MAL-2026-5192 Malicious code in weavedb-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 146faaf0d97c6a533a969bc3f3f117811f9317dc865ed4ab37f1679842ddeaae This package was compromised as part of the IronWorm campaign. This campaign executes a malicious binary payload during installation via a...

MAL-2026-3112 Malicious code in @apple-pay-trust/cancelled (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0c6d2bdfddde00dc6bb5663ffb7fd381c2e392a8c65d6a8890b400c219c160d The package @apple-pay-trust/cancelled was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-124520

Malicious code in nestjs-nodejs-electron-builder-auth npm...

EUVD-2025-94948

Malicious code in speciallungfishz3n npm...

EUVD-2025-42783

Malicious code in okta-rawon77-riris npm...

Malicious code in vite-manual-chunker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2466db729b423d58b084a5f99834cfaf8c62af4179350ef30978e32f36b50fa7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-42207 Malicious code in @crabas0npm/alias-mollitia-quia (npm)

The package @crabas0npm/alias-mollitia-quia was found to contain malicious code...

Malicious code in node.js (npm)

The package node.js was found to contain malicious code...

Malicious code in logrocket-navigation (npm)

The package logrocket-navigation was found to contain malicious code...

MAL-2025-31143 Malicious code in quartz_7kdp5_i3dp6_trill (npm)

The package quartz7kdp5i3dp6trill was found to contain malicious code...

MAL-2025-12874 Malicious code in @zalastax/nolb-p (npm)

The package @zalastax/nolb-p was found to contain malicious code...