Malicious Package

Overview @node-console-log/log is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in @pumpdot-fun/pump-swap-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76046e38de05fa61bcbae6bc4edf1a1e6b704f7c99e4ca8e57a16bbe06380dcf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11216 Malicious code in @node-console-log/log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17c7960f4102ec63a2f4a105b1fee65edcb12399050dbeb3b94c7c6b6a1fff61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aruda (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d223eebb0aaf9ddbe61d2b227b5d94e08fd4bc37fd93c55f025673a36b6f487 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11240 Malicious code in aruda (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d223eebb0aaf9ddbe61d2b227b5d94e08fd4bc37fd93c55f025673a36b6f487 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2026-68562

A flaw was found in ansible-collection-redhat-leapp. An attacker with privileged write access to a managed node's Leapp report content can manipulate it. When an operator runs a specific remediation task, this manipulated report can cause the Ansible controller to read its own local files and cop...

Malicious Package

Overview node-fetch-core is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in node-fetch-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ceb74bbe9b7a8216138cd37327350251924c2df2603d539bc91c3e8f22e2f38f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11339 Malicious code in node-fetch-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ceb74bbe9b7a8216138cd37327350251924c2df2603d539bc91c3e8f22e2f38f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nordea-web/ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 366bacc3988f49deff2b60fae8cddafa449cc7e3df8475fd364c974bbfd7e7ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hjw-nasa-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b1632ded6ca00645c902a9d691d08823c53920ffd804e142b535efbca479664 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11316 Malicious code in hjw-nasa-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b1632ded6ca00645c902a9d691d08823c53920ffd804e142b535efbca479664 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview testsetset is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

MAL-2026-11215 Malicious code in @meteora-sdk/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ec2029608b062badb250d90fac8d9e8f1ee6b7fca98113fc02eb2468c11186a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react.jd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 008700843ed05097ee21f8b83d03189f537561d672728b91715ce9ced41f5ecb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in installreact (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3762f9636d7f389b56f82d58118b7f760e04cc418fb0c008ee30054c5413a6e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11368 Malicious code in react.ja (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 930eacb3381ac6e0b0ef948a53188dfb1c7822c18dde0235ed54b541d995e49d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react.ja (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 930eacb3381ac6e0b0ef948a53188dfb1c7822c18dde0235ed54b541d995e49d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in expres.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e2eb125cd826b1578646fdd06af4c5649ab6b31c1a39afc768bbc62bfdae0d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ekspress (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware baaf72c7a3dade7b78af529b3c79190314cbae671ac77f925a18c46284c47564 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...