Malicious Package

Overview magala is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview chai-as-awaited is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @profmego/alipay-babyblue is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in @zalastax/nolb-axk (npm)

The package @zalastax/nolb-axk was found to contain malicious code...

MAL-2025-30028 Malicious code in project-bk1h5-india (npm)

The package project-bk1h5-india was found to contain malicious code...

Malicious code in alpha-launcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 813103e220bbdc9611499386ec8ea80516980d09eeca43e74370925dc5f3a387 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in stitch-fix-men (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0eac11d5514b7620fd60ea61fd8b8421be1caf4eedb0eab7204cb09cf9d48c43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fastg0b (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c269d4b4353c526857c2000a13d322b0dc62ca5d427bc6944de5601c57a06811 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yelp_page_complete (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware acd8959e9d11ba1ff16719d5485b5bfd5234668a518c0aa1533ddc7d980e32a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...