Malicious code in chalk-butons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0dc8638246791bb1c397834fde03907cdea6430e7da22bd9cd581964426d52d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fcogvspgigatanzcydfyvgtjhvxibyau (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d987ceb34687d7e3c37233198705c5db7f3ba49910be418829475c475d20b21 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in termly-namespace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f83eec21eb8c2f78782c7fffceb15b3b8b6bfc612feccc4c39378a47d1b85cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11343 Malicious code in page_colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4263830f03bdc8ee0efe3cb0a419db9752ddf2c3f056b17182d1c8ba2b1f62ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11353 Malicious code in pullingpackagee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d72c36e7d1f592e7ea21cc7aaf3ae10e22eca202c7b2ae7e3cab34f08a5ea32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11194 Malicious code in n8n-nodes-trust-me-im-totally-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bd22982653509931d8154fc00793d03ae037f78243500c749ff4f6c1274e73c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11179 Malicious code in @zannstore/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 708c069b088fb74064262b95a516de8d4b3f3128bd6705d98ee7e8dc10e942c8 @zannstore/baileys is a fork of the Baileys WhatsApp Web library. A a static rule fired on lib/Utils/generics.js due to keyword co-occurrence of...

MAL-2026-11187 Malicious code in lzd-unified-station-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a7aa719b42fefe9ed02663e521da72cb152008b0db0be8a186524902059c590 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in edu-npm-helper-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd7f857929420503555e28dd3c702b2f60cbd705fd7be4a15009fc0536646978 No suspicious behaviors were identified in this package version. There is no evidence of install-time network activity, lifecycle scripts performing...

Malicious code in txs-runner-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaf4e668ad1a65cf7be8d260ba2c6ee46a31be7553bad3219775b61a5d226dfc Package [email protected] could not be fully characterized: automated tracing engaged with the package's files but its output was withheld by the...

Malicious code in sixbails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e91338e6d735e538b7defb669e5b213cad127a9fd64290fa32d83bb855dcf9bd sixbails is a WhatsApp Web library Baileys-family fork. On every socket creation — the package's primary documented API — a 5-second timer fires...

MAL-2026-11052 Malicious code in app-data-layer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc306d8463afd4c0baadf4af1627986a5cb136d516c71415957fa606150008bd Analysis of [email protected] 3 files scanned produced no static or traced findings. No lifecycle hooks fetching or executing remote content, no...

Malicious code in da-sc-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6af0c0528114fb5ac6296c3390b435a78ce9dc9f0d90fc606a6cf5d05b3472f0 No a static rule matches and no behavioral findings were produced for this package version. With no evidence of exfiltration, install-time remote cod...

Malicious code in helix-deploy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8efca4dde44b08de6562799d28d41e0793e171dc72cf0380bf8f8f330d9236d2 No a static rule matches and no behavioral findings of concern were identified for [email protected]. No install-time lifecycle scripts fetching...

Malicious code in vectormark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d0646473c841676e2f55d66494a805943e00b2e2d7515e1bbba5453e6a9024e [email protected] advertises itself as a zero-dependency SVG helper library, but index.js exports an undocumented function getPlugin that issues an...

MAL-2026-11017 Malicious code in vectormark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d0646473c841676e2f55d66494a805943e00b2e2d7515e1bbba5453e6a9024e [email protected] advertises itself as a zero-dependency SVG helper library, but index.js exports an undocumented function getPlugin that issues an...

Malicious code in @gocortexio/npmgremlinbox-polyform-noncommercial-1-0-0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 468bf7ae3a725d97b503a456cd1c3baa627f82d8798b6ce91acad9f0dd20e9e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @gocortexio/npmgremlinbox-typosquat-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09600aad622af9770b49b5bf72455f6d957b2913bfc2e892b7cb2ef0ece4f09a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @gocortexio/npmgremlinbox-hippocratic-2-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d13f8be8bd96cc8167ca9ad536b00b72d817c2acb8f6c8a93362f2e932b5e63e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chart-animation-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa890c03c6122833b54a469ef025c3761dfb6fa3a6cd299152de54ce98d9aedd Package is published as 'chart-animation-helper' and described as 'Lightweight chart animation utilities', but the module contains no chart or...