MAL-2026-11052 Malicious code in app-data-layer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b8c073af489e9e7102ec43ca525f91f88615b572d4d0b0e65c6b64b647f93ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11054 Malicious code in app-node-layer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ee5c7b4fe3a96c0832f021b47e151798e9bc55e887095c1e7d15d38d8895ebe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11034 Malicious code in eth-slint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a547e155b232bc3164db9fc1f7de92bf70a5f1ad02e277a6c9b272d47f48e00d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11039 Malicious code in yuinpm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d036e3cc02bd090bae9ff004d7559fd524b963bb47fee0a0a6cd6baf1395c2be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11036 Malicious code in streak-lib-math (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 778f96738bfdd58970843f7a128ddd925b8a146d5366306e83c3152cd3179066 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11038 Malicious code in svelte-streak-metrics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f5b8b3f2004d4b7fc0d461cf156a56b761cd77ed98c7023af0a012467786747 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11037 Malicious code in svelte-goal-streak (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e778109e3800d6e2c265494be646061aa4d3d109a7ce8d423e915acab664c181 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11035 Malicious code in streak-bucket-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de490c11cc710f708308f5078272e948fc7824c535576ab37001b9d874d35e22 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11027 Malicious code in fs-extra-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 402ae65ced8ae836bc92edf3622ea0d96d25d99d088d289481cd4332ddf1e38d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11024 Malicious code in create-kumo-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0ae70168cf816c36428f7c33d9beff0f159fbc6cd23b66eccc375e94aae4985 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11029 Malicious code in lychee-norm-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7ad5acb0beb469a4f953cb1e1adab206bf03ad18d45c11b5cb895b1aff79114 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11022 Malicious code in aio-commerce-lib-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9479591a21dd21e28dbd04aaf239e1da57eae40a248247d8e270d8e6f1278fdd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11028 Malicious code in helix-deploy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88a382e4c69ff8c5502f735bad1d59e7ea76ef65c55921193fbce8bdac5f4d7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11025 Malicious code in da-sc-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 529aa128042d1720778ad1affadb1568f6bf39839a2874682db8d2f55a3b15f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11026 Malicious code in ethers-packge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 534b72f9b5ef702509f5868e85ff740c59e1e6c1f871ad0999253a062254aacd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11023 Malicious code in bs58-88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e251130fcb84c2b20ede3b09d95f501bd3b593c051cf0f95d6beba9b11949a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11021 Malicious code in @bcryptln/bcryptjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d8447904424d1fd6085c58e7a0adec80bad268c96395c885d104ee80da79c2d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11012 Malicious code in encryptstringadmin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e862c6a1d5cf9a77c2060f767e7144e9a73b77913c801dbf23f571ca5d3e054 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11011 Malicious code in encrypt-string-ttak (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb8d4c8e562697925ed58fe79611f3adaeb70f5143c2b78ac1dce0c5e501c441 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11014 Malicious code in kijai (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5db4f6fb4cd8bc8073e03771776ba865f51f852120bd44162573774905ccf22 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...