Malicious Package

Overview alicov is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview alita-poke49 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @baipiaodajun/mcbot is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview alliedcrocodilez3n is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview algol-stream-node-config-enif is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview alita-poke50 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview allcash is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview alita-poke70 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview algol-sagitta-nodejs-ursa is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview algol-forever-less-exoplanet is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview allied-gray-catfish is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview algol-forever-regulus-miranda is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

MAL-2026-15654 Malicious code in @yane88/idea-2026.2-04 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a563932a890cd09abfabb1a2fb37bba82cf507c0f0fab92ecbebc39689185654 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15650 Malicious code in @yane88/idea-2026.2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a9e6ff544a605ec409572efcacfaab5988c6314c01cb3e8f18b5c1f29613224 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15652 Malicious code in @yane88/idea-2026.2-02 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0aadacf7ad71847f33584da544505cb73d5d08b0ae8b167843198507252343a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15651 Malicious code in @yane88/idea-2026.2-01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3124a1c9acaf74c188df39d5f082e62a04b41a7440d16c5689f67e6202f0fa6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview spc-grafeno-login is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview alfiansyah-poke66 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-15655 Malicious code in @yane88/idea-2026.2-05 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5865c413c00416de3502791f9af838084ce486d92080591868a79bab3e346aa8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview allied-gold-whitefish is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...