Malicious code in @needsaudit/n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6597c3fd2a454df33edf83d187ebdc7efb1764c8319c3ae0ea57abcc6ee8938e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @needsaudit/nexport (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3075c04420ad628321590fb8d6c90add7dd1e2940afa1c40ec2a1e87569800c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @smart-dev-wa/baileys (npm)

This package is a fork of the Baileys WhatsApp Web library npm and belongs to the "PhantomSub" family described by OX Security in September 2026: the publisher injected code that, without the installer asking, uses the installer's own authenticated WhatsApp session to subscribe that account to...

Malicious code in zero2-baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba57fc7bb4bcf036443073304ad388fbd23b2cfff4aeebfca8fcf50baf1ee0a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in securedrop-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f10f1f6b11db2b6dd5c7d36e77cf8d83dba43ae2f4dddb06ce752beaaae5bc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in arc-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b435bceea3dca010177d87d412866993c2dd5c9e99ab31994eab56b202f1e93 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kc-kline-chart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 248c91825aeab2e07e381ad4d4816abcb644771c1d3aac0239dd99045d7f5f7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in evmos-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f419cb119fd933884054bde2a713b965f67ffc5d7b81bafe10f4d6dfeb91d9ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @kora20030101/test-pkg-delete-me (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 819b1b3a509b0b9622da5c8a176f8cc3642d5e8f76bdacbc3dda7b2f9f50af2a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @exclipz/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 642e5dee2e46ea01f45d16689f6037de36956b35e5c4c390d88c8638fd415a4e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @exclipz/bails (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8abb39c9776d322abb7f9f8fd03c769020bbdd84a7ff6e3a23248bee2cdf09e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in plain-lang (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df1ba24c92506ceefa77e3a013fd4126bc4855ccd4dbfe919ca34a241968e1e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in talk-lang (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8e589e06b10e1f613a0f257df979e7caa57034a7aa4c651550b9578aac971bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test1817 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f578c35f0e7c6126af4b55ff7c0ba2b1ea02eff7cefce6cffd571daeba0015a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @gemshell/win32-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 995d5bbf551f5d90619b3d9c6bb2d822165ae47cece8c07c0f7de919cd7200e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dsh-purge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71e83de88c6bf3ad0b5fa0afdaa7bc4b85e5084206afa3e7b99e90c9f9ee1050 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nuri.yavuz.tr.2/my-unique-pinger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d9a584d7d9890fd25a656e38f323071b7ac3b419a2050fe50452c598f78a4876 The OpenSSF Package Analysis project identified '@nuri.yavuz.tr.2/my-unique-pinger' @ 1.0.2 npm as malicious. It is considered malicious because...

Malicious code in mcp-teamviewer (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 54d27496a09fce8a393650469621dc308a6578c6cf694589bda9d4b298a6c08e Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in teamviewer-mcp-server (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6b304890f921805fe9244874cd220f54c2def48cadfe880097124afef1dc4bfc Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in dbt-adapter (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 baabd8e63cd4f6ad9e5a4ff9c2575b965d85030868aa31cc485902475b26465e Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in synapse-hub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f57819a01fb45a9343ab157eb1e4a607933844bd68c9c22425ceac38a995fd2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rcp-ndcg (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9477dba93cdb5c9d325a028365bb7c4667531c8ac9e08d563e6a9573fae86809 rcp-ndcg 9999.0.0 is a dependency-confusion proof-of-concept squatting an unclaimed name referenced by cohere-ai's rcp-ndcg README, using an...

Malicious code in strands-aidr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5f7d32ed4f94170c5bd90f8123b2b328eb13b13fad22690cce67dde42281cb23 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in @secauditb20y/sec-test-b1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dac6ac53c8961ddeb27c7cc0db7ffce9f909fc4001c278089743dc8efcd364e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @secaudita10x/sec-test-a1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e3377cad63646a32d0df81b528479fb967ecde0ba1eebf435e3adda1da96911 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in doghack-afterglow (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f23b7276730ee41471843bc482c4ee3a68f288f8e625591d38b7cc478ab68b80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in thththtbhthhth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 592383fdf95ac0e0957f7c750b7063dda5d2428a36d783277918aa7501ed63c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nannnnnnnnn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae8dcee071dacb90e806d5a7864adf0ce140713e4f83f2e6a5804b1afb1bcce3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @saidddddddddd/ggsgg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a1268262a3d83338b1943ef3df173acf8c772c4491952f40de77e34aa54c341 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dogmans-afterglow (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1622f86127a25f1b5ebeee0530d41334242f185d382409e441058956299e3c48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in heheheshsds (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a1d1c16da2b41ce6608187b251365bb923672ed0412858480e99ae43f94d8ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nminer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c898b43dd1ee0f1e9f5583261609fccdada1f1612e591381e05c64e032627e04 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @pubngo-stack/help-browser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92a89da483ef76193feafa163b5348fafe010999ac2e73154f9c9b3f33d07783 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @cdmbase/wiki-browser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1abcd7d676a10de9db64d9be6dd532ceee0558062f45ddfb5f6137cb8ba8467b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @adminide-stack/yantra-help-browser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a0da0aa5320d070b240dec07b393270995c492fb5ed23c7dcf8ae077583a409 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @adminide-stack/forms-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b9e3f519363694211241ddf83d95c5f75a4f22ef9b5f60e2e962c01f97ddd25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cdeops (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 380de9c4bebb6dbe605106630c161af02376f67c9810af146258afeabbafb901 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @adminide-stack/user-activity-browser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbb9b2ba8ffb0896aa285d4529591fddeb3c430a82f7dd72f0bd95764dcea64a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @adminide-stack/health-api-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 42e388478673b3533017aa796ce12bc8ad4dd61aa34ca7d0ad82417066573900 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @adminide-stack/client-redux (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8da55a3bfba13507a552e0ed24d0aa8ac426e9b50055661ee71ea6c951830b30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @adminide-stack/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab42798fc40b5b8c35b36e9aab872128a0a06d4f385d2aa56e59bfbf843482f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mock-datas-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7795c5ecb71c77fcb6d7630bfb136c7edef41a13036dd6ae6ebb02dfe4b60618 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kvarzo-8f3a2-testmetest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 585289d80a705650a586dbdc453c0d5a6ed2399a338bf1309dfff7e41a804472 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in data-sync-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49fd943e46e5ed64d42a0d3ea9dda036ad44eeeccf2e4b9b4c90ac243ba5bb78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in that-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28d56828b44836f8b55e591ad433f8b082433589f3275c892174bac0ac562ac6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in filipt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53f6b94af70b225ed3a3ee0edfa4db2469ca84bf27e23e46b61addcdabac9349 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in extera-runtime (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af4f783a1272f2f3b0596fd936a58e19320e6cb2c3fe05e523b8c989eb37b67d extera-runtime 1.1.0 ships a BackupRuntime class that, when instantiated and started, launches a daemon thread polling a hardcoded endpoint...

Malicious code in @pasqua-baileys/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ac7d9dd9bdb2386edeecfaeb164fdec6a1ed775b3ca10152bd3f5cacd7b8802 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @realvare/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aeedb2f87aa3e579b9d8dd2d4f011e9c9a83d4383a7fbe1baa2dcbd0ca1660b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @realvare/based (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 502a54ce6b029f4fbc2fa6ff211d917c97dd1379265ef0d2af3ea396d355e892 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...