Malicious code in jimu-arcgis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7562fe8691e7f400454c23c32acb21241492a486b70e2d5e1cb597251c8e9c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in solana-web3-adapter (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12e75c393c8da1b623873b652c0e4024a25d635513e641c2c50d5899421160ec Any computer that has this package installed or running should be considered...

MAL-2025-5234 Malicious code in plugin-react (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e88cbf7f87087cbc6dda9545bd987ae79997a0d8812613ac393f517941eb83e Any computer that has this package installed or running should be considered...

Malicious code in test.relativity.package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0622baf7ab0ff027e2486e3839df7b968fcf6e47ba57656415c1b3a1005d02c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4981 Malicious code in vscode-spring-initializr (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eade5f13d9d6cf7678dfdf2bac67cfc29db071d6d1682cc6b3aadeac7561e30f Any computer that has this package installed or running should be considered...

MAL-2025-5069 Malicious code in zora-config-loader (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90bb43834ca3c2d8ed358c803284c55ac5cbc2a41e43dca36415cde5e63907fa Any computer that has this package installed or running should be considered...

Malicious code in zora-logger (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware feca2e7f9d5aafeaafed7175bed1bc94f57e9d037a6427f54219d5a59ecca0a3 Any computer that has this package installed or running should be considered...

Malicious code in comp-base-login (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86dd56ba61a953e19112e8fd19d04c755f48e262186426a358a7251dc398406f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4960 Malicious code in zora1abs-co1ns-sdk (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b206060bd52cecf8193f550d58c64d304f0f31ca11f58b0252f883bb574b41c8 Any computer that has this package installed or running should be considered...

Malicious code in zora-exploit-payload (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a09d84c94c165c768d88481e00efa77860f1237a66dc441e253dd480f1e476a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eyeblue1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d152785a33262aef07792faf0e6affc3c4b0272ea937b56cb3707f5e4286b9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5053 Malicious code in react-sdk-module-api (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c328baa339da0fb222b6ed839e9e024e3df2427f155e95d650451d9a7c0d49ce Any computer that has this package installed or running should be considered...

Malicious code in my-not-confused-package (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f9e1b36861dc7d436646c98a4561c0b4ae98fde63ed542a420740ed934f194a Any computer that has this package installed or running should be considered...

MAL-2025-4946 Malicious code in zora-hooks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c7a760130bed2c2193278fce02d4a9955e74cc6644076d142f28e4cf8f85514 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hijack_publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 270334141b21af891b38165b3548ece61a0e9c8d84fa40eccd70bbe1f3547820 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mh-swagger-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c511d3eda3b228d180191f4caee04bad5746d8134a082644b776b462f4b2eb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4926 Malicious code in mh-swagger-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c511d3eda3b228d180191f4caee04bad5746d8134a082644b776b462f4b2eb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4925 Malicious code in cockpit-header-icon-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware edba84c1a5e3ed1c3b0a0be32d630ab921c73a276543aec3c7c0076379e30e81 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4885 Malicious code in solders (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e7caa25c734e04724db6b49ecc13404bf34c539b99cef0c60d7bd3125f17b4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in base-hashing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d016b179f42c303733681ba512975f7ad0b2b792e55f57239c9303cecf8bfee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...