Malicious code in tracing-str (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 466143b5f195d4924e2227921a288954ecec9ed34d52af8ff433056f5ff56903 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-6880 Malicious code in st-biginteger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f459f75f70d08e36cca4b9dc35ee7c90cb7010de9b77a4906444bebf174b013 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tailwind-scroller (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57d21e3f2b10a543d5deb6a3999b78e5414b55ad958ff7811d802cb42386fc8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-6887 Malicious code in tailwind-scroller (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57d21e3f2b10a543d5deb6a3999b78e5414b55ad958ff7811d802cb42386fc8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-6883 Malicious code in styled-text-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cd72b5d4bfabe627a3978222a01eb290f92c4714accb42faa26fb8ca9d2542f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-6881 Malicious code in st-bigintr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e131cc31d56a484cba011c6188111c73f142866cfde721737180ce53cc3f96d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-6866 Malicious code in prettier-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e5645051b8c021a473b5b5e8ffc5771c65265a02502beff5bef28932c4877cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-6861 Malicious code in picocolor-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d3e751383a2838104b1052c4c7fd53fbbaa7205213e84939304080212ea64b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-6843 Malicious code in lint-builds (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e59bcbbdb88e5ffa12155537c268d8b8a50d9cfd88a462fe9219289e8226b772 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-6855 Malicious code in next-bignumber.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 615f1e472f3fec95854738e64a4e4883676d514db833ca3bfa7a1008c0253a57 Package impersonates the widely-used bn.js crypto library: README, repository URL, logo, and source files are copied verbatim from indutny/bn.js, but...

MAL-2026-6847 Malicious code in linter-entry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2dd46817b425ee73f1443401b7abcea1d2073f392c91f1af29974ac07a4fe20e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-6846 Malicious code in lint-null (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f501f945833536afeb32812532adcaeb99a9999b683992cf98eeea3fd0503442 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-6829 Malicious code in chalki-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 173274fae31c8d400a0fdf965a9cdbf315d2d88e626b554a86d047015ec980d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-6850 Malicious code in logger-beauty (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29f894c613d7ea8f407e4515aca877e6f13b5bb8e72530ce8032a534336b5a25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-6853 Malicious code in mjs-biginteger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c177f4d8a28532bbaba5b4349dbd99f8dd287d79760dbdd05998249adbabe9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-6827 Malicious code in chai-guard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e0814b168c19eced65c482efd2ccec185224474b7fbc0e47a2a3ab8fb3a5100 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eth-tick (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f96638eb8282b1eccbe4d7c1b1076340ac1b870d325856e2ad5415c2bf2737eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-6837 Malicious code in eth-tick (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f96638eb8282b1eccbe4d7c1b1076340ac1b870d325856e2ad5415c2bf2737eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jsonupper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1b0da679706ef488ebbf32e7449d3b4d79fae3bf468f5f167de3f657f75eb2a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fastnodemailer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 767201ea4bfd4f0c6950f9d6fadf4f9e38c9e72e56abd975ac1b49864ffc04a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...