Malicious code in memov (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1aaa3b673c4d7a90e08673fc3dd2ebbc087fe5605238d11e2f4cdfced195d63a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @domyjs/debounce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2616c0d23fb705645957e01c76610e48bdf68c6b88de4f39df4c71ed2daeafb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord-phub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 181fb5530173cb05bf3e2d2fd37a097924d5affad4b9e3438ceef5d399b01b0e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in puppeteer-obscura (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5617ac5e060d08fcfe23669c497e6b4fbb8587fd7f7630a7b9f6e86287880983 On npm install, the package's postinstall hook node dist/install.js downloads a platform-specific binary from...

Malicious code in card3d (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 761b26c08e59998ca647c9966c0fe2e8bffb024817ff3c09f1d7151d98c6fd5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chrome-speech-recognition (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6595849dd7059a8fb61024bf33c2c11704cb52a784f6449cf940dc17725a0208 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15992 Malicious code in lazy-attr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6e9ec6f580e2ecf0b9cf61f677666b18211e7056ffd5b3cb775f21356d0e351 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in google-img-scrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86caa3dfd7fbfa99dfa8042e4792f31346c57427e7eb83cbc468b5a14d4c0e14 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in fast-html-dom-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee035fff3db95c6f14a41fe379add7ee78607149e7d5435b4afad505d973b410 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pipipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6069e53629de29530019a5d19c7cbf7dc8d490c039130fdab2b2f264ac23728c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in infinity-grid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 120919aeccbb43dad4717538757f11dcea999b371dc507b10395b6369fd85f46 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @domyjs/domy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 673f8826708fe5d043b6e2cff5ed4d3acd6f71b168d6ab486d250abd0429bae6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @yoannchb/langy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47b5b900f80a042ffb1a59e811c0c1325324b56b01f12e2b6ac291b12760698b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15988 Malicious code in inner-svg-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12d9bad6950b19c4869bb51e3cd490ffb6d66e4a16da9ae5d93618ac9fcb5263 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15987 Malicious code in infinity-grid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 120919aeccbb43dad4717538757f11dcea999b371dc507b10395b6369fd85f46 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lazy-attr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6e9ec6f580e2ecf0b9cf61f677666b18211e7056ffd5b3cb775f21356d0e351 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-16000 Malicious code in pipipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6069e53629de29530019a5d19c7cbf7dc8d490c039130fdab2b2f264ac23728c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15966 Malicious code in @yoannchb/tokenize (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e159c76f26df8e14cff46c6a407a3809626111597001cdecc88d7782386c8d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @domyjs/collapse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7f73041d172c7418209ef39f488365bf3b3c7a6a25e2f2d490e5e70dfcfb005 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15977 Malicious code in discord-tqr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a86833e5a36c88fc9e53ced45f2d6d0ec40357cce7377aeec0da7e1f25666ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...