Malicious code in prototype-poisoning-package (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb7e50b04c4ffcf207fdb21b54873ca1488fe7dd526b90c1206bc830af9b111b Any computer that has this package installed or running should be considered...

Malicious code in online-learning-components (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1edfb9c66a33f5e0185fe0ee1fb376f5a4f7974933a07e53f9e23d3281d4fe83 Any computer that has this package installed or running should be considered...

MAL-2025-5448 Malicious code in online-learning-ui (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 853a4095a2f08a67260f3c2220bc45ef9484b10db0a4f909560bf36485cb54cf Any computer that has this package installed or running should be considered...

MAL-2025-5417 Malicious code in i-just-f-hate-bananas-plz-dont-mind (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed1ddc36f47ef52c0cb79e772a23bbc635d435ea0029cddcc4ba60ea0a6ced5e Any computer that has this package installed or running should be considered...

MAL-2025-5386 Malicious code in core_filters (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0388fabeab56d72e90650b3865adb97acc2f6b4fa3605a8053feb33282554bdc Any computer that has this package installed or running should be considered...

Malicious code in cf-install (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13bf383febbfbe211ef3966d1f7449a4bc3e6dafb727078945f859a53298a12c Any computer that has this package installed or running should be considered...

Malicious code in phantom-sdk-monorepo (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64a02da8340505757389af71a4289fd4f3fd0825fdfcb80ecf3a848d8c3c6db0 Any computer that has this package installed or running should be considered...

Malicious code in react-plaid-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2e5a7cd6740a8b92b5b0c681bce252fd1850ace8501de899aea496321176c95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5281 Malicious code in json-webhooks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 776d1361c31fc0cb7ceb907404e53747cde097dab00614dafac0820111281ad9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5380 Malicious code in comp-base-btn-switch (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14384b4ee9a2e634b9dcaf1e9530d4080d824af4af82fdea8084b744f81c5d7f Any computer that has this package installed or running should be considered...

MAL-2025-5423 Malicious code in jira-agile (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b307068138257dc60d3d453177920dea6a81e6e7fcc8805a80b805ccbce9fb0 Any computer that has this package installed or running should be considered...

MAL-2025-5288 Malicious code in spoofer-ip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2da3af6f33c88ebffe3e46690a63880708c162a1c710ff72131cf99f3ead9674 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5287 Malicious code in rush-sdk-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fa10be10595dcaddcd28ad64cd62ae55a44b7354d6bb1de952adc3cdc5b5c89 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in undeconf (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 513c9e34a7d02530bdb34fc364d7c5411914263c5960f4a4cc7fa967c3c01f36 Any computer that has this package installed or running should be considered...

Malicious code in jira-help-tips (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8b0652aee06598b2ce4f2f215e70f168e2d91b3058832a20069ac391d6a3c0d Any computer that has this package installed or running should be considered...

MAL-2025-5267 Malicious code in bb-escape (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c12a3040a5a5d582f119c2e5627a62dfb92632bd4b8a66b9720f1251d114d878 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5256 Malicious code in cow-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec44242f9020d783beed05cfcde0f36b21e9f0aab0839e5eb28ca8af9335c6af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5257 Malicious code in cow-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86027f9c178f88a55b8132bec7d8d2d50d511160dee3327694cc8fe78be2f224 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5374 Malicious code in callsign-async-runner (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 993c282c40085606e14525d46841a996c7a8dcd50109db7828093a3d60254942 Any computer that has this package installed or running should be considered...

MAL-2025-5391 Malicious code in discourse-mf (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08376ea7d043c168bc4090d97de1318100b0b2ffb0600a3694a286b5c4b88dea Any computer that has this package installed or running should be considered...