MAL-2026-11314 Malicious code in fwf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67afa7fe22e11e200dbb0a033b897eb7ff275ba6b5c33ec15e1371bf1b8feb08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11226 Malicious code in @santieich/homebridge-midea-lan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c707aceedcdd649d0eb71ffd5a1d4ad46f43886869acb7be92d8a14012eb69db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @santieich/homebridge-midea-lan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c707aceedcdd649d0eb71ffd5a1d4ad46f43886869acb7be92d8a14012eb69db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fwf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67afa7fe22e11e200dbb0a033b897eb7ff275ba6b5c33ec15e1371bf1b8feb08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aruda (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d223eebb0aaf9ddbe61d2b227b5d94e08fd4bc37fd93c55f025673a36b6f487 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11240 Malicious code in aruda (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d223eebb0aaf9ddbe61d2b227b5d94e08fd4bc37fd93c55f025673a36b6f487 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11309 Malicious code in famshot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a25590ceaca7a7491267e3152f276e90e1d5dd7eee7f3a86bee0c2b7666c0427 No a static rule matches and no traced-code findings are available for this package version. With no concrete behavioral evidence in either signal...

Malicious code in @patternfly-4/react-tokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af8f4323b56b57abb05cba88f31a1c04f8fbe92935757e681460c6d66f032e96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @patternfly-4/react-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d910906cc783762621ef10ef92572495ce92e5424903edc1245045d2092793f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @patternfly-4/quickstarts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad5c84bc12cb0c8215b572e242d8268710430f7bb4c16d7ce4ac25a072cd39e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11221 Malicious code in @patternfly-4/react-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d910906cc783762621ef10ef92572495ce92e5424903edc1245045d2092793f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @patternfly-4/react-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5f54e5643951668f9122f9909e456f67938b47d7ecb0cddf1fde02666a66ddb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-fetch-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ceb74bbe9b7a8216138cd37327350251924c2df2603d539bc91c3e8f22e2f38f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11339 Malicious code in node-fetch-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ceb74bbe9b7a8216138cd37327350251924c2df2603d539bc91c3e8f22e2f38f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nordea-web/ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 366bacc3988f49deff2b60fae8cddafa449cc7e3df8475fd364c974bbfd7e7ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ncc-fonts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0dc78eaeb84c645221a6f51ea2488913faab13484c8be0761ff46b7edb4c698 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ncc-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47e6426d64d44f277630e33c26db683f2d8cc1c043374a88ed3a484c84f7a242 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ncc-hyperapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9647de0608c8fb354bb4e857f6649f8e617ae5e05055d108cc6ae44f9427897a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11338 Malicious code in ncc-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47e6426d64d44f277630e33c26db683f2d8cc1c043374a88ed3a484c84f7a242 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in testsetset (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7e0887bc4462a3a2fdae3c468f85da3352d2ae5a196bbbeca6cf072caf5e3f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...