Malicious code in tailwindcss-animatecss-keyframes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 899fab6d3e500a876f1edc1f38356bddbceba9eb47b26d2eb43ae953557342be The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstack1qjbr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85d784088394499921a432bb36d6146bddcad370b54c16047eb8c12d1baf9b25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in superdupertest111 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84dafc169a0c96b769349ac7685ff37d6ad663db50df14862a784173cde38dbe The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in svelte-cache-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1453b15dc9dc17e87c7dd53ab81d2e1c5988a6a3436d37e90500acd83dacdd22 No a static rule matches and no traced install-time or import-time behavior of concern were identified in this package version. No credential access,...

MAL-2026-12009 Malicious code in @keyv/compress-brotli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86bff1a8498159cc349a64d9d6459b842242e7d860aa2a33649708c9fc5f456a Package @keyv/[email protected] is a Brotli compression adapter for the keyv key-value store family. No credential access, network exfiltration,...

MAL-2026-11494 Malicious code in test-dev-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b79a278016b87011ec1e810ce455d87ab6346a1045cc007e0155b204c8cc2532 test-dev-sync is a browser data stealer coupled to a remote-command backdoor. grabberuser.js enumerates Chrome/Chromium/Opera/Vivaldi profiles under...

Malicious code in @mp-op-ss-front-lib/tracks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d870b0214c38734a6a9b3073e958bb198a11243a3093110cc85be0b7ae9bdb2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @finance-ui/snackbar-ifpe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44977ea381cb1ef71bae69849b3091ee76769ad26363ba31525f96ca1128bda7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11455 Malicious code in allurectl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 186241f7063cd1f10fe15814d834b890f99c1a3360f2f6a4e6190169ff0481eb Package name impersonates Qameta's Allure TestOps CLI allurectl but ships unrelated code that harvests developer identity and posts it to a hardcoded...

Malicious code in ethe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a69deb9966efa1f01057d9db1ed238faa6dcea2b8c35c6047b306e4f33baa9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11287 Malicious code in ecto-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22c8d3b7c34470a9fc4d565d8acfaea51246e1a4a88ca0136679fd6390af63e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in clo321 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8f8fdfecbace0a3b861bac6a6ddbed0f00e2a235328f12edabb853cd6bd5e20 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11402 Malicious code in time-to-reload (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae5b3b160cee5b4b48fd61cd4b3b3e8b1c97118b1ffcb0895fcd656d3faea62b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11180 Malicious code in aone-cloud-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ac6b6dc6a9ebc0c474150ee0d6545f6c3fa790ada20f247ac997ec504ce6ffc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aone-sandbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb48e61b0c82bff5ed26f7afb8cfca9248ffe0a256db4bd9fd2e47b757e7784d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in motion-forge-css (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f9c883a4865db328dff8b43c279a353b6ad494416a665e0201fdca7b6ba4daa Package advertises itself as a small PostCSS vendor-prefix / CSS-variable-injection plugin but ships a single 105KB obfuscator.io-packed bundle as it...

Malicious code in @sqlite-tag/sql-creator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a88585293f864e712b64feb436171caab5fc4d9c5d9d3509b2a0a67e04b6e8a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @gocortexio/npmgremlinbox-cern-ohl-s-2-0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22ddcc0f57aeab54d998e596dbf40296544f7c8ac4d6feb64ae414f81597c6f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10823 Malicious code in @gocortexio/npmgremlinbox-fdk-aac (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6207192112f56fc40eade4e0eaad3581eef98f723337ff802ec60e569ab6bba8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10809 Malicious code in @gocortexio/npmgremlinbox-cc-by-sa-4-0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbb7c4b37d26321a43dd2b0ea06e7043e8e265c27876e80d5f62a2979f763509 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...