MAL-2025-49069 Malicious code in xo-shipping-change (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 194261ca5ce11a3a819c4aa938f33cd04d1089a614c0e1a224229efae8fc0edd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in transform-es2015-modules-commonjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2ad9d3d189297373f163d4e6bba02fc712b67f335bc6a6bab2ebfcf16cba487 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in airbnb-scraper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cccaba4bd0c7417f30999db8ce705201039794a8ad09804f33dd1fdbe088a8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48980 Malicious code in airbnb-opentracing-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb6e111a14bd58c590e23784b48c4857ce72456a2fd0e20175152e13d93b0863 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49065 Malicious code in wdr-beam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16487b4b3ab32616874e0d9510ebc6c9ebf957bccdd7bfe6e84d60e0d1b89cf2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in filename-rules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15d6c49237b11de7f279efa585359302e43282ac5e2abdaa6c0d1a6cac7bfdec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48992 Malicious code in durablefunctionsmonitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cca6bcceee8fd7c48b4e3a6785a12fbee378528263f9f948def2884033173d3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in durablefunctionsmonitor-vscodeext (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0bcd6dd0f47781eb145c4a57e94a505ad8fe070437e096926c7c5a7601087b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-important-stuff (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0186125a63b7e626318d2a6f7da095cef0d7f9dd8c126391e0ced35c7d6792f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49077 Malicious code in zeus-me-ops-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cdb883ba3968557743369275e52574c356a37a380d7314c4fd45cc3ee6088a9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in faltest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76cbaaf799855c54e2fc51323485cc4fb7639bff9b5bfa58a90811007cf6b0d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in prefer-object-spread (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24f3eb78b1232c6b636794710f52f1699237b0b29192397a63c0b1b307652154 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jito-shred-propo-excutor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09b4ebf0c5d4498b8403c0b3ab1ee9f79b34ba24238d22b2bc8b2b32efd2239a The package jito-shred-propo-excutor was found to contain malicious code. Source: ghsa-malware...

MAL-2025-48773 Malicious code in add-module-exports (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c839bfd4379fee1d18fbca3447b73a811fda655fedf4480f2593d5d75149a421 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48769 Malicious code in vue-sfc-require-hook (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7cfa99fb8cfe12fc2eeaa5922910fd5069600243483dcc96133e02c819e4d201 Any computer that has this package installed or running should be considered...

MAL-2025-48595 Malicious code in glowmotion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 689f84ac7556578ba4404c09552cd9f86ea81c1dabe28dcfdc613fa4ac233285 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tailwind-setting (npm)

The package tailwind-setting was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 850a3c165ca8ecb1060d82506ab99a36786c8a41575310ee91507065a46d313d Any computer that has this package installed or running should be considered fully...

Malicious code in gets-random-datas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d13279c0dfe50ca0e8f75374e6903bf163c9fa3b46842da81459f75f423a88d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48531 Malicious code in ggtech (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d8cf2fc1fc656139527e8de1f48461e0236042e241e681f04dc59b29b8c961e Any computer that has this package installed or running should be considered...

Malicious code in project-serum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c390d6d9b15f1fb2c2ad9b8e802cff831ed02b6028b111d2937705df46f3fdc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...