MAL-2025-47086 Malicious code in service-config-endpoint-provider (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0879016c96750d8d2a0320e43955954e5f07cd7685cd65103101b1b9d3c3d7e5 Any computer that has this package installed or running should be considered...

Malicious code in scheduler-experimental-builtin (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5c381d132dddf957ca46bcbb357f4d138089323733e00e65f2e13d7ac84fc23 Any computer that has this package installed or running should be considered...

Malicious code in shardeum-json-rpc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac467fd35bd9312b691bb92f0e8b7fa7658031ed548664e1676022ec8cae3713 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in n8n-nodes-mtaitest-abc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44affea7a9444f2719826698691368c8040059c5aed1cc7b939116cf11b7d90c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sumsub-node-websdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d0f130a771df580704e11f7b16a38ff74d7630406d6acd868819477435c331e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in next-sweetalert2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8045e5172fb2ccb88fcd16b2a66207ca2896e30031828b942dffcf423ebbb6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zora1abs-protoc-helper (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32798df02edd137f9c9492f0b336887efd45c7af6f15e4bac809b1e107d7b4bd Any computer that has this package installed or running should be considered...

Malicious code in station-signal-client-lib (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50bb4c06916b1308d0186e91da66bc27ce6eae2bb1c0f584bca6282ad55bf3c5 Any computer that has this package installed or running should be considered...

Malicious code in ods-core-v1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c864e00fb5ed04b7160b6804c91bddefa43500c877ad9e889fdc397f89c35721 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @loybung/textreplace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03c26f5bb98082cc1377c84ac4dc07a726cc856db23d49346f28ce6c19ff026a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in waterline-mongo-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b59ac87de0044bdf2154f6f15d3b82b244bc9c62b29835eb050f3b9b215437b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pay-gateway (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 833ef41ae1118909a10510c9670df5ab91c285cab62449451578a869afa05aca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gop_status_frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3361e51fa8b0f6d022491e1aedda9bf77bf9c114f044cff36bdcbf5fb86a160f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in credit-risk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd701c8e3663f6d6d51ecbf7c2455cdc266d2ea4b6d25f3b52a6efbddf402eb6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in refreshrewards (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a85c789c3376d220a18e3a4822d1d6b1b347866ec2f7306a35d970a6a6d3c0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in admin-id (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c5cfce31b518acf3e531f6865cbc2434b5eacf844f1a47c768fa6d30bb15fc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in selfbott-rpc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 860baf78f0f4f83405dc224345b0d30845128219a809a6e76e89c17493419fda Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in logdna-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5e677b0469d410d4bebb15cebcba6f551b7f4dd27c9b05e9e3162d6abf87f56 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jb-sol-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e07a37ee37ad01b1e0d3674307dda8f293b0152cd93544305a2bdce1340c6035 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cp-area-nao-correntista-fgts-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8095eb5ae7705ce9b30c64714683d8be1cf363c3775707e2900c35ac10eb4a86 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...