Malware in dsh-redteam-mode

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in ccl-global-shopping

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in youtube-search-without-api-key (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64255a9b30bfd083ac86612f2d7307de45dc83a57c42caf459cfb8df21dc2bf6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18256 Malicious code in cordova-plugin-geofence-appit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d6df6a389ad760629032dd0d4208662693ac60ebca2ff2b53ffbdf5f464387a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tailwind-base-buttons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8028e80925294f77a399eab9c3d9402ecaa7b191df72c75c437e9f03979ebdb Package [email protected] is a small npm package with 6 files. No install-time or import-time execution of attacker-controlled code was...

Malware in @k18k/entrypoint-sdk-linux-x64

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-17985 Malicious code in availab-le-alb-um-zip-hope-for-men-wmh1o-fjstib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fadd8da74e4f46ecddf708eaa3719e2b0e41eab01e00362219103e3a2db26ad3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in do-wnload-available-mulatu-steps-ahead-ag2jn-fzxotp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e31f44ca1e99435d949ced392e4cd3adbbe5c85754dfc91dd1b9634a2615510a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18030 Malicious code in new-al-bum-av-ailable-131000-eton-alive-qzngy-cjxczf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 951f0ebf686b9d2ba81a5056209d4d78a0348ae09d22401b544c5054606c436c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17991 Malicious code in do-wnload-available-2013-5195-ripley-pine-zoryg-cyvlnz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab47b050c80fae9e908b2ba52197ed2682d054410fe78dc51cecb93dff5b2d5a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17841 Malicious code in @wanzxlonelyy/bailslonely (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05fbc39cd82cca7d65bc1220f85315d4ad6584a5f28a9ddb0e38744dbbd9c644 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tailwindcss-animatecss-keyframes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 899fab6d3e500a876f1edc1f38356bddbceba9eb47b26d2eb43ae953557342be The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malware in analytics-widget

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @hrmony/app-gateway-templates

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in wbnr-probe-visible-check

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in z-deno-truth-ya1t4m

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in chai-as-testkit

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in btree-leaderboard

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @yane88/term-reqable-01

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in pig-ui-first

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...