MAL-2026-11240 Malicious code in aruda (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d223eebb0aaf9ddbe61d2b227b5d94e08fd4bc37fd93c55f025673a36b6f487 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11220 Malicious code in @patternfly-4/react-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5f54e5643951668f9122f9909e456f67938b47d7ecb0cddf1fde02666a66ddb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11339 Malicious code in node-fetch-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ceb74bbe9b7a8216138cd37327350251924c2df2603d539bc91c3e8f22e2f38f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11218 Malicious code in @nordea-web/ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 366bacc3988f49deff2b60fae8cddafa449cc7e3df8475fd364c974bbfd7e7ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ncc-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47e6426d64d44f277630e33c26db683f2d8cc1c043374a88ed3a484c84f7a242 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11316 Malicious code in hjw-nasa-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b1632ded6ca00645c902a9d691d08823c53920ffd804e142b535efbca479664 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11336 Malicious code in ncc-fonts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0dc78eaeb84c645221a6f51ea2488913faab13484c8be0761ff46b7edb4c698 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11337 Malicious code in ncc-hyperapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9647de0608c8fb354bb4e857f6649f8e617ae5e05055d108cc6ae44f9427897a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11397 Malicious code in testsetset (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7e0887bc4462a3a2fdae3c468f85da3352d2ae5a196bbbeca6cf072caf5e3f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in reakt.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ff2841f53f4e574cacaa4dc1c13955afd830ecc4e34c57ef2e773477efa19a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11302 Malicious code in expres.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e2eb125cd826b1578646fdd06af4c5649ab6b31c1a39afc768bbc62bfdae0d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11257 Malicious code in chalk-buttons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec33c573b26dcd167feb75548bd7774af7a912c448fd08f624bead6e22deff13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11255 Malicious code in chalk-butons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0dc8638246791bb1c397834fde03907cdea6430e7da22bd9cd581964426d52d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11262 Malicious code in clo321-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0c9047321cb681b8b97850ee266a48bd5d192eab6133c686b9f7dc0aa5f68d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @ethers-sdk/ethers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e6d5bcfe574a6eecbff6a32c084a7abd43660939adafa83c7097a96d1ca791f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11210 Malicious code in @ethers-sdk/ethers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e6d5bcfe574a6eecbff6a32c084a7abd43660939adafa83c7097a96d1ca791f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in apihost (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db86bf96ebb268d3b0c11f456ca9b45669fc71ed912b5fff5eed4163601ed846 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cocktail-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f45a5083ce0e2b15394bacf66030a45b9650c7e5050c35ffb4047c197d414ca3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in srgb-linear (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 161f0f8d0598a57e1dde7ecb119f308f82a1bad8189fe8dce4bb88547559f588 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in datdbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3722aafe66ac2c253aec711db7cd1b2d0604d326c1520278ed712b02242e44f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...