Malicious code in unified-help-center-alpha (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a76f48c6cd4bfeda98c49e3c091e319501f5566227f6ad6cdb654c193fbe7582 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11251 Malicious code in broccoli-watcher-siphon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 045a48ee2e7fb0e492e451c0144cf9b6072f56fcffa8b69808b7cf8e3a0f5b10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11244 Malicious code in bajkvahzv8allnltvr7x4s5hdxkjvyji (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33a3ac75333df2fe3d27eac3d771269f45d3567ec6203fc00b8e9b9234897744 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aven_shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 017a3ba314e321dcd3e3b054cec53a6be0352881d36eeec79f166fe583e14f9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in confetti-rebuilds (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f2069e994966cd4c815277183b96ea19c7874fbced968edb527a4ba7a2d0697 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bajkvahzv8allnltvr7x4s5hdxkjvyji (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33a3ac75333df2fe3d27eac3d771269f45d3567ec6203fc00b8e9b9234897744 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in baofdadbybmqeefeeginweoamxlphrjq (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0fd15e81f0b6a2db61b6b8ae037b3ff29f12f9d274847f4708ef7cd4909f316 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11326 Malicious code in live-reload-on-error (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b7d87f94e77b603423e5ebb9e62f37541ad355708d900e33e0442210ce70957 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11271 Malicious code in cross-sell (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69ca6d2d5b0f8c68cc8dd2f9799b681cd4fe6a1a5259d8b8a58653f528dccbfc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11276 Malicious code in decline (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac37f89d973f66d0ea1d5bda82291d0a59d9c2e008775135c2dcecc422d92ca1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pulleeelll (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6b3173a308b5738e4e3047a8125b432486042563101678e0182e95962b37f20 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xp-node-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dacb3f21efc94ccf0bbcabc232b84f156d79b073feaf3e5bbfa40bbf998ba1d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ember-livereload-indicator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 205eabc38fa6c38df3ea030cae6621b16235960c048a8eba382c821863c91da1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in decline (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac37f89d973f66d0ea1d5bda82291d0a59d9c2e008775135c2dcecc422d92ca1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in slowest-build-nodes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99f289163f5b86c32755596d6994cdf618b497111e781d5ab034d64d248d6b4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11332 Malicious code in model-data-cache-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a5f728ad2fff044db6b02073523084d299a7e876770118b7c0a097ffd904c4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11249 Malicious code in bn.js-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ac1efa94d945e3a7364888af7ae4d39354235d03bde092d89dcb56650f276d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cocktail-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f45a5083ce0e2b15394bacf66030a45b9650c7e5050c35ffb4047c197d414ca3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11268 Malicious code in confetti-rebuilds (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f2069e994966cd4c815277183b96ea19c7874fbced968edb527a4ba7a2d0697 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11254 Malicious code in canvas-to (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20ad4ea01c4d87bc2fa2e6a27121b03d234dcdfdd8cadb702cb0ea28790f3ab9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...