Malicious code in mkto-flow-lookup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c904169f3ea79a27da86e03cee022e92ff39831a877f13f17594bfe89ffab7a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48026 Malicious code in concurrent-ruby (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a9a44087853b6fa03aa9a4f09e51ff827a6d90b6fe4da7c38cc6ef2764ad99d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pb-digital (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 399c96f79b4c7c55dd2c9b4ac41c7fa11d3d1cbf26fcc0e1dbb1b222937711eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jito-proper-excutor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5397e87731c5d42672f0ac041fb0935695b96a2b12b83eae8c7407c247eb0f52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47969 Malicious code in @pumpswap-sdk4/metadata (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00e7cebe75e2b9e547a927e980ce03c494aa875762beaba4541eb71ef7222566 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in orvlllcj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ab4b3c617ed2588b83e702343b7afb883c2f26a6b15cfd1a269e7b928a22ea6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47834 Malicious code in react-repack (npm)

The package react-repack was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 038fe89fdf3f2220fd47dd19c5464b9fcc0b3f60c5ad14ed468d2d1da9909de1 Any computer that has this package installed or running should be considered fully...

MAL-2025-47530 Malicious code in @sev-ui-verse/banking-models (npm)

The package @sev-ui-verse/banking-models was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56743250cac97b219f4137c848e408b6203b996d98ac504aefe79400bed00e37 Any computer that has this package installed or running should be considere...

Malicious code in @sev-ui-verse/hooks-and-helpers (npm)

The package @sev-ui-verse/hooks-and-helpers was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1049160f2e90aa1d0d8bffb031d38446873f5a0aac9805e51720e06075e0e582 Any computer that has this package installed or running should be...

MAL-2025-47205 Malicious code in str-validator-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cbae0fa7ec3f4325516d97436685965bc1ff6dddaf218710407f697497c579a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47211 Malicious code in tailwind-configs-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eee3c791a92600ef66a7c4165e740bfeda8da8dad109a35e6db271d6fe07caf7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @self-sell/components (npm)

The package @self-sell/components was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aeb15f4ae1c1a830e2fdc21bd8a903fe2e14978eb9952f1e5b3f98f0ca7f353f Any computer that has this package installed or running should be considered fully...

MAL-2025-47035 Malicious code in @liquid-web/guards (npm)

The package @liquid-web/guards was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff39fb3d64f126121b204db1daa7ccf8738a1cc5d70406735a1a9fab3e983691 Any computer that has this package installed or running should be considered fully...

MAL-2025-6358 Malicious code in @video-platform/react-osd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1da44cdfe8c5208f12300bf0c4c194e63b2c04b4bd437c4dc12886e9a2e8169 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6378 Malicious code in vite-postcss-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3ccfb9649799b2451c498f5d749045e87056e774d48d5463c04488ec58620fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6372 Malicious code in real-socket-rt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 897bfab5a2a7a305ab43ec0ffd356a56000463ad0f0c9c77731d1aa197aca121 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6363 Malicious code in json-confs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aeb598462f7d5aa755a41083007142a93c31fc7a61b70ea43c88dcefdd53025f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6342 Malicious code in request-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 240e3c0e344b97358f5f4788bec6e5e1e1466f45e62d14e98953182412e0827f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6333 Malicious code in solhint-plugin-lido-csm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4e1653573c57f50f3e9d72fc8293e9051133742e8ea749ca7dda26c7eb89375 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6318 Malicious code in testinghs (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9769d7e7fcf228fd4f1667968ced173bd9ba1ea9f2476bd11055f71c461b832 Any computer that has this package installed or running should be considered...