Malware in @zread/cli-win32-x64

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @zread/cli-win32-arm64

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @jelou/cli-win32-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c1ca4873370727ce2a8e361ab17883fcc52c502565595bcae295f001bdc94d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @jelou/cli-win32-x64

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-19922 Malicious code in @jelou/cli-win32-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c1ca4873370727ce2a8e361ab17883fcc52c502565595bcae295f001bdc94d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-19205 Malicious code in @i18n.site/cli-win32-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8daaf422b7b508768f54150c2544bd15ac254dc1d2de5639707eaef08b7c49bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @i18n.site/cli-win32-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8daaf422b7b508768f54150c2544bd15ac254dc1d2de5639707eaef08b7c49bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @i18n.site/cli-win32-x64

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

code-shame (>=0.2.0, <=0.2.1), fallow (>=3.0.0, <=3.33.1) +1 more potentially affected by CVE-2026-115569 via @fallow-cli/win32-arm64-msvc (>=3.0.0, <=3.33.1)

@fallow-cli/win32-arm64-msvc NPM version =3.0.0, =0.2.0, =3.0.0, =1.19.2, =1.24.4 Source cves: CVE-2026-115569 Source advisory: MEND:CVE-2026-115569...

code-shame (>=0.2.0, <=0.2.1), fallow (>=3.0.0, <=3.33.1) +1 more potentially affected by CVE-2026-115569 via @fallow-cli/win32-x64-msvc (>=3.0.0, <=3.33.1)

@fallow-cli/win32-x64-msvc NPM version =3.0.0, =0.2.0, =3.0.0, =1.19.2, =1.24.4 Source cves: CVE-2026-115569 Source advisory: MEND:CVE-2026-115569...

reasonix (>=1.1.0-rc.1, <=1.39.2) potentially affected by CVE-2026-102437 via @reasonix/cli-win32-arm64 (>=1.1.0-rc.1, <=1.39.2)

@reasonix/cli-win32-arm64 NPM version =1.1.0-rc.1, =1.1.0-rc.1, =1.39.2 Source cves: CVE-2026-102437 Source advisory: MEND:CVE-2026-102437...

reasonix (>=1.1.0-rc.1, <=1.39.2) potentially affected by CVE-2026-102437 via @reasonix/cli-win32-x64 (>=1.1.0-rc.1, <=1.39.2)

@reasonix/cli-win32-x64 NPM version =1.1.0-rc.1, =1.1.0-rc.1, =1.39.2 Source cves: CVE-2026-102437 Source advisory: MEND:CVE-2026-102437...

Malware in @umacloud/cli-win32-x64

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @umacloud/cli-win32-x64 (npm)

npm/@umacloud/cli-win32-x64 is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...