Malicious code in android-web-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5df19b4396c3027870b8afcfc6ed1d52e466f5f63187716dd1262499e3ab20b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in equiviewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0552db2c7f104d758a431c38bf0e60849741124a530ac4434094f48eafd33a28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in easyinstaller (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c4ea36235cf092d70fea18574aa582526923d2c869fb9f3846aabb0b180c76a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11346 Malicious code in payu-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41b51c9a2ec288de34548ffb74ffe8408a3c69d8c5d916fadc82c853827c9fa3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11235 Malicious code in ag-grid-boost (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b48a0535bdc8dc48399716c0e05646161556ce93b7b3cfeb7ba095e9bc3e1df5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11409 Malicious code in wastu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26843486e6e98f5c1b076652ee95edba8c2ddadbd138b28c8adfb5c3301c91f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11272 Malicious code in curse-dependent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6342746f5661955d0e66fb46f981245d41062c23e1209f3f2b62dc469638a41c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11287 Malicious code in ecto-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22c8d3b7c34470a9fc4d565d8acfaea51246e1a4a88ca0136679fd6390af63e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11385 Malicious code in spectral-wraith (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57eb03a60917ac9bb4debf56cafa90c96dfec3aab8efc04d2c946a1ac6ffceac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11361 Malicious code in puppetewebr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d670fc86263b8efa05d6e9daa48045f49f3b244f0c7cd3af2c3bf9ba84c01dd9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11229 Malicious code in @sourav_chanduka/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bbbe9ace74d41144457bc1461de476aba591b24b9fa879326c51705df276e157 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord-csr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 830c0ff21018fcfee625d241dece766b6c8db87e891ba9fbcfe567a01ec1447c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11394 Malicious code in tailwindcsssss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af681f5b2be3907532228afc7f56cdde00eb0b8650993b033ff9eb165ad834d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @pumpdot-fun/pump-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c408c3350082bac3e0fcef5878dfd9a618d3a5f538ed6c6f1b6fc4abf2832ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in famshot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a25590ceaca7a7491267e3152f276e90e1d5dd7eee7f3a86bee0c2b7666c0427 No a static rule matches and no traced-code findings are available for this package version. With no concrete behavioral evidence in either signal...

MAL-2026-11240 Malicious code in aruda (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d223eebb0aaf9ddbe61d2b227b5d94e08fd4bc37fd93c55f025673a36b6f487 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11218 Malicious code in @nordea-web/ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 366bacc3988f49deff2b60fae8cddafa449cc7e3df8475fd364c974bbfd7e7ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hjw-nasa-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b1632ded6ca00645c902a9d691d08823c53920ffd804e142b535efbca479664 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11284 Malicious code in dwa-tridion-webapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37c90162581ec29b8ddc34bb27f128d0fd51c537f9a31eff6389d046c520235b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ncc-hyperapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9647de0608c8fb354bb4e857f6649f8e617ae5e05055d108cc6ae44f9427897a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...