Malicious code in gatorhelper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54f5990a3f959ce168ab7ece44797a63a5a61024f2783572d773da2381b47e88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in live-reload-on-error (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b7d87f94e77b603423e5ebb9e62f37541ad355708d900e33e0442210ce70957 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in js-focus-within (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e58e32261d804de32d0431893480c6ccff46b04a4f50f48bdb72642f0fe5269 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ethers-v6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 771d1539e3c3eecbc3411a9997e602a2fa8deabe2fcb88956e29d8525f8972f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in apihost (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db86bf96ebb268d3b0c11f456ca9b45669fc71ed912b5fff5eed4163601ed846 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ember-cli-deploy-secrets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e75fdf3524b33e98181630b607b31f8d9f45b24cbb04270f207e335761cbe88d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in decline (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac37f89d973f66d0ea1d5bda82291d0a59d9c2e008775135c2dcecc422d92ca1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bn.js-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ac1efa94d945e3a7364888af7ae4d39354235d03bde092d89dcb56650f276d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in unified-help-center-alpha (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a76f48c6cd4bfeda98c49e3c091e319501f5566227f6ad6cdb654c193fbe7582 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in slowest-build-nodes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99f289163f5b86c32755596d6994cdf618b497111e781d5ab034d64d248d6b4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pulleeelll (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6b3173a308b5738e4e3047a8125b432486042563101678e0182e95962b37f20 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ember-livereload-indicator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 205eabc38fa6c38df3ea030cae6621b16235960c048a8eba382c821863c91da1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in page_colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4263830f03bdc8ee0efe3cb0a419db9752ddf2c3f056b17182d1c8ba2b1f62ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bajkvahzv8allnltvr7x4s5hdxkjvyji (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33a3ac75333df2fe3d27eac3d771269f45d3567ec6203fc00b8e9b9234897744 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wistia_namespace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f82ae719a2b710db94689584e2851a2140f781e274f26736bdd98ce07a54adef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bn.js-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4eccbfe4e4b1d1f41ac92b7f2e636fc3fc43b35561b3d574c024d5f13ce292d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in canvas-to (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20ad4ea01c4d87bc2fa2e6a27121b03d234dcdfdd8cadb702cb0ea28790f3ab9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in time-to-reload (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae5b3b160cee5b4b48fd61cd4b3b3e8b1c97118b1ffcb0895fcd656d3faea62b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in datdbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3722aafe66ac2c253aec711db7cd1b2d0604d326c1520278ed712b02242e44f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in confetti-rebuilds (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f2069e994966cd4c815277183b96ea19c7874fbced968edb527a4ba7a2d0697 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in columns_changed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6a08e84a962626aa6160a014090e1f67a42caabd34a527838659c8db3e5604e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in impv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08ab943364555bc64aaa5949d20cb3976e5a47af1429a885373b91cf17c3f4c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in srgb-linear (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 161f0f8d0598a57e1dde7ecb119f308f82a1bad8189fe8dce4bb88547559f588 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in broccoli-watcher-siphon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 045a48ee2e7fb0e492e451c0144cf9b6072f56fcffa8b69808b7cf8e3a0f5b10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fcogvspgigatanzcydfyvgtjhvxibyau (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d987ceb34687d7e3c37233198705c5db7f3ba49910be418829475c475d20b21 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pullingpackaged (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ff278946b863ce1334fc8565873bb2baf8f720e9ce156a940e407560677a6d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pullingpackageeee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0eeee23ed9e5f55520bb0d6712d26704bf87dc9badeec3180c33a6d2eb31cba9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pullingpackageeeeeeee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06c2af921e85f8ace3d552a18ccb5878291423bb74dd7ac4d26ca8dfa5bfeb66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pullingpackageee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77ab723570d52cee7414fec303ea92c8e373a39274923acd41456fb26832e30c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pullingpackageeeeeee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45246ee20e180e2fad7d173c631adc54422700c677af4295a9624000fc6146fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pullingpackagee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d72c36e7d1f592e7ea21cc7aaf3ae10e22eca202c7b2ae7e3cab34f08a5ea32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pullingpackageeeeeeeeeee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa6e0b845a57f0b93fc4c94f5fcd848ad4208ef9c5043784b3f36b00baae782d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pullingpackageeeeeeeeee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f91dfa4ff998df4408f931ab845cd0e8ee28ea87257ee5e16a9193be3182e851 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pullingpackage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9313a7f2668469165ec57294f516576c2931233838685e0268d818ffee416cad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pullingpackageeeeeeeee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4224e482494116a176cc3738e50f3678bf9147ed6ff02a6720d890b6e563549e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @dotconf-pro/dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd637311af2fde11d791f9e88a5b58e602a1fe9f1ce5b91aa4780f9a09cb8ff9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @dotconf-pro/dotconf-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90ff28cd8e4235c7ea8692cf94b983e6ad3b735a22dac76f8e67d4a1153c7449 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rumjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb5296e68a31e1b0b076ac2f39cf7ab597f90a4582ff9072395f0b57834ed6d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @404c3s4r/testxxx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3bd0eb9a43f893d498f074432357cace7974802e77750075976412a8300599a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in svelte-metric-map (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5d0f66d6a4e75bb3a03b04e75344d5c508e3b5898d4d1c6342a2df100f23672 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in streak-metrics-math (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a913fd5a875b9f4d9e28f9dad275141e725aa3ed6c2709d7c3744fa998264443 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in streak-metrics-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae3b140d6072d259b286e7487a69cd3babe3855ed26add10dbf664e9ac4aecb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in svelte-streak-metric (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04555eee9deeeb9fa303f67f82f7fb8e3cd6c36888c6898a463ae6103ab8ec11 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in thedata (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a92a93e170cd900d44df29d9f451294b09f9138882739c1f1874a2e09c4f3a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in switchpaymentsapiserv-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12fb976a9e7017cbd4a87769d48e213d81eb350767ba2ab4b7d8653501215daa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in consumerweb-risk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e5f4efb70659109081158cdf1172001c3a589dbac63414af7c04485d40e42d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mcp-search-server (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 75c59285ee1a5a83447815e7402410ccfca6a287e0c36d61bcfda3d55396f608 Versions published in 2026-07 after the package was removed by the original author and the name was re-registered by another contain a stub 'share compute swar...

Malicious code in ai-perf-toolkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 41d25387636c9b0b89a404304d079c30ad28bda33bb551e551cb9e15a75c00ba During import, the package starts cryptomining for a hardcoded wallet. The mining software has to already be installed. --- Category: MALICIOUS - The campaign...

Malicious code in create-backend-scaffold (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f749e8b76ccc1619cfe98769cfcc133208c515f14ed198115a55587b28a49951 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pretty-log-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0cf3997d4939c8ae652092b7dea0bc0dce0bd03eddf1ea5331380fad3b156f74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...