MAL-2026-15430 Malicious code in secure-test-browser-t7a9jtay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2e171ed7ab636742175ee4a3eb1043bcea89d15d080a05130a138bde7c265fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15376 Malicious code in secure-test-browser-khflxpz7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c12ae1b7adce18b5bf1e85eea712c4990f54cbd877f9eb533e02d6447aa2b1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15290 Malicious code in secure-test-browser-5pst58e3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b993c5d5a41eb9263c960913c7a3b0efc850f0ae70907965ba812b0a96eaa441 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15402 Malicious code in secure-test-browser-o5kevayg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2a9e2e27881860fdab8cc5c467bb74a795d7e40f005214e580eedfacbb36a0b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15397 Malicious code in secure-test-browser-nu4lhvyb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83f713c1c8e7ffd4859243fb775549c3b227287dab73e98928d74896e9b076a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15455 Malicious code in secure-test-browser-xynt39lg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a734e3f6caa0722bcb17cfd44319516cc5cbc36c0581c4600e9c694bece70ea7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15007 Malicious code in classlink-0xcszcdo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 368ae41ef0802d6521cdf120ef4a0b8acf46421306597b5aab3ec107f289a741 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in secure-test-browser-1yjarnvk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7995072543002e808e597ccfd49ae3d1497ac3073f3afddee765664f8cfc446b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15266 Malicious code in secure-test-browser-1yjarnvk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7995072543002e808e597ccfd49ae3d1497ac3073f3afddee765664f8cfc446b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15416 Malicious code in secure-test-browser-r270knja (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3c235aa5b2d461c2f9ddef4695c30e516ebc61b94161361ce3f9871fc1ae1ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15465 Malicious code in secure-test-browser-z6d4ruii (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11a9076c20cb4bddfc1ad8237c6fc02e7ed3400076921662f8812f4d4c4f8849 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in secure-test-browser-r270knja (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3c235aa5b2d461c2f9ddef4695c30e516ebc61b94161361ce3f9871fc1ae1ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in secure-test-browser-z6d4ruii (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11a9076c20cb4bddfc1ad8237c6fc02e7ed3400076921662f8812f4d4c4f8849 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15339 Malicious code in secure-test-browser-ezbajpcd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f72332762c242f4b79ccf79c0d87caf5578be04c48f34e87641979c5bc8521d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in secure-test-browser-ezbajpcd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f72332762c242f4b79ccf79c0d87caf5578be04c48f34e87641979c5bc8521d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cacao1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 403a43aab3b982d17c5c01d7df45149d796e7185f4137bf4a92675351a1b50e8 The package has no advertised functionality empty description, self-referential dependency on its own name at ^9.9.9. Its package.json declares both...

Malicious code in yamlformat-tools (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 60b8ab6c62beb2bbbe4e2926cf9cda17f060f9c4184d33ed57d363d9a771b734 During import, the package collects sensitive information and exfiltrates it using DNS queries. --- Category: MALICIOUS - The campaign has clearly malicious...

MAL-2026-14589 Malicious code in yamlformat-tools (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 60b8ab6c62beb2bbbe4e2926cf9cda17f060f9c4184d33ed57d363d9a771b734 During import, the package collects sensitive information and exfiltrates it using DNS queries. --- Category: MALICIOUS - The campaign has clearly malicious...

Malicious code in yaml-report-formatter (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd762621d7d279a25921e8f8c7d1a7e8040948bd3ac445ca9cabd8f200ce36f0 Package presents itself as a YAML report formatter but its top-level src/yamlreportformatter/init.py starts a daemon thread on import that reads a...

MAL-2026-14588 Malicious code in yaml-report-formatter (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd762621d7d279a25921e8f8c7d1a7e8040948bd3ac445ca9cabd8f200ce36f0 Package presents itself as a YAML report formatter but its top-level src/yamlreportformatter/init.py starts a daemon thread on import that reads a...