MAL-2026-3484 Malicious code in @tanstack/solid-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1309e41e89af050fba691af97aead540f282665981835c46aeb4abc3180f0c94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @gwp-gtmt-components/event-listener (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 468c91e4f79d71c29b131ccb10fac2c3917af3d3a443cf252feeb683ef68d797 The package @gwp-gtmt-components/event-listener was found to contain malicious code. Source: ghsa-malware...

Malicious code in @revvity-signals/chemdraw-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c53a6ff6ab4af77539873f6d418625d58f5d11a3fedda42efb25b91585218bbf The package @revvity-signals/chemdraw-js was found to contain malicious code. Source: ghsa-malware...

MAL-2025-49090 Malicious code in quantum-packages (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 144aa1474c1b5043966e321c81c29f0fae41f764e0948ee5491baa14a08563b1 The package quantum-packages was found to contain malicious code. Source: ghsa-malware 615e247f6ecd82d6ec0aacb0855b7a222aef75c2834a024b3b99ee38c2e7fb...

Malicious code in @thekrishnakarn/healthier-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0650d59765e93598c4da0841623af6a8f7c9eb7e91136841980a7117164a923 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in www-discoveryeducation-com (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b81d0d31dd0c1ad59b382392dd3309ca9d6ca9ccafde5ab54ee3c7a4c38fb20 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wrapped-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0cd7457ecef3800cd42d34d311e5e40171ce048eb5fa248810b9951dc9a2eafd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...