MAL-2026-403 Malicious code in worldnormal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 406eb16c91569acae88fa2f33de6107f6a758568c40b800908ac924d1a7e87fd The package worldnormal was found to contain malicious code. Source: ghsa-malware 1c9bf70b2f92f241477ec0cae21b7f094e1d4d1090cbb837bfd90fa9430f26ac An...

Malicious code in @ensdomains/solsha1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c4a8798162224fba85c25e8c01bb31790ea20f33f47fbe558eb659c197e0a4e The package @ensdomains/solsha1 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-47891 Malicious code in pkgutil-resolve-name (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 355bf6f2e2ca64d826a7a85321bd48180e7683107611ff321101c5baf3b26e0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hungarian-algorithm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1160564461344c0e05baf24aaa2f15cbe54adc45f3125eaa672834874ecd1cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in api-demo-sample-lib2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bf23a2c3e41d22ea84314170a6f9e3359768c7cedbf3bb3235f4f1146b218fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pupeter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 966b43dc6a13ffe5ab2a0430ace8a9f70a365db096dfe0ac789eebe2675106b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-30263 · Autman · Autman

Name of the Vulnerable Software and Affected Versions: autMan version 2.9.6 Description: The issue allows attackers to bypass authentication via a crafted web request. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents whe...

Malicious code in @asdfvr/qaqazzaaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00ddae9d7021daf95bf5000e1b7f278bcf84e7b46ceba0a5ed05943b9d7ebf57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in whevent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 381abfc1981a4deb39aee2d7d2435a396a738d8ab2c7e86d619c4c55f252c1d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in package-show (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 443ae5878aeef65b3fcccbbd8aabfd6f07127a425a1715c4d20269b72f288b96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...