MAL-2025-4512 Malicious code in super-randomizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46a7beb67969c60a902fa65a47d6bd880c7de7d3d731f2cc6362efeddf2849ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in geeztdmailmodule (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ca73c4aa0b2964fe2de6bb1e1ee6f1b4784f8db098f2b46fb200a9217f1dfa7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4465 Malicious code in andes-landings (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5517e4d951819beeb0f96046d333d0f194e89f07cc61805837ed73e7ef85c77d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4478 Malicious code in front-exporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3722d7f5ad91f5a20aeeec9851391de8a664028ba2cedcc130c247042c459ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4469 Malicious code in athira-linux-arm64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03764ecb085360e3cbc92fb68e4f259af41698f01a6b6a4684c7ed5a899b12a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4495 Malicious code in nistagram (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d6ca9092341ced6379d414f9e438aabd38664481134f9685c69b43ce977247c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4511 Malicious code in stylelist-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a745d261f9e0527178f8d66fc90fa8e670e4112d2fb66d739750db3840dd35df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in logbin-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a860d6b1a8b2741117f04c81b0ef43eca85327c678e2a3a4082ea92af9d2b58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4487 Malicious code in logbin-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a860d6b1a8b2741117f04c81b0ef43eca85327c678e2a3a4082ea92af9d2b58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4499 Malicious code in recover-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9d2b9a72f460c7e7dd5dcf39ea9dc126972b71a2d18aad716e2b89e115ee690 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4485 Malicious code in ideals-views (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b431166595255a46759ecab498e49f019b7714c5000ad452f14345bef36264ab Any computer that has this package installed or running should be considered...

MAL-2025-4523 Malicious code in wrapper6 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 140a14258e5028ff6bb7a9fd20b73655263c97ed3f7039d184f6f94f2c776121 Any computer that has this package installed or running should be considered...

MAL-2025-4483 Malicious code in ideals-types (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01d29c96c89fba87bb3cf0cd09ee9fbca6559fe81267c0e61f61b5c3054b28c0 Any computer that has this package installed or running should be considered...

MAL-2025-4480 Malicious code in ideals-models (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9094b69aeede7f54491271e3aa85e2daed3a13e32c5bea91b73721225061b2d1 Any computer that has this package installed or running should be considered...

MAL-2025-4566 Malicious code in k8s-lint-action (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b445cff5be01caddf1be7a89f1cea09fce4135e635b83655ff150c35b8940e86 Any computer that has this package installed or running should be considered...

MAL-2025-4575 Malicious code in qsc-workspace (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4974f7cd2511ced3dc1db7b00b3241f9648759cd72693033c7fb72b32e82080 Any computer that has this package installed or running should be considered...

MAL-2025-4551 Malicious code in aspirejavascript-vite (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72a3fae658b3b58e8fd33d7e794a9a976ac6f5e8c1209d08099097b056b8cd6a Any computer that has this package installed or running should be considered...

MAL-2025-4560 Malicious code in gateway-v2 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware abe54b05ee1d5acceb6bc29fb2446737ebc56ffbe8b976e5e97b93794588ac8c Any computer that has this package installed or running should be considered...

Malicious code in winston-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c1ddd08c3507f29d71429f8b0ef2c9b946669f9eab8edfb1e739101e01e2bb5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4448 Malicious code in pushlabzy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b72cad9f6511e2786488a831c354d6e529f02319374d5dc97ccfd5efaa849aa4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...