Malicious code in next-optimized-image (npm)

The package next-optimized-image was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58dd13a9edd9b09b53a4bd0b8b6e36204d366ffc8f6e6a1b9ed3fcfc89ef9657 Any computer that has this package installed or running should be considered fully...

MAL-2025-47541 Malicious code in @sev-ui-verse/local-storage (npm)

The package @sev-ui-verse/local-storage was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5080905dc320899813f01d1c66b561c163fc638adfab5b390bdae2cac302cb7 Any computer that has this package installed or running should be considered...

MAL-2025-47531 Malicious code in @sev-ui-verse/config-service (npm)

The package @sev-ui-verse/config-service was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 188aa603d30650e09cc52a7e6d86df9d9fa9e4bce6239596a6ee4a7a75a968bf Any computer that has this package installed or running should be considere...

Malicious code in checkout-sheet-kit-react-native (npm)

The package checkout-sheet-kit-react-native was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54397e8e5f2da7ea785328f6913d946c6a1a7daaab2b703580781f80f4e19726 Any computer that has this package installed or running should be...

Malicious code in internallib_v354 (npm)

The package internallibv354 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fe6620f0f8ef12778be7f072b28dc3549b66d2db5da15e09040ba641a14d357 Any computer that has this package installed or running should be considered fully...

Malicious code in luma-glow-db (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80813446edf951ac165d71e8e56c30d45881e40776615d07d104e3e40ef1f5ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47472 Malicious code in @cat-ai/assistant-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d4d09d0b50027d4061df3bcfc206f5e4c96c6e1a9f67f5ce3c6e997e91507e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47465 Malicious code in internallib_v381 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e50fa16b8a33a721efa072a754b6d8bf5c3a9d981f48753a250a77ba202d1cfe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47394 Malicious code in capacitor-notificationhandler (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1f48b8279ed29432862fc6a0e1baa55481494de62d45c143694c11b696b235e Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47323 Malicious code in kinyongi-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ea7b4bf7dc393083c0cf1a329515fe98ac756a468ace3d791c4b0f20d2448e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47363 Malicious code in xo-guest-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1517cef9707e50e928c86d5810217ee40f807230a72a4bb77e6b2176fd33ebf0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @pumpfun-sdk/bn-converter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06bcd5e8715873a001eadde3f34011c22ba27a599e02a712fde9f44036b62fb0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jsonwebjstoken (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5866f0ff5443038e8141f9674f6d4d83ef512aba824b8a430cbd459f9dfba71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nativescript-community/ui-material-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe208e03b1176bddeb8912705cd3294928ff3009cc5c7e98d9495dfd695feea8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internallib_v102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64f2492a409422fc476a0aa1d4628143e50484abd7ba7cb747535849ddebc805 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @google_cloud/projectify (npm)

The package @googlecloud/projectify was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 348dd9384a1e11bd9559bcdb3d4e2ef98ad16da2967df02ad4b6764b8d9ef2af Any computer that has this package installed or running should be considered ful...

Malicious code in @navancorp/ta-fe-components (npm)

The package @navancorp/ta-fe-components was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea9ac90aa6a85cd2ff704d7ebf6928a5015a78c68b643de047583737e115a088 Any computer that has this package installed or running should be considered...

MAL-2025-47009 Malicious code in @magda/semantic-indexer-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e758f2e76254912dbf57ec99d3ed2da95ed1725239ce03d03392d903ee7078 @magda/semantic-indexer-sdk ships a minified bundle dist/index.js that contains multiple HTTP POST call sites and a literal 'dyndns' substring. These...

Malicious code in data-version-service (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67e15761c534191773c77884491eeda2d6062e9e52f77915cd7edbb117243bc0 Any computer that has this package installed or running should be considered...

Malicious code in falcon-login (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b99ae21b50a32d57d9c469d91755ecfa18484d7b95f0b61ccbefdf9dbcc1764e Any computer that has this package installed or running should be considered...