MAL-2025-48598 Malicious code in tailwindcss-motionflex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45e8b8aeb958d83e7620d1b2039259900e9862ef2e915dd553d1d227ec50dabd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48584 Malicious code in tailwind-magic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c44f5a090a9395704332bdcdb8d6cdeb4f73b208b4c55bd59d7b8d67325fd08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mender-artifact (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e94134964d7a293444da55c5300ca285bae3eac4e6bf9a1f89cc1d9a94f2ceae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48523 Malicious code in multi-cloud-data-migrator (npm)

The package multi-cloud-data-migrator was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96243e89d1f63fe186404148d660f9d90078e2c4e33e97a259be37284d6ba9c9 Any computer that has this package installed or running should be considered...

Malicious code in usage-tracker-secured (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1b7a443b3167fff4524481ab0e2a965023fdb4379674c580d905e30aacc7f70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48423 Malicious code in summerfi-eslint-config-security-notice (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d85a7d05234e5c23b0307b2212be7cfec13e9b8a135ffd9faa1bbf24cce1bb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48421 Malicious code in deficonnect-internal-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6f3098a58343ae74219c429df56aab7d01b71a39b84a9165b0ee3679a6964f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48414 Malicious code in csv-parsing-xyz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 363b0535fad3e1200b4ecbbcaf6864c57f005f66af100032426235146347282e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48408 Malicious code in company-request-access (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e49052755a86ef81d8b6c55e055db2639127cd68573b30d2725ed12e8e0d61ea Any computer that has this package installed or running should be considered...

MAL-2025-48331 Malicious code in mad-1.2.3.2.2.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd85e061204de201938d7f92d980f9e42a2d4c370732eb5b9deb987982012f75 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tailwind-style-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 405756ca6b244b2da943e5c301d715776df3e507385f429dc2a6cf091a682931 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-plugin-parse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware daab8364c58e6745ad62419e65b56e53fe7e4dd36ad416221e5ad92c891d4183 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mongodb-orn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 999e92d0085f6b2abfc2294f664172231877a42b0431f98b1aa815840bb7c1a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in frontend-prevent-open-redirect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d7d715ee921f7aa5445a7b69d8ee16f1c90ff529d86220f569ab70de2afa71e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48275 Malicious code in cx-contact-hub-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d222fffa14a9ecd04210f41c25dae1aa3fc12e1ad8ec172358786ae1c539475e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48283 Malicious code in internal-checkout-bricks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7a30a0c50c357c109e976dd834294a7f9414d5d0589e68deea9385dcdb6dff7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48285 Malicious code in mp3-web-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e9d2f7a789653ac711126e4d4e9772e8f26c9bb97b19b51d2f2880bf74d2b4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48282 Malicious code in frontend-prevent-open-redirect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d7d715ee921f7aa5445a7b69d8ee16f1c90ff529d86220f569ab70de2afa71e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48263 Malicious code in nodemon-pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4dc5fe7289f6c5b97c4b2497e93d57d3636f6da1242e0f9d36bd0211a326f344 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48244 Malicious code in kpi-media-metrics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b3bb2b9c205d4f8a38e5c5272fb0c10f8d0d0f12809f2e0a7b3d95f1ed5a17d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...