MAL-2025-18719 Malicious code in down-tanker (npm)

The package down-tanker was found to contain malicious code...

Malicious Package

Overview @b2bgeo/tanker is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package wa...

Malicious code in tanker-ts-i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 522cf4fc46b1f24355d942f42a20f8981bf0b260bec099157b4dc2a11f14074a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...