MAL-2025-4338 Malicious code in env-platform (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75c55ff102f0d25988d4591334d7aeafa4f43877f5d7f248e861ae77a9dabfea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4297 Malicious code in admin-id (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c5cfce31b518acf3e531f6865cbc2434b5eacf844f1a47c768fa6d30bb15fc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4320 Malicious code in com.unity.jobs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ecf93d5628b724022ac35acd7556ea1b0636ea9fcc5e9e141963fed03258e5b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4287 Malicious code in staking-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb6f84262bc3391750bfa34e411cac0d29c2bf8574e291b22e0a700bb0734554 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4281 Malicious code in node-telegram-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5b37fa136531c0a67cc2376f7806ed7815076d3947395b944423d6bce51c94a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4280 Malicious code in node-telegram-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72079588d96648ea82b5bb1d6e2001a7d5b38d651e7e2589274433c93ae1eb25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in icloud-sod (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 528df6a9814a12abf16c70b3d096b10babfdae854b8a9952ab8ad5b69790a077 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4277 Malicious code in n8n-nodes-zalo-user (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fff1a8791a752e87f1a9bd5aef641ac599fb9f936badc5fc150c641dabeb6ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4092 Malicious code in keypair-encrypt-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a2d0ae49bf40dbf55ae8f036a2014dccfa4ad0194cebdc787acbfb69658df40 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4063 Malicious code in blackfriday2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea46c1595a31ae67b3264abb90c40b1cbb3d49a2831de07cdb36e1556a522afc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4090 Malicious code in iterationplan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30c1be7f98eb865b7ab37c0f47fcf74149c6d9d734f558a119c77f68c686eb2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4088 Malicious code in heaveho (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d891c8627cfcce044794845c5d4560151e950b9553f1284c9b7d2108f144820b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4083 Malicious code in grammy-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0ed36c0c9d339418b7fb4e6d6a1935303e10cf8837050934a3d6d61f0a1b6f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grammy-telegram-bot-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f9cf91971b8da8348bf38f6f6b21351467c1d6e8eb00c76fdfbd4c52ab6f389 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4067 Malicious code in chii_wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68a610d00eff2b9ecc9c1eaddbb33df6da37fed367750e31c9bc4ad81cc9f0e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4078 Malicious code in erelaaaaa.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8c354a8ab7b29a96fae2ca2148dc8eb97685f90fcb2ffd4bebb5445a27481fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4141 Malicious code in web3ether.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47c43f30f81b5d3f68b5ecf6eb616d11edffd82599089dca17c8ab9acca56ae9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4119 Malicious code in rpc-selfbottt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9c64c2b69b111e1ddfc8dc99d780ac832b4148262e160c4f68270f30c5edd33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4127 Malicious code in selfbot-test-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fe10be5c7e9e981e881fc79b331035b4b37c0896e4386fdc8a3e4abfd9d5204 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4128 Malicious code in selfbot-v1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92ee16ff7e543c8573a19890767cf8320aa7357d16d99197788c25180b8a8be6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...