Malicious code in hjw-nasa-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b1632ded6ca00645c902a9d691d08823c53920ffd804e142b535efbca479664 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11284 Malicious code in dwa-tridion-webapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37c90162581ec29b8ddc34bb27f128d0fd51c537f9a31eff6389d046c520235b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ncc-hyperapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9647de0608c8fb354bb4e857f6649f8e617ae5e05055d108cc6ae44f9427897a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11338 Malicious code in ncc-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47e6426d64d44f277630e33c26db683f2d8cc1c043374a88ed3a484c84f7a242 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11264 Malicious code in cmd-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0de6a6fc74b3aa5f2def40f561514f9a6e4ad83e9fd78ab0bc684eae5bbd8745 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11364 Malicious code in reac.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a475a8f4fcdabfeeaab666f2e7ab900248f71d15004601f7d0e5fb2e02ecc1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11307 Malicious code in express.ja (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b5e2c0bdef4cdd2a1717631e7cec1d0c7d7d945aa9e18ee73a53ff00debd0ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11288 Malicious code in ekspress (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware baaf72c7a3dade7b78af529b3c79190314cbae671ac77f925a18c46284c47564 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in clo321 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8f8fdfecbace0a3b861bac6a6ddbed0f00e2a235328f12edabb853cd6bd5e20 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in apijsclo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da32970b216a1f6c8a76d725bf614f8b6142ad2c3806578c2ce2feae22640a76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11260 Malicious code in clo2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6105a72b9d9a044230d0d4e787fe819d9f2195a5ec8f652797c02c514c9d40b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11247 Malicious code in base58-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e95c5d853c8abc6b99f2a1cc48dda77eb93a732e34c6f253f9451b1a9e7b4d1f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11214 Malicious code in @grua/icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1eabb3f38128e34522c4bca5893ed0e64bcbc213ef2f617cce26e584c220c037 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11282 Malicious code in dotex-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a24f0c08a385f2366e23764f896e95c701acd9d746152a5409b1b6a1ca4c766b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in canvas-to (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20ad4ea01c4d87bc2fa2e6a27121b03d234dcdfdd8cadb702cb0ea28790f3ab9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11402 Malicious code in time-to-reload (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae5b3b160cee5b4b48fd61cd4b3b3e8b1c97118b1ffcb0895fcd656d3faea62b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11254 Malicious code in canvas-to (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20ad4ea01c4d87bc2fa2e6a27121b03d234dcdfdd8cadb702cb0ea28790f3ab9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in srgb-linear (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 161f0f8d0598a57e1dde7ecb119f308f82a1bad8189fe8dce4bb88547559f588 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cancelling (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c6ef60911ccd5f41b2e1f332358d78e50a18f4e476f4289734f68ba06768abe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11297 Malicious code in ethers-v6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 771d1539e3c3eecbc3411a9997e602a2fa8deabe2fcb88956e29d8525f8972f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...