MAL-2026-11316 Malicious code in hjw-nasa-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b1632ded6ca00645c902a9d691d08823c53920ffd804e142b535efbca479664 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11397 Malicious code in testsetset (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7e0887bc4462a3a2fdae3c468f85da3352d2ae5a196bbbeca6cf072caf5e3f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in reakt.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ff2841f53f4e574cacaa4dc1c13955afd830ecc4e34c57ef2e773477efa19a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11302 Malicious code in expres.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e2eb125cd826b1578646fdd06af4c5649ab6b31c1a39afc768bbc62bfdae0d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11257 Malicious code in chalk-buttons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec33c573b26dcd167feb75548bd7774af7a912c448fd08f624bead6e22deff13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11255 Malicious code in chalk-butons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0dc8638246791bb1c397834fde03907cdea6430e7da22bd9cd581964426d52d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11262 Malicious code in clo321-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0c9047321cb681b8b97850ee266a48bd5d192eab6133c686b9f7dc0aa5f68d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @ethers-sdk/ethers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e6d5bcfe574a6eecbff6a32c084a7abd43660939adafa83c7097a96d1ca791f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11210 Malicious code in @ethers-sdk/ethers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e6d5bcfe574a6eecbff6a32c084a7abd43660939adafa83c7097a96d1ca791f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in apihost (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db86bf96ebb268d3b0c11f456ca9b45669fc71ed912b5fff5eed4163601ed846 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in srgb-linear (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 161f0f8d0598a57e1dde7ecb119f308f82a1bad8189fe8dce4bb88547559f588 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in datdbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3722aafe66ac2c253aec711db7cd1b2d0604d326c1520278ed712b02242e44f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pjm-dls (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47f282ee2db6dd2a90b13809610357f28aea53a0135dc1445fd92c5f140eef27 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ember-cli-deploy-derploy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92ef0bde2aabf74dbd75073a6cb7ce71165ba8fb32dec2e49f707337becea0eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cross-sell (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69ca6d2d5b0f8c68cc8dd2f9799b681cd4fe6a1a5259d8b8a58653f528dccbfc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in baofdadbybmqeefeeginweoamxlphrjq (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0fd15e81f0b6a2db61b6b8ae037b3ff29f12f9d274847f4708ef7cd4909f316 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11244 Malicious code in bajkvahzv8allnltvr7x4s5hdxkjvyji (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33a3ac75333df2fe3d27eac3d771269f45d3567ec6203fc00b8e9b9234897744 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11347 Malicious code in pjm-dls (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47f282ee2db6dd2a90b13809610357f28aea53a0135dc1445fd92c5f140eef27 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11251 Malicious code in broccoli-watcher-siphon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 045a48ee2e7fb0e492e451c0144cf9b6072f56fcffa8b69808b7cf8e3a0f5b10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cocktail-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f45a5083ce0e2b15394bacf66030a45b9650c7e5050c35ffb4047c197d414ca3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...