MAL-2026-11239 Malicious code in apijsclo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da32970b216a1f6c8a76d725bf614f8b6142ad2c3806578c2ce2feae22640a76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tgnode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94acf1d28e1b8f8aa5afe5698d86dfc51989a56d5ccb99d848d2286b61dc21b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11323 Malicious code in isix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15a2f3573252bd11418bee1071c2c055972d968f1401261f8c227afc249c90c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in build-time-metrics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware feae498c1a766e86bf16277cb25155aebc829bba8df487a86f88e7e66c1caf64 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in easycommons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51e5eca4058ab71aaf0a525ba2b1ee47fee670f4a50118971c468ee4195c1018 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ember-livereload-indicator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 205eabc38fa6c38df3ea030cae6621b16235960c048a8eba382c821863c91da1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cross-sell (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69ca6d2d5b0f8c68cc8dd2f9799b681cd4fe6a1a5259d8b8a58653f528dccbfc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in js-focus-within (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e58e32261d804de32d0431893480c6ccff46b04a4f50f48bdb72642f0fe5269 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11347 Malicious code in pjm-dls (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47f282ee2db6dd2a90b13809610357f28aea53a0135dc1445fd92c5f140eef27 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11411 Malicious code in xp-node-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dacb3f21efc94ccf0bbcabc232b84f156d79b073feaf3e5bbfa40bbf998ba1d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11249 Malicious code in bn.js-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ac1efa94d945e3a7364888af7ae4d39354235d03bde092d89dcb56650f276d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pullingpackaged (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ff278946b863ce1334fc8565873bb2baf8f720e9ce156a940e407560677a6d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pullingpackageee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77ab723570d52cee7414fec303ea92c8e373a39274923acd41456fb26832e30c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in streak-metrics-math (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a3508138a215de5140d5c7922b41c602866a034ab1e8b28076f2cb734256844 The package advertises itself as a dependency-free calendar/streak math library but its main entrypoint dist/index.mjs contains a top-level IIFE that...

Malicious code in svelte-metric-map (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76c232192bc12931cca4480eb306026c8ca4776ace0353ddb00fe7b947515b25 No malicious behaviors were identified in the package contents. No install-time lifecycle scripts fetching external code, no credential or environmen...

MAL-2026-11269 Malicious code in consumerweb-risk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa886e4b335d3fc76fa6bc8e50c2e428ac164165830705c0ab2847857c2b3aa7 The package's preinstall lifecycle script runs automatically on npm install. It collects the installer's OS username os.userInfo.username, hostname...

MAL-2026-11328 Malicious code in logform-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec6c47e9e94b571242404a22ce01e255dc1df012c3d13477b5d2db9a96a037c Package name 'logform-core' is one edit/suffix away from the widely-used 'logform' logging-format library, and the README advertises formatting...

Malicious code in @peptide-unit/peptide-modify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 057496c38e2475722f55b10253b62536011c6e82e3552f53450fe80441e40c65 No static or behavioral indicators of supply-chain attack were identified in this package version. No lifecycle scripts fetching or executing remote...

MAL-2026-11189 Malicious code in test-skill-zip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90b0b80c790dd0c39844830b06e5388141ddc9a78aa8e79510cb6cd148de1a63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11100 Malicious code in identityauthorizationserv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca4808d7fab80b2202538cad6c5a1be4d62eb973ac35eb3a431fdf33f68b67ee [email protected] wires scripts.preinstall to node index.js, so on npm install the package auto-executes code that collects host...