MAL-2026-11374 Malicious code in rshell (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5111add8e3d97e54c2903e39496ddb07c74aa68af8e7f0f1bee761c320dd7ebb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11321 Malicious code in inkalabs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac5e255b6612d092b73d6781e2ee367bb9448c59c39b8ee492f1afb25db5fd53 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11318 Malicious code in ideascloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b720d727d5e8a440d3cf4d8f6674d2352e864352fcd9958f2f95f291af734368 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11305 Malicious code in express-test-dependency (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1347a031977c76d8945813d129567addafb91c3bdc49eaadcd329f61ef72304d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11331 Malicious code in merg-descripters (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f76e5609bceac9f395143e5329a0187c6ba35512bf453587bc2fe114622508b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11212 Malicious code in @goodjavascript/dotenv (npm)

@goodjavascript/[email protected] published 2025-03-22T09:05:32Z, replaced by an npm 0.0.1-security holding stub 2026-07-30T22:47:55Z — approximately 16 months live is a two-file package that impersonates the API of the widely used dotenv configuration loader while running a command-and-control implan...

MAL-2026-11280 Malicious code in discord-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3c1bd5721d48e92da2ea3b06abe4b3343f6aa6b48224534c89c04d6a8252cff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11278 Malicious code in discord-ms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 203ee4d21fc1df2921367505b508c20e236b7eff515ec18e76ba29d22db661bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11327 Malicious code in lodash-ex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18ddc129136b388cfe448e3253a312b7a54ddc90993e77f4e91fd859b08fbb47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11320 Malicious code in imut-set (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5bd7ca3cbe4743cad9e7368e601776bae62d8de0b6439b33a446efba71d12b3f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11235 Malicious code in ag-grid-boost (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b48a0535bdc8dc48399716c0e05646161556ce93b7b3cfeb7ba095e9bc3e1df5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11365 Malicious code in react-ag-grid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97513e8d4f7818787a09bd36b9c59997b9c98aeb4d731662c4092cb37fe9d687 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11396 Malicious code in test-wastu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee1eaffc68579d642bdc5049b55da20953cdc0fce2dc32f42669561a02b3e590 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11409 Malicious code in wastu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26843486e6e98f5c1b076652ee95edba8c2ddadbd138b28c8adfb5c3301c91f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11377 Malicious code in scol (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea99a3f3b1743882b257e9f10fe8ce5575c81f7ce1a439fb5a4da12ead9b1e5a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11248 Malicious code in blbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4116fb9fa0f1722871be8fd4fdc1d54633acc0f32aea0c74372ed72b2a147d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11384 Malicious code in spectral-corsair (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7c77441a8038182fe252b5782f82b900831bb6e4b598944ed0edfb4093e5fe1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11232 Malicious code in @spectraltest/loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e1cb56f359fd866bba1012e19f4ced6eba1a428ab4cd7f5c9696753fb921a25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11272 Malicious code in curse-dependent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6342746f5661955d0e66fb46f981245d41062c23e1209f3f2b62dc469638a41c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11287 Malicious code in ecto-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22c8d3b7c34470a9fc4d565d8acfaea51246e1a4a88ca0136679fd6390af63e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11412 Malicious code in zcas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5d5014de4102b1c6d4a4f5b01f55b1dda65bf7585bbb6adf3d89bce7967964c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11385 Malicious code in spectral-wraith (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57eb03a60917ac9bb4debf56cafa90c96dfec3aab8efc04d2c946a1ac6ffceac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11361 Malicious code in puppetewebr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d670fc86263b8efa05d6e9daa48045f49f3b244f0c7cd3af2c3bf9ba84c01dd9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11301 Malicious code in etwl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e526e1b1272a9b3c18948e466b5380d199c4a81ff4ecd198c2ec0dfa2d69bfe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11348 Malicious code in pretierr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b8771f0007e8eb7129ce6179a40f29dc6e8fd21be16535db83df93193c5ad5e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11330 Malicious code in malxios (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3cadf321b289a01aebfd33821cffbdeeaa827aa5bf4c110eacdf26b6b7654197 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11329 Malicious code in maalxios (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f5c4c2541793c51a8a3384c2f177f415582471318bfde6971e70a8bc4f630ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11229 Malicious code in @sourav_chanduka/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bbbe9ace74d41144457bc1461de476aba591b24b9fa879326c51705df276e157 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11231 Malicious code in @sourav_chanduka/oidc-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4eccfb81c0b46c35e5a20da8b2510d5ac3d6f1d0b0f4b4bfc26898664c9f4690 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11230 Malicious code in @sourav_chanduka/core-no-ngrok (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3cde51a882f2a66e53c2a19231a1963c78555a63a7e2ea9c8e23b378ec072bd1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11234 Malicious code in @web3utils/common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba3a3a1b390694579fc5d75ee83e18f9b378d1206ae499c43c744c889d3fa862 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11233 Malicious code in @web3-util/common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b6c5241d80dc8baa902550a561e37b238c483430f8c7b186abe033d11f8ea34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11228 Malicious code in @solana-utils/common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware abda158dfd80788df38b2221a5a9715eb7d6bebadb9569cfc51774985f39b0fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11277 Malicious code in discord-csr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 830c0ff21018fcfee625d241dece766b6c8db87e891ba9fbcfe567a01ec1447c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11279 Malicious code in discord-rsc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe42cbd8f14491953dfd5fba0580e2025ef2f1f7cefc3826d9997bec6f059f29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11394 Malicious code in tailwindcsssss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af681f5b2be3907532228afc7f56cdde00eb0b8650993b033ff9eb165ad834d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11393 Malicious code in tailwindcssss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0da18df9b0c152f27cf8431c3ac342f3dd15d7a94ade13a40a7ee7dfcba1614d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11216 Malicious code in @node-console-log/log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17c7960f4102ec63a2f4a105b1fee65edcb12399050dbeb3b94c7c6b6a1fff61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11224 Malicious code in @pumpdot-fun/pump-swap-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76046e38de05fa61bcbae6bc4edf1a1e6b704f7c99e4ca8e57a16bbe06380dcf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11225 Malicious code in @relforce-dev/console-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdf30366d8098d04f78ab20d628d2e82537efc7c80f07c9d89db861a343a57f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11223 Malicious code in @pumpdot-fun/pump-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c408c3350082bac3e0fcef5878dfd9a618d3a5f538ed6c6f1b6fc4abf2832ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11226 Malicious code in @santieich/homebridge-midea-lan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c707aceedcdd649d0eb71ffd5a1d4ad46f43886869acb7be92d8a14012eb69db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11314 Malicious code in fwf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67afa7fe22e11e200dbb0a033b897eb7ff275ba6b5c33ec15e1371bf1b8feb08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11309 Malicious code in famshot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a25590ceaca7a7491267e3152f276e90e1d5dd7eee7f3a86bee0c2b7666c0427 No a static rule matches and no traced-code findings are available for this package version. With no concrete behavioral evidence in either signal...

MAL-2026-11240 Malicious code in aruda (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d223eebb0aaf9ddbe61d2b227b5d94e08fd4bc37fd93c55f025673a36b6f487 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11219 Malicious code in @patternfly-4/quickstarts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad5c84bc12cb0c8215b572e242d8268710430f7bb4c16d7ce4ac25a072cd39e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11220 Malicious code in @patternfly-4/react-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5f54e5643951668f9122f9909e456f67938b47d7ecb0cddf1fde02666a66ddb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11221 Malicious code in @patternfly-4/react-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d910906cc783762621ef10ef92572495ce92e5424903edc1245045d2092793f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11222 Malicious code in @patternfly-4/react-tokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af8f4323b56b57abb05cba88f31a1c04f8fbe92935757e681460c6d66f032e96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11339 Malicious code in node-fetch-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ceb74bbe9b7a8216138cd37327350251924c2df2603d539bc91c3e8f22e2f38f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...