MAL-2026-10858 Malicious code in @gocortexio/npmgremlinbox-typosquat-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 549eafb217d88c4caf074d8a74e4dc3c2e49f0fc7fbeccb2983eb72bf05fae68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10815 Malicious code in @gocortexio/npmgremlinbox-copyleft-next-0-3-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf6ed48efe682ebb1ee6a19edd4529a25aed3c46f8fb6686228de074a424a4a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10854 Malicious code in @gocortexio/npmgremlinbox-typosquat-commander (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c49af3974e2d4e9ac4f2118230b82c0fbcca062f8b45fa85b792ab6deb516787 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10839 Malicious code in @gocortexio/npmgremlinbox-mpl-2-0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fee530f600c3dda2f184f9f4cbeb4dbe23b98fa5c6e426e89afceffadce4175d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10845 Malicious code in @gocortexio/npmgremlinbox-polyform-small-business-1-0-0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0866e7aff8ea636693be1eeddf556d478e3445fee6eb018cda424075a73f1434 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10817 Malicious code in @gocortexio/npmgremlinbox-ecos-2-0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9156487569a85a9f3e068cdfcbcb092d83547b220917962252bbbe54983cd15a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10812 Malicious code in @gocortexio/npmgremlinbox-cern-ohl-s-2-0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22ddcc0f57aeab54d998e596dbf40296544f7c8ac4d6feb64ae414f81597c6f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10827 Malicious code in @gocortexio/npmgremlinbox-jpl-image (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba27e14255b949c635452dafe1c837fa1146d33e5f4261ca7b5441f84e2fd388 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10826 Malicious code in @gocortexio/npmgremlinbox-hippocratic-2-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d13f8be8bd96cc8167ca9ad536b00b72d817c2acb8f6c8a93362f2e932b5e63e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10798 Malicious code in @gocortexio/npmgremlinbox-cc-by-nc-nd-3-0-igo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fab67244a2c791ff06e830004b8fccdbc75449d2c0b85b15b9fa2e2fa995f676 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @gocortexio/npmgremlinbox-cc-by-nc-sa-2-0-de (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b2ec8b494d13d9e9c582f801e1fa46d371b6810b130a93614926880e26b4bcc Package @gocortexio/[email protected] was scanned with 4 files inspected. No a static rule matches and no behavioral findings we...

MAL-2026-10802 Malicious code in @gocortexio/npmgremlinbox-cc-by-nc-sa-3-0-de (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68161a49a3b8e2933eedf9545f29048260a979f1a2c77dde57c806c9ec7d0179 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10792 Malicious code in @gocortexio/npmgremlinbox-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3905018e59676370cb9b0ce2f68f53df18b3ca774fafd9445bd3ce202ab0249 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10789 Malicious code in @gocortexio/npmgremlinbox-apsl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea7d3ddf2b4ebddd380dc96c807b2288155f0590b0260471b11902d4a0f66dcb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10795 Malicious code in @gocortexio/npmgremlinbox-cal-1-0-combined-work-exception (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76e5b6e244c7645a990797de600bbe5b61534485f8037ec0b8b865a50c10b523 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10794 Malicious code in @gocortexio/npmgremlinbox-c-uda-1-0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83660c96e8a26e9d1536cf10894cf347defb7ff139add7b3ecb738ee69029dfa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10793 Malicious code in @gocortexio/npmgremlinbox-busl-1-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fde0f39d1aa2fb79d17f5582fc5044520af5bbbc864b910954b1476eeb62b6b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @gocortexio/npmgremlinbox-agpl-1-0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35ec6a36621ce352ab4510c339ef6a7367f88584b90ebfda17149c79dd947c66 No a static rule matches and no traced installer-harm behaviors were identified in this package version. No lifecycle-script droppers, hardcoded...

MAL-2026-10786 Malicious code in @gocortexio/npmgremlinbox-agpl-3-0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d73fb2c55c8b46079aed067487fdfbd542e8308ed577463f7d9ab02a7c06447 No a static rule matches and no traced-code findings indicate installer harm in this version. The package artifacts show no credential access, no...

Malicious code in @gocortexio/npmgremlinbox-agpl-1-0-or-later (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b9f161ff7fd8e7bf1fd1496277f6839c49d06cb7dd0e6daf772a019fb46b1cd No a static rule matches and no traced malicious behavior were observed in this package version. No credential access, no install/import-time network...