Malicious Package

Overview model-data-cache-service is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview js-focus-within is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview ember-cli-deploy-derploy is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

MAL-2026-11265 Malicious code in cocktail-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f45a5083ce0e2b15394bacf66030a45b9650c7e5050c35ffb4047c197d414ca3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bn.js-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ac1efa94d945e3a7364888af7ae4d39354235d03bde092d89dcb56650f276d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bajkvahzv8allnltvr7x4s5hdxkjvyji (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33a3ac75333df2fe3d27eac3d771269f45d3567ec6203fc00b8e9b9234897744 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11275 Malicious code in datdbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3722aafe66ac2c253aec711db7cd1b2d0604d326c1520278ed712b02242e44f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11386 Malicious code in srgb-linear (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 161f0f8d0598a57e1dde7ecb119f308f82a1bad8189fe8dce4bb88547559f588 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview columnschanged is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in pullingpackagee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d72c36e7d1f592e7ea21cc7aaf3ae10e22eca202c7b2ae7e3cab34f08a5ea32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11356 Malicious code in pullingpackageeeeeee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45246ee20e180e2fad7d173c631adc54422700c677af4295a9624000fc6146fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pullingpackage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9313a7f2668469165ec57294f516576c2931233838685e0268d818ffee416cad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11354 Malicious code in pullingpackageee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77ab723570d52cee7414fec303ea92c8e373a39274923acd41456fb26832e30c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11209 Malicious code in @dotconf-pro/dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd637311af2fde11d791f9e88a5b58e602a1fe9f1ce5b91aa4780f9a09cb8ff9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in streak-metrics-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae3b140d6072d259b286e7487a69cd3babe3855ed26add10dbf664e9ac4aecb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview mcp-search-server is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-11400 Malicious code in thedata (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e05613178114f2f3d9171f429a5b6aba8e1a525e07db22d150be81c02d6f595 The package's main entry index.js re-exports two values, rsaKey and desKey, from apps/docs/app/theta.js, which simply readFileSync's...

Malicious code in switchpaymentsapiserv-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdf45ca375c6a15e134abf2ab456c8cbd75e514d934e2c16b1d2b23e9677186a The package's preinstall lifecycle script runs automatically on npm install and exfiltrates installer identity data via DNS. It collects...

Malicious code in consumerweb-risk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa886e4b335d3fc76fa6bc8e50c2e428ac164165830705c0ab2847857c2b3aa7 The package's preinstall lifecycle script runs automatically on npm install. It collects the installer's OS username os.userInfo.username, hostname...

SUSE CVE-2026-28759

Mattermost versions 11.5.x = 11.5.1, 10.11.x = 10.11.13, 11.4.x = 11.4.3 fail to validate that a remote cluster has access to a channel before processing membership removal requests during shared channel membership sync, which allows a malicious remote cluster to remove any user from any channel,...