Malicious code in jwt-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b56e3f2d5fab071637ba7688de6c2a9c3d1c1846b6ec939b82eb2c8e9ff03956 The package is published as a trivial JWT logging helper but its main module jwt-logger.js is a heavily obfuscated string-array dropper. On require, ...

MAL-2026-15991 Malicious code in jwt-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b56e3f2d5fab071637ba7688de6c2a9c3d1c1846b6ec939b82eb2c8e9ff03956 The package is published as a trivial JWT logging helper but its main module jwt-logger.js is a heavily obfuscated string-array dropper. On require, ...

Malicious code in array-scala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78c71ee306356b5d27d673ae95bba2a24093aeac12e43044bd2503aa8c3d9024 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15970 Malicious code in array-scala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78c71ee306356b5d27d673ae95bba2a24093aeac12e43044bd2503aa8c3d9024 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in trongridew (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 598687794d8452d6845a3529e26bf63838cedee736dc0b8545ad33abe2e827f3 The package exposes a single public function permprivatekey in main.py that unconditionally POSTs the caller-supplied Tron private key as JSON to the...

MAL-2026-15936 Malicious code in trongridew (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 598687794d8452d6845a3529e26bf63838cedee736dc0b8545ad33abe2e827f3 The package exposes a single public function permprivatekey in main.py that unconditionally POSTs the caller-supplied Tron private key as JSON to the...

Malicious code in @domyjs/intersect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f7f60bc2584cfd070a1ce60d39ae0625a5b28852292950d79cddd475faca5f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @domyjs/i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09d7898515b6bfb8ec32fadbbdb3ae21e3550dcdc0980d21d3ee909bf147bf38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @domyjs/mask (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95227ac866633c8dbcb549843c31a2e58dad0d69474e065b8ec7f09fbf9bfe71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @domyjs/router (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6506d9bb7ba386d56ee4e9f326482fd887e63e1b7ebe674f8df34c8c75cf1b1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15952 Malicious code in @domyjs/intersect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f7f60bc2584cfd070a1ce60d39ae0625a5b28852292950d79cddd475faca5f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15953 Malicious code in @domyjs/mask (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95227ac866633c8dbcb549843c31a2e58dad0d69474e065b8ec7f09fbf9bfe71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15954 Malicious code in @domyjs/reactive (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c86a74d6abacb40b6cb20058f59cddbd922321b2d60793106da7c6cecf32055f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15956 Malicious code in @domyjs/throttle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99fe66f1096277c1fc4cfea3b2965e728cc128aad9cd21a571b1a5b8dac45c6c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15951 Malicious code in @domyjs/i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09d7898515b6bfb8ec32fadbbdb3ae21e3550dcdc0980d21d3ee909bf147bf38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15955 Malicious code in @domyjs/router (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6506d9bb7ba386d56ee4e9f326482fd887e63e1b7ebe674f8df34c8c75cf1b1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in linkpreview-simple (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c62818bdb74e00433e1e82737807bc3c427fdcca8db39d1fff7bf6db5e7e64d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in json-into-html (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04a5353fa099a8aecf0c34fd2d34244cc86058adb2f9a26eee4d7efe08a5b95f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in onetime-rnd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f949fd70a8bdf3174426072e1eac3d15e0b00c6ec57e0d3cf0a3ef45ca79ea49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in anime-vostfr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f624a7b8a2be52c79af7942acc5717ff29fa17cec42dce635c26839deb8e06af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...