MAL-2026-16085 Malicious code in crypto-validates (npm)

[email protected] ships a dist/index.js identical to [email protected]: validateinput base64-encodes its argument and POSTs it to https://raydium-clmm.maingoal.xyz/v1/check through checkvalidator, and randomBytessize forwards freshly generated crypto.randomBytes output to the...

MAL-2026-15999 Malicious code in parallaxy-img (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a3833ffd1c1a768f35c02741d1f1414ac2f76bf6c6b7eca7f3018d07becfcb3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14789 Malicious code in 3layerdipstackjj1l0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 802aadaae3993d59085710261543816ec373731aae53abd0988abb84bcf16d29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 3layerdipstackmjm6e (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5549e5a54fc48dafe21360ad6dd2c339d0201e5a836fb892c81f7b3e17a7badb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 3layerdipstackcbatl4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a30def8fc50c8441045d1cfd0336be80147068e7396f8acac04c34d24971b9d The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15123 Malicious code in classlink-q2byg0v7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7661fa13558825a8dccc298c8ed3d9e4078435b4f5bc617478e9c958193b0865 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-5377 Malicious code in @doaction/shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caba10985bd532eb067af52e175856a72552c9b9306895ea9fba9c1083277248 @doaction/[email protected] is a dependency-confusion lure that exfiltrates installer environment metadata on every npm install. package.json declares...

MAL-2026-531 Malicious code in hackerxhj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d71044a886ff501da7e6d3e47cad40b8472b1f02b72f7dc807879b2d780f037 The package hackerxhj was found to contain malicious code. Source: ghsa-malware fd149c69b837b189dff0b260bd9ca7f30c03cb192bea4f83daf0465322a1ec13 Any...

MAL-2025-191041 Malicious code in @oku-ui/primitives (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48684386017546a6d1cc3afd6317d995fe7edc730db2789b79af9135d8f88191 The package @oku-ui/primitives was found to contain malicious code. Source: ghsa-malware...

Malware in mad-3.0.1.2.2.8.

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in redirect-colaux

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in redirect-e761hq

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in oxrvxxaslllcaj

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in zdachboostv1

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in react-lovable

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in opti-tools

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in capacitor-plugin-ihealth

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in tbssnch

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @rxnt/phr-client

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @liquid-web/external-cards

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...