MAL-2026-18041 Malicious code in ysqp68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4080a0801e4e2fed76d03a11bb60c45323915b903c96e2af5a3d870fc257a7ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18038 Malicious code in v49yzy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 767c6672117c943e3bc2ea1b963cb88a869de9eabde8093d0d49bd39e0ad253c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18016 Malicious code in gtjgd4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc5ed56bf8c38af63f2aa720dd871cf004e7479e09ac5131a96479d6e4f2d6ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18019 Malicious code in j5opb7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed97bb84a3c73d0403281a21f9d2caffa8e3f79d45e9e7d581ae17a97366aae2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18021 Malicious code in ljem3j (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3e7cbc5656a0a8eca15c71cf907b4d9c9dea139e65109c0bdc874a26de1da7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18022 Malicious code in lstsyw (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24aae4779b01bc55ca1517a5cb8a293fb271fdc84d0faadae42b7cb5c2d0ca22 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18011 Malicious code in f4iomt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 990d68202ea212791aeda4f4caf3430e61a1e66b74cd959f19483c69b3a98134 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18014 Malicious code in g8ez1y (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 856f3df734d3c4ba733de7d080de9db9101e58ada25a85c5ff2f2de31e821105 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18015 Malicious code in giu094 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82cbb3699fc86885bad3f6a6872727cec88b754d3b996648eb6951944ce27351 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18033 Malicious code in noe77e (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fcd22aea2eebb1b205ce8a1395cf700f483e7171fda32dea0bdede31be310eae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17950 Malicious code in 5xzkuy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d82ada11187121287ba6312bd27d6f1ed19d08c1a04ebb9fd22b9e20daa46ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17952 Malicious code in 8i7pp4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c623f39e0d4b0b51a05de329eccc8daa9ea567d83dc8365f3523462b2bd08b09 Package 8i7pp4 version 0.0.0-stage contains only two files and no detected behaviors of concern. There are no lifecycle scripts fetching or executing...

MAL-2026-18034 Malicious code in oo9fja (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b96948b1b1f5a6c67ebcd47b4c506f715d7c29c10a53ac3e1f91f88e9f50edb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18035 Malicious code in rhlozh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 581abeed7e461ed35ef94ca4605121b53c08e88e4b101171328ac10b26eafd48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18037 Malicious code in tkacg3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ca526f75727afea69a9783166ff6af32c1b7e7125e1bbc1c84f05c42c7ea114 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18040 Malicious code in x294tn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a573b17a36a2eefa010232802b6a7810c4a9b7f8d48acef10f93a9c5d6ea43fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18020 Malicious code in ju0oud (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b74a942f8e5dc2f877f00f310cb6a57affb188e7e977d04473a5a04b4634a10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18013 Malicious code in g23p4g (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f3777aa622f3dacc3c2613ca9e21af9f5dbd67541805fcc0536ce658bb0ec07 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18017 Malicious code in ivzlid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 148c46c6b04123cbb5fcebd9799d2bff4500222dadc3487f899fa2b3eec1973d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18009 Malicious code in esgbz5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc859130537e9f862beb7492d3b048b159dc63f238b78d4b502e94b618979607 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18018 Malicious code in j019qc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d6d4a015008723b12bdaa1902079ad606e6639a67a9b897b3f41c0b6d80911a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18008 Malicious code in down-load-available-zip-now-8238-bricks-are-heavy-0v3kh-yluceh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1126435d0e3d0827d524d5a97ffda6ba26a1e2fdae031e00b0c479d33db248a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18023 Malicious code in mp3-do-wnload-file-to-day-27091-usa-united-state-of-atlanta-xoisl-pqpsio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87c9d9e58745706fee426791a737ac7812546f610fffa36157578214e4e878ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18007 Malicious code in down-load-available-zip-now-42301-gloria-tp7wn-dcxkwl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a45abfeb77112428d6480098865fe190e7795ccb6d2ea11a07fad2bb6a531e9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17954 Malicious code in a-lbum-do-wnload-avai-lable-file-11522-seven-and-the-ragged-tiger-bkmqg-xorids (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff887d27322671592352c1e6755c4c39bc7be6f1bbb2148dc69ce2d3018a63e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17953 Malicious code in a-lbum-do-wnload-avai-lable-file-10635-about-to-choke-pzt0k-onnsvp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6fea9dc3511b8a42a624a4257e69fc68933bef239240dc0af0d030f3dc72421b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17957 Malicious code in a-lbum-do-wnload-avai-lable-file-playing-the-angel-l9tng-nkbcwn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62484d52a20094471acfd3c3c9844b7e184708ebcfdc01ec6f9991b77db97767 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17986 Malicious code in availab-le-alb-um-zip-music-is-rotted-one-note-7chcp-frcmmy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a26229d755e0027c55285fb47944159ac96997d134e56312b687538dedb41522 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17973 Malicious code in ava-ilable-down-load-mp3-today-2018-120200-young-sick-camellia-qvg9z-dqpzyh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 610da12d69e2277db16814fdc159beca04e87a596e0192e8913997d8f510b083 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17975 Malicious code in ava-ilable-down-load-mp3-today-5767-all-eyez-on-me-9vh62-ohwdae (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7797df85d43924e2e0f8273078fa2d5d7f13d0a9a9737a35f1e3318ab9c6fc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17979 Malicious code in avail-able-albu-m-down-load-almanac-tdedm-bajrnj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6fbfae8c8219b49be917e78b5668d07f23cd264736a397f20286d7219f0aab6c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17983 Malicious code in availab-le-alb-um-zip-38895-crimes-of-passion-oeiro-wmybis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed6ad96dbd7069ca7a9957cc4e638f27ccc806dada534a08f1d2428836a1a421 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18024 Malicious code in mp3-do-wnload-file-to-day-d-nu951-cjkdsy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26a72bd5e4d4d678ec021807c8590abdecbe43a46702c59d46d8282298556226 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18029 Malicious code in mp3-file-zip-d-ownload-hypnotize-kpkk0-ygzaqq (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cab30295e4c047eb1dd313b68001538fdd727e2bd49f3aac87fe67d10e9236b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18031 Malicious code in new-al-bum-av-ailable-50924-satta-massagana-rje2z-lfxsfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb64fae843dcd8efa4cdaef7780d3c036de71ecb042dd983041f13ecff5b2cc7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17968 Malicious code in alb-um-availa-ble-zip-mp3-file-470287-watch-my-moves-2zscf-aatbzj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc4c7c4064762128656fff603f846e8eca4e3458cb6bae2bee941f7f63b816af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17970 Malicious code in alb-um-availa-ble-zip-mp3-file-someone-to-drive-you-home-vbwzp-koufrz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eec79d6655ebc25ae0381054bfe1b1df8d42b7f3ef04ac88384a1b33ad6f6d65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17992 Malicious code in do-wnload-available-2016-44937-in-the-magic-hour-xgzaj-txvlft (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f7301c584b52e9def5d20a7adad87ea0289458da430777330300ffd9184b4be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18004 Malicious code in down-lo-ad-now-zip-mp3-year-of-the-gentleman-8mpja-vdihqg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ed92a17b453fc61e1425415b02c40469a9f72a1839d6a4a004d026aa668f634 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18001 Malicious code in down-lo-ad-now-zip-mp3-390322-the-silver-scream-2-welcome-to-horrorwood-4a2qf-tjkdio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dfeaf7d62b7951d7a5635f144b3833cacf9f21ca1e1aea2176fb84a51652e769 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18027 Malicious code in mp3-file-zip-d-ownload-challengers-ym2l6-mkqhum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware efccdcfa0a877966acaca73d4d94a135106e3ffea3ac962f273d7824f07def62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18012 Malicious code in file-alb-um-zip-new-mp3-32338-think-before-you-speak-9znpc-akvcbt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07720e778ecc1d65f64bd2688bc36c70006971f7d8ec6362fd76ea8988acbb8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17959 Malicious code in a-vailable-al-bum-file-101379-communion-mt1lk-dvshll (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db1398121380a70266af797842060413f11382cdcae697045a6510b6e393c2e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17963 Malicious code in a-vailable-al-bum-file-36850-other-peoples-lives-vys1z-fuucqk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1368768494ee05916af73f3c08453829e8355d20aa82105dd9716d14a5e0698f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17965 Malicious code in alb-um-availa-ble-zip-mp3-file-31673-finally-1m7lu-usrooy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 466eae2ecc93d28b1f9f4b4fefdb4f170a56a622414fe620b303ee06122e879a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18005 Malicious code in down-load-available-zip-now-12673-dirt-farmer-jn0vw-rkwppg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc1e0a3e5143137ac18e404020bbc4e46048367a976c6b0f5ad4f4e9aefe052f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17976 Malicious code in ava-ilable-down-load-mp3-today-75491-life-after-youth-hfdu7-yzwkck (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ffcae389b13920a2780e75730643b36a8d92334c04c28cc27606fe05521d6865 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17978 Malicious code in avail-able-albu-m-down-load-9815-young-americans-vygt4-atskbj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5f1e5668671737200f04c32c3b6cf14f89bfaa49d9278428a705b65ff74d572 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17993 Malicious code in do-wnload-available-20999-ruff-ryders-first-lady-6wp8i-xhznkl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 882a2118f3e2918408030af103afe95e4ee8343ba2a3fee1b333de46ae59e4a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17994 Malicious code in do-wnload-available-61075-you-think-you-really-know-me-1-c368u-jspcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af32f45e197bb094b299b6e83bbac498c75b0b46d411adbff5ed19a5312eb1d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...