Malicious code in bfvkjmeikpwhqxc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc18af375249e950878cf3a95c2290bdee9ec1a2e188d0bba906acda390403e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @levvicode/eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 209977e14df4b690913958d1982a1e75028696bb11694e94608569237ab5688f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18475 Malicious code in aytidaoffc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9cc1ad74f9e8877a0f1229523afc516f51736964eae8f159d0e48519da6895f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @levvicode/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18cbd78c4ca4fa06eac43e210fa4544234ef696ea20b59737b71ce5833184c70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tailwind-animatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2a4349effecf9897d6d704e42ba50e80109de5b6533346bc8649e2f442c0700 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tailwind-animate-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9525dcfcd1430ec58c7d819289a7136591139ba745b35dde7516d6fd650976b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18474 Malicious code in @mrlegendbot/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a49968dc4de126619a2eb1720e68b38768484995188eda6f8cc7bef6bbb32c95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18467 Malicious code in @nuxzofficial/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20a17042e445631051160d83e41511f46995e3b5323b625a2a52aa260d12ccbb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nuxzofficial/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20a17042e445631051160d83e41511f46995e3b5323b625a2a52aa260d12ccbb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @utilitycraft/tailwindcss-motion-atelier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c599649d975de035ad90c3e00aaa44e013bbac939a4c20e545b8c9669a7ea7ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @utilitycraft/tailwindcss-motion-atelier

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-18468 Malicious code in @utilitycraft/tailwindcss-motion-atelier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c599649d975de035ad90c3e00aaa44e013bbac939a4c20e545b8c9669a7ea7ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dsh-screenshot-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9b2c3c72e63a884e3af047f9e01a823237d1d6d37ccf876ac04acca6714710b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @mamans2973/maman (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5080387e9f0ad397e73a8405b463024af443bffef67f3fa00d3dadc1bb97c12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18421 Malicious code in vas-tops2-core-clients-search (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8f34cc049db12f4eae49cc8977f2d6e09de6f9c7a49e46962f53466fa32122b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vas-tops2-core-clients-search (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8f34cc049db12f4eae49cc8977f2d6e09de6f9c7a49e46962f53466fa32122b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18415 Malicious code in @tops2/digital-assistant-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60912457b183aa62c0101d164fd7accb4e1d9886de72fb59cb4ba69dfea4309c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18419 Malicious code in vas-tops2-bidmatrix-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e4abeeac694ba2d227a41a8e82d0525018201d486e23b94805684af4e07d644d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vas-tops2-bidmatrix-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e4abeeac694ba2d227a41a8e82d0525018201d486e23b94805684af4e07d644d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18418 Malicious code in tefeest-npm-com-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c80a97b5efe6344f25a34ed662f62f49fa91b032c477766b4fbad94f3ff15c5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...