MAL-2025-3800 Malicious code in vite-logging-patcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 704430ee3cb7da0b6e3eb0d7736f061b92391ab9b42f45be36bb3b6c68a16f31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3604 Malicious code in @acesso-io/genoma-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b6ec7e7f5dedda767f62adfd6d1182431dce7b0f6d2b957becb48fe684e0654 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3655 Malicious code in vue-highcharts-official (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77cfc02c501427a852db092cefc7ba8db24e59e250528d0ccc163e6b328097fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3631 Malicious code in jna (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0cb95a9ee76c31bf43c34e398b5f5226a4fa58d643a6901667e7736a3c58066 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3635 Malicious code in make-plural-rules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef999981379280f98605a8386dda39c26b1b27975f440cb627710a7f01a213ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jade-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b17361af15b63f316aef53a11fb6661254a32f301abc9e431c1c2e08f54bdc0e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3974 Malicious code in wegenenverkeer (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 208aef56bca72858ba42a6a6f8e100ba7b9cbf696d45876b6797afb8b6d6ac27 Any computer that has this package installed or running should be considered...

MAL-2025-3718 Malicious code in landsat-tiler (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61fe6ddc244e63c8c39ace5a34847e4b308d9e9b6ef38676efaf8de13cefd709 Any computer that has this package installed or running should be considered...

MAL-2025-3605 Malicious code in fake-linter-no-schema (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f20fce888f575adb89ec821dd8a1a50867576b07e0bf0d5f418fdc1d732e8e0d Any computer that has this package installed or running should be considered...

MAL-2025-3708 Malicious code in buidl-wallet-contracts (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6b5221b4cdc1f6532fbece9f61c742fbfdd72e88d8fc1d5ed8c9dcae92157e8 Any computer that has this package installed or running should be considered...

MAL-2025-3512 Malicious code in @baywa-re-lusy/nsemea-address-lib-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72abc75363d3a49d94650c8b66324e9d38506ea8e2724a1521a930555a996faa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3515 Malicious code in @baywa-re-lusy/nsemea-customer-lib-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04cade6fe87118ba0ff073c78b84a484c6d2ec20889cf67ea74c255058b7d6e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @baywa-re-lusy/nsemea-salestransaction-lib-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9605e1f17bd8907425f5176a55ff40f7f9ffc6c94912d17c753f3fdb34361caf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3533 Malicious code in nsemea-customer-lib-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b783a59591663bb8084e20ad8825f0dea9ab345d0ec0f723be03614c92467e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3485 Malicious code in @zener-soft-consulting/ab-webcomponents-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d973a87cc8f873fc6982e52eddeed55981da33922a816ca69bcae20b076524db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3503 Malicious code in testdoges (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 042d70fcdce39518a09164e3d86d8403a4de0ad9697aee15c56f3fc289985a8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3390 Malicious code in dowload_ebok_historia_do_movimento_pentecostal_no_brasil_by_isael_de_araujo_k3o0z (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69b931a05ee3f5829b5d724725a78669b59ea684aa7dd4cf3c030dadad9dc48a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3271 Malicious code in node-json-converter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ffbaad687f777a1680340dedffa3333cb8f4e0ada8e0a886e7f798a9a59ee2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3036 Malicious code in @hongfangze/concurrent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78c38d6d5d1eebce6d9eca70a76746065dfff24d940d9f8143d7b3654605b635 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2780 Malicious code in pplinkpath (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b566f3227061147ddef30f6d4a452cec55caaf2812bfb5c44272f114fe21656 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...