Malicious code in @saazkira/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c02ddff50116449dec10c106e58ae0c84f16919145b8e13ddea1a23b0f00e9c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @alipclutch/libsignal-node

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-17818 Malicious code in @alipclutch/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20a547c784c13d1a96d07b03039a8997721e06467bda6794a2a1cc14a2cb68ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

baileyscrew (1.4.1), bintzge-baileys (>=2.0.2, <=2.0.3) +5 more potentially affected by unknown CVE via @alipclutch/libsignal-node (0.0.1-security)

@alipclutch/libsignal-node NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on @alipclutch/libsignal-node and may be impacted: - baileyscrew 1.4.1 - bintzge-baileys =2.0.2, =28.0.0, =1.0.0, =1.0.2, =8.6.46, =8.6.52 Source cves:...

Malicious code in @alipclutch/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20a547c784c13d1a96d07b03039a8997721e06467bda6794a2a1cc14a2cb68ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

baileyscrew (1.4.1), bintzge-baileys (>=2.0.2, <=2.0.3) +5 more potentially affected by unknown CVE via @alipclutch/libsignal-node (0.0.1-security)

@alipclutch/libsignal-node NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on @alipclutch/libsignal-node and may be impacted: - baileyscrew 1.4.1 - bintzge-baileys =2.0.2, =28.0.0, =1.0.0, =1.0.2, =8.6.46, =8.6.52 Source cves:...

Malware in @mikudeveloper/libsignal-node

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-17814 Malicious code in @mikudeveloper/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4749ec89d8c51729fbd97994a6a035ab229a56bb1094c4c47d9a3d68df050711 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @mikudeveloper/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4749ec89d8c51729fbd97994a6a035ab229a56bb1094c4c47d9a3d68df050711 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ROOT-APP-NPM-GHSA-WXGW-QJ99-44C2 GHSA-wxgw-qj99-44c2 in node-forge - Patched by Root

Root has patched GHSA-wxgw-qj99-44c2 in the node-forge package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2022-24771 CVE-2022-24771 in node-forge - Patched by Root

Root has patched CVE-2022-24771 in the node-forge package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2022-0122 CVE-2022-0122 in node-forge - Patched by Root

Root has patched CVE-2022-0122 in the node-forge package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2020-7720 CVE-2020-7720 in node-forge - Patched by Root

Root has patched CVE-2020-7720 in the node-forge package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2022-24773 CVE-2022-24773 in node-forge - Patched by Root

Root has patched CVE-2022-24773 in the node-forge package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2022-24772 CVE-2022-24772 in node-forge - Patched by Root

Root has patched CVE-2022-24772 in the node-forge package for Root:npm. Multiple fixed versions available...

baileyscrew (1.4.1), bintzge-baileys (>=2.0.2, <=2.0.3) +5 more potentially affected by unknown CVE via @alipclutch/libsignal-node (0.0.1-security)

@alipclutch/libsignal-node NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on @alipclutch/libsignal-node and may be impacted: - baileyscrew 1.4.1 - bintzge-baileys =2.0.2, =28.0.0, =1.0.0, =1.0.2, =8.6.46, =8.6.52 Source cves:...

@sanz-0fx/baileys-mod (1.0.3-beta), @sanzsayangvien/baileys-pro (2.0.4) +1 more potentially affected by unknown CVE via @sanzoffc/libsignal-node (0.0.1-security)

@sanzoffc/libsignal-node NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on @sanzoffc/libsignal-node and may be impacted: - @sanz-0fx/baileys-mod 1.0.3-beta - @sanzsayangvien/baileys-pro 2.0.4 - @sanzstore/baileys-pro =1.0.0,...

Malicious Package

Overview @mikudeveloper/libsignal-node is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview node-telegram-sockets is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @sanzoffc/libsignal-node is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...