Malware in express-groups-routes

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-709 Malicious code in mongooose_update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0077f550d3b03f4fbc6ea54a833c0e5e80aba58bec307a6720065e7d08fafd12 The package mongoooseupdate was found to contain malicious code. Source: ghsa-malware f8f7054ae7149c28576adb91e81dabf2d46ed622ff6cb5d7ae81fec89a6d027...

Malicious code in mongoose_update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91df51d75c82831870e737a45d083f0f75a4efd3fa5446b0c07a5c8c9ad910fd The package mongooseupdate was found to contain malicious code. Source: ghsa-malware c8c705834895c7083b2f00f874d9761f360f0208ee61aaeec6af5c2a806841e5...

Malicious code in mongooose_updated (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f397bd93c8a607a5fb7cb6c4da24be0ed65157020f40d778f66f4bb8f0c6237b The package mongoooseupdated was found to contain malicious code. Source: ghsa-malware c02f092aac581da5247eba7163d5bcbb065ed41865e8eeb464ea1fedd8a4d6...

MAL-2026-710 Malicious code in mongooose_updated (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f397bd93c8a607a5fb7cb6c4da24be0ed65157020f40d778f66f4bb8f0c6237b The package mongoooseupdated was found to contain malicious code. Source: ghsa-malware c02f092aac581da5247eba7163d5bcbb065ed41865e8eeb464ea1fedd8a4d6...

MAL-2026-707 Malicious code in js-unpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baae4c9e1fb444bb1fc5b81f94160a8301839d4ce71d2cb92b50b06037018c73 The package js-unpack was found to contain malicious code. Source: ghsa-malware 5d6859e5b9008340bf7f7c4d7128416913b37bf079c0b1657f6e9857b6b9f0db Any...

MINI-PC6Q-J833-4C2J

Bulletin has no description...

Malware in eslint-config-minecraft-scripting

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in graphrix

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in tarax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38b8d2d32117867326488c0c11c3433f88d30b084b30dd132f3b7a9c40c5eef4 The package tarax was found to contain malicious code. Source: ghsa-malware 2f70e23fbb33630933dc47a10dfd81d1e652f73e3ed7afe4aaee5ffc2b65afa7 Any...

Malware in frontend-js-state-web

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in cookie-parsers-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4a2885cd84876f478aa25e2b8efddc48e11530aef832f085e0b9d8d114ae481 The package cookie-parsers-env was found to contain malicious code. Source: ghsa-malware...

MAL-2026-678 Malicious code in cookie-parsers-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4a2885cd84876f478aa25e2b8efddc48e11530aef832f085e0b9d8d114ae481 The package cookie-parsers-env was found to contain malicious code. Source: ghsa-malware...

Malware in freedom-baileys

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-666 Malicious code in transform-react-display-name (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad21ba0cb042f576642dd61d0639ac6da6cec5a468ff7b5cf0aab9164667bcb0 The package transform-react-display-name was found to contain malicious code. Source: ghsa-malware...

Malware in transform-exponentiation-operator

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in netlify-project-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d2c95931ae7b5a6c572ebecb2cd096bd4cef37bcf61a440cbb2338062f4a836 The package netlify-project-helper was found to contain malicious code. Source: ghsa-malware...

Malware in netlify-project-helper

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in ansi-universal-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffa5e839c2761f91f4d422c6c89799495ba4a3171731ecac75e00647bbf95904 The package ansi-universal-ui was found to contain malicious code. Source: ghsa-malware...

Malware in react-dnd-legacy-html5-backend

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...