Malicious code in passport-jwt-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40c5dbee6898fcaf49fbac995a127fd5640725331d6ecc5a7a4b8cd71810039c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-jsconfig-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa2206f03805567e12ada7cbae343d47492532958d8f685e73562fee9972b3b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4515 Malicious code in thira (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59185b898e04a16e418a740d085ad977bbc901e17c445f86b27aa97daa97725b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wise-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07407468d93ffb1f67aabfd6c608443ec2a8d822ade6a98f3b9f6387178fba80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in style-value-parser (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b01a73e3e81e6d1272878f4d16c5a569e2773f609a5fbf17dba53b3d56127963 Any computer that has this package installed or running should be considered...

Malicious code in ml-preprocessing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 449fa18004b9f5016f86ea6f5c97358b4ca5263d4649325b946379ca51610f63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mergify-browser-extension (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d8f2de81952e94086d23e94decb4b563c67c4a2022666fae6a869278e07c0b0 Any computer that has this package installed or running should be considered...

Malicious code in @ing-web-es/application (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7692fb7f2c8d0720f92ab88567ebb27c12e7cbcd9e735c8aa3676782f17268de Any computer that has this package installed or running should be considered...

Malicious code in mysteryicons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 761dd9bf68d296b54d1454be93f41203c905d2da690014d7ce8b029efecf0bf5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-telegram-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72079588d96648ea82b5bb1d6e2001a7d5b38d651e7e2589274433c93ae1eb25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lol-lux-shopping-mall (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a990aae5e086e13c87464c79e52ba48732a675a67318f2a84bd502b2f3b2d1e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in core_plugin_route_timeouts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d78de07f17ce59423078e4f2157d3bbc7034ea6b759f66a2de1858baba4da2a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in happy-dl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e929cb53649c6845041c1b252c95bdf817a64cfe203bcd433471ae9c151f8303 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in string-multiutils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 440e4d338ee90f664978d7d33507ebfecbcf30ef88faa1e5cb3d3e7d5cfbe12c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord-clients (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06928cb5dce29b93a1ece92d5bb04ef3a8731f510409097aef187e63be4890ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in arduino-mock (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d38c56c0dc9db93761b7dd740096864d883277825e27bba160aa0734be2c6b30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in etherbundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71305511ac73c9c681a5abf765d127187bb45c8c2b946c2ce40afe03e408c0d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in twitter-api-v1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e845c35069d8dc1f87dbd947c508662a7462d951bfd0ccd915be80cb99502a96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in momenter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f430e51962da7f325413ad52b7f901ca944587f76401dcc9b3d30f6ab15f5d0e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in auth0-guardian-management-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4489a903f859c5e165cf70220daabaaad24a21cdb1705bd94dfddab893954e72 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...