Malicious code in btn-particles (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01991d61636173b6fea5e641ca06009891d2b044b894368fab0c7610722ff070 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in parallaxy-img (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a3833ffd1c1a768f35c02741d1f1414ac2f76bf6c6b7eca7f3018d07becfcb3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord-tqr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a86833e5a36c88fc9e53ced45f2d6d0ec40357cce7377aeec0da7e1f25666ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in inner-svg-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12d9bad6950b19c4869bb51e3cd490ffb6d66e4a16da9ae5d93618ac9fcb5263 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in iframe-to-video (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ddc607fb5b68fa9cd9a186110b72bea322a0a74ad96f6e8ba53105ed89e2388 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-16001 Malicious code in puppeteer-obscura (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5617ac5e060d08fcfe23669c497e6b4fbb8587fd7f7630a7b9f6e86287880983 On npm install, the package's postinstall hook node dist/install.js downloads a platform-specific binary from...

MAL-2026-15979 Malicious code in enqueu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38382955b0bd4b7d06dc93caad37befe8587e646da110a9e3ba05ed75055d328 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @yoannchb/tokenize (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e159c76f26df8e14cff46c6a407a3809626111597001cdecc88d7782386c8d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15999 Malicious code in parallaxy-img (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a3833ffd1c1a768f35c02741d1f1414ac2f76bf6c6b7eca7f3018d07becfcb3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15996 Malicious code in muswish (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 544f09e40055924b758a4908557e238acc44e86f9c63ad51548df24bfbb368a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-16002 Malicious code in tempjs-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4793104f666467c4b7fca75f478d830e4b7d2f80fcfb9b70fedf8733867bb35 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @yoannchb/wtf-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9479b89e13ce2a4f3327c18fc429547d79e4324efc86243c49213cae1493ea22 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in linkpreview-simple (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c62818bdb74e00433e1e82737807bc3c427fdcca8db39d1fff7bf6db5e7e64d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in json-into-html (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04a5353fa099a8aecf0c34fd2d34244cc86058adb2f9a26eee4d7efe08a5b95f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tempjs-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4793104f666467c4b7fca75f478d830e4b7d2f80fcfb9b70fedf8733867bb35 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in memov (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1aaa3b673c4d7a90e08673fc3dd2ebbc087fe5605238d11e2f4cdfced195d63a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @domyjs/debounce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2616c0d23fb705645957e01c76610e48bdf68c6b88de4f39df4c71ed2daeafb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in muswish (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 544f09e40055924b758a4908557e238acc44e86f9c63ad51548df24bfbb368a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord-phub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 181fb5530173cb05bf3e2d2fd37a097924d5affad4b9e3438ceef5d399b01b0e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in puppeteer-obscura (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5617ac5e060d08fcfe23669c497e6b4fbb8587fd7f7630a7b9f6e86287880983 On npm install, the package's postinstall hook node dist/install.js downloads a platform-specific binary from...