MAL-2025-4575 Malicious code in qsc-workspace (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4974f7cd2511ced3dc1db7b00b3241f9648759cd72693033c7fb72b32e82080 Any computer that has this package installed or running should be considered...

MAL-2025-4551 Malicious code in aspirejavascript-vite (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72a3fae658b3b58e8fd33d7e794a9a976ac6f5e8c1209d08099097b056b8cd6a Any computer that has this package installed or running should be considered...

MAL-2025-4560 Malicious code in gateway-v2 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware abe54b05ee1d5acceb6bc29fb2446737ebc56ffbe8b976e5e97b93794588ac8c Any computer that has this package installed or running should be considered...

Malicious code in winston-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c1ddd08c3507f29d71429f8b0ef2c9b946669f9eab8edfb1e739101e01e2bb5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4448 Malicious code in pushlabzy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b72cad9f6511e2786488a831c354d6e529f02319374d5dc97ccfd5efaa849aa4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4435 Malicious code in expo-firestore-upload (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 265b76b510b5a24dcbc9d26be8211555349249589a6468e756c32680aebda977 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4433 Malicious code in etherna (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 878da0ca7dbd6a63e9de7b962c0012e3ca24afca42be819c3b86af0600939fe2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4457 Malicious code in web3ether (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71eb646c8da392b6145a0d668591f463f2439263b4a3dca2a5ecd0d6848f9ed2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4443 Malicious code in mxc-jsbridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a080d6fa2cab7be94e152a7b621f7fd9d0ce62e7a726343e61bfbdf9e676e427 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4440 Malicious code in mexc-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7500b4df256dbb552286c7f37d34b2748ff1b5ef9f95263acf51f4806a5b2bda Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4450 Malicious code in testsec (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ada8bf3ba2683fd1feca017a4fc4d57a836ea212fd98e11cb1c6ff480ba219d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4445 Malicious code in nsubstitute (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77033df9455e373b7e21f347210206adb17103822278b3d6dacaa8b69423cc7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4452 Malicious code in vega-embed-v6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef7c87f1683f40878cd29b73e1cdd93c106e07459ed60c1404af7f80af25853e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4541 Malicious code in @galaxy-nft/frontend (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf1ed32a09dd567fdadae473a43eb77d2c7e74601e2c9d136c3224813938bcb3 Any computer that has this package installed or running should be considered...

Malicious code in @fff-web/fff-utilities (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b538001307782f76d2333a860fd4464fcd00ee81502f585e177ec62b0541262 Any computer that has this package installed or running should be considered...

MAL-2025-4384 Malicious code in package-meta-resolver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0fb37bcca1d8bf72c0bc4ef5c43c0d728bfe21662b56cc705c46f806c8a8e46 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pdfplumber (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37f1840314016b3f29935e64789cd882de24a5544a6170ad4b123286942c5a56 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4420 Malicious code in zzr-react-custom-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cc679d3328b5509a2417ca20a366fb8e1113772f0f3e39a99e6fb2faab531cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4378 Malicious code in my-check-inline-loader-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 158a5f06d42d4341fa6161944260a13e1cd79d01a746eddd52ce26b77770024e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4356 Malicious code in greetpk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b48c09bd98c65b4639f2c692574d24bf39990f276196ce455607370716e4a1ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...