Malicious code in @grua/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b0588f2a4e3843bee403528cb8502b7c4207d2ce3179e51649b3951f8a8d2b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11182 Malicious code in colder-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd07744737c9b6e9ee846d8a15610b53170c6a0fa0937c00251d4b87697bea57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-7109 Malicious code in ajgularjs (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-1317 Malicious code in @augmentor/experiences (npm)

Malware detected: Collects and exfiltrates sensitive data to a suspicious webhook via a preinstall script. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4067e28e3de3f031541a3e624d8d21dc75777b65b83ab8aa4fd09bfd52038968 The package @augmentor/experiences was fou...

MAL-2026-1259 Malicious code in pino-sdk-v2 (npm)

Malware detected: Exfiltrates .env file keys to Discord webhook. Impersonates legit pino package with modified malicious package/lib/tools.js. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 093fa98258b33a735216506ea119532a3cc24c92359028b4bb1955d0b712951a The...

MAL-2025-192496 Malicious code in elf-stats-evergreen-satchel-868 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3612299385305c5a1cd65f55917676d9691d4bc50302824f775e7b676d44b599 The package elf-stats-evergreen-satchel-868 was found to contain malicious code...

MAL-2025-192503 Malicious code in elf-stats-fuzzy-workbench-102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6885087c0bc44815f87570e3ea126e735bb65b5f4cb443a1adc04915c7ac8959 The package elf-stats-fuzzy-workbench-102 was found to contain malicious code...

MAL-2025-192508 Malicious code in elf-stats-jolly-ornament-687 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c696ff217f3b5fb230585fa3669d644df5d07b6d686687fa50639da0dbaacea7 The package elf-stats-jolly-ornament-687 was found to contain malicious code...

MAL-2025-191519 Malicious code in mongodb-stitch-server-testutils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6d66acdf1a1a865257cb91b34cf535addabd337679e38741e5f0c1f89aa0b9b The package mongodb-stitch-server-testutils was found to contain malicious code...

Malicious code in node-calculator-215d (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3198d6c12dadf6d9c769d208f18cd0ad966ccffa92b0db40b2cb25f0fb9335a The package node-calculator-215d was found to contain malicious code...

MAL-2025-190546 Malicious code in node-calculator-feea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcb1a64b7f2fc6b55b2801e47c270a7f2ec6e8f80ba3c0689b044d9621131031 The package node-calculator-feea was found to contain malicious code...

Malicious code in zaki-martabak61-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67dd812c641b8b422c689b27db6eb77ed230b13d46cb1670a11f7f085e8c24ff The package zaki-martabak61-breki was found to contain malicious code...

MAL-2025-49293 Malicious code in @dvargas135/gunpowder-ghost (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 400dea6d2b5bfe1ff00f2fe709cb1ef33f393894e93bff155b32021682d1e571 The package @dvargas135/gunpowder-ghost was found to contain malicious code...

Malicious code in ldhemrdhs92010 (npm)

The package ldhemrdhs92010 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-48619 Malicious code in cross-app (npm)

The package cross-app was found to contain malicious code...

Malicious code in eslint-plugin-ethereumjs (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47547 Malicious code in @sev-ui-verse/ta-product-models (npm)

The package @sev-ui-verse/ta-product-models was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d564367018a2440087b92862c41a4f2acf9fe9faf7c76a896fcf93f35b88642d Any computer that has this package installed or running should be...

Malicious code in fortnite-free-gi-ft-car-ds-2023 (npm)

The package fortnite-free-gi-ft-car-ds-2023 was found to contain malicious code...

MAL-2025-46144 Malicious code in steganography-volcanology-perturbation-request (npm)

The package steganography-volcanology-perturbation-request was found to contain malicious code...

MAL-2025-44072 Malicious code in driftwood_pf4p2_myr13_honey (npm)

The package driftwoodpf4p2myr13honey was found to contain malicious code...