MAL-2025-48336 Malicious code in mad-1.2.8.2.2.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f458f275324cf68bed67b3ae284456b3688dfd9634450c5a03f39552352ea625 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nodelog-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c3f1413a6184e042f68d9e0cee79523ea3c0566535bb56e1e0b13370875fd8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48321 Malicious code in react-ui-toast (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6789082e9bf3c52d9daaa6abb3f09ea5012ad93106de355e66a04ee1be9c6605 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

DDoS Botnet Aisuru Blankets US ISPs in Record DDoS

The world's largest and most disruptive botnet is now drawing a majority of its firepower from compromised Internet-of-Things IoT devices hosted on U.S. Internet providers like AT &T, Comcast and Verizon , new evidence suggests. Experts say the heavy concentration of infected devices at U.S...

MAL-2025-48304 Malicious code in simple-icon-maker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8809c0049ae5c8b8cd198cb99abd3b33d600799607d44fc77777f9b0a711eb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @evo-tech/backoffice-test-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 931d6e176eaebf4b172dba6fd81800d7257f741ffad464c014dc9fcd085bcba4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in frontend-metrics-collector-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33df4b3fc95229c6a1af21ef46dd94df8a0c7f647459b6b83dd1a92149afbbdd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48277 Malicious code in dt-frontend-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d84c9e90fa62a28e4b2b22f78ffa732463fd6351f426e71f105661f00179e4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48288 Malicious code in tw-webkit-universal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fbf2c831086ca3205f21c4113b6b26c6a3a854dcf9b56b72683b10995a7fe43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-q84l3v (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2989dd266ef12e7bf2fcbde54fc67c8d6722320a84938aa5bed053b1259da8da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-ubp4cs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b184e6cfeb122b4bd7211f4d39a3b49f6900d58423cb5824a863fc2cf9b514c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-1ubpyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbb4f39103b7a3e69cc2d67cfe0d4c492f1f9e60b623136b6ee80ffc0646e1bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48166 Malicious code in redirect-gzkgcn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e557f0c5b3c03d1de20da75558e56c4dbc781ccaf9659b76972081d5be8e552 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-gzkgcn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e557f0c5b3c03d1de20da75558e56c4dbc781ccaf9659b76972081d5be8e552 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48174 Malicious code in redirect-j5blfb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 053b01b4d218e109dc50a8ad0aa7fae9620964eac01e9ff6e495f6bf2056540e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48158 Malicious code in redirect-f72kyw (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6107d344417e3c4484c0f17098d6f6be07c4eb5c33a23abe4f254b7180bf1c81 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-j0rs4a (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa8ebbe3a98e48894b9cfffa97f0333cf86c69c8a576131d18032d4bc0ea3767 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48134 Malicious code in redirect-8py8qs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware edef26f8df91a6f11f9c17ccf8e5f214a29f90109febd7dc448aafcfe29f8ccc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-homer-flajpt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2502cef083844b1d28d0a2144019b1d0b6ab5552c1941ac61177134782ac8519 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48116 Malicious code in redirect-24srjd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94abc719b1e3113905c655a63a171398712f2a45b8b933a5244541146f586ee4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...