Malicious code in easyinstaller (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c4ea36235cf092d70fea18574aa582526923d2c869fb9f3846aabb0b180c76a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shnc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78b03f61a0a3629c78456a2981b6658bf778cc1d808f5e0b17ea674f425a78bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ideascloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b720d727d5e8a440d3cf4d8f6674d2352e864352fcd9958f2f95f291af734368 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in express-bubble (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 956b35c3b022736d505e63ff195d09af3bfe315d35774c9544de2e3569affab8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sunpro-3dmodel-renderer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27ab648ee61e8b9dc571927ea620226125fc419eaa13f7c2bda53767a7453189 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rshell (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5111add8e3d97e54c2903e39496ddb07c74aa68af8e7f0f1bee761c320dd7ebb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in api-gateway-lambda-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a257fe33bb475cd07d71ded069ceec397276bdd4eecbf78b50d81bde8da769e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in payu-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41b51c9a2ec288de34548ffb74ffe8408a3c69d8c5d916fadc82c853827c9fa3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11379 Malicious code in shsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49d4f90386ec40022f0fad868c745b30d446963edadf0e8fe1a3a4a338ce02d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11342 Malicious code in npum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4a9d6c4d1ca3b910ad0684ec85cd0d1d0dafaa0906f5828455697d0b937874e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11286 Malicious code in easyinstaller (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c4ea36235cf092d70fea18574aa582526923d2c869fb9f3846aabb0b180c76a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11317 Malicious code in host-inspector-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94f6b6fa0236d92aa637686aea23b70cb31900bb701c70d77397fd3da25f2bd6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11318 Malicious code in ideascloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b720d727d5e8a440d3cf4d8f6674d2352e864352fcd9958f2f95f291af734368 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in merg-descripters (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f76e5609bceac9f395143e5329a0187c6ba35512bf453587bc2fe114622508b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in express-test-dependency (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1347a031977c76d8945813d129567addafb91c3bdc49eaadcd329f61ef72304d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11305 Malicious code in express-test-dependency (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1347a031977c76d8945813d129567addafb91c3bdc49eaadcd329f61ef72304d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @goodjavascript/dotenv (npm)

@goodjavascript/[email protected] published 2025-03-22T09:05:32Z, replaced by an npm 0.0.1-security holding stub 2026-07-30T22:47:55Z — approximately 16 months live is a two-file package that impersonates the API of the widely used dotenv configuration loader while running a command-and-control implan...

Malicious code in discord-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3c1bd5721d48e92da2ea3b06abe4b3343f6aa6b48224534c89c04d6a8252cff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord-ms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 203ee4d21fc1df2921367505b508c20e236b7eff515ec18e76ba29d22db661bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11280 Malicious code in discord-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3c1bd5721d48e92da2ea3b06abe4b3343f6aa6b48224534c89c04d6a8252cff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...