Malicious code in @vaultflow/create-flow (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b81295a1f555aeb9d4dc881826920dc2d298aaaa65539dc30aa8f3b01031246 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in demo-awesome-date-parser-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dac7edbd7a941a69901501e2f602b37a483dde93aac9af9270f146fea0e7992 The package advertises itself as a date parser but the public API demoParseDate performs several unrelated hostile actions against the calling...

MAL-2026-11053 Malicious code in app-data-lts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82f35120670504586b6090e4cac9dd795b88170e1da09a6f0ad6955b665a6cda Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11033 Malicious code in eth-codergen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69eee48bc43bf04d3a35021657809e8e2615ae84250ee1e7b229175969807a25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11013 Malicious code in encryptstringadmincore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fb9468e3d6f153d718527bb4350b6593d64b67cf16b5b81cdf56e4781d1b483 The package's main module core.js is heavily obfuscated obfuscator.io-style string-array with self-defending anti-debug and control-flow flattening a...

MAL-2026-11018 Malicious code in veldora (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2e3a6a16c04af92c19ea149ef526996cdaea7357b931cdbccedffd6237f598e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10983 Malicious code in svelte-streaks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b07b98d6a7986da479ed75708e37dfbff0df7a6ee136f7dad1db24087bed2cf6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10987 Malicious code in react-tabulix-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7304f03532008ba586815d08fdfa9fabde3615481804901bf96cba75fa38a1bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10928 Malicious code in upjsma (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25730cd7d45983434b20869fb88d5b84fd468d20341080c44adbc2c53778cb3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10854 Malicious code in @gocortexio/npmgremlinbox-typosquat-commander (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c49af3974e2d4e9ac4f2118230b82c0fbcca062f8b45fa85b792ab6deb516787 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10844 Malicious code in @gocortexio/npmgremlinbox-polyform-noncommercial-1-0-0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 468bf7ae3a725d97b503a456cd1c3baa627f82d8798b6ce91acad9f0dd20e9e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10848 Malicious code in @gocortexio/npmgremlinbox-simpl-2-0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19cca0040a0e06465540014785a7885bdcb84de6915594fc7b1802db431e67ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10806 Malicious code in @gocortexio/npmgremlinbox-cc-by-sa-2-1-jp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66b1f86538204c3996ab56915ddff5fcd4dc9f0606c097cd3d03e17c8e89c4ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10781 Malicious code in chart-animation-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a17f53a8a6915954e34aefd5d01ca4644d7185a1214fff4960c30d9a8c2f19ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10772 Malicious code in axios-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 875e8547c13db85f724103efc73f856833092ff7bd56aaac0780da2dd40fc4e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10695 Malicious code in ai-p2p (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51af066ded725d3f36b41a5c4bdf9977a7976293b11fef6c4c63ee894c1f5da2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10658 Malicious code in @sauruslord/eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7572befaa64e1e08790af3235ffcc091d379158bf1389c1be9c67d30e3d205a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10659 Malicious code in @sauruslord/libsignal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0c2cf2672d98396a7b66cb732741d269732f5faae72293ea46e06b879e7a45b Package name impersonates Open Whisper Systems' libsignal-node but ships unrelated code. On require of index.js, after a 1-second delay, install.js...

MAL-2026-10662 Malicious code in ssweb-wp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cdc75de95852418c3d695299d52199b24e52202b2e5595089b3107a73c1e86b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in sauruslord-baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 474b90ec19af5dbbc5bf3c8d27c0c4d079c7d980d6e3316dad3bbf5682abbe52 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...