MAL-2025-226 Malicious code in prem-fb-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5fbb6df275aa4fd3a58792cb72b230546beeaa2fe12aae5f63ed5d516907fdf9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-186 Malicious code in eslint-plugin-paste-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef7b4e70800026ad3cf2470622a7395db0d5a043654e45122e8ce535555604dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-175 Malicious code in contrast-local-scan-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 652706a3541c937da40c2dbeb200974a14635810d37d52b07ae884e52530c6c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-207 Malicious code in mintapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5484db8a5d618c5ab7e297e7b256b682dfc366dbf8955c4ed4ef66972ba7ed64 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-189 Malicious code in flutter_inappwebview (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 394e259ceac6eb2a72e92a5882933facc39e1ad19e0bf1a6b908a92ce115a28f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-262 Malicious code in zapier-platform-boilerplate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d31d0615813f82b8b9c9c67647a525eec158961e10cd91db9b2e781d2cc2f9e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-259 Malicious code in wc-skroutz-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 438709bf1de713b9fab756841aa4cba87bbfc22133ff796cb5ee46dcc8776d44 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-206 Malicious code in matic-child-subgraphs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 085980a7e031404b3267eff3f19584b087b5ce5329ce9fa17265b00ef3ea2f9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-201 Malicious code in lib-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2fe973aa7a191c3af7d728aa84fd8833989b5b4fa4cbb18ffff5595f890fa540 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-165 Malicious code in bbc-http-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 607310f08b0c054bccf0fd5902e86de74b458d5c11110bdb411ac30b04c0db95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-167 Malicious code in bc-bundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21ca742de853894958cf8e34ed10d1e17d9584d7b71e3513b533c66a7a207067 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-162 Malicious code in atlaspack-transformer-string (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57a42ac4c0c8a380053e88934749771a5bf26c0619840538587e7934116cd8c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-202 Malicious code in lichess-org (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cdb65e3664911d5ab4ab82caebca6255a38c6a150a4345389d6c934598101390 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-160 Malicious code in api-extractor-lib1-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware adb0d44be0297f3bc8ce73518bf26326d7d8635516dd7e33c4b0d8f0e159054e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-233 Malicious code in prh-rules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a5e6bb05b0d252b543f928dda260a7af8cbc90e0e636614f789255b0cffb16b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-252 Malicious code in tinywallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ceb242bf6d84b9aedbdd5b1b6e619f85fd63fbb2cdb08a6096eda7975ff49c82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-247 Malicious code in ssv-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d441396521f48556524fd4855d512807ec7548fc10a968ecc786535ee98dac6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-263 Malicious code in zd-css-bedrock (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f5ed19a04835661c3c757cb19d1a1a55f869af076879b44b2c84cd0e66f9fd1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-243 Malicious code in solhint-config-keep (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d611bf7c2cb3e747177ac0214f0264fda6c7e83ed1a1f3a3aaf5327bf3bea388 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-250 Malicious code in stylexjs-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b0810f5fe9534bb182c28c449a4ad5dc498cdb96461e00596f5b6933f2b67b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...