MAL-2026-11254 Malicious code in canvas-to (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20ad4ea01c4d87bc2fa2e6a27121b03d234dcdfdd8cadb702cb0ea28790f3ab9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shopee-ui-react4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70d93b6f2b91bc28c44978dca8e4377993379f07ab89c0ae28f155a92bfcbc21 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in trips-pwa-localization (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2711cf5153838983e0237668dc1baaa1ad85959278de51e6e06702482099b582 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/repudiandae-esse-aliquid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 292fb4db28ebbc11c42fe14cbf53cad8a872abfb1e971b2c272887d1c165a9b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-0306 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1368f081ff016de5fee25c06c9d3c2ec167fa82b52320d65eff848255d7e8456 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...