MAL-2026-13675 Malicious code in statist-browser-typed-client-eventea.projects.tdevice (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dbd4923fdddd3bf528bfd2bc560ffe7963b22ed9df844e60f6fe2f778f15720 Package [email protected] contains only two files and shows no code performing credential access, network...

MAL-2026-13492 Malicious code in rdfxvela-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef19b46ba2f8a9d7a30bedb44d2e45903d5e4e905d736b5ce5c20cbb0b77be12 The package contains 4 files and no static or traced findings indicate credential access, network exfiltration, install-time code fetch and execution...

MAL-2026-12012 Malicious code in @keyv/dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d5fff2499c5e93e62d3755efb222836783e4d6e2971752e54508cc132257ad2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in beaver-ui-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 758137caa2a9c3d1dffb2fcffabc810c9b47696f78f20d412151d351d425faa0 [email protected] advertises itself as a UI header library but ships a setup.js that runs on npm postinstall and again on require via index.js...

Malicious code in test-dev-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b79a278016b87011ec1e810ce455d87ab6346a1045cc007e0155b204c8cc2532 test-dev-sync is a browser data stealer coupled to a remote-command backdoor. grabberuser.js enumerates Chrome/Chromium/Opera/Vivaldi profiles under...

MAL-2026-11442 Malicious code in @mp-op-ss-front-lib/tracks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d870b0214c38734a6a9b3073e958bb198a11243a3093110cc85be0b7ae9bdb2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11458 Malicious code in chaos-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a21d36cc80c620f92695d98b05bcfc786a623e64b18b1394f2c85064fc44fb53 lib/report.js imports childprocess, fs, os, and https and, via execSync plus fs.readFileSync calls, collects host identifiers os.hostname, os.userInf...

Malicious code in rollup-plugin-polyfill-hold (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57956044a2c40ab32e789cd46c26ab03304478179d15897f97c29d12cc838e8a The package presents itself as a rollup plugin / CDN icon-asset fetcher but its exported getPlugin, setPlugin, and getPluginExten functions issue HTT...

MAL-2026-11496 Malicious code in vite-config-svg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee541a67169360e2d9ac3da7d19353031dd395c5e1bbe05bb4540ccc4837fa3 The package's exported getPlugin/setPlugin functions, when invoked by a consumer, decode base64-obfuscated string constants svgValidateKey,...

Malicious code in @peptide-packets/peptide-modify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0bc181dc4391ee3b974bfa8ec4aafcf982c6bae5f7d9e6850d03d25293cca6a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11242 Malicious code in asdsafsafdasdsaasdasda (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25b27c7f8bc01a49e1e5d70500418776736b948710b1f4c5bb91b3265957d46d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11241 Malicious code in asdsafsadad (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67f3884787706e55b04fcf9ab0749dd3f91bd1f8a9d06bd86180483dd9f581cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ethers-io-ethers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d93060f754bea6c9c2c5722e253ef9599335702d72a39effe29b2b7668937dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11235 Malicious code in ag-grid-boost (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b48a0535bdc8dc48399716c0e05646161556ce93b7b3cfeb7ba095e9bc3e1df5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11409 Malicious code in wastu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26843486e6e98f5c1b076652ee95edba8c2ddadbd138b28c8adfb5c3301c91f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11385 Malicious code in spectral-wraith (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57eb03a60917ac9bb4debf56cafa90c96dfec3aab8efc04d2c946a1ac6ffceac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11361 Malicious code in puppetewebr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d670fc86263b8efa05d6e9daa48045f49f3b244f0c7cd3af2c3bf9ba84c01dd9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11229 Malicious code in @sourav_chanduka/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bbbe9ace74d41144457bc1461de476aba591b24b9fa879326c51705df276e157 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord-csr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 830c0ff21018fcfee625d241dece766b6c8db87e891ba9fbcfe567a01ec1447c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hjw-nasa-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b1632ded6ca00645c902a9d691d08823c53920ffd804e142b535efbca479664 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...