MAL-2025-4005 Malicious code in ing-lib-investments (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 503bea11cdda0462a5a3704bfa53fb30372f852aedf852305e6826460f1eb140 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4004 Malicious code in ing-lib-hybrid-advice (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43233b9c11677a5c79253413dc5628b4dcfaebddec6db40219fe7581ae14e288 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4011 Malicious code in nestjs-translator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0ceb5fa1318b74c2003c389bed9724f792a9755ee095548718c1aaead2bbaaf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4040 Malicious code in web3author (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c522da4c7937de32f654a150ca5e926181795d3dfe8936f3ad6c58850e22cc78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4009 Malicious code in logdna-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5e677b0469d410d4bebb15cebcba6f551b7f4dd27c9b05e9e3162d6abf87f56 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3985 Malicious code in babel-loader-fs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1700e85206eea0c06ca2bedd5155e402644feb176d29155bb5194ebaa3096336 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in seaborn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 116194ff3ad4c154b8602ce48bf1f8d2fc1ed124aa084b141a332bdee60770fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in foobarzazarazrarzarzararararara (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0cf0fab44a3abede823198bb1ae9cbb097566d6be7f51ec3168416a38e652681 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4021 Malicious code in secure-data-checker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b4c358b5a571c99b8b2f4b94a39729183ea9d5498e9407722a73f366bacd2b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4037 Malicious code in vue-dummyy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6241d145fd412d07b8a79b94c04cb3de90a04f2b83e88bcb9025dd27f8f06642 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3941 Malicious code in moonpay-sign (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b5de9ec184be265177d407487382fe8b9fb3b0a9b975b1d2570a06d6c054c70 Any computer that has this package installed or running should be considered...

MAL-2025-3939 Malicious code in spingroup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c39f718dbb6417a92610be6705edea190e4adbccbe0a2e80ede465e0a307c917 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3963 Malicious code in dojo_10 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8917f5f3c438feb5b1106f4aa4293fabc6fa81bff53105084df9e6113f0c6c0f Any computer that has this package installed or running should be considered...

Malicious code in blahblahblah-definitely-not-a-real-package-name (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2200fcdc37007fa010dea283e42096c6211571af64a48492a2fe0b550a39ac62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3968 Malicious code in madddterialxtest (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ade0001a744bc3e2988313f7e0ae461d922acf285bba0377b34b1c33cf54d16 Any computer that has this package installed or running should be considered...

Malicious code in driver-app-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3570e82c82a42968f9af1f2c57c421f5b73880688f83466fc4310325ecb60dff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3900 Malicious code in lcs-ui-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b66ec079f142a51c33d484015aab0384b514dca3415e27b84138f92dd2ea818 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in linemtxworkloadui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bc869f0e5403668a9895197b876def013a0a60be9f956922a83a62e77c22f0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3881 Malicious code in date-min (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c85611f0d2bf7147b9f3fc95fad6c21702ef493fad36161c2e8becab150a2d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3891 Malicious code in grew-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4ee10df9b214f88ce9a202b5f7cc418a407053cc3ef0518b2751e4dbe7d06c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...