MAL-2026-2101 Malicious code in sidebar-basket (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware abd1b121a57bf0b4d96e4f902f6d051ff5b485ab7fc412f8940ce2c294ddb660 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-674 Malicious code in freedom-baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4512163cbee4473b3f1fec8504df8a156ada7ac4ca90a763fb9968ba58178ade The package freedom-baileys was found to contain malicious code. Source: ghsa-malware 7c21d9105c9c9c7f67546b69fd620327c3b304280b1113d557601d49a0639cd...

MAL-2026-102 Malicious code in redis-cookie-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 509b8c9645600775859de8538bbca62aac7f273789f1b43a370c814e2a061acc The package redis-cookie-ts was found to contain malicious code. Source: ghsa-malware c3c52170c4adfaeed7862716007e61fcaa3cfc702c729b6487746c1f3184f3e...

Malicious code in parashaxmgflhg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdda116bd0a2b0781e654220ab234ff95b506895228408081d28a8feecb133a8 The package parashaxmgflhg was found to contain malicious code. Source: ghsa-malware adaefa29b084fb54754d232d8977f7e409c217633c600de7989054b4e12536ca...

MAL-2025-48249 Malicious code in mad-1.4.2.2.2.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d0a5225829fc638c078c685eb6af4bed3caed292f068beb8b26ce84158e7cbc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-rmunkl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7c823e800eb5cb9b5cc10839b1971def19c6b3eff41ad1d7841688f733fbe55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vue-bit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 263e8ec144ae5e3506ba5d933df37534dbc2e8e020f7d64a7864bcd6029b2915 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in managethis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c683dca54122fc6e6b92b5c4b1b65e4fdb4accc582812cd422e28002c5166946 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in webbundle-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c94c458984a089f14be87d45c3ac4355e1ba06610c50abbcbb0f172160e5a38e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in multipage-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13f2d0c3e5db704d6bce0de0eb2729951e279aa28be75eafa0df32e85a38e3c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shader-examples (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be893a664956943dd2d7acfe083a05148592f7ce7adb2991f68fd577391651ab Any computer that has this package installed or running should be considered...

Malicious code in setan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eef3fa99fd3e4d15ed2b08d2e78ace1c63c6582e8af5be6dc244ab00d1e36f8c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xuworu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1acc43bebaf87047f1a3e650d87d7d46e95536b55031fee016b4d2e91a6aa9ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/nulla-a-quam-voluptatem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2e455a6cd6eea3b9f878efc8dc7755308d33c89e81a74063fba9c463f2cf6f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-3802 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f6989538ffdfa27173d2fcb581e7d45b580f9ec36cb81e38911b724fe695824 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-3308 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2aadff2d0623d60419d581ed714c50c515ba22117fc3e535470ff8ce000cf617 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-1906 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c425923b074a37bf58cf19821bf47b9c162589170c470a1b3415ad2228df7a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-0801 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware edbf0dca39b00d338ae1e63fd44900fe409e5adb158acae2cd23b80762ec5f95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in re_rank_demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eef922d2749b6b914c7af74ab1c95d0c4ff4869dbb5619295bfee63a615ae5e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in testhacknowz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8e35447833146cb97e01cbf36881b7d380caaacdef83cf1e276f822b288284b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...