Malicious code in card3d (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 761b26c08e59998ca647c9966c0fe2e8bffb024817ff3c09f1d7151d98c6fd5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15967 Malicious code in @yoannchb/wtf-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9479b89e13ce2a4f3327c18fc429547d79e4324efc86243c49213cae1493ea22 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15965 Malicious code in @yoannchb/langy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47b5b900f80a042ffb1a59e811c0c1325324b56b01f12e2b6ac291b12760698b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chrome-speech-recognition (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6595849dd7059a8fb61024bf33c2c11704cb52a784f6449cf940dc17725a0208 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15992 Malicious code in lazy-attr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6e9ec6f580e2ecf0b9cf61f677666b18211e7056ffd5b3cb775f21356d0e351 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15996 Malicious code in muswish (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 544f09e40055924b758a4908557e238acc44e86f9c63ad51548df24bfbb368a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in google-img-scrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86caa3dfd7fbfa99dfa8042e4792f31346c57427e7eb83cbc468b5a14d4c0e14 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in lazy-attr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6e9ec6f580e2ecf0b9cf61f677666b18211e7056ffd5b3cb775f21356d0e351 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fast-html-dom-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee035fff3db95c6f14a41fe379add7ee78607149e7d5435b4afad505d973b410 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pipipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6069e53629de29530019a5d19c7cbf7dc8d490c039130fdab2b2f264ac23728c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in infinity-grid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 120919aeccbb43dad4717538757f11dcea999b371dc507b10395b6369fd85f46 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @domyjs/domy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 673f8826708fe5d043b6e2cff5ed4d3acd6f71b168d6ab486d250abd0429bae6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @yoannchb/langy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47b5b900f80a042ffb1a59e811c0c1325324b56b01f12e2b6ac291b12760698b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in drive-album (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b7b552aab413e10d8cc2363896d1735041227c764470db3de7cde26705996b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15988 Malicious code in inner-svg-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12d9bad6950b19c4869bb51e3cd490ffb6d66e4a16da9ae5d93618ac9fcb5263 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15968 Malicious code in anime-vostfr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f624a7b8a2be52c79af7942acc5717ff29fa17cec42dce635c26839deb8e06af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15990 Malicious code in json-into-html (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04a5353fa099a8aecf0c34fd2d34244cc86058adb2f9a26eee4d7efe08a5b95f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15986 Malicious code in iframe-to-video (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ddc607fb5b68fa9cd9a186110b72bea322a0a74ad96f6e8ba53105ed89e2388 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15972 Malicious code in card3d (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 761b26c08e59998ca647c9966c0fe2e8bffb024817ff3c09f1d7151d98c6fd5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15948 Malicious code in @domyjs/collapse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7f73041d172c7418209ef39f488365bf3b3c7a6a25e2f2d490e5e70dfcfb005 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...