MAL-2026-14098 Malicious code in utils-bundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd71448526f4ee786e1e42e6bdb66627a4f5e8fac78ddb8e8205bd26cc1b0dcd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in elf-stats-cranberry-wishlist-933 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6fcbc300aedf740c98f076d87915e27c394b15951161ba52fb5a0583b9585770 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14078 Malicious code in elf-stats-caroling-stocking-510 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cf95a37aa32ab86e8c0039afad9eeb640550fd14146fdf94e39b08c33b4769c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in elf-stats-caroling-stocking-510 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cf95a37aa32ab86e8c0039afad9eeb640550fd14146fdf94e39b08c33b4769c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in thepackagethatworks_ (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f15296c09e590124cd0c48b05fe2a07d3a2c798fe5ffe5bbc01fa91e1eeb18c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14082 Malicious code in google-logging-utils-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60ff4b97c24301c3b850c5c7f2c1a6dfc07c695c2b19c879cc766373f1c2ded2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in google-logging-utils-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60ff4b97c24301c3b850c5c7f2c1a6dfc07c695c2b19c879cc766373f1c2ded2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mw-filesystem-events-nodream-es6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04e79317db717bd6c38646bef40f0e5205e0f42a3174319f95d9b5e7153cc8fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14087 Malicious code in mw-filesystem-events-nodream-es6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04e79317db717bd6c38646bef40f0e5205e0f42a3174319f95d9b5e7153cc8fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14093 Malicious code in rtms-manager-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4dcee6487432651f905e12482d6a32a94b390cac60f6ece90ac93432d76763af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rtms-manager-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4dcee6487432651f905e12482d6a32a94b390cac60f6ece90ac93432d76763af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in expect-bundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17d9530bd098ecda5041341a338be1a2cfaab1f19e907252bbc95cdd2577dba1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nolimitcity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdd2f231bad56627ee2a46c05b99f33c745f97daaf7e05adbfbfcea535d7f530 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14094 Malicious code in saps_secplayground_npm_ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13fa9c8b7672d88eb66c92e717080df3e10efc1b6f881b2f7361af0a5a7fbb37 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in saps_secplayground_npm_ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13fa9c8b7672d88eb66c92e717080df3e10efc1b6f881b2f7361af0a5a7fbb37 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2026-72125

Name of the Vulnerable Software and Affected Versions Microsoft Defender affected versions not specified Description An elevation of privilege exists in the Microsoft Malware Protection Engine in Microsoft Defender, publicly referred to as "ShieldBreak". Recommendations At the moment, there is no...

MAL-2026-14009 Malicious code in root-locator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2028000ac5395ba0f5ddda0c3d9003770de8f14847dd2cebaeb04031bbcf9ce8 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in root-locator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2028000ac5395ba0f5ddda0c3d9003770de8f14847dd2cebaeb04031bbcf9ce8 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in source-analyzer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17c2f07bb4a673bf18d866e697b1a943783696d2871fbc5e5987c2117377e798 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14013 Malicious code in source-analyzer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17c2f07bb4a673bf18d866e697b1a943783696d2871fbc5e5987c2117377e798 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...