MAL-2026-6842 Malicious code in lint-builders (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77e005a8681b02ece13fee77659bccecc2591030c3dbb5681e81dc31fcb25c3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-6844 Malicious code in lint-nule (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 162028887cf405e851fd9c6680fc0069e22291627c72ae8378c156e7bf181bd1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lint-nuler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f9e0e240b15ecbe934992f121b12fa84d736e4432e20346c7860941517acaf2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eth-tick (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f96638eb8282b1eccbe4d7c1b1076340ac1b870d325856e2ad5415c2bf2737eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-6835 Malicious code in es-lint-entry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7abab05be195342f311825ea394c11273032428d1bd122dd4fe31f8a5b8da554 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-6839 Malicious code in hjs-lint-builders (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0fb723c71ef04ac50fb2126b5a4df175698c4c1a8a782536880c7031406e6bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jsonupper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1b0da679706ef488ebbf32e7449d3b4d79fae3bf468f5f167de3f657f75eb2a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in express-guardrail (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40e91ddac990897c8c43891c5abf64696a0e9d9d4b168e7a6e5f4a827e4f040d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in elevate-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6574bfcc569cf15bf54acc374665dae91fda15e45c8e75b7fda9a6e83c3bdba4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in custom-log-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c9faa938597e0a32ee3af2079e27bf57cb7cbe8953841b03fe33d51a154899d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-6813 Malicious code in custom-log-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c9faa938597e0a32ee3af2079e27bf57cb7cbe8953841b03fe33d51a154899d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-6807 Malicious code in bootstrap-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9ac4913fc1ffcabe1ed6637abc6d532abc014683f48b341ece6127a51da15d8 The package's index.js is heavily obfuscated with classic string-array shuffling patterns e.g., while!! loops with repeated 'shift' calls and...

Malicious code in devkit-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 581ed217608ccad453288981a19091bbc57aac7b6dda9aa2b682485cc68c5008 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-6808 Malicious code in chain-await-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77e7f01c553ac23e33093f616c3643869064c384e748db9a383cdcf854a07976 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-6812 Malicious code in cookie-ease (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e657448e95c84051d3c103da0e4bd744f5bc6cbbeedad66099d1ecf4681a65d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chalks-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 869473c144b82d7a8d2b10aee4e19061c20e777604902932a3c14632aea446b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-6811 Malicious code in chalks-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 869473c144b82d7a8d2b10aee4e19061c20e777604902932a3c14632aea446b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chalk-logger-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 575cc2964157bd7bee9bc0c7b318af484ea57a2d89a904cd8fe8bf978809f06f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chalk-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a36409ecc80ae4c159621da4530caf78fa06d5003dd2a55e18da3ae92b434cfa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bn-math (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware abaee8f5214f1143815e70bd6c329b82b418cdf6232715eb3b64d32547407a50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...