MAL-2026-10285 Malicious code in backup1-gg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb035cd86ea0fd9311ad7b6f509a5f6ff9916838194db2a06eed0576d91bb655 The npm package [email protected] ships multiple heavily obfuscated JavaScript bundles under assets/ AccountPage, DarkVeil, GamesPage, PlusBlockedNote...

MAL-2026-6631 Malicious code in @mcconnect/mcc-common-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be912fccd62d30a685cdb31baa7155b91a283043d74447d1d7099ffbaa73b1dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48229 Malicious code in redirect-wu8gx9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5a2996cc61a1e204cae80de7c26f2d9f39f9b38a24d1091190ee107dd664b9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-tsconfig-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8e87c316d95bb1306ba575056c1036de186e9370217e5fdde12d1e13cc316ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bithumb-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 486276686eda2f4f675b363605d7e934f7665dfbca8a85f49d8b76a801f7ce43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nodmeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02b6f9ef09fb90c7d01ad94978e2b070855298c19a217d23602a4f05adcf8640 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in calc_tj7r6uk4vf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49893f957d5df6b7192a31b5c43e7483cdefa3a60e3994eb21d121bf0172cfc6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in registrydependency2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef160d77c9602074dcad0ac7e16f825779403d92831ca41f679ada34250d7ab5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in colorsss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2e968d7285cddad793c46e77a5a33bbd2f471415fce24a11f557f89e732170f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...