Malicious code in dotenv-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7926abbca35dd3e5fa6c841ddff70fda3bc8330d2e427fe5747a23c264a4f45e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dotex-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a24f0c08a385f2366e23764f896e95c701acd9d746152a5409b1b6a1ca4c766b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in compose-logger-stand (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a34de797bc2020fd52b9b36fda8513a111610612c3a50e75d8ea8a79440be4f0 [email protected] presents itself as a logger but its shipped code implements a credential-harvest and exfiltration pipeline...

MAL-2026-11267 Malicious code in compose-logger-stand (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a34de797bc2020fd52b9b36fda8513a111610612c3a50e75d8ea8a79440be4f0 [email protected] presents itself as a logger but its shipped code implements a credential-harvest and exfiltration pipeline...

Malicious code in ember-cli-deploy-derploy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92ef0bde2aabf74dbd75073a6cb7ce71165ba8fb32dec2e49f707337becea0eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cross-sell (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69ca6d2d5b0f8c68cc8dd2f9799b681cd4fe6a1a5259d8b8a58653f528dccbfc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in unified-help-center-alpha (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a76f48c6cd4bfeda98c49e3c091e319501f5566227f6ad6cdb654c193fbe7582 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in time-to-reload (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae5b3b160cee5b4b48fd61cd4b3b3e8b1c97118b1ffcb0895fcd656d3faea62b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in impv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08ab943364555bc64aaa5949d20cb3976e5a47af1429a885373b91cf17c3f4c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in canvas-to (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20ad4ea01c4d87bc2fa2e6a27121b03d234dcdfdd8cadb702cb0ea28790f3ab9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in build-time-metrics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware feae498c1a766e86bf16277cb25155aebc829bba8df487a86f88e7e66c1caf64 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fcogvspgigatanzcydfyvgtjhvxibyau (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d987ceb34687d7e3c37233198705c5db7f3ba49910be418829475c475d20b21 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in js-focus-within (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e58e32261d804de32d0431893480c6ccff46b04a4f50f48bdb72642f0fe5269 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cancelling (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c6ef60911ccd5f41b2e1f332358d78e50a18f4e476f4289734f68ba06768abe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wistia_namespace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f82ae719a2b710db94689584e2851a2140f781e274f26736bdd98ce07a54adef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in termly-namespace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f83eec21eb8c2f78782c7fffceb15b3b8b6bfc612feccc4c39378a47d1b85cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in srgb-linear (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 161f0f8d0598a57e1dde7ecb119f308f82a1bad8189fe8dce4bb88547559f588 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ember-cli-deploy-secrets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e75fdf3524b33e98181630b607b31f8d9f45b24cbb04270f207e335761cbe88d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in columns_changed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6a08e84a962626aa6160a014090e1f67a42caabd34a527838659c8db3e5604e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in d3-bbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f44d2af489d00e9c5d4afb273874098491e2b6dcf362489ca10229f337a21005 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...