Malicious code in jimg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c510cbf9c5077091b3b415ba9ce624c06a1487f6fbe3a74e638d921f8b2ec440 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in discord-phub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 181fb5530173cb05bf3e2d2fd37a097924d5affad4b9e3438ceef5d399b01b0e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @yoannchb/wtf-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9479b89e13ce2a4f3327c18fc429547d79e4324efc86243c49213cae1493ea22 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in puppeteer-obscura (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5617ac5e060d08fcfe23669c497e6b4fbb8587fd7f7630a7b9f6e86287880983 On npm install, the package's postinstall hook node dist/install.js downloads a platform-specific binary from...

Malicious code in card3d (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 761b26c08e59998ca647c9966c0fe2e8bffb024817ff3c09f1d7151d98c6fd5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15967 Malicious code in @yoannchb/wtf-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9479b89e13ce2a4f3327c18fc429547d79e4324efc86243c49213cae1493ea22 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15965 Malicious code in @yoannchb/langy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47b5b900f80a042ffb1a59e811c0c1325324b56b01f12e2b6ac291b12760698b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chrome-speech-recognition (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6595849dd7059a8fb61024bf33c2c11704cb52a784f6449cf940dc17725a0208 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15992 Malicious code in lazy-attr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6e9ec6f580e2ecf0b9cf61f677666b18211e7056ffd5b3cb775f21356d0e351 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15996 Malicious code in muswish (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 544f09e40055924b758a4908557e238acc44e86f9c63ad51548df24bfbb368a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in google-img-scrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86caa3dfd7fbfa99dfa8042e4792f31346c57427e7eb83cbc468b5a14d4c0e14 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in lazy-attr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6e9ec6f580e2ecf0b9cf61f677666b18211e7056ffd5b3cb775f21356d0e351 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fast-html-dom-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee035fff3db95c6f14a41fe379add7ee78607149e7d5435b4afad505d973b410 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pipipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6069e53629de29530019a5d19c7cbf7dc8d490c039130fdab2b2f264ac23728c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in infinity-grid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 120919aeccbb43dad4717538757f11dcea999b371dc507b10395b6369fd85f46 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @domyjs/domy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 673f8826708fe5d043b6e2cff5ed4d3acd6f71b168d6ab486d250abd0429bae6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in drive-album (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b7b552aab413e10d8cc2363896d1735041227c764470db3de7cde26705996b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15983 Malicious code in fast-html-dom-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee035fff3db95c6f14a41fe379add7ee78607149e7d5435b4afad505d973b410 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15988 Malicious code in inner-svg-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12d9bad6950b19c4869bb51e3cd490ffb6d66e4a16da9ae5d93618ac9fcb5263 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15998 Malicious code in onetime-rnd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f949fd70a8bdf3174426072e1eac3d15e0b00c6ec57e0d3cf0a3ef45ca79ea49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...