MAL-2026-11486 Malicious code in smart-npv-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed380f25fe3e135a6b64fabefc448b561908023a5279373b49716cf2b991ee6e The package ships lib/report.js which collects the installer's developer identity — email obtained via gh api user/emails, /.gitconfig, npm config, a...

MAL-2026-11372 Malicious code in rlp.git (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 684e2df8545256deec1b035965a2f37977d95033aef05d1ad736577d91a04bed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fs-extra-master (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6432be2aefc6715127bc533a383c361b15420316f144dccfc98f1dd4c7d36f06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in easyinstaller (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c4ea36235cf092d70fea18574aa582526923d2c869fb9f3846aabb0b180c76a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11272 Malicious code in curse-dependent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6342746f5661955d0e66fb46f981245d41062c23e1209f3f2b62dc469638a41c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11394 Malicious code in tailwindcsssss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af681f5b2be3907532228afc7f56cdde00eb0b8650993b033ff9eb165ad834d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @pumpdot-fun/pump-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c408c3350082bac3e0fcef5878dfd9a618d3a5f538ed6c6f1b6fc4abf2832ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in famshot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a25590ceaca7a7491267e3152f276e90e1d5dd7eee7f3a86bee0c2b7666c0427 No a static rule matches and no traced-code findings are available for this package version. With no concrete behavioral evidence in either signal...

MAL-2026-11218 Malicious code in @nordea-web/ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 366bacc3988f49deff2b60fae8cddafa449cc7e3df8475fd364c974bbfd7e7ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11338 Malicious code in ncc-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47e6426d64d44f277630e33c26db683f2d8cc1c043374a88ed3a484c84f7a242 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11307 Malicious code in express.ja (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b5e2c0bdef4cdd2a1717631e7cec1d0c7d7d945aa9e18ee73a53ff00debd0ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11247 Malicious code in base58-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e95c5d853c8abc6b99f2a1cc48dda77eb93a732e34c6f253f9451b1a9e7b4d1f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11282 Malicious code in dotex-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a24f0c08a385f2366e23764f896e95c701acd9d746152a5409b1b6a1ca4c766b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in srgb-linear (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 161f0f8d0598a57e1dde7ecb119f308f82a1bad8189fe8dce4bb88547559f588 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in streak-metrics-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae3b140d6072d259b286e7487a69cd3babe3855ed26add10dbf664e9ac4aecb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11387 Malicious code in streak-metrics-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae3b140d6072d259b286e7487a69cd3babe3855ed26add10dbf664e9ac4aecb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11349 Malicious code in pretty-log-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad32145cb24ae2a271cecb6379d30a531be17d84a0d71189d3a4afaec20af015 No malicious behavior was identified in this package version. There is no evidence of credential access, environment scraping, network exfiltration,...

Malicious code in @ai-agent-node/createnode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88461b4fe3bc4e6e16f6dbabec2dd4acdf4eb2df6390170776629e5f955f13f4 @ai-agent-node/createnode ships a 12-line main module that, on require, fetches https://api.github.com/gists/198a0bbec7a6018e9250615d26e37b90 owner:...

Malicious code in @zannstore/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 708c069b088fb74064262b95a516de8d4b3f3128bd6705d98ee7e8dc10e942c8 @zannstore/baileys is a fork of the Baileys WhatsApp Web library. A a static rule fired on lib/Utils/generics.js due to keyword co-occurrence of...

Malicious code in aone-cloud-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ac6b6dc6a9ebc0c474150ee0d6545f6c3fa790ada20f247ac997ec504ce6ffc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...