195892 matches found
MAL-2026-11213 Malicious code in @grua/core (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b0588f2a4e3843bee403528cb8502b7c4207d2ce3179e51649b3951f8a8d2b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @ethers-sdk/wallet (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38a8c103dc06261576987809af8a1deb696dfdabd93bf4116f42ee199ee77cc6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ethers-v6 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 771d1539e3c3eecbc3411a9997e602a2fa8deabe2fcb88956e29d8525f8972f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-11291 Malicious code in ember-livereload-indicator (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 205eabc38fa6c38df3ea030cae6621b16235960c048a8eba382c821863c91da1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-11297 Malicious code in ethers-v6 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 771d1539e3c3eecbc3411a9997e602a2fa8deabe2fcb88956e29d8525f8972f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview pulleeelll is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
Malicious code in @404c3s4r/testxxx (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3bd0eb9a43f893d498f074432357cace7974802e77750075976412a8300599a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
@aws-amplify/amplify-util-uibuilder (>=1.2.13-studio-q1-release.0, <=1.14.27), @aws-amplify/cli (>=7.6.11-beta.0, <=7.6.26) +4 more potentially affected by CVE-2025-4318 via @aws-amplify/codegen-ui-react (>=2.1.0, <=2.14.2)
@aws-amplify/codegen-ui-react NPM version =2.1.0, =1.2.13-studio-q1-release.0, =7.6.11-beta.0, =7.6.26-npm-pkg-cli.0, =7.6.27-alpha.5030, =0.1.0-alpha.0, =0.1.0-next.0 - edilkamin 0.0.1 Source cves: CVE-2025-4318 Source advisory: OSV:GHSA-HF3J-86P7-MFW8...
MAL-2026-11390 Malicious code in svelte-metric-map (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76c232192bc12931cca4480eb306026c8ca4776ace0353ddb00fe7b947515b25 No malicious behaviors were identified in the package contents. No install-time lifecycle scripts fetching external code, no credential or environmen...
@aws-amplify/amplify-util-uibuilder (>=1.2.13-studio-q1-release.0, <=1.14.27), @aws-amplify/cli (>=7.6.11-beta.0, <=7.6.26) +4 more potentially affected by CVE-2026-18245 via @aws-amplify/codegen-ui-react (>=2.1.0, <=2.14.2)
@aws-amplify/codegen-ui-react NPM version =2.1.0, =1.2.13-studio-q1-release.0, =7.6.11-beta.0, =7.6.26-npm-pkg-cli.0, =7.6.27-alpha.5030, =0.1.0-alpha.0, =0.1.0-next.0 - edilkamin 0.0.1 Source cves: CVE-2026-18245 Source advisory: SNYK:JS-AWSAMPLIFYCODEGENUIREACT-18601829...
Malicious code in switchpaymentsapiserv-paypal (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdf45ca375c6a15e134abf2ab456c8cbd75e514d934e2c16b1d2b23e9677186a The package's preinstall lifecycle script runs automatically on npm install and exfiltrates installer identity data via DNS. It collects...
MAL-2026-11269 Malicious code in consumerweb-risk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa886e4b335d3fc76fa6bc8e50c2e428ac164165830705c0ab2847857c2b3aa7 The package's preinstall lifecycle script runs automatically on npm install. It collects the installer's OS username os.userInfo.username, hostname...
MAL-2026-11392 Malicious code in switchpaymentsapiserv-paypal (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdf45ca375c6a15e134abf2ab456c8cbd75e514d934e2c16b1d2b23e9677186a The package's preinstall lifecycle script runs automatically on npm install and exfiltrates installer identity data via DNS. It collects...
Malicious code in consumerweb-risk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa886e4b335d3fc76fa6bc8e50c2e428ac164165830705c0ab2847857c2b3aa7 The package's preinstall lifecycle script runs automatically on npm install. It collects the installer's OS username os.userInfo.username, hostname...
Malicious code in create-backend-scaffold (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0201b01c3bd9dbea597956acb10299aa22cd7976dcb7863348892f46512b47f1 playground/src/routes/auth.routes.js contains an obfuscated trailer appended after the normal router export. The trailer aliases require/module to...
Malicious code in pretty-log-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad32145cb24ae2a271cecb6379d30a531be17d84a0d71189d3a4afaec20af015 No malicious behavior was identified in this package version. There is no evidence of credential access, environment scraping, network exfiltration,...
MAL-2026-11328 Malicious code in logform-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec6c47e9e94b571242404a22ce01e255dc1df012c3d13477b5d2db9a96a037c Package name 'logform-core' is one edit/suffix away from the widely-used 'logform' logging-format library, and the README advertises formatting...
ROOT-APP-NPM-GHSA-72R4-9C5J-MJ57 GHSA-72r4-9c5j-mj57 in @rootio/pnpm - Patched by Root
Root has patched GHSA-72r4-9c5j-mj57 in the @rootio/pnpm package for Root:npm. Multiple fixed versions available...