Malicious code in bitbot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12996eb5ffac4767e62d0de9652080c360a42cc716421449362f9443c0ec02f4 The package bitbot was found to contain malicious code. Source: ghsa-malware 8167eda858c69a7322383c658afb961cdead784baba89931b2a10c0856c4a0cc Any...

Malicious code in kanban-webcomponent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec3c671a99b49533fbfeaf2dd948f86f14d82ee338f622af22283b774159881f The package kanban-webcomponent was found to contain malicious code. Source: ghsa-malware...

Malware in anthropic-sdk

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-392 Malicious code in jsonwebauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 683ba88a9e72aab5f114bdd388e92a35230a3fcad8178b8c8d5e5e6fddf7b829 The package jsonwebauth was found to contain malicious code. Source: ghsa-malware c1c270e023225a3ab0872fa3ea9f9b94b0320639bdaa6fb0d30e9b65c9ba1db2 An...

Malicious code in worldposition (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beaca526309cc1d15cd7126fdd32d924f5b13f138e7b4313c8e72de8e61d4c75 The package worldposition was found to contain malicious code. Source: ghsa-malware 628c985aec4893df2aa3a7bb1357716a6fbe539e22efbf16e0d61396c5b85d1e...

MAL-2026-393 Malicious code in manage-root (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ade61c26597c5b0a24785713d87a304ddf30ae13dd50c69ba89e653ec4c2729 The package manage-root was found to contain malicious code. Source: ghsa-malware 6b0fc8397f56e86ac97a5adedd2c89de19045dffbdabbf982ffcf5944449b178 An...

Malware in presentation-test-utilities

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @mikudev/signal

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @mikudev/ridwan-signal

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in tor-libsignal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3281075aed24ae2af07fd17a56499318dcd8cd0fa836f60e1fa76814b90c2742 The package tor-libsignal was found to contain malicious code. Source: ghsa-malware 25164e8116dd5f0b085529d972fb628013ac35df2065ee934693a23bd13da788...

Malicious code in recaptcha-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79037ac310e3ba605ade8d6657ea9fd4d8261583079397795e7afccbf432a4fd The package recaptcha-cors was found to contain malicious code. Source: ghsa-malware 4936a94d5d7ed5509cecba8ba4b13b5d37ff1f114318c83e868dc6e5627818be...

Malicious code in @diendh/n8n-nodes-tiktok-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16a12e0244dc2ac8964ace7fecf5dab971eb0b394e2979bce9a3e12ce33b01ce The package @diendh/n8n-nodes-tiktok-v2 was found to contain malicious code. Source: ghsa-malware...

MAL-2026-385 Malicious code in blocks-builder-manifest-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30f5efa34a1c44d974502110177cb7a60daf579349ed25937e66e342f7f7c24f The package blocks-builder-manifest-generator was found to contain malicious code. Source: ghsa-malware...

MAL-2026-377 Malicious code in potdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a65730c16a2c27ad2cc810d067426e10aa9a28fae114fe94bb6f26e54bc45bc The package potdf was found to contain malicious code. Source: ghsa-malware 9537cd4226a1c122965aec751dfcb6153489552f7e29f57dcd62274654ec136a Any...

MAL-2026-371 Malicious code in theme-neutral (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9701381076541b8fbe448e03eb174cb40e2fd27237bfb442f219bf94911d035 The package theme-neutral was found to contain malicious code. Source: ghsa-malware 50a19fb9e329c206942de6cdd79f346a105320f4e71d0b652b154001b1dde8e7...

MAL-2026-370 Malicious code in sezzle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 494df714262f72408f0837d726757cb6301b1b31166da85a96b278858857ed9a The package sezzle was found to contain malicious code. Source: ghsa-malware 6b28a829b2018ce361449e8c3b0ee03a5b51e6adc2383159bbf4f5421d5694a6 Any...

MAL-2026-372 Malicious code in webmd-cookie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cea3e633de27fc446b20af035d103f0637ac73c9c5be185697d6c00e2329656 The package webmd-cookie was found to contain malicious code. Source: ghsa-malware 7c4d61d057a9a7c2e3ba6c1c54a58091ac030eff25b877dc80a22e0a804db962 A...

Malware in shared-global-ec-uikit

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in gu-global-ec-uikit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af8b504bec83c372b24f21eb2b83e6a5ec1ceceef82ba4b57dc401e1ab44f9a4 The package gu-global-ec-uikit was found to contain malicious code. Source: ghsa-malware...

Malicious code in testing-package-bose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf9cef522b7a8b6ce59335bbac80dcc488adedcd397bbc6b1e12816b4c54d170 The package testing-package-bose was found to contain malicious code. Source: ghsa-malware...