Malicious code in cancelling (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c6ef60911ccd5f41b2e1f332358d78e50a18f4e476f4289734f68ba06768abe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wistia_namespace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f82ae719a2b710db94689584e2851a2140f781e274f26736bdd98ce07a54adef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in apihost (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db86bf96ebb268d3b0c11f456ca9b45669fc71ed912b5fff5eed4163601ed846 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview pjm-dls is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview time-to-reload is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in datdbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3722aafe66ac2c253aec711db7cd1b2d0604d326c1520278ed712b02242e44f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xp-node-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dacb3f21efc94ccf0bbcabc232b84f156d79b073feaf3e5bbfa40bbf998ba1d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cocktail-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f45a5083ce0e2b15394bacf66030a45b9650c7e5050c35ffb4047c197d414ca3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in model-data-cache-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a5f728ad2fff044db6b02073523084d299a7e876770118b7c0a097ffd904c4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in decline (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac37f89d973f66d0ea1d5bda82291d0a59d9c2e008775135c2dcecc422d92ca1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in slowest-build-nodes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99f289163f5b86c32755596d6994cdf618b497111e781d5ab034d64d248d6b4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview model-data-cache-service is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

MAL-2026-11410 Malicious code in wistia_namespace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f82ae719a2b710db94689584e2851a2140f781e274f26736bdd98ce07a54adef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11249 Malicious code in bn.js-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ac1efa94d945e3a7364888af7ae4d39354235d03bde092d89dcb56650f276d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11253 Malicious code in cancelling (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c6ef60911ccd5f41b2e1f332358d78e50a18f4e476f4289734f68ba06768abe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11245 Malicious code in baofdadbybmqeefeeginweoamxlphrjq (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0fd15e81f0b6a2db61b6b8ae037b3ff29f12f9d274847f4708ef7cd4909f316 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11243 Malicious code in aven_shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 017a3ba314e321dcd3e3b054cec53a6be0352881d36eeec79f166fe583e14f9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11319 Malicious code in impv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08ab943364555bc64aaa5949d20cb3976e5a47af1429a885373b91cf17c3f4c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11254 Malicious code in canvas-to (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20ad4ea01c4d87bc2fa2e6a27121b03d234dcdfdd8cadb702cb0ea28790f3ab9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11238 Malicious code in apihost (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db86bf96ebb268d3b0c11f456ca9b45669fc71ed912b5fff5eed4163601ed846 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...