MAL-2026-11329 Malicious code in maalxios (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f5c4c2541793c51a8a3384c2f177f415582471318bfde6971e70a8bc4f630ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @sourav_chanduka/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bbbe9ace74d41144457bc1461de476aba591b24b9fa879326c51705df276e157 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @sourav_chanduka/core-no-ngrok (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3cde51a882f2a66e53c2a19231a1963c78555a63a7e2ea9c8e23b378ec072bd1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11230 Malicious code in @sourav_chanduka/core-no-ngrok (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3cde51a882f2a66e53c2a19231a1963c78555a63a7e2ea9c8e23b378ec072bd1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11231 Malicious code in @sourav_chanduka/oidc-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4eccfb81c0b46c35e5a20da8b2510d5ac3d6f1d0b0f4b4bfc26898664c9f4690 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @web3utils/common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba3a3a1b390694579fc5d75ee83e18f9b378d1206ae499c43c744c889d3fa862 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11234 Malicious code in @web3utils/common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba3a3a1b390694579fc5d75ee83e18f9b378d1206ae499c43c744c889d3fa862 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @web3-util/common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b6c5241d80dc8baa902550a561e37b238c483430f8c7b186abe033d11f8ea34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord-csr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 830c0ff21018fcfee625d241dece766b6c8db87e891ba9fbcfe567a01ec1447c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord-rsc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe42cbd8f14491953dfd5fba0580e2025ef2f1f7cefc3826d9997bec6f059f29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11277 Malicious code in discord-csr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 830c0ff21018fcfee625d241dece766b6c8db87e891ba9fbcfe567a01ec1447c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @relforce-dev/console-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdf30366d8098d04f78ab20d628d2e82537efc7c80f07c9d89db861a343a57f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @pumpdot-fun/pump-swap-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76046e38de05fa61bcbae6bc4edf1a1e6b704f7c99e4ca8e57a16bbe06380dcf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11224 Malicious code in @pumpdot-fun/pump-swap-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76046e38de05fa61bcbae6bc4edf1a1e6b704f7c99e4ca8e57a16bbe06380dcf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11223 Malicious code in @pumpdot-fun/pump-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c408c3350082bac3e0fcef5878dfd9a618d3a5f538ed6c6f1b6fc4abf2832ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fwf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67afa7fe22e11e200dbb0a033b897eb7ff275ba6b5c33ec15e1371bf1b8feb08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @santieich/homebridge-midea-lan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c707aceedcdd649d0eb71ffd5a1d4ad46f43886869acb7be92d8a14012eb69db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11314 Malicious code in fwf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67afa7fe22e11e200dbb0a033b897eb7ff275ba6b5c33ec15e1371bf1b8feb08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11226 Malicious code in @santieich/homebridge-midea-lan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c707aceedcdd649d0eb71ffd5a1d4ad46f43886869acb7be92d8a14012eb69db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aruda (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d223eebb0aaf9ddbe61d2b227b5d94e08fd4bc37fd93c55f025673a36b6f487 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...