MAL-2025-4412 Malicious code in upyun-uploader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d39297c53368e33317824b737223e0ddf0d3724963da6941d3d4a17596a3f15 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4387 Malicious code in performance-appraisal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3fdbbe3c18d12e46e21b82f0cd45dd7a710cb5d467be8dfd538483a6aa5bf3f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4419 Malicious code in zdauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ee57cb98b7b6e701dc1d19d2b0097b50f824130d6c534a5cbabb106290f9a6b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4300 Malicious code in appium-rn-id (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef7cb1de288405a6192295e5c90cd73f988b36e415534e40d460c8add2635066 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4343 Malicious code in event-sharing-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13f49cdbe899b99a1893c1bbba29d21d1f5b38fb841d0e2b297c9ed7c4f974b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4299 Malicious code in all-star-2019 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a0ea6c1d2104748e21c098ba44055c46440a50d30f9851de3d6991fc50e0960 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4373 Malicious code in mbm-dgacha (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 584950211093c6cada6fd340d94a5749b3ee5e10049a6d57b9d3f1c494050fa1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4417 Malicious code in wsticket (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7332aa1bc786ac92ad941e301b7f14c28be71906774177abcf327c06dd9021b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4416 Malicious code in web-ssar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e39aaf502276b11ea660f16f31a2f53cdb3bfa29b94df7b6d3a72a77f7dc33c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4330 Malicious code in customer-center (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b07f04df811b9a1153761f420a42baae02589eb630664403d8be7ce774481d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4296 Malicious code in accumulate-win (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7d58450a0e39a1b76cf94a28abe87bc0d2378707501c80df577818faa471d52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4407 Malicious code in team-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf80f4dc8a828d3686ff11039376a7c45d8fcfc2424f006ac52ae528030a6547 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4399 Malicious code in seamless-sppmy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0389a6eb1c890ee2de52f64fe14cf1cea2bf0a952bfabdde2686784ddaece9ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4335 Malicious code in dof-ff (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d1182a5fa877ae1d59bba4f4eef2ccb27c53c2549f97c27aa6da6ef9ee4701c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4338 Malicious code in env-platform (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75c55ff102f0d25988d4591334d7aeafa4f43877f5d7f248e861ae77a9dabfea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4297 Malicious code in admin-id (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c5cfce31b518acf3e531f6865cbc2434b5eacf844f1a47c768fa6d30bb15fc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4320 Malicious code in com.unity.jobs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ecf93d5628b724022ac35acd7556ea1b0636ea9fcc5e9e141963fed03258e5b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4287 Malicious code in staking-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb6f84262bc3391750bfa34e411cac0d29c2bf8574e291b22e0a700bb0734554 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4281 Malicious code in node-telegram-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5b37fa136531c0a67cc2376f7806ed7815076d3947395b944423d6bce51c94a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4280 Malicious code in node-telegram-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72079588d96648ea82b5bb1d6e2001a7d5b38d651e7e2589274433c93ae1eb25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...