MAL-2026-15980 Malicious code in ens-namehash-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14b2ef072c91f8f3543ffbe2c1058ad379782fece91aac0f3cd1eac6a931f60f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in html_vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb1617e904ee9a3f603febf67c0fac2f7a3c80032d623015264de2daf983e64e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in btree-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 180c50a02e5bbe5a57f622112bba7f7b01becd6cf85f6d9d4b8301699f4334b7 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in @yane88/listary-02 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c557592d2b0b567ac07c3a66d9cc87f2bf6efb6b5646356c5d58afff3391f79 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackkrgcjq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10c365be1bc5f3241edc2e2aeb5f9c28cf6ea5dbaa13d255cf9b104f68ac8b7f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14807 Malicious code in 3layerdipstackkxrxle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4de93c3c0b2a20ceed6cb7b1eca4cba9f10d31ad47c6f110845e49beb086207 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackjgfism (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5d88eb72e402d7524a8f312983f9fe9797af090ff007603d1a6517487e03b2f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackoi4dda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69b53d12237157e6881552333f5ead22f5dbe308d52e50157f5fca9c599c6415 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in classlink-y9cjgg19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 905639c486d2a08627353177755f34d252d8abb814812e145dc834b6a6ac3be4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in classlink-bjd009ch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7700d1f0f3afce5c123c025b29a59e8c3fc5d18537107b688387bee54a0e7f95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in classlink-qrvgupip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72cd08c43e170ff12e4ca338187ad2d47154b369019ea0f7f6e53498d0c0ac14 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in classlink-05aivir0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e04f95b10810efc3d09683a6cf2512a5d5c3e9708f91417e1f7782012f89144 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15000 Malicious code in bluebook-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38ae875eb7a2571ff079de4af7c26c528a2ba047aad581ffe80fa27bfbe5d0d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in secure-test-browser-eeaoqmwm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2c6e33d6f611c44dd248946e690b9f1f931240dd1e510ed11f41362f1d584b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in secure-test-browser-14vzjjd9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54be0ebdca888993c9133a7c009b17b47addab0972bb551de590e2806d8b3aab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in secure-test-browser-5rybpaky (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ce251182ff2812e232102567036c4f8284ccb2130017da1924fb99d4189024b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in secure-test-browser-sq08t0fx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4dc3133b3d77313f2608b12034b1e452eb2963c57fda97b0931a9e8a6ce1b297 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in schoollesson (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c019b72671bb34207fbc587803e391f42f2fd3148c3ac941d9a8cfc8468a7e8 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14005 Malicious code in path-match-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7606d3a4e2ac3f49313aee20db3419de70aa76e17ec213031a0c3b6a62110273 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-13924 Malicious code in internallib_v392 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29fa6db9e4a601df500639714e53f29cde2413c54a6ec31ea6bf38fbb0aabd2f index.js exports a function that invokes /bin/bash -c to curl a remote reverse-shell script from reverse-shell.sh and pipe it to sh, targeting the...