MAL-2026-1476 Malicious code in jalalstealer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18913d1d0805eb9183a23aedfba3cbef762c642f82c079dd24711102fd20951e The package jalalstealer was found to contain malicious code. Source: ghsa-malware d760ddb75dc632737c4e778e0ac4db4522bd8584240834cbefe9bffa1948999c A...

Malicious code in bee-quarl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b90e7b3eadcb23e766223167d16f561fd64fe44ec63f6e77afefe38966da2fec The package bee-quarl was found to contain malicious code. Source: ghsa-malware 642b83461b49019b47d27820b1dbaed267f2365eecf5fc74467d02192ec662aa Any...

Malicious code in elf-stats-sugarplum-fir-770 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba9b8e626ecf42f5770535353dad46da3dbae1b468a54040b1024c069ead0f72 The package elf-stats-sugarplum-fir-770 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190562 Malicious code in node-calculator-3e62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1703fc5c6d064d50b797ea676b0a02186a5cce75afc97191661b8aaa82624543 The package node-calculator-3e62 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-48232 Malicious code in redirect-xi84nq (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6745145a986be45b412431fb40e0966c09c17c55a87f3daf4fcbb3ea7bd76362 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47554 Malicious code in finos-legend (npm)

The package finos-legend was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d52237f76bf811889cf1da6bfa8df5deacc81e076c88890187022381ae951370 Any computer that has this package installed or running should be considered fully...

MAL-2025-47176 Malicious code in chunk-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d38a27025a3781b68d85bf387d877d8eae3d40bb6bc19c9edf52dc069d47773 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in feature-repeaters (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 249612b727817f789e9e197fbfadefd3794ff07913ea34260a3ae17c9e2f1739 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ac-ajax (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6104c32d3a2365656156e83b9d2484fa03258db82702dc5c8e772a97ee067968 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rosetta-primitives (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 066c537cf24b296d35abde5f38191e4f60c82f7bd0583997251e70bdb2c21052 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in blog-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e572e251b32145d6856f8000dca0bbf112278ecc3f967ed61626010e0a0f9c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in adfg-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b55ff503acc60e4d643c5c89cdee6d5683773652723b957ff0a501cb1e493e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in glance-android-core-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f082498ee8cee22569a9d952f86e51b833f15f9ddf0ae457b87367e28bcf198 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.immutable.api.zkevm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9abb9b0d7d0aaebe4c9072367919fa4d1ffdf77edb53d312432695954d05b599 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/quisquam-libero (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ee23f30c5276a08fd77ced365412977b59424abdcc6a1e0ebca764fc53a9dcb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/repellendus-doloribus-itaque (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16e2c07f0614ec70eb860661de34f848d09c1e9aee28656f9abc305a202cf00c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-6902 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cb741da9a32478639c8b0ef3ca6670d55dc5148725d55b4a7b71dd676c0f6f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in airslate-static.icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8abf1832c7d0a4193473be4adf31eaa434b0d49e675769a13b50c87a51652deb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ui-elements-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6568bed59e9443e40fb7b6c1799dfd3b4fa16bb1356a0dbec8a81249a75c59b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web3tool-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae905581e4e53e10b1d06262a96543b67f5f841e40d7723b81f455c968046cd2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...