Malicious code in test-dev-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b79a278016b87011ec1e810ce455d87ab6346a1045cc007e0155b204c8cc2532 test-dev-sync is a browser data stealer coupled to a remote-command backdoor. grabberuser.js enumerates Chrome/Chromium/Opera/Vivaldi profiles under...

MAL-2026-11477 Malicious code in refbase-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 315ac36b49a01221dde71396930996c607eeef7737c9d2dafae5bdc8daf09f58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11455 Malicious code in allurectl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81cc68a7fe1c39ad33325aeb049148b1165f9d8d85c14329094de9912305e325 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11466 Malicious code in hit-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8dce1db42ec3c0d5758c442c943859f877d4cc877644cc4116df2678ab8b0527 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11472 Malicious code in mcp-server-boilerplate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51e3c940b9fc50ad864429da89bf924d2bd1c0253ac8bde66b0b82643260eb51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11469 Malicious code in iwomm-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08d6809ceef0debeef4bcdc1bc305ec5066eceb56a9ad6a17268e0edf87c919b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11458 Malicious code in chaos-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f921c394df64d1bceae64ceeb12704fa1a6bec8e502a93507aae663647af05e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11464 Malicious code in gtm-mcp-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49a563cc12f897dc708236d0098fa2cedfeb15e249d23879b5c0e279e353604c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11460 Malicious code in create-remotion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f64eaf9a8b1571d5e5800922eededf88e925355ce9fa4d61c60d8b8c302401b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11482 Malicious code in sap-mcp-facilitator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bfa674a61d22c14e8a76f398231dc1a1052b02fb635dcccc2e72f69565eba68d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11471 Malicious code in maximumsats-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97f5b15159d700da1bba2acd235f675c5ef09636644f47b105ccd48648c9b845 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11453 Malicious code in adpanel-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2ee116a6f3b542c8343e89be717fad00ec4605219c7d821f68aefe36610d4c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11481 Malicious code in sap-mcp-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29aba22b06501282c9191dcde7722b72d3d8f5f998ee0745dd99ea46eeab6fb9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11470 Malicious code in kip-mcp-http (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58ee4dff425171e92697968c9cb459175ab9826c0af98e08452458251c9c58bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11462 Malicious code in fast-csv-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca3596032239f2a982b11e2846e8af25975d77f3f7c211a32f68e5a451ead883 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11475 Malicious code in pm-claude-skills-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6fc0f6d8952f1a97d549799a1e7723dba7a9907b72b0c7a4d097776ddd1d8603 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11476 Malicious code in polyprompt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c83b81c4da433d42ff97456ac6c52970f52de665ee78be41fd4c4ee34705adf2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11468 Malicious code in install-native-host (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac64235a2bc0c05f17f524b335ed7277658194e8dc3394597f2baca8eb17f7fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11480 Malicious code in routerbase-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5bcc3239685adaf9098cfcf2a9f30c0018357be5ad058caf2046534c516bc3a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11463 Malicious code in goldenflow-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6d0c7798c31f2743649318d78a1937fd28af9e4c28a2808046b647f2c087568 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...