MAL-2026-3522 Malicious code in @uipath/access-policy-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87fb4a7ca8257b97a21e311c9322a63b2691136e87c6a8ce12cc648890849f76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nodergb-server (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78a86d286601cf04014b221b8874ef2c2996e5bf707d31143ccefa79e8ab1d40 Any computer that has this package installed or running should be considered...

Malicious code in wlwz-2312-6303 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 997f076f2c239315e967168eae4c82e13a2fe8309e824e7699e99d899fd5576f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chalk-animate-cjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 516c8dd53eb3c24c892eed50063a6f315dc748a4d2f006d392d7ec6785802d0b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in borwre (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 694aebe0292be05d4ea63cc3ec7d321f470e91dc6424702aaa8d5e240c19d429 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in atlas-custom-behaviour (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 172632abe6319080d07f94e343d1a3fdf400a1df4042c7d8a1e9af0de5ce3287 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fe-datalayer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8575029c8170302c57286bcf94e6258c9dd4ece53a9482f3d22b465d90993ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in thisisnothelloworld (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd3ab2c96415cc2ceebd811812f343bf5295bb2dadbfccd4ff65f800b1d2d0bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in upgrade-challenge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbad4e9817315f7dfdcec6b298a6af32e231e76f8c63b636aeddde9fa86eb777 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zilliqa-social-pay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a8400371d72c083526f030252ea8c15a37ae9aff8ef8b0ce4ad2bed20f27a26 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...