MAL-2026-15663 Malicious code in @yane88/term-reqable-02 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c0e2129fbf1e7a2da4c71b24bbd38abade289a0f9aa576bacefb53566046cc8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15665 Malicious code in @yane88/workbuddy-01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dbb87f4a9b5e5482d4c8fdc2c448905f4a4df65feb64c3100385c616cf5470a The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15664 Malicious code in @yane88/workbuddy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00baaa53d63c0bababb9db20aa5e86149da604834a5761b827edd2f936178c91 At npm install time, @yane88/[email protected]'s postinstall script pulls three sibling npm packages @yane88/workbuddy-01, -02, -03, each shipping a...

MAL-2026-15659 Malicious code in @yane88/listary-02 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c557592d2b0b567ac07c3a66d9cc87f2bf6efb6b5646356c5d58afff3391f79 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15649 Malicious code in @yane88/hexhub-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a628c35399f2993b111f79396b198c542374b19367ccb6062c5f59f2b61dfdbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15658 Malicious code in @yane88/listary-01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfd784784bedda93c768e67f6604062febe7761cb1ff3b1fb2178ad075aef10d The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious Package

Overview @yane88/idea-2026.2 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview allegedsharkz3n is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @yane88/idea-2026.2-05 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

Malicious Package

Overview hyperliquid-composer is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview alfiansyah-poke75 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview tailwindcss-forms-style is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

Malicious Package

Overview allcash is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious code in @yane88/idea-2026.2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a9e6ff544a605ec409572efcacfaab5988c6314c01cb3e8f18b5c1f29613224 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview algol-koa-xenos-redis is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview alivetoad-gooddev is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview algol-stream-node-config-enif is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview algol-apollo-indus-extremophile is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and th...

Malicious Package

Overview alita-poke82 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview spclogin is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...