Malicious Package

Overview easycommons is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

Malicious Package

Overview impv is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

MAL-2026-11253 Malicious code in cancelling (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c6ef60911ccd5f41b2e1f332358d78e50a18f4e476f4289734f68ba06768abe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in model-data-cache-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a5f728ad2fff044db6b02073523084d299a7e876770118b7c0a097ffd904c4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview apihost is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

MAL-2026-11249 Malicious code in bn.js-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ac1efa94d945e3a7364888af7ae4d39354235d03bde092d89dcb56650f276d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview ember-cli-deploy-derploy is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in canvas-to (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20ad4ea01c4d87bc2fa2e6a27121b03d234dcdfdd8cadb702cb0ea28790f3ab9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wistia_namespace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f82ae719a2b710db94689584e2851a2140f781e274f26736bdd98ce07a54adef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11243 Malicious code in aven_shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 017a3ba314e321dcd3e3b054cec53a6be0352881d36eeec79f166fe583e14f9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11285 Malicious code in easycommons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51e5eca4058ab71aaf0a525ba2b1ee47fee670f4a50118971c468ee4195c1018 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11254 Malicious code in canvas-to (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20ad4ea01c4d87bc2fa2e6a27121b03d234dcdfdd8cadb702cb0ea28790f3ab9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11410 Malicious code in wistia_namespace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f82ae719a2b710db94689584e2851a2140f781e274f26736bdd98ce07a54adef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pullingpackageeee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0eeee23ed9e5f55520bb0d6712d26704bf87dc9badeec3180c33a6d2eb31cba9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pullingpackageee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77ab723570d52cee7414fec303ea92c8e373a39274923acd41456fb26832e30c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview pullingpackageeeeeeeee is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

Malicious Package

Overview pullingpackagee is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-11357 Malicious code in pullingpackageeeeeeee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06c2af921e85f8ace3d552a18ccb5878291423bb74dd7ac4d26ca8dfa5bfeb66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11353 Malicious code in pullingpackagee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d72c36e7d1f592e7ea21cc7aaf3ae10e22eca202c7b2ae7e3cab34f08a5ea32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview pullingpackageeeeeeee is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...