MAL-2026-16109 Malicious code in @auction-fe/ui-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0383eb0003b48f9a03fefc5a97f9a4b4a2c7756fa1cbced8995bb05838ff404f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16106 Malicious code in @auction-fe/base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4430765bbffe0f1b4471a3d1dbafdbc97059e7717fc6a1967fd5ebf05b83a0ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-16107 Malicious code in @auction-fe/portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9a0273cadda58738fa01d0c67fb17edd588f5870a13128a4aa47820f6a13fab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @auction-fe/base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4430765bbffe0f1b4471a3d1dbafdbc97059e7717fc6a1967fd5ebf05b83a0ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @auction-fe/ui-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0383eb0003b48f9a03fefc5a97f9a4b4a2c7756fa1cbced8995bb05838ff404f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16108 Malicious code in @auction-fe/reporting-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a41fe4ef01818c699bc5c1953702b37cb566a58b0b4769a7ae532b05699b130 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @auction-fe/reporting-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a41fe4ef01818c699bc5c1953702b37cb566a58b0b4769a7ae532b05699b130 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-16110 Malicious code in @convertics/script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13be868ded5b7b55a544d4a21c0c693a4b259b5ed2f50452d316951627d3852c The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Passkey-themed social engineering leads to identity and cloud compromise

In this article 1. Attack chain overview 2. Attribution 3. Mitigation and protection guidance 4. Learn more Microsoft Security Research is tracking active cloud-based intrusions spanning multiple accounts in which unusual sign-ins were followed by threat actor-added authentication methods,...

MAL-2026-16086 Malicious code in graphql-js-client-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c11b1672f9929aa10893cab85bc0f4e9a5ae5adfc2c8ae637d45e61b644692b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in graphql-js-client-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c11b1672f9929aa10893cab85bc0f4e9a5ae5adfc2c8ae637d45e61b644692b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sams-run-style (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14b995469abba673b875788358966c5468456f0a911b1f6e3b5ee95c8f14afb1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-16091 Malicious code in sams-text-style (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f81a7140e2d1a61a8bb4c6594ad8b75cadab20788d22005d9bf026d834c2e626 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sams-text-style (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f81a7140e2d1a61a8bb4c6594ad8b75cadab20788d22005d9bf026d834c2e626 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-16090 Malicious code in sams-run-style (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14b995469abba673b875788358966c5468456f0a911b1f6e3b5ee95c8f14afb1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @umschool/platform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcf64895a777467cc94763bfb942be3c04040ca151fc22753ca48ac4aaecd69c @umschool/[email protected] is published to public npm under an internal-looking scope with an implausibly high version number, a resolution shape use...

Malicious code in vinnleys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da2c109f5566555ce8963688bfbb309220aa3fca570bcee74d32b1a8fcc83c75 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16092 Malicious code in vinnleys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da2c109f5566555ce8963688bfbb309220aa3fca570bcee74d32b1a8fcc83c75 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in xbailsync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18ff4aa1a565659c7106700fc5b7c355770ec8fc6bd62c0d9a4f8efce56bf09f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in amprem-activator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bb73ef0a9130c0751f253465a40f102cddb6cecdec2835dd7cc9c0f4150efa1 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...