Malicious code in regexp-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9828b4712ac404ec6f143f9c3115eb73ccd4418bab9cb17327ae325d488954e1 regexp-ts masquerades as the pino logger description, keywords, and module.exports.pino export but is actually a remote-code-execution loader. When a...

Malicious code in shakti-pwa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bdac10e664bf4e0a73263401629caf12d2ed80e3cf76f36fa18a7c2d599e5229 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-117 Malicious code in kdb1-demo-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a67f080ec14c4f32313e33736b6b67e59accae55e5e2c388613df54d5b5c85d The package kdb1-demo-v2 was found to contain malicious code. Source: ghsa-malware c1a20b2217012bae0720ec06b437e454ea9f37100cf6bbec5477a5460ff53424 A...

MAL-2025-192643 Malicious code in test-mal-npm-pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f6f3e205b514fc5d9c6e98be4d3b0bf7049c38a0ff62e678584aaff50fc643 The package test-mal-npm-pkg was found to contain malicious code. Source: ghsa-malware d97b7f5012899a502ba9d154bc5f146717e56795f702823294ea3636b433c7...

Malicious code in @sev-ui-verse/authentication (npm)

The package @sev-ui-verse/authentication was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3492bfe4d8b65a2239adf76adf321c36a385fe94efabe1ef8f1ad32b6c262b30 Any computer that has this package installed or running should be considere...

Malicious code in middleware-loggers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 572eeb4389dd6da0c13648478c40f302f15e7736279e3b33d171a315a2cac60d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in anotherexternal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8048f8389fecd3d45d156d4fbd5dbbff5ece757ce08de730f4546368cad782b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mina-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c04fd17707294cac66886e59d347bbfcaf6ac85121c28b4b665490794f5fb861 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shopee-ui-automatic-import-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e30109d0ce569668c54f7d030ae4d33fd3858572a05996c3a53877d48629ef8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in blueconic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57780e7491017a50d7070e7a4f4ae2a258b327c469373c4d7d2612f512fcecb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-7808 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 150bf82e31ac0ddbdcfdacf8e75ed3a3bc34e68b57b64427c76ef4e231f75746 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in f-amnotacat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 141c802dcb10a0a2a8bcc332e52d93c8f9da888b8ca3201498dae8f1268829f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in webext-experiment-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2d468aa93a14febc9fa5b285255c1a223fa9abd1aa0e614c6dbe3a57a18f412 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sc-bing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d7bf56f772259e7de9fe49c4783c15ed5c91abc5a6281a06995c34164106e42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...