Malicious code in metadata-collector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d0c00e28320e5a836d89bb26152ff2b5c4989287285bb5071872ad3413821cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in needlecast_b9s_jewel_fyc_fe_client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0103a210a9570aca60dd6b0b9583710312fb9116674baaf17a9f6ae3084e462 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vault-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c39e1eed1d8bf3442c38c8963d7e9aae31825a734eec63405aa146da7a02b57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3252 Malicious code in helper-function-name (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf8d6cfb517715467379abc5d1adf9a80f10c786f6473f2d30c9961cba2445b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fatfingers-hahayeet3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b84f3f636d78af52f12aa8607d70566e509f3b4510f51218c7769240c571834 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zkasm/zkevm-rom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d383d50e39e2bae07fe90f53cbe2c8917b3fc778425f0dd973b8d50fc6592698 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kalluabkl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fcf9fffbd26270b0ad6ee89bba7e8fd3495e249ad590852ce6945bcf282c9e15 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in accountlifecycleserv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16f34b0df0c6872e171130fd0bc4e705f393a5c3a6160b222dab34564f599b92 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in niji-react-switch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b24fa24fa460419a699b1ade3246daeaff2282d1f49a2afbfff84dda7c8d8c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nationalgeographicsociety/ngsui-addons-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d522cf6892b9363520f72cb2c024bbcf7d63238df065658694ca622082b1be9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mathiconjsnz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 063eba8a5bc72b87463db9f8c7c398346eb615d05ca8fc3a68827e41d7458ee2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in adhxsc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ced1e01906a45ecd7f47d598e4d5c28ef0304126a0670ce4010b1bd8590e69e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in patternfly-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb2fd8e936317fc9125f41ad0600e981e709900ce289e48fcd9e323d3a062247 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @mint-lib/query-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6ac51b11c2e630ce893cff684562507667c0ab42c195ce066e9cd708d42c44c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pn-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6788e4d94901987d6b643edd5ac4d70be5b436465250b943c7d9793895d061c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ebtc-zap-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f338c68f960df4bcaa54c3a4dbcd77e570a1015d1ac4ada59252e11f4f35d335 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vistar-ad-clienttestadv4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6138f0fcd3c594b1a6089746986d8ca3b4b090a0cd791af795a4fbacdf44cb58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jupyter-optmwidgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88e26da6dc516a7b303e9a45d5febee538e1d414513ac1ea6ee95a6d41bdaa54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in build-toolchain (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84247c237b0069d75302ed5c41a15415446a4acfd0ec02984a32130adb4e03fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aiven-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7ef5fbee116dc7c6a033971fa455298110b289026b14470eb6120ae7aa06467 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...