329926 matches found
MAL-2026-16022 Malicious code in base-account-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae6343291a1e909323f40cb39c63de633e733d3a7ca24827d35ff2d960f9e6a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in cb-wallet-env (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86afbbd47bbbe39fd4f8d9f4146149d70fbb46777c17eebf0c52fd6cef1fef8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in cb-wallet-analytics (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b29044036392080bdeaddb33f07b5b5b09b7b6f0792f0bc711979738a27d1557 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in wallet-engine-signing (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 448194cce4cee2143b4cfee29a7c171ecab686469ac508f8fb2ad4d2fb67cf67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in cb-wallet-store (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16b89e0045c311aec83f8b4710dc1709b64bf083541c7ad26d639b89f5c98a7b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in cb-wallet-solana-provider (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bddc9d7ea15dfa107dd3aa50c0b0204d42a90ba749f4941954cd458c6cbce980 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in cb-wallet-metadata (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef5687a0934fb8c3bbf63f534898153c0a41c337532e5ad3a8114290badb8a13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in scw-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e609dfddbc549c740b78ea2dfcc4dc218584bdb695d1967e49e262c3ed2fb8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in wallet-cds-web (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90a2fd556bde6edbeed9d4c1ebd8dcf4b1c24a5dfda8d70d6cb91cfc7ee3fa2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-16029 Malicious code in cb-wallet-metadata (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef5687a0934fb8c3bbf63f534898153c0a41c337532e5ad3a8114290badb8a13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-16031 Malicious code in cb-wallet-store (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16b89e0045c311aec83f8b4710dc1709b64bf083541c7ad26d639b89f5c98a7b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-16027 Malicious code in cb-wallet-analytics (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b29044036392080bdeaddb33f07b5b5b09b7b6f0792f0bc711979738a27d1557 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-16037 Malicious code in scw-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e609dfddbc549c740b78ea2dfcc4dc218584bdb695d1967e49e262c3ed2fb8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-16040 Malicious code in wallet-cds-web (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90a2fd556bde6edbeed9d4c1ebd8dcf4b1c24a5dfda8d70d6cb91cfc7ee3fa2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-16023 Malicious code in base-app-data (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 385b3732590f10aba4436505fecbd325128919df56f33c060ef3f9f557ead91f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-16041 Malicious code in wallet-engine-signing (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 448194cce4cee2143b4cfee29a7c171ecab686469ac508f8fb2ad4d2fb67cf67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-16030 Malicious code in cb-wallet-solana-provider (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bddc9d7ea15dfa107dd3aa50c0b0204d42a90ba749f4941954cd458c6cbce980 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-16007 Malicious code in @caliperx2/components (npm)
This package is malicious. It is not a real library. An attacker put it on the public npm registry. The package name is a copy of a private, internal package name. This is a dependency confusion attack. A build that gets the name from public npm installs this package in place of the real one. The...
Malicious Package
Overview eceqoq is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
