MAL-2026-5065 Malicious code in ethers-errors (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06fa972243b06dbbcbda81121dd063b2ebc5636ae92c0836617433beec35ed0c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-4173 Malicious code in is-really-odd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f205432fff885dce7a6dee0e8d1267c65944d3e486abd566683caeaad833692 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-3514 Malicious code in @tallyui/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d8c00e97e1db6523971d72b66f9fd535aebe26956574db7d6a78797a37be9b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in use-feature-flags-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b176246976f266320b17cb9aa3a4fdddb6970d6f115637cb5cb2224c2db75c7e The package use-feature-flags-plugin was found to contain malicious code. Source: ghsa-malware...

MAL-2026-1447 Malicious code in testpoc01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6659b3a51b9c0a2a51085f5c9671114871ac5dfccc6917f74afdd6172aa0e9dc The package testpoc01 was found to contain malicious code. Source: ghsa-malware 317141d91ff4f1ed0410aab99492b3788e3951ef5a06d3fd1b83cec8d2745375 Any...

Malicious code in xpack-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62edc6bb089c839e93cf7b71b8b46ca1f5d064272cac586b49cda41fc40b1c19 The package xpack-subscription was found to contain malicious code. Source: ghsa-malware...

Malicious code in wac-react-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e6230f7070c6a961274bcbd24ce695e9079873b97e2a34d1548f39451925cb2 The package wac-react-relay was found to contain malicious code. Source: ghsa-malware 8e4689baba605d11cb3859f852360989942c364318df4e05fc6d1265ff31061...

Malicious code in @louisle2/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa91d639a49dce887bee0382a02ee01371c3dfe602f171d9ba450e89a43e1205 The package @louisle2/core was found to contain malicious code. Source: ghsa-malware 60cc6937b19636ed0f05e1a3272c025f2474e3767fd5c44b29da1a2750ace6b4...

Malicious code in react-async-component-lifecycle-hooks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b86596580a0488101dcd9ed96f5ea0f204781bec3f49aef8c990fa3c93a17a14 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49016 Malicious code in jsx-a11y (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69d8158b553a773a363a5a4bbce1477f430fae7a45c29fe8f1855401337f4b0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48554 Malicious code in js-repack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7a80a1c4ce3e508e53f6fbcff1d53486d344d5e88efb691abaad37cc22759f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48211 Malicious code in redirect-rrfeb9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e22ca9cad1ad3c1542f31911a710cdf8050641c411840a91fa44f7f81ba3fd36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47487 Malicious code in luma-glow-db (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80813446edf951ac165d71e8e56c30d45881e40776615d07d104e3e40ef1f5ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nativescript-community/ui-image (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e0f3449039a2352fc57480496becd92f22e7c723fa82f23ea58051945133a68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in andes-landings (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5517e4d951819beeb0f96046d333d0f194e89f07cc61805837ed73e7ef85c77d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in generate_genesis_values (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04696576e4143f9336947fb36650924f201a9a6c56b495e5c05c80ef25713275 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in app-bridge-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 933905ebdc76407c4ff291a44e25a77e8a04375225a902461a37355fbc45e0d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in transify-helper-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fe9a95aa86c804ea93c96457c3f8ef18a9415c888ae5921213386c8424038ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ywpeirt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7bb3df4329eb6ef5da8694013edde70bd0e1a2aaba9c23e5b1cd487f7995899 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uewopdn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 840acd749ca1cc60804a43acffb1a61e836448f4ac5759d429f3268dcdd2a512 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...