MAL-2025-2415 Malicious code in smart-power-strip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1cc33c4b430e08bef89e4f67199d79002235613631ee986f8566d757fc14ea7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2373 Malicious code in digits-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28177622f91c259f7ca32b15e2e0ee594641ad703e15d98a557e235e88e2d39c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in workfront-tailwind-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e755ef9756545a8b3e89ea6e94f4f0df0add9b9fb3c4721127f2cef9b7324007 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2430 Malicious code in visitor-targeting (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cca6cecf4a890fc8933768778472fc64e474611f8a925b5d2da43a2cccbe971a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2436 Malicious code in xeno-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3794b70c9005dec3c935f978a1bcb31199dd1f01b1bf35a10bc9bd134ba82ef6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2362 Malicious code in bbc-grandstand (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f0de83cd752dd58c1c6dae7ef140c2e9e41f3eb4a7467376e80659b3019cb75 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in empty-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e4f29eb4e06a456c0243473ddb4cf4b5953ab107489b4a79b5f3ccbebf67ebcd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in event-handle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80089375c8962bc9b14ecf6eea6f7f669f3235efadc86a11dc4a601ea24b8581 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2336 Malicious code in yoojae-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc98fbe305ce2dc7d6ada4fca1d13920ebb82e43a8cf91af458cd37c509ed466 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2334 Malicious code in support-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3fbedf2740f548b8d717a797c16780ec5e7a92090ca88a0b0aed5ec85809514d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2325 Malicious code in rc-upload-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8c8a04b14788b037fccbfd5f9be8c5f83d54da6321b13d213287d683a937baf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cryptocom-ai-agent-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4b95f332dde178bf7e9fd99a6d8dd252a590ca10ecdb653ab105c5fe1e6b796 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2298 Malicious code in auth0-langgraph-state-rag-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4726a148bd39bb68771231f6ed71f2edab6932f2f9468e69b5f659528ebb6d4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in image-watermarks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 696779031d179d99d69d2fd89de3ae89e25e8bc093c528000aeb73c0bf7525f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2281 Malicious code in simple-progress-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b0b2ded38b63b01027590e0a217718f8b204d46705ecbb37c8d33733ffa1177 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2243 Malicious code in better_dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4526960d827ae5486d65de8383708d021ba89326b548041564c96bc0aeb9f835 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2265 Malicious code in linear-zapier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3d3c3abe155e205917bb76c52f6e75b2812b2ff091715a891e29e6dac4b4628 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2248 Malicious code in crd-frontend-login (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c225ce49c193ec137ef2d44bd0ded4bf9da074b818bc455cbe161574dd87f02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2261 Malicious code in init-spa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b819e1e4ec37a2916d54fc1cccc8d0a57a4c0fc53653d0caf06fe86826f0992b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2272 Malicious code in radar-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e3c3b76c65176007f3c376c09b22d085bc9fba8527c7b806acca53816e6cebf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...