Malicious code in @grua/icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1eabb3f38128e34522c4bca5893ed0e64bcbc213ef2f617cce26e584c220c037 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in isix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15a2f3573252bd11418bee1071c2c055972d968f1401261f8c227afc249c90c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @ethers-sdk/ethers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e6d5bcfe574a6eecbff6a32c084a7abd43660939adafa83c7097a96d1ca791f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11210 Malicious code in @ethers-sdk/ethers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e6d5bcfe574a6eecbff6a32c084a7abd43660939adafa83c7097a96d1ca791f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @solana-sdk/web3.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54e9ab1fe2590a2edf0b546231e23d61330ae2f1ee76f31b4df9afc8e4087d22 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11211 Malicious code in @ethers-sdk/wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38a8c103dc06261576987809af8a1deb696dfdabd93bf4116f42ee199ee77cc6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dotenv-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7926abbca35dd3e5fa6c841ddff70fda3bc8330d2e427fe5747a23c264a4f45e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11267 Malicious code in compose-logger-stand (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a34de797bc2020fd52b9b36fda8513a111610612c3a50e75d8ea8a79440be4f0 [email protected] presents itself as a logger but its shipped code implements a credential-harvest and exfiltration pipeline...

Malicious code in compose-logger-stand (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a34de797bc2020fd52b9b36fda8513a111610612c3a50e75d8ea8a79440be4f0 [email protected] presents itself as a logger but its shipped code implements a credential-harvest and exfiltration pipeline...

Malicious code in ember-cli-deploy-derploy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92ef0bde2aabf74dbd75073a6cb7ce71165ba8fb32dec2e49f707337becea0eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in time-to-reload (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae5b3b160cee5b4b48fd61cd4b3b3e8b1c97118b1ffcb0895fcd656d3faea62b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in canvas-to (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20ad4ea01c4d87bc2fa2e6a27121b03d234dcdfdd8cadb702cb0ea28790f3ab9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in build-time-metrics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware feae498c1a766e86bf16277cb25155aebc829bba8df487a86f88e7e66c1caf64 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fcogvspgigatanzcydfyvgtjhvxibyau (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d987ceb34687d7e3c37233198705c5db7f3ba49910be418829475c475d20b21 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in srgb-linear (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 161f0f8d0598a57e1dde7ecb119f308f82a1bad8189fe8dce4bb88547559f588 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in columns_changed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6a08e84a962626aa6160a014090e1f67a42caabd34a527838659c8db3e5604e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in d3-bbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f44d2af489d00e9c5d4afb273874098491e2b6dcf362489ca10229f337a21005 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11411 Malicious code in xp-node-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dacb3f21efc94ccf0bbcabc232b84f156d79b073feaf3e5bbfa40bbf998ba1d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11244 Malicious code in bajkvahzv8allnltvr7x4s5hdxkjvyji (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33a3ac75333df2fe3d27eac3d771269f45d3567ec6203fc00b8e9b9234897744 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview avenshared is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...