MAL-2025-3844 Malicious code in nayan-videos-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d1573283fc5f3c3cc201c1ab6beeac91054b77dcbcf01aa700ff72240c02260 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3832 Malicious code in imran-alldl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4135924c6afe745ca653dd855ac4bf05a7d936772e716fc817e49a7e586473c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3799 Malicious code in test-vite-favicons-inject (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d3449494a57328246d3ca9d479084793084fb98a35c45e40ed4a82320f60a5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3798 Malicious code in node-method-indicator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60414121dfe5a164bd132ab93d581199d55ba6bff4e937c7b52ecf6ca5fa1e0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in next-logging-patcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6bf5e5919b2540c762616d719c6fa3bfc0baa1dc65bb926ef097766659727298 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3965 Malicious code in gltfvariantmeld (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0155401f6326638ba77892ee9e8132c5d7094e7f8bb20e46f22b995c255ce0a Any computer that has this package installed or running should be considered...

MAL-2025-3780 Malicious code in mockman-js-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware edfeba68a0ab8249537859bf5e710af081fc2dbff163cdbd8af1b663966c82d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3772 Malicious code in snake_case_name (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 523a9ab72af7fe10c7976ffee184cb3448e165fddab79bc2cd117f3b88d7b4c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3755 Malicious code in abuse-ui-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52f0ac6f86a904aee580160f8eb62130b70b4e6326a6e843cdc9977622b50add Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3767 Malicious code in lavanew (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 574195b256d07782673f23ff2e7163f26dc2cadd4dafaf8ace366f77130bf4ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zksync-root (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0af13565b82b48cb80a58f21db293bbef9f5ef83e1c4fdcf67534110215bab9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3769 Malicious code in next.js-localized (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c257230b6aa3eee8eb41aece41156d6db7125e6a3973b74006f0b4b4630d28ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3775 Malicious code in voting-client-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf794ee7b143c582d6e666fee322ea82e99f42c967869b76953c90e12821c6a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3768 Malicious code in mag-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 176013c7da15d3a2ba1b47d046d94b0397bfa720043788e097796ae84cf81258 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in next.js-localized (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c257230b6aa3eee8eb41aece41156d6db7125e6a3973b74006f0b4b4630d28ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3763 Malicious code in frame-minter-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware edbfd183462b159a20b8cfbbf493357ec40a76dc283c070eb9a9dfb8e4f172fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3722 Malicious code in solhint-plugin-chainlink-solidity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 707e27ec2b3a13dafcee9d4ecd372bfd4422048e3ea95c8c5e57a6463777cee4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3721 Malicious code in braze-i18n-knockout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca6ae5dbaa6927991987f0b0e26192dcbfc2fbcbeeca91e3cb34621bd6f1a48b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3720 Malicious code in fwm-poc-built-sites (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa93c0829bbd693830f9aeffc69c03a26071b5fe6d560c9b1110c4b52e54da37 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3669 Malicious code in superhero-turnip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d69e2637a3683b1221571a71874774c0abaa62cd5804c7e846ab5eff6477ee2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...