MAL-2026-16066 Malicious code in @haimiya/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afb1fac619ba416b14b747307762d4e4cf1cfc41f00a244c8e472af5f689deb0 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in @web2apk/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ad4c3329ebb2fdeb3b9ddc93abcb5f3dab6773f7a7999ff96d063d49edc04d9 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in guci-date (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c249413cd0bbe7f76321cbaeedac49d6ddbf63030ea67b514dd1a662e9fc8d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 3layerdipstackhyazlk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6790afda3bc2af3e8b5fbb3e3636c02767986b5f7b7bd3b7bc25585c6139d19 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackpbkfvo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ac98f9b55c50aa9a9653e461c8e6d658cc00729a6ac777b87fd4647d6c2a165 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14740 Malicious code in 3layerdipstackelcuhp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb13b3a8a98b196d368a547d115510504e1a70d7d0235125cee48cc81dbef936 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackds3oln (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a1497135f91ba31b1cc557c7a3b42aa6fdb7baf359f42a12d64ba790205f024 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14935 Malicious code in 3layerdipstackttd2o (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05f539ccc6a611c927ad4d2c56f34a3e008ea454c812f4e10352f6cd850fab7c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15240 Malicious code in desmos-graphing-qqmn0bic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25dfc32d9cad7a01f319ea29b7fe21953ca24ed3a4680e211f5f411c0431130b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15144 Malicious code in classlink-t347plks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 793ed145bb1a30cb8b2d3ff5aa95e35519199632465ce30096e163db35ec8594 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in secure-test-browser-hxytxlf0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e29c169286c2e9f12e3c5acdd62acd7c5937400e8b57988fd953c213119b941 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15276 Malicious code in secure-test-browser-2r4fku8u (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63f49c73a20295da0a62ce73165621f7fd843144ab59df6089a0cfbb5e6e9f13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15374 Malicious code in secure-test-browser-kdfmv2fs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c1add7e4f8e55604023c9516853bf5abdcaa456e3f71c24188ef104ded9d606 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-13384 Malicious code in svelte-mapping-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76203390ecd481ea969ede1996712ca380655fb041c051d50696b2f8f3dd9265 No a static rule matches and no traced code paths indicating credential access, exfiltration, install-time remote code execution, silent-relay,...

Malicious code in @keyv/redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c6bb14bdfcd4aae57a41c9e6e04cd5f612b12e0f45fbcb57510ccb44b095e77 Analysis of @keyv/[email protected] produced no a static rule matches and no traced behavioral findings. The package is a Redis storage adapter for the key...

Malicious code in passsport1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68604126507bac849b697119200b6ef37f408aaa077f208ae0127605159a9832 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ethersss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49d76a2dab802ae6aee4310b7efc5a0862c1964a024e7df701cd99741a033797 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in merg-descripters (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f76e5609bceac9f395143e5329a0187c6ba35512bf453587bc2fe114622508b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @sourav_chanduka/oidc-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4eccfb81c0b46c35e5a20da8b2510d5ac3d6f1d0b0f4b4bfc26898664c9f4690 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @node-console-log/log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17c7960f4102ec63a2f4a105b1fee65edcb12399050dbeb3b94c7c6b6a1fff61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...