MAL-2025-4408 Malicious code in template-vite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06fbee942dbb167dc44c38bf807a7092a1ee1f59c1852062bb2ba0e3a22bc64e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4357 Malicious code in gunbazaar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38f81dff112ef1f0539df3976ffd889ed18caf335408a85b016218595bc0f577 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tgi-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2dfb398d22e1b55329c8470ec5d984d35d24a20ca084875de34497095c3f4800 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4418 Malicious code in xlog-admin-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8eb60334dd4f8546278e861e3dc7e4f69a46c5ed27bfe080fb6e77841fcbe4c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4350 Malicious code in garena-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53e17b9725323610c84d0eef5b07fd9caf89a9ee0ad67d94c35a07c61abdafbb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4295 Malicious code in @sl4x0/internal-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b6b6646e35885e431949fff4fae0f04d21961751f93c32a2e1136704409e728 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in random-dupa-test-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99f5f604116e448aa422338fa8d271809af42a57332bbff2963599c372b0ab01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-tsconsole-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d6727c1546f4afc56f343e8f3911a3679df15839cbfcb46f3f561c3de0faa06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4075 Malicious code in db-cleaner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a72cd0c1c8572d55b42f5b29e3ba12562254d45caf82e25ebe93583f35e9af68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4115 Malicious code in raydium-sdks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c4bd247852f5f5e13010c679bfbe762180e81dd4a57f9b37d607b3ef1f13f021 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lock-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0be45276ce7d117215945fe26ddbc98fb0cc53d60ecdaa71631175e44f8d4bb3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pumpswap-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f6871522b8b5eebb3eca021b1ead1d42bf21998277934139af4406375de5558 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4087 Malicious code in happy-dl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e929cb53649c6845041c1b252c95bdf817a64cfe203bcd433471ae9c151f8303 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4135 Malicious code in system-v11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b2372e93f563dc553212e0fa13f72a19f5e5a99223516178d784f8a4186353d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4093 Malicious code in keypair-utilsee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2a2d11e5c7234bf618c7909f22af17e0fd3787ec6e461114dfaca49fd2ef108 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4076 Malicious code in dexfile.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 030322be28cfdc4341c3cf0199d441c986dbb8f4eee5783c7838c7c6af53a011 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ggeiekkepbwedvcmerki (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 856bfd7871613286d5d690f7b4c1159ac3e40956702f7e17b4ab760454a0793d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4086 Malicious code in graphorithm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb21baa1835a83e25fba76df146095e359e2e59d828719c7926d34d71ac472a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @ducksthegoatedone/ducks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07996ce8fcdd695995919d84cd1d62b1a127fab349bef9399e413b78c2ba1fab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4100 Malicious code in loveisalie (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef78377655d4f0dfbe08aad228013333938835f85db86aa38fe28b21748339e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...