MAL-2025-49256 Malicious code in custom-tg-bot-plan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10cef01d344d07be2f72b365cb97f994a5cea38eef145b5b25de21f1784cd740 The package custom-tg-bot-plan was found to contain malicious code. Source: ghsa-malware...

Malicious code in sabaoa-tg-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 555fda036bf0012711b8105d10f56495dc602cd4bae8463de43ca9cd3c404a1b The package sabaoa-tg-api was found to contain malicious code. Source: ghsa-malware 6876d341cb9d5baf0af61f7e2fba4237ef32a159e156fa127940553d73e1a571...

MAL-2025-49266 Malicious code in sabay-tg-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1f452097f93c1e4228b1e2204035d8fd6b3fa34b8315538d750c8b6df30f766 The package sabay-tg-api was found to contain malicious code. Source: ghsa-malware 0937cd6e3bb2fab7264080086c8daaa0096e2efe839d71325cffbdee6c661011 A...

MAL-2025-49253 Malicious code in cordova-plugin-globalization.moment (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 431a9d9edd37d8a5dc80555f3c56e275f5c79162ed66ae419cc7b2450c6ad75c The package cordova-plugin-globalization.moment was found to contain malicious code. Source: ghsa-malware...

MAL-2025-49273 Malicious code in ve-hemi-actions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1ce1c8c14c652c22fede3ed26692b173255af2cebbbfe34e91d78ade7b5f9eb The package ve-hemi-actions was found to contain malicious code. Source: ghsa-malware 13edaf6e255d735724b90e45ce9e8ab5c1d6e0f0474ca23ed567341e4a08183...

Malicious code in esg-odf-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55bab458b0a0de6c4110ff28d0306c52de1e31805de0c76f8f188e2c823b28b7 The package esg-odf-common was found to contain malicious code. Source: ghsa-malware 610621a777be160598ba0a95213ed5f2e5645ce0806077fb9f2d1ef65fcdddfb...

Malicious code in nodemonjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29d8b4f06839f74e9f9553ef061c6a797169cecd0b6b28b4ddf1e0fad6252f0e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xo-shipping-change (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 194261ca5ce11a3a819c4aa938f33cd04d1089a614c0e1a224229efae8fc0edd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xo-login-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fcdb01161dd908ab60a75665ae19aceaa087fe291da7b8be7c5a7eb44b00011 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sort-class-members (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86c2b9c84144bd26b1c4abd4d6fb5b71a8f4aa1937912d8262778b0bbaec58ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-github-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e04576802856f7074d803ef7546dfd6b0e548ceee7429ad5dfe39b153b3e756d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @apache-felix/felix-antora-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b51d8cb92483d748cafc2b53ff5dfcef6b4c8e4dbe7b73c671a3a5cb338a9aaf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in airbnb-bev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e11166dde82656e7792ef9096c5b2720b2ead7d9209c71dbf8a8a07dcbbda249 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48956 Malicious code in @aio-commerce-sdk/config-typedoc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7115c3c8e9d8049f239251eeaf99504698b6eea04f36d5490dedff17b173f77b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in transform-react-remove-prop-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38145745ad3f626f3b5d35e2d923d4eec412bed8c0e4d5532dadbc5d53e5ff49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mourner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f18af0d378a61144c08db151e716049e3382641abab5eb75718aca6c4fb19d00 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49014 Malicious code in jfrog-npm-actions-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a600f48287c23fcb6db85ed0ed084de6ce12d7d3fab99e327ec306c6a84ea7f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-async-component-lifecycle-hooks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b86596580a0488101dcd9ed96f5ea0f204781bec3f49aef8c990fa3c93a17a14 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in firefly-sdk-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa500d2c9575be38d669c176c963359a471ba4af4853d21ba5031d9f8ed93b33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49018 Malicious code in lfs-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c701260c51375b73d9b993340fc1b603958a46bf115033de75a5a57e7b1acc35 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...