MAL-2025-5780 Malicious code in grallama (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9a320b2690b732632ebf0fc3d95fb5e7b73a3da0fa8a36714880645805464c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5793 Malicious code in sample-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0517b841d711c41128943f51ef66b39a1841448b03eb175aec218d141d8fcdc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5794 Malicious code in sandbox-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59c5f2d0637a754e0e34c42c8102f8273c2274724e47bfb3076b1f9761eb217e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5771 Malicious code in dradis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7954d52cb9efed1e6bca698b7419519943e5bfd49e00332c59356fef7afe6cf0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5798 Malicious code in teeble (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87deeee00c8045cff04871c3dacb0e761b812fb25c0622a5aa66bc034f16d61d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in astradb-datasource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74096e53a09b27153d49c9d4e25426156f25ff82dd4c2f4abfd88ba3651f8a78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5764 Malicious code in azure-data-explorer-datasource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 472db0b9f7a8b98e15b4d7781f687b3418035ddb8c5f55f1b73d6ca8c4911a3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in imx-core-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b225b1b325c51ba41a89cf6d4a59cf1ea2451ddd7c224330962c43ff364d8cfd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5786 Malicious code in k6-studio-ui-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 066503bf35690fb58f38fa44cc7e64d0eaf5a0e5f352167029b6a5ed00a448b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5782 Malicious code in imx-core-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b225b1b325c51ba41a89cf6d4a59cf1ea2451ddd7c224330962c43ff364d8cfd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grafana-iot-sitewise-datasource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97ddf55083335c582abfc892f9b5d93c8b5ee5232f0fa07ae4da45dd8eadc84b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zigbee2mqtt.io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e185d275e7942dc0c0abd3cbf5b1cba185b969d6d54054fb427fa26369283774 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5685 Malicious code in dry-rb.org (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6cb554feb840a59c833bbd10911c129dbe4c18f03c9c6f70097517c20349f3b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5717 Malicious code in pogomap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 346daf8a2d0c74a0583577fb5a7a813715159cc2783cee412ed8064813f0f20b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5709 Malicious code in mulle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15589f9b2ebb828fe096efdaeef76974f774119ab4db373e4d9d5735399909f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5726 Malicious code in santa-barbara-weather-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8063dba7f69a647e89871018d17e8c49075e5fc748a2c5c009aae9a2d5d25e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5719 Malicious code in product_card_grid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7cff91597e126b61f1bb6911119a35d329959dadbfee0c086ccd4c7d79bf2ca7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @jmerhi-atl/evil (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91620aae25b612bc0174c38ae40a4b87860a8070824a4fbb447968986ad8c368 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5724 Malicious code in react-smoothy-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4605263fb8378867aadba09b4a6f0265ce7325871f0c56d09e75f464cb397e39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5672 Malicious code in boost-chii-90s (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce6390292c9c894f446340d69e7ab97d7fc565aa97aec4a06eac08dbd93e56cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...