MAL-2025-5267 Malicious code in bb-escape (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c12a3040a5a5d582f119c2e5627a62dfb92632bd4b8a66b9720f1251d114d878 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5256 Malicious code in cow-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec44242f9020d783beed05cfcde0f36b21e9f0aab0839e5eb28ca8af9335c6af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5257 Malicious code in cow-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86027f9c178f88a55b8132bec7d8d2d50d511160dee3327694cc8fe78be2f224 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5374 Malicious code in callsign-async-runner (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 993c282c40085606e14525d46841a996c7a8dcd50109db7828093a3d60254942 Any computer that has this package installed or running should be considered...

MAL-2025-5391 Malicious code in discourse-mf (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08376ea7d043c168bc4090d97de1318100b0b2ffb0600a3694a286b5c4b88dea Any computer that has this package installed or running should be considered...

Malicious code in core_block (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware abec18e0e968ed67b5d8b1b959a5d9da2c3cfea29f9bd1ac711c0a2fe70d83de Any computer that has this package installed or running should be considered...

MAL-2025-5365 Malicious code in bar.app.bar_rights (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d42cf077f7eef742c0cd55680d97ae121015d7f7a43d7b81fc35ce75333b382 Any computer that has this package installed or running should be considered...

MAL-2025-5429 Malicious code in kwp-client (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c4b82674a8103c96e95f1908e00927362c610a522b8f7b8cf5c3f4eca192fef6 Any computer that has this package installed or running should be considered...

MAL-2025-5479 Malicious code in webengage (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b526ee0b000536b84421cac42f7eaa62010d08785c0d61238fe4c3afe8a445d Any computer that has this package installed or running should be considered...

MAL-2025-5349 Malicious code in @hamishwhc-testing/evil (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7590a5320a6247312b359ae81bd9e3161b399e1e70f505b55a7a34e5f5f4bc3b Any computer that has this package installed or running should be considered...

Malicious code in vite-loader-svg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5880f6d590622e99ff921eeb4b6de62bf0d1c7401a5c5b1cb7137b2b091769e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5356 Malicious code in agoda.cronos.activities.client-side (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0928f5727876dc4dcdb9f1869badd5793565d97277f96836f85b5413f44bcaf9 Any computer that has this package installed or running should be considered...

Malicious code in react-smooth-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7510dd029031b29ab209e3114deb48a7ad72b83c7d10073376637b71e89abf7b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5221 Malicious code in art19-web-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 833f7a38c823fdd26727d7a6aec9c75365b96860e4723badca46db54163128da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5229 Malicious code in k00h (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8611181e62dbbb17a96abd393d71602a8ab52b9197629fe1d8724413c128de0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5227 Malicious code in gs_isotope-layout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc9cf2e5331d05d054643fdf750024a8608fd9527d09ee3b9f0ce18a0a424064 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5230 Malicious code in localstorage-retry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2eccc1f61f6a4e5f1c34925b0fe72e4660688f0f1fd594933cc71c605b3ceaa2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5231 Malicious code in masonry-thingies.js (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e70accfc2426ff18c07044dbff04eb2751b242ea1db0e71907cba610a17da65b Any computer that has this package installed or running should be considered...

Malicious code in nitro-contracts (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fcfdc095311c01986f57ec3730d8e3600f3c83ffb5fc23c500a51eed38ea048d Any computer that has this package installed or running should be considered...

MAL-2025-5215 Malicious code in mydummyproject-zyp (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7385c16c060ed95f15f1eed55e51d69f17bc1768a7ed955da163b7e314b62df Any computer that has this package installed or running should be considered...