MAL-2026-4316 Malicious code in internallib_v95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 446fa224122b28950a2a22289bd7a9bf4a29861cde218c495651e1e58da37176 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in token-discord-encryptation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38c8f046fd4903192eb3de371ca4df10734635758b721d7cf2827f9df6f84f0d The package token-discord-encryptation was found to contain malicious code. Source: ghsa-malware...

MAL-2026-835 Malicious code in sap-code-style-guides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13203a88392c91986f587e28ca25120b54f0c4d4ee5dd2c330c2bbbe6243203a The package sap-code-style-guides was found to contain malicious code. Source: ghsa-malware...

MAL-2026-670 Malicious code in aligned-array (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2e1b553bdbf785a336d224d5d3594c204455937469510cdbc423519287b2360 The package aligned-array was found to contain malicious code. Source: ghsa-malware ea83ead9b32cbe9a0c64af15ea5b84c39dad6ba94e7688ec712ceb8d1b2e8185...

Malicious code in supports-validation-checkerlib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 781852f3dbd6b5aad45817413559a7dece6950db6702bc4d70d20904897bb099 The package supports-validation-checkerlib was found to contain malicious code. Source: ghsa-malware...

MAL-2025-47470 Malicious code in oauthly (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f51e9d4666c50bc7bc1a5f83811020d5da995fc251b9ec96a9ad3b8a3c6e2ecf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47265 Malicious code in @pumpfun-sdk/metadata (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe74efc7770fd428add3639b89ec07606c3be7a22d6c185ef00ad4beb39b9c15 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internal-test-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3552cfd630fb30cd112a4c9ff8987f36a6de0941482cd2cb33abc0f7c43819c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mockup-js-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d47de2f1ea832ed5ca1de7b318fac1b4e38fd7f83c2b66d97c4c38cfab1da216 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in raydium-sdks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c4bd247852f5f5e13010c679bfbe762180e81dd4a57f9b37d607b3ef1f13f021 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in anyswappoc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11b4883135435c180fd5e1ec5f7f3d0ce3da30f86c240121ed36c3f2c09f1441 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in calypso-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f91f51457583618030507311d9163d984ed5582cc30846a8ba780131d6823879 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ls-upload-cmpt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 934d06728d09c5d22434ad0243a477298619e5f2656a37ef70b6b1c7abbacf98 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xkpnm0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fa41e4a8231fcd0afc64bf75584739b7b8e64b504e37d6242b19b9685d29c2a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/repellat-tenetur-cupiditate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5565c295c35acc77ca0423164ff78699e9eb50d409c5fd9846e545d504f004bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/quod-expedita-esse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7556e700280a034c9e53944d6b3ea6e9a9f4a53c7b5eab105a122361de6fdcb5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/nisi-ducimus-rerum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1449df082cd9795e8fc860af980b28b44c5f0c18262c9574f2adf9aeab0092a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gothics-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c6e204942ce7d1d6fcab20b291046245afd203ef0700404ac39f8b907a2b7ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in meetingsdk-sample-vuejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb53d02e988a276631d13cbb6486793e2858c3a6f266fb6601d395b5d6fd97d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in waline-magic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a36651e1c228b2c1cc270f4d650d20db1da7126756f6ae78b407b803174a517 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...