MAL-2026-15976 Malicious code in discord-phub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 181fb5530173cb05bf3e2d2fd37a097924d5affad4b9e3438ceef5d399b01b0e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15967 Malicious code in @yoannchb/wtf-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9479b89e13ce2a4f3327c18fc429547d79e4324efc86243c49213cae1493ea22 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15965 Malicious code in @yoannchb/langy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47b5b900f80a042ffb1a59e811c0c1325324b56b01f12e2b6ac291b12760698b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in parallaxy-img (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a3833ffd1c1a768f35c02741d1f1414ac2f76bf6c6b7eca7f3018d07becfcb3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord-tqr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a86833e5a36c88fc9e53ced45f2d6d0ec40357cce7377aeec0da7e1f25666ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in inner-svg-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12d9bad6950b19c4869bb51e3cd490ffb6d66e4a16da9ae5d93618ac9fcb5263 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in iframe-to-video (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ddc607fb5b68fa9cd9a186110b72bea322a0a74ad96f6e8ba53105ed89e2388 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15979 Malicious code in enqueu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38382955b0bd4b7d06dc93caad37befe8587e646da110a9e3ba05ed75055d328 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @yoannchb/tokenize (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e159c76f26df8e14cff46c6a407a3809626111597001cdecc88d7782386c8d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15999 Malicious code in parallaxy-img (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a3833ffd1c1a768f35c02741d1f1414ac2f76bf6c6b7eca7f3018d07becfcb3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15996 Malicious code in muswish (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 544f09e40055924b758a4908557e238acc44e86f9c63ad51548df24bfbb368a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in btn-particles (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01991d61636173b6fea5e641ca06009891d2b044b894368fab0c7610722ff070 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15949 Malicious code in @domyjs/debounce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2616c0d23fb705645957e01c76610e48bdf68c6b88de4f39df4c71ed2daeafb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15990 Malicious code in json-into-html (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04a5353fa099a8aecf0c34fd2d34244cc86058adb2f9a26eee4d7efe08a5b95f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-16002 Malicious code in tempjs-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4793104f666467c4b7fca75f478d830e4b7d2f80fcfb9b70fedf8733867bb35 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @domyjs/anchor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f2b184bdd0922bd89b7c04267752c64d936593fed4f7adc60a8c106445c551b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tempjs-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4793104f666467c4b7fca75f478d830e4b7d2f80fcfb9b70fedf8733867bb35 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pipipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6069e53629de29530019a5d19c7cbf7dc8d490c039130fdab2b2f264ac23728c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15950 Malicious code in @domyjs/domy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 673f8826708fe5d043b6e2cff5ed4d3acd6f71b168d6ab486d250abd0429bae6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @domyjs/debounce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2616c0d23fb705645957e01c76610e48bdf68c6b88de4f39df4c71ed2daeafb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...