MAL-2026-14498 Malicious code in svelte-intake-streaks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 828a6fbcf086b6736c00f10ab9346c3bbd3904ed3505852e2b4d342a379cdd79 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in svelte-intake-streaks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 828a6fbcf086b6736c00f10ab9346c3bbd3904ed3505852e2b4d342a379cdd79 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in svelte-goal-streaks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599aa19770a72a0fa6e983e317d13b3647eaf8412d4b5b7ff10067be4ed34c82 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14494 Malicious code in svelte-goal-streaks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599aa19770a72a0fa6e983e317d13b3647eaf8412d4b5b7ff10067be4ed34c82 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14501 Malicious code in svelte-streak-panel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ecbb895ab58bd860a0104e8ce0cea32f5d34ff53f118ae8591387f5d6121e5 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in svelte-streak-panel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ecbb895ab58bd860a0104e8ce0cea32f5d34ff53f118ae8591387f5d6121e5 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14502 Malicious code in svelte-streak-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 211b40d9426fc23200004fb66f846a5e31dd27dafb924bd99957954f6f4dd1f6 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in svelte-streak-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 211b40d9426fc23200004fb66f846a5e31dd27dafb924bd99957954f6f4dd1f6 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14497 Malicious code in svelte-insights-streak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13837ce89a955f11d9e25b59ca9b59b96ffef7d05338f95b42d1fcd062c7b543 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in svelte-insights-streak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13837ce89a955f11d9e25b59ca9b59b96ffef7d05338f95b42d1fcd062c7b543 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in svelte-insight-streaks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b58dbba652e648d3f172a1b9ceffe28679dbae47aaeb8b29eed4ac964556f48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14496 Malicious code in svelte-insight-streaks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b58dbba652e648d3f172a1b9ceffe28679dbae47aaeb8b29eed4ac964556f48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in svelte-daily-streaks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47e6392583e46c5137935ed3fb8e29feab51a88b0ddafaf033a27962f8588130 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14493 Malicious code in svelte-daily-streaks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47e6392583e46c5137935ed3fb8e29feab51a88b0ddafaf033a27962f8588130 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in spotify-url-infos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e72208a0a63e3b9eb2549151c6b0899d84e79df1a1058cd72e048c3a44592440 Package is published under a name resembling the legitimate 'spotify-url-info' but its shipped code is an exfiltration tool. index.js invokes...

Malicious code in chai-as-otc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf771adc4f92ba0d79ea56bdcc1e42db57d1bc7421f0dadb0544f619e16b5ca1 On module load, lib/initializeCaller.js required from index.js runs an IIFE that POSTs the full process.env to a base64-obfuscated endpoint decoding ...

MAL-2026-14491 Malicious code in chai-as-otc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf771adc4f92ba0d79ea56bdcc1e42db57d1bc7421f0dadb0544f619e16b5ca1 On module load, lib/initializeCaller.js required from index.js runs an IIFE that POSTs the full process.env to a base64-obfuscated endpoint decoding ...

MAL-2026-14490 Malicious code in mkb-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27bc086d2159cad3d4eb02427ea2daa5f66ad57c39cbbaad5a8bb367071f4fb7 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in mkb-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27bc086d2159cad3d4eb02427ea2daa5f66ad57c39cbbaad5a8bb367071f4fb7 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14489 Malicious code in hydration-cls-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01c60e3a0dd707077bad78ec7f0e5f79032dc9b86814d65bfd0083275a6059de The package advertises itself as a dependency-free streak/date-math library but ships an x8664 Linux ELF at dist/internal/calc.dat and auto-launches...