MAL-2025-1594 Malicious code in florida.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3d7e6be1bc774c1ef6319cadd069a16f80c91ee44eb6b07fdfe088661f0b0cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1582 Malicious code in ethereum-producer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ad34d841dff398c9fc38a86363950e59b3c5a6a3af2fb02d596472a11878d11 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jazz_services-handler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a10ab75b61db729e2ded7abcf4d5af6329e91554ab796f26e081becc4cfa851 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1635 Malicious code in ts-alpha-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70c8f2ae0b7a59a7ccefbf9994c9b2bbfbdae35fc8a5e00813f91126eba04074 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1583 Malicious code in example-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8f7b351d38960b71f0f51ada047da6ff08501cd8f58b679cbfd6e8c5cc7b032 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cosmos-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6053f00c9e4d23811647b64304eb319d346117494a434dad02865fe92a7e68e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web-pw-sample-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6a6e13078b7457900b4b0b41c62e43e878b548e8fd51baf5f2e2d9c567e90a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in falcor-express-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41a16c5f789993af6f19fffb815a56c859feacab1a40cb4b54ab9eb3ea92afef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1643 Malicious code in web-pw-sample-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6a6e13078b7457900b4b0b41c62e43e878b548e8fd51baf5f2e2d9c567e90a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1593 Malicious code in floqast (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee9b823d5e1026c463d7bfda29b3832b2d54415a7bdd50538e1faf5d9ec0e6e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1638 Malicious code in unpnotifyserv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae8dc59eb2d9dac2d74fc1c76d26bee3a61d3a8519b9d61195455646c024585b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1597 Malicious code in harper-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 711268fefafa8fa1f45484f2dbb4d83b7ca0c87621b54bcde26e36a9717059b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1570 Malicious code in all.en.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c395f6ed37dd1a8e6b2b15422babd65aa6c8f28456ef07e8951ac7ede5c47173 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2236 Malicious code in @supera/share (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c348a3e52ca7aa30cd6b9bd7234d6385f1305e8c0f04c400ff236df303f06628 Any computer that has this package install...

Malicious code in wasm-test-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware babc522f7d7785ae4fbf04d28f89e4db9b46fbec0308879dad88b4b27542f1bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1486 Malicious code in jetpack-e2e-commons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe798df756e79d2deb6db29c4675b6e0255d8d3607198c924e2ecb4a485b671f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gutenberg-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8fb42c4eff5d51a88f1a658c1f8fa57f9f43e22f1d6220b0de54ab39b1df962 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1483 Malicious code in go-bazel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ef352c6aec513ffecba2cb9cc5589dcc443af7a64f66a2a495e2c9135f31e86 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in schedulermpastakash (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8011bc16764621a0c246e8c0ed40e150a3645ebe14b315d9a61c96f014a3653 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1489 Malicious code in list-files-in-pr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2dec57d2d81d6a09a279dfc443753f7a1547d3c838aaf0ac20b735764a88c9b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...