Malicious code in thoughtgear (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e2acc307a077bd79ae28a6f8b7a5448b7947bcaa7496bbbf29804d5a11e5f21 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in host-inspector-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94f6b6fa0236d92aa637686aea23b70cb31900bb701c70d77397fd3da25f2bd6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in express-bubble (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 956b35c3b022736d505e63ff195d09af3bfe315d35774c9544de2e3569affab8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11306 Malicious code in express-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf720bba719befc7614566842a6d60f3003e5f7a908bc62fde618c4ab00e0374 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11389 Malicious code in sunpro-3dmodel-renderer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27ab648ee61e8b9dc571927ea620226125fc419eaa13f7c2bda53767a7453189 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11362 Malicious code in qserver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f38e6b7e00f8dcf90ed3683783ed77c81e4eb0a457d33656b14194048625301 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11401 Malicious code in thoughtgear (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e2acc307a077bd79ae28a6f8b7a5448b7947bcaa7496bbbf29804d5a11e5f21 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in merg-descripters (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f76e5609bceac9f395143e5329a0187c6ba35512bf453587bc2fe114622508b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11280 Malicious code in discord-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3c1bd5721d48e92da2ea3b06abe4b3343f6aa6b48224534c89c04d6a8252cff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11235 Malicious code in ag-grid-boost (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b48a0535bdc8dc48399716c0e05646161556ce93b7b3cfeb7ba095e9bc3e1df5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11327 Malicious code in lodash-ex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18ddc129136b388cfe448e3253a312b7a54ddc90993e77f4e91fd859b08fbb47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test-wastu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee1eaffc68579d642bdc5049b55da20953cdc0fce2dc32f42669561a02b3e590 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in scol (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea99a3f3b1743882b257e9f10fe8ce5575c81f7ce1a439fb5a4da12ead9b1e5a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in blbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4116fb9fa0f1722871be8fd4fdc1d54633acc0f32aea0c74372ed72b2a147d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11384 Malicious code in spectral-corsair (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7c77441a8038182fe252b5782f82b900831bb6e4b598944ed0edfb4093e5fe1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in etwl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e526e1b1272a9b3c18948e466b5380d199c4a81ff4ecd198c2ec0dfa2d69bfe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord-csr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 830c0ff21018fcfee625d241dece766b6c8db87e891ba9fbcfe567a01ec1447c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @pumpdot-fun/pump-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c408c3350082bac3e0fcef5878dfd9a618d3a5f538ed6c6f1b6fc4abf2832ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fwf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67afa7fe22e11e200dbb0a033b897eb7ff275ba6b5c33ec15e1371bf1b8feb08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aruda (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d223eebb0aaf9ddbe61d2b227b5d94e08fd4bc37fd93c55f025673a36b6f487 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...