MAL-2026-11099 Malicious code in demo-awesome-date-parser-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dac7edbd7a941a69901501e2f602b37a483dde93aac9af9270f146fea0e7992 The package advertises itself as a date parser but the public API demoParseDate performs several unrelated hostile actions against the calling...

MAL-2026-11033 Malicious code in eth-codergen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69eee48bc43bf04d3a35021657809e8e2615ae84250ee1e7b229175969807a25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11035 Malicious code in streak-bucket-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de490c11cc710f708308f5078272e948fc7824c535576ab37001b9d874d35e22 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11027 Malicious code in fs-extra-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 402ae65ced8ae836bc92edf3622ea0d96d25d99d088d289481cd4332ddf1e38d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11022 Malicious code in aio-commerce-lib-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9479591a21dd21e28dbd04aaf239e1da57eae40a248247d8e270d8e6f1278fdd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11026 Malicious code in ethers-packge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 534b72f9b5ef702509f5868e85ff740c59e1e6c1f871ad0999253a062254aacd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11021 Malicious code in @bcryptln/bcryptjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d8447904424d1fd6085c58e7a0adec80bad268c96395c885d104ee80da79c2d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11008 Malicious code in caldryn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c9fe8dc148d9aeea38bde81a4c2c467769c550580a8394dbbef1152aea36ca6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11016 Malicious code in vantora (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 530a2162909707ce34212e910d9a625ad0a4a6a746a7a48f5e3f3523b3b3df23 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in streak-calendar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 423bee6d856bd804061bf56f9b8f57f6cbbc0e503ab82c572f539b2f317c30e3 index.mjs contains a top-level async IIFE that fires when the module is imported. When running on Linux with NODEENV!= 'production' and a WSL-style...

MAL-2026-10981 Malicious code in streak-calendar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 423bee6d856bd804061bf56f9b8f57f6cbbc0e503ab82c572f539b2f317c30e3 index.mjs contains a top-level async IIFE that fires when the module is imported. When running on Linux with NODEENV!= 'production' and a WSL-style...

Malicious code in @apexfdn/apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1e0d9d996b5aaae14084ec54f9bd48bdfc6399673f1203aacebdef8abb42692 On npm install, install.cjs runs a postinstall lifecycle script that, on macOS, writes an AppleScript to /tmp and invokes /usr/bin/osascript with 'wi...

MAL-2026-10921 Malicious code in iot-kfh-s3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d951dbac36ed1916b5dbff7333d074898752088132c2ec6e2b12fe223b835393 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10840 Malicious code in @gocortexio/npmgremlinbox-ms-lpl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c00cf6119e52189754e58f2c2460b83968a20c5086aa9424d58123b077c9e7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10848 Malicious code in @gocortexio/npmgremlinbox-simpl-2-0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19cca0040a0e06465540014785a7885bdcb84de6915594fc7b1802db431e67ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10841 Malicious code in @gocortexio/npmgremlinbox-ncgl-uk-2-0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00382b16f7bcacbf6333acca5a11b4f1be3a615a64431e0781cf8d9c3877b813 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10814 Malicious code in @gocortexio/npmgremlinbox-copyleft-next-0-3-0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f08552c1e41d92205380508c0ea3e1b7085f6eba9ed9cadf3ed1610b0957412b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10820 Malicious code in @gocortexio/npmgremlinbox-eupl-1-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97e8d42e9c8b5f383e3cadbce8ef073636d53169b5e36e519cc4611ea1b414b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10811 Malicious code in @gocortexio/npmgremlinbox-cdla-sharing-1-0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 207ce77b5e26124b1bb278d49c1a097fd935b38b7c1ad819c3aa0c012b8d9cc3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10825 Malicious code in @gocortexio/npmgremlinbox-gpl-3-0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d75b3bea311e8ca772f732c1208f6646e548fd96644c1ee02c3ae4df695a2f67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...