MAL-2025-48990 Malicious code in chai-friendly (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d91de03ddaa79c1b3653f7324f3c8a2041bc2e0eb7082649efe9ee495d1a4eb5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in transform-react-constant-elements (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d582d56f1f42a97702c2557fbfdcc90613da53d18adf5494b4f18c555c04398 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in no-only-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0357be77e7b06c343a0d5b8671fc3a8983d9d1187381a5159b3175a579ebcaa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in named-asset-import (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41aa2c9de0b9bf1fc5a9cbee9d0442255a36d349e4645660908d01b2ac8db820 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tailwindcss-setanimation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2480ddf4dd248c9a26270a9acbeee92fcc8fd3c881fddc776c2e372e880ded7 The package tailwindcss-setanimation was found to contain malicious code. Source: ghsa-malware...

MAL-2025-48920 Malicious code in @jameson777/mytest6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 851f11df6052c000d2359d23f1429e77a60896e9f279467656eedf7c968cdf07 The package @jameson777/mytest6 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-48918 Malicious code in @jameson777/mytest4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 781112b2d078b0c465848b5c8e47b6da47abcaadfa2b57b4852d441598eec400 The package @jameson777/mytest4 was found to contain malicious code. Source: ghsa-malware...

Malicious code in @jameson777/mytest6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 851f11df6052c000d2359d23f1429e77a60896e9f279467656eedf7c968cdf07 The package @jameson777/mytest6 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-48931 Malicious code in internallib_v799 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eee173949777ba0b061bf769290f356eb15c53e47c71278188116dbf5277c404 The package internallibv799 was found to contain malicious code. Source: ghsa-malware 90a16371dd0bdd2b43694453483bd59007c45f09296a782bb436d256daa8264...

MAL-2025-48934 Malicious code in shopify-logistics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c496eebb9741a5d54e47561695a16482339e4d8b2094e4269c722c2cd17b04b The package shopify-logistics was found to contain malicious code. Source: ghsa-malware...

Malicious code in vite-manual-chunker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2466db729b423d58b084a5f99834cfaf8c62af4179350ef30978e32f36b50fa7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48779 Malicious code in tailwind-config-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f09d3964a8d2d069f80eb368ccd713c6c2347bdd6790589bc55a96f726904eb6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48597 Malicious code in shadeforge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7eea02ef501299fe8810df8e336242386a2ed75d455554c776bd3e4f4463662 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mender-convert (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 287b36200e3e3bfaa56b44307f2cbc3f2deb931d055cfeb21ea49720e9dd9735 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48573 Malicious code in mender-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7db45b762045779c0566cc967511852ceac9bebb9a2a09ceed1eda3c44c3e296 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48543 Malicious code in artyfact-storage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e7943603e230dc9bc1cd9f5f44133fe1b4fee90cb69929ae4b0308b61400753 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48532 Malicious code in ggtech2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 402a2de5aff6b47fccb36fb23db1070eee17b8a098c87b256108ee8c7d793021 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48524 Malicious code in tailwind-setting (npm)

The package tailwind-setting was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 850a3c165ca8ecb1060d82506ab99a36786c8a41575310ee91507065a46d313d Any computer that has this package installed or running should be considered fully...

MAL-2025-48525 Malicious code in user-trace-fingerprint (npm)

The package user-trace-fingerprint was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b54bd77b470e3a22898330418ebfb04770ae12aa0de66208968d637cca6c03f2 Any computer that has this package installed or running should be considered full...

Malicious code in user-trace-fingerprint (npm)

The package user-trace-fingerprint was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b54bd77b470e3a22898330418ebfb04770ae12aa0de66208968d637cca6c03f2 Any computer that has this package installed or running should be considered full...