MAL-2025-4472 Malicious code in athira-windows-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d29372690a56d28aaf32363029d85a2f0f5b5eddbe8a7a2bb62435171567b354 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4521 Malicious code in wise-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07407468d93ffb1f67aabfd6c608443ec2a8d822ade6a98f3b9f6387178fba80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4500 Malicious code in resize-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfd42601e27c2460acacb70b9c49d0443b44d78395d43a6b2491f24becdc1855 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4510 Malicious code in style-beautify-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8c7477260a4838812ce1ffefa15867a9cc2252be7e06ec8f060d4fb919d757d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4482 Malicious code in ideals-theming (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b76e002c6ea57373962d0b94a4186cd64f4de50ff591d923b550f96f25aa7fa Any computer that has this package installed or running should be considered...

Malicious code in wrapper6 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 140a14258e5028ff6bb7a9fd20b73655263c97ed3f7039d184f6f94f2c776121 Any computer that has this package installed or running should be considered...

MAL-2025-4571 Malicious code in muto-kaiju-npm (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 65ff09fff02691fb8682b4201d712727ea9514f7d2cade6768fd0fe5362ef80e Any computer that has this package installed or running should be considered...

MAL-2025-4550 Malicious code in angular-tealium (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0c32462ecdeacbbbfee96fd4f6e31ce41d373f68b0ebb3ec17667e26a9ee66d Any computer that has this package installed or running should be considered...

MAL-2025-4552 Malicious code in ccv-token-manager (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ce8a53c46aaab673372ddfde017c10e1b84cbd5b342474448f9ab5e3a5a37d2 Any computer that has this package installed or running should be considered...

MAL-2025-4577 Malicious code in reacts-gh (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f438d6df955eb639b0090cb670175f993ce6f6e5ce1f8d1926d236447864460 Any computer that has this package installed or running should be considered...

MAL-2025-4438 Malicious code in iokit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0809d84edd6d3d9ba71ac05151f2564c41a8d94a6e8ee6b57d8237de7ba7720 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4434 Malicious code in expo-blob-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a5aeaddd3e10a478c22aad8b7c9c33e937d34c05df63b23d331e509b44028c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vnc-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b409d2b1ea3535147d71ddf23425fe3fe4d437ce0d5af96f32f80c094bccc009 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4568 Malicious code in mergify-browser-extension (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d8f2de81952e94086d23e94decb4b563c67c4a2022666fae6a869278e07c0b0 Any computer that has this package installed or running should be considered...

MAL-2025-4549 Malicious code in @stepstone-genesis/components (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5874a7aeef3ac8f8faaa8e232c3010de7fd69fe6e411681099034bbb0c712d5 Any computer that has this package installed or running should be considered...

MAL-2025-4548 Malicious code in @partners-types/generics (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 286b6e3a0670f9322ce7783e57233cd6fd2d58fca486ab1abf62f2037fd0c63c Any computer that has this package installed or running should be considered...

MAL-2025-4411 Malicious code in transaction-generations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8ff356a1c2926c7e0ec73dee2112061e76093a5055a3930623e9c25a47af3d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4352 Malicious code in gatsby-plugin-source-map (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf49f8eebef7efd6ec079a3a0196b2b1eaeaf516da7db094412f8d5080f61f0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4345 Malicious code in fc-card-overview (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52e92e70129fc8f9de1f5052d516f6fd499edcfc902e3f08c68db8c3ea792448 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4383 Malicious code in osd_tp_custom_visualizations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d16134ca9360338b64d409af1360dcac89afe4082ec98215311fddc6d59bae1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...