Malicious code in chatbox-fca-remake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83a5b117803c27e7a6bb055ed45b86878c6edf34dea10fa6c638486c656c6ec8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4681 Malicious code in daenax (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3178f178bdbdd66d641b33909e4d04c304ec1b92b0bf5196a23abe7683d3d30f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4692 Malicious code in portfolio-config-manager-mongo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7313dd72cd35e9b2cc754bd7b41842071deb31b3be1bef658e61241e6bca17e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4695 Malicious code in system-health-sync-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13c337e149bd36fcd54891e550bf7fdb7c1dc36b1bfc1b06e0b1427851d4adde Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4656 Malicious code in remote-actions (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 602ccb0c9280efaed9bc494cf89db45c8fd4d77619a8b621c339d44dc6479bf5 Any computer that has this package installed or running should be considered...

MAL-2025-4595 Malicious code in express-authgen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b288b33e1c8cf62fa86cc3a42c139bde6cc4674aec2cc0327ca503b64daf2a4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in http-parse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ccd584e4eb76b2b7e3035e858a3af89bdbdf42190aef321dffd99632232fab5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4532 Malicious code in midd-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9dd0235b84c32b991facdc8454fcad039a9ad0d52cdc8f5d4a6c3504657c7fa6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4488 Malicious code in m03124geeztd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b68dbf52968379b3612817a4951913aecc568c526510b1e8f52a5dacf51301d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4462 Malicious code in @cyb3rsh4ykh/neondatabase (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8818d3e8d2cad629da889fec7789a75afe9aec10fa5ca1cab5a15828ab8f657 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4473 Malicious code in bandwith-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb3e984939ed6eebce712738a932de82d769f3f62b30d1c6c1592e99490f5de0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4467 Malicious code in athira-darwin-arm64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f5187d16196b84804557d150debc4215dc39e15856b77fb994551bf7457299c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in skinnyvans-windows-arm64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8e75c36e408e17166850d6ffed1c9bdb3d2b87358aa9aecbe72e660be6014a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in skinnyvans (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4d7d1afb0bbd6fed02c341b71eba019f92f582433d971e6538b5693d9d026e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mockup-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04a4444bb887c9ab495f7e74745ace094fd3cacea41640e572bd4a9bf68009a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in trip-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d2290ac829220daaf6f2242ec116548af3053789350c71da7b541e9d65a523f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4524 Malicious code in yellow-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb3e37b16c5268bc8b2b83a008adf1c748010571f75403448d6a1a993c7baef3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in recover-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9d2b9a72f460c7e7dd5dcf39ea9dc126972b71a2d18aad716e2b89e115ee690 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4517 Malicious code in vite-config-pretty-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a3f6b7466ad8fab94eb697f86931898faaaa7437f3361c93556cfae5f75f99f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4484 Malicious code in ideals-ui-components (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ab4816f617c76fa25d8130b9f4db4d16b0e8929fdf625916b1b91c25eb920b2 Any computer that has this package installed or running should be considered...