MAL-2025-3874 Malicious code in beautiful-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 366a123a150cfa4f12f17cdb337ca0d39a1b8c22e7d861302e8632619e51bf4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3888 Malicious code in flexible-loggers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ff06dde8fdb6c689a2645607380a7a1d837f2b3b3c16ba52c2bb6bc1ea69d34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3884 Malicious code in ephoto-api-faris (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ab94a5cdc5abc193f41c8ec94e6c008b88ec7e5121bfd6b73b514f6664a946f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3924 Malicious code in vsock-sdk2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87d1181c9c02b4d4e06d16cac778739608a055f903fc4b34137a5186bfcb3152 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3875 Malicious code in bui-react-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7efb9896b372501d00ef7c23655b29a8eed7ffe274410cb4d2748ec4aa96eda7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3910 Malicious code in nodejs-fetch-proxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80749ffba9365d62c589ea0137cde9db701626ae4ba97fc9f9149b61809ac107 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in solana-crypto-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb0ae4278aeded272c00f7218890bedf1e2e9dc77d03348eb4a1afe7fa277e83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3908 Malicious code in node-crypto-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d77d3f937a0c6f4071e5688241c3222eeb62c0033c93c981570e554400b14d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lodashing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bc06ac67ed3a5e36a05578a4914e72c57833d27babdad196f17a54c1ebea3bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fastifiyer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3da19b8f86e82a5ab61d8134531f7e1f001bf858555808eca76c3f03deeff06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3839 Malicious code in momenter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f430e51962da7f325413ad52b7f901ca944587f76401dcc9b3d30f6ab15f5d0e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3816 Malicious code in att-bit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c60087067856675af280cf9525ccb222374a8ecb4467310fa46160b79ea4a5e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in old-react-chat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d0ae29d9cb582d5c0be810adbab5c88a3409a65d0d94034301910bb1c735e2c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3802 Malicious code in this-is-test-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 42cc414b619b36e4c74b43260274d61dc8a3eba447bb95a4bb4bea65cc510722 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3841 Malicious code in my-worker-with-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cecbb57d34a074c40db552b59c6f1a08a5571d2a39cfdce21503791d9a563e31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3818 Malicious code in auth0-authz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5de2600b08c1473abec0bac3c49bbcd4fa9626350cd3eb9c2d325cda30b0381 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3805 Malicious code in @equis/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7017af11f786172b41ddbe4efe5d6f38373a9146c8b1fca39e212ed6403f8720 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3808 Malicious code in @nx-frontend/bonx-microfrontends (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7af50dccc3cbb0c3e00ef011f706bb39fc39193bcc2384fd252b362a4f06250e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3838 Malicious code in mocha-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 974699e98300e89373497533de0a530f3fd50cb861552f50aad60f7c3ab1ff4a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3855 Malicious code in solanaspl-tokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2216d2ee11e9fbf2929320950542f18aca964ed35198bcdd70a4a9c126eb1734 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...