Malicious code in @cp-shared-14/frontend-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f9a0b8746f6c279b21cfa1c66d1ec6ceaff3a528152347aa7b2c5458952fe691 The OpenSSF Package Analysis project identified '@cp-shared-14/frontend-ui' @ 6.3.4 npm as malicious. It is considered malicious because: - The...

MAL-2026-16015 Malicious code in @cp-shared-14/frontend-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f9a0b8746f6c279b21cfa1c66d1ec6ceaff3a528152347aa7b2c5458952fe691 The OpenSSF Package Analysis project identified '@cp-shared-14/frontend-ui' @ 6.3.4 npm as malicious. It is considered malicious because: - The...

MAL-2026-16019 Malicious code in @aircanada/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a5af6f9411d25b2d87c0c4f50130fa9eccd9d4348195663b38d4c9c9edef6f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @aircanada/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 356e229b0e7aa4523c4bd61f176ee40d5e20a3d897bac1821057ffefc969ec12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @aircanada/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a5af6f9411d25b2d87c0c4f50130fa9eccd9d4348195663b38d4c9c9edef6f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @aircanada/navigation-handler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78d6c89dae0e934ca5564921316f878b55ca1e3fb9bdfebbc8a04e07708de03c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-16018 Malicious code in @aircanada/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 356e229b0e7aa4523c4bd61f176ee40d5e20a3d897bac1821057ffefc969ec12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview tool-registry-scripts is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-16021 Malicious code in @idkruan-10/dpd-depconf-probe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2bf846560a10c8a741e6acdc52828666f0f665f5770a2e01e8531341ef9dc4a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @idkruan-10/dpd-depconf-probe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2bf846560a10c8a741e6acdc52828666f0f665f5770a2e01e8531341ef9dc4a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in op-ts-server-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10907c74bd3094d2b21cc247498cb53b280d3e6bdb6947b86f17bee73b8eec7f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in service-home (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ffce66fb482d77c6fcfcf9cf3ab50c0de30f856921f4a90f9de969212a2687f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16039 Malicious code in service-home (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ffce66fb482d77c6fcfcf9cf3ab50c0de30f856921f4a90f9de969212a2687f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16036 Malicious code in redis-type-intel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b6f84d412afce72584ec95c5e2595987bf307b67540da51870c8a3a22b05952 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in oscar-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c988ef2dab3264cefcab98e4aae196d6c45b5555b22641e5862d89bde83815b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16035 Malicious code in oscar-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c988ef2dab3264cefcab98e4aae196d6c45b5555b22641e5862d89bde83815b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16033 Malicious code in kiki-baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b5b7a87ff7f08fee548c24dce02f8904d9920735f6643ec236ac00dda5c5470 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in kiki-baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b5b7a87ff7f08fee548c24dce02f8904d9920735f6643ec236ac00dda5c5470 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16026 Malicious code in bmc-translate-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a55e2a625f0b96f6903cccac0251c6b8380cf9589a1f222e9de7e97dbf466156 package.json declares a preinstall script bun run index.js. index.js is a 500 KB javascript-obfuscator-packed module rotated string array 0x71ec,...

Malicious code in bmc-i18n-extract-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70d52b44b46819aa61ff57d4863315b09f655a4fb5b5787843c2a24f85d9c6db The package's package.json declares a preinstall hook bun run index.js and lists the Bun runtime bun ^1.3.13 as a dependency, causing an obfuscated...