MAL-2026-13674 Malicious code in statist-browser-typed-client-eventea.projects.tdeal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56afa18eac7769497f21431af2a739dd5040563541223e41786746e0c44957a2 Package contains 2 files with no static or behavioral indicators of supply-chain attack shapes. No lifecycle scripts fetching remote content, no...

Malicious code in runkit-embed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d1a12cf5df9a43c706a5f3c73571ad7199f6a81dd67d4b94d6b91ad149a5f5e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...