Malicious Package

Overview @shopify.com/shopifyql-parser is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview shopifyql-parser is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in shopifyql-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22c1e659f820da451cb67b3bf646d2511ccc31118a06138dbe97687430e7bbb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48463 Malicious code in shopifyql-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22c1e659f820da451cb67b3bf646d2511ccc31118a06138dbe97687430e7bbb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-34999

Malicious code in shopifyql-parser npm...

EUVD-2025-34998

Malicious code in @shopify.com/shopifyql-parser npm...

Malicious code in @shopify.com/shopifyql-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a2bd69260e57b66e60b0e7aa07aab1d645f5cb9c42f30ce261b119e51f92ffb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48461 Malicious code in @shopify.com/shopifyql-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a2bd69260e57b66e60b0e7aa07aab1d645f5cb9c42f30ce261b119e51f92ffb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...