MAL-2025-3286 Malicious code in ds-sudqusdqhsdhqsdzoqi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55eabf16c080da1e15e96342ac1293ec79b0ec3b0a1c9045829a396b3ce5c0e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in camel-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1098fc52f4799d50da4e83a966625fba756fb0f48d2f27f3fa9b966a972d035b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3285 Malicious code in discord.js-selfbot-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab72c09e960ea50f08197c72eb549889779b0936abc22064b5adc5d2600361a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3223 Malicious code in @0xzyo/confutionrce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f2d1c1c9b369aed6d0d62b32d27becf33fda24166695accd6ecf90d1ece233e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3267 Malicious code in zkevm-rom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ebca28836b13291a84823420d145b2150d556abbd4d19fbf2dfeacf67a7553ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eigenlayer-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7dcbc6398c70af4eea7bcb6879aced4ed322d24aa860eff099e1054163764f2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ton-evm-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e3402e5b7c8513fbd68507b2a18f6538cdd485f16cace59be82da512cf1a99d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3226 Malicious code in @mlbtv-clients/isu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 130a1ca20af439a3a3aac26f4a56391a47dfbfa51c48fa2883b404d415c64b38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in verif8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3cab370a2507d947a2037dadffaa0ccc89a16b8c11965420f1d524af20359d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in domino-db (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06df477c314cdfcac7727b2f680533d598342abd96b25f9a19e23c8002223320 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3205 Malicious code in wormhole-messenger-solana (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3533c227d2e503f88e2ae202b9433a6a7a89000b952c2875242b1834dbd32089 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nucleus-form (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef4a82fababc58d4330f2cc60c17200d50ca1501934c59e081fd469d18282173 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3153 Malicious code in htps-curl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0d98378afd76f3698f358b5925693d03adcca121b546d6d32022b5263e919e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in search-benchmark-frontend

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-3123 Malicious code in trrx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43096da9f5184fd6d2799200367daed2ed6e9654a3731c0035479ec9d1b1bd61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3107 Malicious code in my-test002-datetime-momo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a688643a119539cf494c667fdedfeb4b5373651b0296fe8252d54d72bd7e30b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in lwc-recipes

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in nva-process-inf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d654f39c1766e74a8a2950ae8ceb43686999ec02923d6454655c6596bd87354b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @hongfangze/filestream (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb8918dc757e8560ab3e6a414e7ce77f963e8f5a199d1b274ff4a402aabb9751 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3033 Malicious code in @hongfangze/array (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f960dc6274e7bc128da9e089382bd14d47a6e944b250dbc6a53b2f4a17cce5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...