicious code in cross-sell (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69ca6d2d5b0f8c68cc8dd2f9799b681cd4fe6a1a5259d8b8a58653f528dccbfc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11326 Malicious code in live-reload-on-error (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b7d87f94e77b603423e5ebb9e62f37541ad355708d900e33e0442210ce70957 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11276 Malicious code in decline (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac37f89d973f66d0ea1d5bda82291d0a59d9c2e008775135c2dcecc422d92ca1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11273 Malicious code in d3-bbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f44d2af489d00e9c5d4afb273874098491e2b6dcf362489ca10229f337a21005 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11332 Malicious code in model-data-cache-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a5f728ad2fff044db6b02073523084d299a7e876770118b7c0a097ffd904c4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in confetti-rebuilds (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f2069e994966cd4c815277183b96ea19c7874fbced968edb527a4ba7a2d0697 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pullingpackaged (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ff278946b863ce1334fc8565873bb2baf8f720e9ce156a940e407560677a6d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pullingpackageeeeeeeeee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f91dfa4ff998df4408f931ab845cd0e8ee28ea87257ee5e16a9193be3182e851 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pullingpackageeeeeeeee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4224e482494116a176cc3738e50f3678bf9147ed6ff02a6720d890b6e563549e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pullingpackageeeeeeeeeee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa6e0b845a57f0b93fc4c94f5fcd848ad4208ef9c5043784b3f36b00baae782d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview pullingpackagee is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in pullingpackageeeeeeee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06c2af921e85f8ace3d552a18ccb5878291423bb74dd7ac4d26ca8dfa5bfeb66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11355 Malicious code in pullingpackageeee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0eeee23ed9e5f55520bb0d6712d26704bf87dc9badeec3180c33a6d2eb31cba9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pullingpackageeeeeee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45246ee20e180e2fad7d173c631adc54422700c677af4295a9624000fc6146fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...