MAL-2025-2144 Malicious code in whitebit-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da97d779632c45deebc76b233c05cdebe0612b79a50520da863f662ac7effcc0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2090 Malicious code in analyzer_plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 747a848e1740f146ea6c00cc1bcc451280f4685bd6cf84e635361504de761cfe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2118 Malicious code in nncd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 728bd0a35f02971fda5e94d1102c6c85d388f47e770cee0da8f92e987cce94db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2028 Malicious code in @tim0310/fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 622f4e3ebf1f361078beffb0b92380f7658703123c9f9e0f86a053e8cf6c4dfe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2023 Malicious code in @ethena/shared-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aef2408e95a098dd74ce27cc6b45910bd5662840209b1b083e75ccfadd5f51c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1867 Malicious code in internallib_v137 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfc8d0ae7cdda885edd8669c51b75a4698ae8bc337227cdc4cb1bf0cacaf7cfa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2041 Malicious code in internallib_v488 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f37f04bf2b99a1dd9d1b1233d8d2f7146da088e20564fc4bb543560acebb10db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2034 Malicious code in com.frl.aepsych (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c4e1684783c900a2076b5a9c57dd33a1495ca2fb4104bcd91e856a42415f089b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1906 Malicious code in npm-manifest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ade7d6d1c64c23c0b5ce1641cbe6a421ae5e995127affe277b05a6328ef012e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2040 Malicious code in grpc-examples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b24550ca95d1b3f32e64730ef0909c4080788c96e910d97b45b9e598e4b9c222 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2049 Malicious code in sc-twitter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f06be1b77e7ae85e1f2d220297011b6ba20065beec02746e6ffde49d5d56aa87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2046 Malicious code in ossar-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8bf6218656218d743c04b66e989f4f9615fcb7727df4d40cc13d4dc4135a4cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2030 Malicious code in accept-a-payment-playwright-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a7c8fcfc301cd02159a59241fc90d212ace8d247570cbdd7b66adffd6579d05 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2032 Malicious code in bindbc-lua (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c99a42c2ca94208dcdd6dd74e22b5b79b9b211d2afd1854339f31be90d6cd75 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1882 Malicious code in lowerlatency (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f700dd666f8c638ef80313c4c023741eb86e82499846ae16439704f2136ea28f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1849 Malicious code in init-discord (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36972be42f049d52fed075edc83a9547e8c60c890dffcd5fe24b486cf40feea9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tablegen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3570d8e35e0d101811baef90ca7f5697fcb57be4cf3d82558480a54fb37d99d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1574 Malicious code in behat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97effea6d055142393f3490e378f102fefa698c3b40c3f9d0d1e3fb46df23639 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ethereum-producer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ad34d841dff398c9fc38a86363950e59b3c5a6a3af2fb02d596472a11878d11 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1582 Malicious code in ethereum-producer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ad34d841dff398c9fc38a86363950e59b3c5a6a3af2fb02d596472a11878d11 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...