MAL-2025-47485 Malicious code in http-err-notification (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7a2e55871b065fdb7fedf48404b81400a55e30b5682d2f1f52f4518ef24058b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47497 Malicious code in some-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3558d5270ba6945f13c577df7f903f2e449b54435c6aa2ee46d721ef5e9ea198 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47494 Malicious code in react-fs-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af2d796ee4de90749abff951a8c96883e5fcef54fb5416b3f60a3c031fd093a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dowload_ebok_voir_grand_by_luc_poirier_bdn67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d72aa930ab4bd1a3165c1c8bd457e5e6c6350f8ead083199565ad6555ed75599 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47477 Malicious code in dowload_ebok_grundkurs_kunstliche_intelligenz_by_wolfgang_ertel_r9sfy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94e9bffeeffbe35f94a97022a4515f12e36980b5cdb2152202cbe06899ed409a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47473 Malicious code in aot-npm-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 387dbb36bb1161598fbfa2872fbf071892696c3a1df11c616ffa424495bacdb0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in storj-satellite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a2cdc91ce66bac3ff8836be68fb784bbdf468eed157c29548ca788ae8669b69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47354 Malicious code in transform-remove-console (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 34def0802df34551bb9471a5204d7188e0b1d20db136c605b706bd98166df2d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47246 Malicious code in @morphodao/morpho-core-v1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb9bd67a4d3649cd1f46a3e877bdffb2ed879805fe1aa9817036dd56b887f414 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47335 Malicious code in openzeppelin-compact (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e764dc15f07658164fb682663adc912360ef9936123f3b8738c9ed5614170765 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xo-wallet-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94fd297d5bd2cbf348e88599e570974a4fc9f65f7bf3cdda6bf6a69e8dc8dd44 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @teselagen/ove (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76c137afc6d3e31e5f4509c510c57e859b10399e8b246cd19aed5188a55f59b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47344 Malicious code in react-jsonschema-rxnt-extras (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e29ae9593362f6ccecd21ee9abaabfe0baf7da78be18ebeeef87277d03b1f56 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @ctrl/ngx-rightclick (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26c981d94dd9e169f05ec3ebc64532f6ff7ce85c16dc391d51ae78b7dd6a43b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47140 Malicious code in @ctrl/shared-torrent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24fa569db2913c10f73f32aa003c6ffa19fdd3f8883d9ba4795eb72a6b1cfc9e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nstudio/nativescript-loading-indicator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b551e46bc14865c379331dce05e3f6adb61e5f385acc0aa24b912176766d0c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47162 Malicious code in @nstudio/angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c1b0ff1d36db43c5565d468f0ca83363bf446a3c5b645dcc6f125bcff4c65b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47202 Malicious code in nri-kube-events (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd41beeed007957825a25616c5f002d1a7eb247ed5e96855252aa22c1de77479 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-plugin-uni-i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ff6cfac329bcb3bc726e87d12942ec29cd686c4d4e81223398ed26948b46e39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in crew-toolbox (npm)

The package crew-toolbox was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 814628864e80153a94f63be13a31cda738fad89160a114cb24559afb0fdbf60f Any computer that has this package installed or running should be considered fully...