Malicious code in iot-cardboard-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55bbfa86675a8cd534e3602af7ba1fb1f55c45cf15c8090af9ef87542d107c2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chai-friendly (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d91de03ddaa79c1b3653f7324f3c8a2041bc2e0eb7082649efe9ee495d1a4eb5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49007 Malicious code in ft-flow (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c048d30efedaea5fdd0efeaa12f5ac0fc2498a9a3ff8698af6c96566e5542825 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49038 Malicious code in react-web-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c4085854cc31bff9ffd272cf1faf16a2cbe3d67d700b330ef7d21108bdd0f05e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ft-flow (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c048d30efedaea5fdd0efeaa12f5ac0fc2498a9a3ff8698af6c96566e5542825 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49039 Malicious code in rxjs-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a3493cee8ab4bb7f4b656ed430193cea7d26bd53c7c124c9eeda99cf31ef7f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in prefer-arrow (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd4c923d3d6c399e77c6af5aa1cbd1e4712cb7bd89045f7ad31667227e6e3bd8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in annotate-pure-calls (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2a9cdca3a9ab53743de2a24b78ebb758510f58ed74ba54d5f727dcfdb17e317 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48973 Malicious code in add-shopify-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1579017bcad4a58a19270bb608486143fce58d13b9376d146e49b28bcb8e55f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48984 Malicious code in annotate-pure-calls (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2a9cdca3a9ab53743de2a24b78ebb758510f58ed74ba54d5f727dcfdb17e317 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49016 Malicious code in jsx-a11y (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69d8158b553a773a363a5a4bbce1477f430fae7a45c29fe8f1855401337f4b0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49032 Malicious code in prefer-arrow (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd4c923d3d6c399e77c6af5aa1cbd1e4712cb7bd89045f7ad31667227e6e3bd8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in add-shopify-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1579017bcad4a58a19270bb608486143fce58d13b9376d146e49b28bcb8e55f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jest-hoist (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20b09510a5986b0d378b1a5d9f7c081cd5d2bb67ad05f55090240bb0e976729e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in preferred-import (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 396bab0fa7cecdca5d48dbc0d08d0880fe906ca87841fd7eacfd43c8fb409d00 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49024 Malicious code in named-asset-import (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41aa2c9de0b9bf1fc5a9cbee9d0442255a36d349e4645660908d01b2ac8db820 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in minify-dead-code-elimination (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae32f7c04b27629bde0236a0f5931b70208313af390161f1d6564c0022d9f39c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49013 Malicious code in jest-hoist (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20b09510a5986b0d378b1a5d9f7c081cd5d2bb67ad05f55090240bb0e976729e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49002 Malicious code in faltest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76cbaaf799855c54e2fc51323485cc4fb7639bff9b5bfa58a90811007cf6b0d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49034 Malicious code in preferred-import (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 396bab0fa7cecdca5d48dbc0d08d0880fe906ca87841fd7eacfd43c8fb409d00 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...