MAL-2026-17814 Malicious code in @mikudeveloper/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4749ec89d8c51729fbd97994a6a035ab229a56bb1094c4c47d9a3d68df050711 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17812 Malicious code in @ikanngeming/npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50b6c41210ca33afed30bcb7c8f5b78df510ea3a5f10608d48c6c45d240cbabb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17810 Malicious code in @zaka13/zakasite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15276369023f332e049b1b25b23be8b056ce333649434f79d0f41f3bbb1930b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in tailwind-animatecss-form

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-17733 Malicious code in asepxyz-baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b237efd2362cabb19a1d538927608d053a0fbec1990177bf681e1984f3637c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17740 Malicious code in hanncap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ffc31544036fecbfe1ad24886f1c2f857a855b969b25550514bbc5dbe5a0bf5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17737 Malicious code in asepxyznew (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35391863019c89ac27cfaed9c4356c6ae6ac413dd18bbc823503e7a004a146ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in clickfix_npm_delivery (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f795362044848bcb73d95317e8761c4315720d6a052c6c88fdab47065499510d The package has no library surface. package.json declares main: index.html and the tarball ships only that HTML page, whose sole purpose is a ClickFi...

MAL-2026-17687 Malicious code in tailwindcss-ui-extensions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware deb799e18fe77928819080979322bbcc868ba4373af021aec1efea4b201e4108 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17683 Malicious code in node-fetch-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e96b428b5de9465675c8a84b41aef8afbb1f4b62ab7ef7fb437bb53692095e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17684 Malicious code in node-gyp-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bcec19492c8bdcd8c866d1aad1a2b8a253d7d9bbc8184ff182af71a75ce56589 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17677 Malicious code in @bellaxchuu/overbugs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4bf34e6d2aa5b187e4dba9c90ce9515cd1fdc5a43f37195ba21e9cb418eb19c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17669 Malicious code in @itsmee_aizat.id/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 139f48c9c1d01563d5a815d23fde2f527dba3c31c7900f7e06776507cf5e687a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17647 Malicious code in function-color (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 551ba64ea86ca7d7839dcd058b2c567604c534134e2a6e13f84af340c2db4aac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vectorizers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1082db2b4593a2b60921a85d2f4c760a294a67b1a48007959d75d61f670dc87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in serpacksven (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89aa9ce877a176ce5c26aec2bce6e397ad287a6f26f625870cd5d6a5bef60cc9 The tarball contains only package.json and json.txt. The declared main index.js is absent, so requiring the package fails — the package is not a...

MAL-2026-17625 Malicious code in serpacksven (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89aa9ce877a176ce5c26aec2bce6e397ad287a6f26f625870cd5d6a5bef60cc9 The tarball contains only package.json and json.txt. The declared main index.js is absent, so requiring the package fails — the package is not a...

Malicious code in dzyclutch-baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8bd1abac47f016ac53777bcc08d76d15a48330f1c53931e61d6704ce6f3398d The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in dzyhaxz-libsignal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c8e7ca99c316f4b011bacc98bd321fb6e0afab999695d94c2cf41b1bff48b17 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17426 Malicious code in kartykgithub-ph-f (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e9463feb27a295ad0b7136837e12908bc8d668e0b7bbd70309c760165f071f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...