MAL-2026-11980 Malicious code in pob-test-package-in-monorepo (npm)

npm/pob-test-package-in-monorepo is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

MAL-2026-11981 Malicious code in pob-test-typescript-package-in-monorepo (npm)

npm/pob-test-typescript-package-in-monorepo is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were...

s1ngularity: supply chain attack leaks secrets on GitHub: everything you need to know

Detect and mitigate a critical supply chain compromise affecting the Nx NPM Package. Organizations should act urgently...

Malicious code in @bosch-iot-console/monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ed0c2752e241bc41c444130570ce1cc9bfd7162c795da9e4d17b0bc2449c48c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...