MAL-2026-1185 Malicious code in @bookings.microsoft.com/s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa10e8f4ab4580d4d9aedaee9a9e0c036b3248364f0680727df6871025d7e2f9 The package @bookings.microsoft.com/s was found to contain malicious code. Source: ghsa-malware...

MAL-2025-48214 Malicious code in redirect-sjcr8c (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1da0d4954d047b798675a52af826b4e894dcd3088d0199abbb6c906cc820d19d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nayan-imgur-upload-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b98ebdb98b3110329cb9db3c496ef6fa0d0f21bcf8ec8302746d6f47b0cf884 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/molestiae-quidem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31ddd37412e61fa7f032f8c8e6fcbb3e2c84b9a8869ddbc4739682a47a823f12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-config-products (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b7412401c48258fcb2fc7caa6d255609baf3ad31fb741b96fdb859909a615dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grab-login (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80167770569c74e9a58b9e9b796e11cfeda2451d513e307c21485b8b9ec30b72 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in example-google-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa9acfa49bc966fabab653f30edda5447ca4129ec52665880e6e61b5a904a90a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...