MAL-2025-3209 Malicious code in @talentai/carbon-addons-talent-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 882f23d36229f817eef192caf4e51f3164ffbd979660fa81389291a6b522e857 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3211 Malicious code in flex-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 004deff66b34b25158642a09f2766c44910f05ec7a322c2933f768f34249151b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3192 Malicious code in lme4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d886ca0d77375a13d7b0c7d522f2dae6e996f8d069f1337810a23c86e040412 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in deltaprime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f16f2e9ed1af46506269c020785db3858769c420b642162e9fa880a6d2152edb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3180 Malicious code in cors-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c69784e687ee2d3b4fa3c9466d05fee6ba509336504718d4b993d75c7498176 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in data-memocombinators (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 392ef8199fed690581519bcc38f5cb1dcc29af2196b24b72a3c21df826f531cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3185 Malicious code in esy-m4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d50f3c1994b8efe53e778d8ba331e1ceec48993b57b0fc3f279eb3f4b9dea361 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3145 Malicious code in boss-traceid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 989a91e00c66bddcabf2d2aa4d190e543394315ecef80cbe38c70a3f85a00cc6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nusign (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5abb5aed02d3e6ddea2218e353719dd67a4a00bdc801c4347a7ed49f8f08a1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3149 Malicious code in damnbeauty (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 253e91eb04c8d507dcc87bb3cf8614080f61c2c28753ee3b44b31e8103304e38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3141 Malicious code in ac-localnav (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3baed4fee6d491da54b31c19642059e4763ea8b9bfa42c0e8d9312ca4470016f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in valid-ip-ban (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8178b30a109e454369e72c1f8e3c53686457f2af96fee398ca102ad91681e92 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3134 Malicious code in valid-ip-scope (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7465414603f3c8dda0d63ea47cec0337ce0286407a8c488100a46b5a78a5b49d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3133 Malicious code in valid-ip-ban (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8178b30a109e454369e72c1f8e3c53686457f2af96fee398ca102ad91681e92 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3106 Malicious code in monitor-inference-results (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a81996c10459a5786a55c906eda2f407966455557441d103e3d55c4ab53e1c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3098 Malicious code in fastly-ip-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f926af7de5421ff4d32ead56bc3c4ee74df195c6f8fb78593010535faac8ed0e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cdk-construct-library-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7030a0b9d7d1eed660c8a53ad26a551201ff0ee4a7ee399b284e9c0b4a61214f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fivethirtyeight (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d85a317f633c161ef61f2ffd3d0cda992cf670bd7532a2ce875261ba067a39d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rzp-ionic3-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9cfbb00d339b881a5d6c275d13e76761973d000bf055e23329150e4105bafb62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3118 Malicious code in rzp-ionic3-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9cfbb00d339b881a5d6c275d13e76761973d000bf055e23329150e4105bafb62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...