29359 matches found
Malicious code in @gocortexio/npmgremlinbox-hippocratic-2-1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d13f8be8bd96cc8167ca9ad536b00b72d817c2acb8f6c8a93362f2e932b5e63e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @gocortexio/npmgremlinbox-fdk-aac (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6207192112f56fc40eade4e0eaad3581eef98f723337ff802ec60e569ab6bba8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @gocortexio/npmgremlinbox-gpl-2-0 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab52db644e1790e6fec7814ae119abd04ec6cb63173abc691f34ede1d7959b0c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10810 Malicious code in @gocortexio/npmgremlinbox-cddl-1-0 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 619607f5798c23f341f128fc384bcdbe47227d125c7377a64a950cc36c6c4391 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10821 Malicious code in @gocortexio/npmgremlinbox-eupl-1-2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fadc3dc1481610f965f36f4aa49e3cefcae48ce40e0ec2c4f98ef63f62bf00b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @gocortexio/npmgremlinbox-cc-by-sa-4-0 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbb7c4b37d26321a43dd2b0ea06e7043e8e265c27876e80d5f62a2979f763509 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @gocortexio/npmgremlinbox-cc-by-nd-3-0-de (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cd5150ef70be854d88218dbce350dae84fd41c7d7742673b2866be095c6a643 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @gocortexio/npmgremlinbox-cc-by-nc-sa-2-0-uk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c31160d30fd76b0823b67a8f9a4161aea511b56c897ae8153edd2c0e621f979 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10809 Malicious code in @gocortexio/npmgremlinbox-cc-by-sa-4-0 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbb7c4b37d26321a43dd2b0ea06e7043e8e265c27876e80d5f62a2979f763509 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10807 Malicious code in @gocortexio/npmgremlinbox-cc-by-sa-3-0-at (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a567f9fda6a70475cc32be7b5392bbc1a3c1787b8323c1ff2bc6c237e198fdc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @gocortexio/npmgremlinbox-base (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3905018e59676370cb9b0ce2f68f53df18b3ca774fafd9445bd3ce202ab0249 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @gocortexio/npmgremlinbox-cc-by-nc-3-0-de (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac07dbbcaab394576264b09782849aa49feace0efe500ab7e1f0967a10649718 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @gocortexio/npmgremlinbox-agpl-3-0-only (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fbd1a1acff8225ac5ce7f3c19a6eb207a79bc1aa842de64d0f697eda839c021 No a static rule matches and no traced installer-harm behaviors were identified in this package version. No lifecycle scripts, credential access...
Malicious code in @gocortexio/npmgremlinbox-busl-1-1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fde0f39d1aa2fb79d17f5582fc5044520af5bbbc864b910954b1476eeb62b6b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10796 Malicious code in @gocortexio/npmgremlinbox-cc-by-nc-3-0-de (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac07dbbcaab394576264b09782849aa49feace0efe500ab7e1f0967a10649718 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10783 Malicious code in @gocortexio/npmgremlinbox-agpl-1-0 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35ec6a36621ce352ab4510c339ef6a7367f88584b90ebfda17149c79dd947c66 No a static rule matches and no traced installer-harm behaviors were identified in this package version. No lifecycle-script droppers, hardcoded...
Malicious code in chart-animation-helper (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa890c03c6122833b54a469ef025c3761dfb6fa3a6cd299152de54ce98d9aedd Package is published as 'chart-animation-helper' and described as 'Lightweight chart animation utilities', but the module contains no chart or...
Malicious code in telemetry-axios (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f21f282e7349c68d7ff17d0b5c452fb51c3bab106ffb6f56dc80f108c4b0800 The package's Control.plugin entry point calls PluginOptions, which fetches a binary payload from...
GO-2026-5952 sigstore-go has a multi-log threshold bypass via single compromised log in github.com/sigstore/sigstore-go
sigstore-go has a multi-log threshold bypass via single compromised log in github.com/sigstore/sigstore-go...
