Malicious code in es1int-re1ease (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e956be3193d45095a913fddc50d7cfaa4954268fb94b94c2234ecbdfedf20a9 The package es1int-re1ease was found to contain malicious code. Source: ghsa-malware c78523a62c16466f08157a46028124f655a0bf4e92f9b7f64eef705b40c99086...

MAL-2026-974 Malicious code in yarsg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c2ed8a6379e9f5833efbabb80221cc55ce3456a95d14c77ede9ab581bd8f577 The package yarsg was found to contain malicious code. Source: ghsa-malware 71a7932af2640f624c7daef39143653ecaa9d843bda52f61c22687210fc9961d Any...

MAL-2026-740 Malicious code in @msecscc/gaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35c005bdb108aca2e4bc9842086fa98dd73b442764e4e7814fd6e7a9fa7010dd The package @msecscc/gaia was found to contain malicious code. Source: ghsa-malware 5186ac1e518b181d1e03469aa042d8dddefbe3345b3c85d5b795ed329e5c3a73...

Malicious code in cryptocom-corp-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1239238ee10c3bbee24c5972edf8784d63ed06bba75e7ff07eaf23dde788c82f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in akasearch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1075d10450cfce61ccff3b97a9b8bf18a7be1d286b307dbff6e0018768baa4da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-1st7z7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 638828fbe37e3987211d30f184858e313c2d97580599b67ec562cd00ce90d942 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-k5j1u7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05b6183fa68095108bb6e2a546ec6010411256275821c65c7fa90abf00cb0d60 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mpl-token-metadata (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e20c7d93bbedc5a446405747356b754aec260f1716a86efbef222f15a52385e Any computer that has this package installed or running should be considered...

Malicious code in lib-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2fe973aa7a191c3af7d728aa84fd8833989b5b4fa4cbb18ffff5595f890fa540 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in temp928546 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ce0eef84654ac11c5ab26063df541ecb6b38f4ee9d29996ad53f8af13363339 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/consequuntur-rem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77ff8cdf6fc2fe14fd3b9473168c517674150ba9ade6db408601172615cc25e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @lbnqduy11805/animated-doodle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5bc261dc8812f73e104f998024da20056b718ee5c8c3c4073e13d1ee704cab6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @cat-abdulla/fca-abdulla-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6756f1d86478050a5d2c651a1ef83e1f151c21b753785868a0beac0d401b3ff8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in boject-path (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 581c62a26867e464a705352a756508dc74b07d9da629c8102fbd28985461a385 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tokenary-web3-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f1e8a0777e06e63c14f7812c77bf6007cf1804e2e33f10d1e76b7b0ea34faf9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ovrthqdyfpmnksel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6b053c85c640a920856ff649db190c9581cbe08392d9cced5aaa4c58024c9ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in abu-news-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0e3522803d9a80fcb186ab8177b4349b1fd1ede2f311d263455a07bdf492bfb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tinkoff-push-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 100d2e4c7fa6fc1fa8734b39177f7b6a6c93b853ca4a12d6d470768e03df237c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sc-location (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53a18d567459c5ece1b8f35fdb56b6fa60f4a13c6ceff898fbb82c7cb0d7ff80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in blockchain-explorer-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f01495842310cffcbf1d5d6d28f46cc678de92e26262ab89d275701e407b8017 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...