Malicious Package

Overview react-native-template-my-starter is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

MAL-2026-6866 Malicious code in prettier-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e5645051b8c021a473b5b5e8ffc5771c65265a02502beff5bef28932c4877cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-6864 Malicious code in polymarket-onchain-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 718b7995129eb1a8723f77a2c24288aa0160db9903f33468a29a11ec3af29d1e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-6863 Malicious code in pino-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a4e878731bc790b53d2b997601e61805dcf1089a8b581ec706e1f970d3de939 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-6861 Malicious code in picocolor-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d3e751383a2838104b1052c4c7fd53fbbaa7205213e84939304080212ea64b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview picocolor-logger is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in peptideenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 002d83b1d5fb6ee781bb44fa84180c4554f5395e6b6d1226f5ac488cc18a2a28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-6843 Malicious code in lint-builds (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e59bcbbdb88e5ffa12155537c268d8b8a50d9cfd88a462fe9219289e8226b772 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lint-builds (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e59bcbbdb88e5ffa12155537c268d8b8a50d9cfd88a462fe9219289e8226b772 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview lint-builds is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

Malicious code in older_morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44340068d23f1fff8b2fb707922053997b84f75575607966ba888f15feafbd8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-6858 Malicious code in npm-eslint-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc5c1992c3d9f33bca28c1ce098d769809e44a12a671972925815e9890e5e9f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in node-env-detector

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-6856 Malicious code in node-env-detector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f28e9e57fb0e1cc42f084ab5c8422bdd3b10dd056022e7f133ae2177c7f0043 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview node-env-detector is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in node-env-detector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f28e9e57fb0e1cc42f084ab5c8422bdd3b10dd056022e7f133ae2177c7f0043 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in debug-glitzs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf37ed7b52735892c92547fa8c68a98252eda2db46870cf5066002a2a4670df6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-6855 Malicious code in next-bignumber.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 615f1e472f3fec95854738e64a4e4883676d514db833ca3bfa7a1008c0253a57 Package impersonates the widely-used bn.js crypto library: README, repository URL, logo, and source files are copied verbatim from indutny/bn.js, but...

Malicious code in color-logger-console (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 456a38538e7b7f075e922dc81a7b868540f3fa7a5e38bc6903524ddcad08d698 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lint-null (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f501f945833536afeb32812532adcaeb99a9999b683992cf98eeea3fd0503442 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...