Malicious code in consolidate-logging (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9195113fed51a96ead8fdad28353a287dea697bbc6c11a2514513654482b9075 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aiide-cur (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f87105b04445846be4b509793882c19f03cc302b5a62c868a7f5bc603d6ca1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3962 Malicious code in dep-b (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bf502f4603015140b50f4fa201c46f256eefa3553e9a6f91ae9304bb42966d6 Any computer that has this package installed or running should be considered...

Malicious code in mockman-js-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware edfeba68a0ab8249537859bf5e710af081fc2dbff163cdbd8af1b663966c82d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3781 Malicious code in sw-cur (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b6e97eb66e9295d27e2c439734b0d7a8a4479ea22612dd7c5623827fcbb53eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3750 Malicious code in @myop/react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6207bb7fe82e114e5a3cca22ee07a6eb58b410e8e18bf5fd0945840c03761f1a Withdrawn Advisory This advisory has been withdrawn because @myop/react is not malware. This link is maintained to preserve external references. Original...

MAL-2025-3752 Malicious code in @myop/sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb5f8501100b711c468850e2985fc83d8369da105d072a9ce2543a0f189b7326 Withdrawn Advisory This advisory has been withdrawn because the @myop/sdk npm package is not malware. This link is maintained to preserve external...

MAL-2025-3773 Malicious code in util-buffers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26051aff776c128248d32f414e8919c5c3482b654403e6cd39478705581ae697 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3760 Malicious code in dependencyconfusion6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fde19a45f6be5b0f2c1ffc00fb381166f7ec0cbb3d1df2ba0d3e169faedcd72a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in dforce-staking-v2

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in atlaskit-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a82f51289bb90a9a96816fcf188b81cd24166b48cac9cc66d28af7e68e1acc1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3675 Malicious code in @klarna-travel-platform/travel-booking-shared-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f013426be635a2310d1320cacca5b4ce5067f6686d76993ed1ea4ef590315037 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3680 Malicious code in create-krnl-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 211459e94c3ff6a3713ee7a8327fdef67b1eaac62530f22c658dad263fa901db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3683 Malicious code in fluenceenergy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 284d05a8d0a82cbe67dd78663f9b75503f5d9ab1d9aa990f6c6c800c07ca409b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in toloka-tb

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-3647 Malicious code in slimdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2f226420f343b927fbc14d4e38eba517fc139753e2d5a7006cc0a251cdc8b0c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in psalm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d26bf3019de08d180b77c247eccead3652df56189c359c26006236d5ae54aa0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in reactotron-mobx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6abab59ec03274fee4d2b17fe9dd59071456e1952398803ef43e080a6915bd7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3643 Malicious code in sails-mssql-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9aa02c92e690ce82873d15a2bd8dab23940ca37b05b8dd851f223d17d91c923 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3975 Malicious code in zas-design-system (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d20414d39d4095c5c4d966da09a2977c17ae6b568e3649ddde859f58f334821f Any computer that has this package installed or running should be considered...