MAL-2026-5047 Malicious code in @cplace-paw-fe/cf-training-extended (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c5db73fe2d964e3a417f9c13904b52af166bffa1edb36401e0dda939c281354 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-4340 Malicious code in wm-plugin-open-teach-me-after-deployable-played (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 655533b31e25a157ee83f60bf9745992f585b321861539de7e40a9a7549dd38d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in npm-demo-1112 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 997173ec7aa479e3f57733838a8d8923cd42b2a9b272936ae7798a8f3c7f3699 The package npm-demo-1112 was found to contain malicious code. Source: ghsa-malware dd67ca28466b78c5da65f0a98c71b3e3243c90641b4de5d7ccc3215dbb1a33e4...

Malicious code in n8n-nodes-ggdv-hdfvcnnje-uyrokvbkl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 153a9330a9d7d9400ff4dd8525ff7d5069ca8ead835562e7ffe0bc16a4c9b22b The package n8n-nodes-ggdv-hdfvcnnje-uyrokvbkl was found to contain malicious code. Source: ghsa-malware...

Malicious code in scr-database (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3902b02c9664e32f82d280e45ac58ec3cd3bb57766bfbffdb7a11b845f20b9ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nextjs-package-purify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0991599608fe8c26ceb79529ca2da64d1dff01f67c36d2cccd92ff994f41fb6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in plz-bas-ek-bar-dilado-batman (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa8be0f4474626ccd60533895a89a14daacd056083e7ec492f5015b7bd84741d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/aliquid-non (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 913dc142c931df36e69de9789f276595c7ba8305f58a93b28a3b1c09457c5aa8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/rerum-similique-ex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ea06d377b5c515b538f52e20ff451fa79dcc04e869eade5803438e6a3db174e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/itaque-nisi-veritatis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae7aa724a534b8fbd96aee6630bb2ab9f195dccff4773446c499558fe7b9e960 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/eveniet-provident (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74229a61630555fa171432539d52e0f35d3fb86e259a433bcf863108eac63626 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-7604 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c91797c5e408043b6bf399290ad49ebaefe256fb9d11e9ac3e53cc50f1bc8295 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-4402 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e795a571ad681e41aee120f0daf66190de29fc9ce965f42f284d1d7299d8750 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-dongdev2006 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ebf5437c60d73e7273ff4571779c50accd1552a3d68fc66cbba3810860670bf8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in serh-eindex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab19f305b3425722dc548e36fe1c847862ec71ebb92332273671208a883a4ec1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dowloa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 147a74af35a25ef87f641f8fc68b9a66f52fb9aeefe70ece65202364482a0e31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nqbcksuatvlgpkfy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 462f43c40286edf3abdbd7fcfb8ef7e6ddc6e10f521c0ebb863a5384014f74c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in purple_team_midway_teste_cenario_2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28934a167292330b02fcc17d36240c4fb6daef5ea6ca4120f4ba7e10b7f53b3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in swisscom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 077089a7a9b30f65182cf15613ff14c223cce05664890e26df87d994ec1291f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in git-en-boite-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e4f46bbf079b977deefeb78d8bf3c63587df8e512096be79aa8e7decc4c95083 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...