MAL-2026-4846 Malicious code in @service-suppliers/fetch-initial-suppliers-watcher-saga (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e38be804fe779ace5ea3a6a56214beebe7ceabaa5f765b46a0f7888ed2da4fc1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-2936 Malicious code in @tushar-br/editing-pack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37a4d5659346f95e443d4a8b6883c51f081de5eb6989f8f6731327eb34ed9c64 The package @tushar-br/editing-pack was found to contain malicious code. Source: ghsa-malware...

Malicious code in yt-smm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3641ecf42237a55c9fb81c4368aa7b83a42d2110a64a733f45d27005cf38dc26 The package yt-smm was found to contain malicious code. Source: ghsa-malware b4d96978cd4e109ed8b360f551af24fd1621dd659f63a490c9de077b587f607b Any...

MAL-2025-191110 Malicious code in inmaa-map (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14a71a1334fb3a18076752ed1d28b6fa7cc43dc4f4b612d102624e00dcdf53cb The package inmaa-map was found to contain malicious code. Source: ghsa-malware 56eac0e53cd10844280484abbd6456539bce6cd1e970a33a3707d49612ac8a88 Any...

Malicious code in oxrvxxxxxaslllcaj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cbb43c3aa5e1fe9b33fc7a3c3a439ef7edd69817df8984551602b834f7b64584 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sensort-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da08217a79ac25925bb75373056d29208390b88fa6a4e75d27f6c5889b5a4943 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dowload_ebok_lenin_y_el_totalitarismo_by_mauricio_rojas_szvld (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ee471b163c12366bb71dcefa110286c5a5ea8c0cfd9faf231c4f9cf8f9be081 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-2104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 566dbc5ffd582cc8220d8151e3654be4197cdd797d5b6871a70a9ad00bcb7d86 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-322 Malicious code in wlwz-2312-1608 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6a4dfcb333d9190f4952e3d03dfcd265c2824bb9f9c5118caea8816610b41d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in -gzip-ize (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a0dd1ae21dc3f5787d43924a3612a418e301478780e539aac0bdca13877cb12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in feat-xsm-st-conflict-using-sheet-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4980cf19bfc7f78bd38baf67a9da323ef5e14a0d067a4d0eb3188a990b15c9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oas-nodegen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78561c53bb14bcf6f3810ec4104bb7d96535fd3f7e9491f5eadc9690483c6ea2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in git-en-boite-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e4f46bbf079b977deefeb78d8bf3c63587df8e512096be79aa8e7decc4c95083 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in v3-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45439087657c838afe562f7ee8545fd01977fd0ee167e284431a7a0025cfa62a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...