MAL-2026-16086 Malicious code in graphql-js-client-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c11b1672f9929aa10893cab85bc0f4e9a5ae5adfc2c8ae637d45e61b644692b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in service-home (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ffce66fb482d77c6fcfcf9cf3ab50c0de30f856921f4a90f9de969212a2687f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16031 Malicious code in cb-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16b89e0045c311aec83f8b4710dc1709b64bf083541c7ad26d639b89f5c98a7b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15645 Malicious code in kisama-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0179b9fe97920f04431eb6d6e94b46c6ef2889af5e55d6a0b79793097187fed3 [email protected] ships an obfuscated index.js that runs an HTTP+WebSocket agent binding 0.0.0.0:8000 by default and exposing /api/exec POST for shell...

Malicious code in 3layerdipstacko8li9w (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9886025a6437b781a80821d6f113c08dea138ee45899438c19bf9e7cf3e366c5 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14861 Malicious code in 3layerdipstackoms1fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c97713fb02abd28ed8ae39bdff7b71df1f21f6e8f835baf5f074bbe05984808 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackihi1o9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f7a901824681511a2e113ac8f970984a35b6e042d971695d8933f0a44f58442 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14749 Malicious code in 3layerdipstackfdgka0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6b1e8e507446d2e1921511d47721fa25899b90432339713bbaac218908d68b8 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14696 Malicious code in 3layerdipstackbn5wu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aca41cf6e277e50dc007b6df90e08c1fe49706a46fcd3c185208d99f76aac1c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14602 Malicious code in 3layerdipstack1g5cxo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed95dd89d1a5daf491b1350b3cd65fb73e19a50ef66848b5a86ffdba77ba6205 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14944 Malicious code in 3layerdipstackuew4bh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f693f3775d167495f7080e39f299df6fb4cc1e282f79718d712fcca91076e82 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14669 Malicious code in 3layerdipstack8zg7y (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d67b18e31be3701ce965612c851f62d385f0f0d5c6326464fb76cea70d6875e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14598 Malicious code in 3layerdipstack1a4xg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5757d0297f898182175bc3d1a4ce7dc9d0161b4e24031c3442f25e565b6dfebb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15197 Malicious code in desmos-graphing-3sp71tdg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d246b8871e487d793e8a7837c78bb17b343b500110923a68fb1aacc2433c58a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15254 Malicious code in desmos-graphing-y1aqhk2u (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27491976b2ff276299d5598a5eefe3f725a5683d23821ea6a088e53fad425663 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in waxed-slightly-weathered-cut-copper-stairs-rsq09wdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bcad758e91e7fc846d0fb842f490c66da75b8a99c4f4867ce6024ccffdf987f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15074 Malicious code in classlink-fp7poyii (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe762ef1011dea9f34d900f617d2e8badc973b6128b6b6e3cf6dcc69948dcdc3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15150 Malicious code in classlink-u1vqpl5z (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b9599710c848a74113f06cd897bee6caed418286f4cab58e3b3c5772782d3a7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in secure-test-browser-rkt8e6l7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98b288624e813a5b3692a59c632af15afff1ac6ef343f446ee64222795d24940 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15434 Malicious code in secure-test-browser-ude9srx4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4160d2b21a64b999a264511a0f6a9329aaf809e2902a15e912cddb9e3a962f85 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...