Malicious code in baileys-inmemory-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 610d72c934ff0795b4aceddfc341b582c27f71034a47cf3e874e21387c842d34 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in @fongsidev/scraper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c7391aa8a431e807fe8cf8b22ad7a1073422de03f6c1ce923054ea9f3c3faf4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in baileys-mbuilder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 508ded2b926100712d9abf255683432d44a917c067f9d69b14b4c678918ce8bb package.json declares "postinstall": "node lib/index.js --install", and lib/index.js is a single 6.3 MB JSFuck-style eval expression that reconstruct...

MAL-2026-14529 Malicious code in baileys-mbuilder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 508ded2b926100712d9abf255683432d44a917c067f9d69b14b4c678918ce8bb package.json declares "postinstall": "node lib/index.js --install", and lib/index.js is a single 6.3 MB JSFuck-style eval expression that reconstruct...

MAL-2026-14527 Malicious code in @fongsidev/scraper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c7391aa8a431e807fe8cf8b22ad7a1073422de03f6c1ce923054ea9f3c3faf4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14528 Malicious code in baileys-inmemory-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 610d72c934ff0795b4aceddfc341b582c27f71034a47cf3e874e21387c842d34 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in array-shuffler-utils-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 233594ba444a80cbd5c49ac1da879d813b4ca97677dbe05930931496cd29582c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14519 Malicious code in array-shuffler-utils-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 233594ba444a80cbd5c49ac1da879d813b4ca97677dbe05930931496cd29582c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14521 Malicious code in fivem-tool-helper-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b33a1f643603b3bbf0f4e15b104240715e0de6a10025eeeafb9b015d684ca5f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fivem-tool-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11831d8204f695d6cfc23750c0899851f375e519e715e845730f90b7fc8d51a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14520 Malicious code in fivem-tool-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11831d8204f695d6cfc23750c0899851f375e519e715e845730f90b7fc8d51a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098835)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098835 advisory. In the Linux kernel, the following vulnerability has been resolved: fbcon: Avoid OOB font access if console rotation fails Clear the font buffer if the reallocation...

Malicious code in hydration-ui-cls (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dab60d6a779e65d7fa94af8c036d86b722a9cfddbe12d637990251a35004356 On import, dist/index.mjs runs a top-level async IIFE that chmods dist/internal/calc-eng.dat to 0755 and spawns it detached via childprocess.spawn. T...

Malicious code in svelte-ui-cls (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41593a52d2887b1bbbf1e1982cd8a12d011dfd8802605e083fdbfc86bf7ab5a8 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14517 Malicious code in hydration-ui-cls (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dab60d6a779e65d7fa94af8c036d86b722a9cfddbe12d637990251a35004356 On import, dist/index.mjs runs a top-level async IIFE that chmods dist/internal/calc-eng.dat to 0755 and spawns it detached via childprocess.spawn. T...

MAL-2026-14518 Malicious code in svelte-ui-cls (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41593a52d2887b1bbbf1e1982cd8a12d011dfd8802605e083fdbfc86bf7ab5a8 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14514 Malicious code in wm-eslint-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 080d6cf0cee122cb6b5676ea670ced2ca3e022a521f84b559e6643dca4fde253 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wm-lib-env-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 975f9cbb95ca5ce6d913c57698058355d247364e65d3a1d0a37d6e75f8325725 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14508 Malicious code in hexdrift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91f6b00b26052d34947326afc5e17df34500b077e8ed58daa9e9f67c3a93737e The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in foldmap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 569b7cd07b2dc5be0a93c14cf8798990210cdc1210dc7dc842dab5017f69f551 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...