Malicious code in jimg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c510cbf9c5077091b3b415ba9ce624c06a1487f6fbe3a74e638d921f8b2ec440 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15973 Malicious code in chrome-speech-recognition (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6595849dd7059a8fb61024bf33c2c11704cb52a784f6449cf940dc17725a0208 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15968 Malicious code in anime-vostfr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f624a7b8a2be52c79af7942acc5717ff29fa17cec42dce635c26839deb8e06af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15990 Malicious code in json-into-html (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04a5353fa099a8aecf0c34fd2d34244cc86058adb2f9a26eee4d7efe08a5b95f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15986 Malicious code in iframe-to-video (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ddc607fb5b68fa9cd9a186110b72bea322a0a74ad96f6e8ba53105ed89e2388 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15985 Malicious code in google-img-scrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86caa3dfd7fbfa99dfa8042e4792f31346c57427e7eb83cbc468b5a14d4c0e14 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15972 Malicious code in card3d (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 761b26c08e59998ca647c9966c0fe2e8bffb024817ff3c09f1d7151d98c6fd5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15947 Malicious code in @domyjs/anchor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f2b184bdd0922bd89b7c04267752c64d936593fed4f7adc60a8c106445c551b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15948 Malicious code in @domyjs/collapse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7f73041d172c7418209ef39f488365bf3b3c7a6a25e2f2d490e5e70dfcfb005 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15994 Malicious code in memov (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1aaa3b673c4d7a90e08673fc3dd2ebbc087fe5605238d11e2f4cdfced195d63a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15950 Malicious code in @domyjs/domy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 673f8826708fe5d043b6e2cff5ed4d3acd6f71b168d6ab486d250abd0429bae6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15989 Malicious code in jimg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c510cbf9c5077091b3b415ba9ce624c06a1487f6fbe3a74e638d921f8b2ec440 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15978 Malicious code in drive-album (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b7b552aab413e10d8cc2363896d1735041227c764470db3de7cde26705996b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in trading-bot-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 653d164163afb590064deec1dc6619ed03e51360605a94e6ff789c83f6d9ec6e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ens-namehash-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14b2ef072c91f8f3543ffbe2c1058ad379782fece91aac0f3cd1eac6a931f60f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gas-price-checker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f8f9689168acafb514d0ab0bb8710f1fce42e95560a2a0c7e0e6788e913e729 Package advertises itself as a public-RPC gas price checker but on first call to the exported getGasPrice API in src/envcheck.cjs it walks the caller...

MAL-2026-15984 Malicious code in gas-price-checker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f8f9689168acafb514d0ab0bb8710f1fce42e95560a2a0c7e0e6788e913e729 Package advertises itself as a public-RPC gas price checker but on first call to the exported getGasPrice API in src/envcheck.cjs it walks the caller...

MAL-2026-16003 Malicious code in trading-bot-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 653d164163afb590064deec1dc6619ed03e51360605a94e6ff789c83f6d9ec6e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15981 Malicious code in eth-lib-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea8d2399c30a7656138ab2024250aeb8814c3ccd32e0104f87933eece367a829 The package presents itself as an Ethereum balance helper, but on the first call to the advertised getEthLibBalance API it invokes...

Malicious code in eth-query-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55a24a29ae503dbb2bc291fcbd2d7eafdc92a6927a9a91bbda677e9b9b9b8c22 Package presents itself as an Ethereum RPC query helper but src/envcheck.cjs walks the caller's project tree on first use of the advertised...