MAL-2025-3668 Malicious code in yandex-lego (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36575d1c04d04a70393c42d013dfb94f94d1dd8211785aaa3b08414cdf0fb421 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3678 Malicious code in ascpc-npm-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7dfc46bf902782d78e5120173d965b16776b6f7d52ac27e8b6a05eb734290dce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3677 Malicious code in @starkgate/web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d04ac8d00e82f7a03fdd3b70ec5682e6ebde4a7fb03c4f1459f2b1125db11296 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3691 Malicious code in log-task (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 931fa544f576184bb148710757dc77752a974c0fc3d3e1f29f21a416e845c06b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3694 Malicious code in pixel-percent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3dd56a17e219443b9eedca7464cf3adeb5e1306d51ab798215cddf2313c3deaf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3617 Malicious code in compiletest_rs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9cd95ef043b7e2b1458531987e232b76370e2a8a3d371083afb6ca8a1b03b698 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3629 Malicious code in jest-coverage-merge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ba5a5156001dc5905f26356e46ed61644f2bf619e0156e1a4dca3ea75fc21f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3618 Malicious code in cordova-plugin-permissions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d38eb952cb4b2282aeba8c61e9dbc84411d23c74b33280842be8aff6aa0ff6a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3632 Malicious code in josson (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c585f748cf244fb99fd1f095a3df5fbe0d7d7112abfb274d4bcaab86a1f3607 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in commons-net (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01fc821715d3f327c2080415c9a3db5c0f95a8a9f36135b0e6efb377796227da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3624 Malicious code in internal-company-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6546fa1cf98f708a73bf9fbfdaeeef7667dc18db200c8b221c4e61a1507d02a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3656 Malicious code in vue-ssr-devtools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea182277a6932c17b90af3e6d99aea3b0824f5ac77dff35caaf782c3ce87c150 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in your-published-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cffcefb87ba1dfcfc4089b98727de2186cb5179c69a0f7630c359ff62ba3546 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3640 Malicious code in platformio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a9bb7d5665eff08ce5b374ad9aed6cfbc3e52382b8844ec4debdba9b0de6ac6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3628 Malicious code in jade-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b17361af15b63f316aef53a11fb6661254a32f301abc9e431c1c2e08f54bdc0e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3613 Malicious code in awetz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50ab38a23d32c01ded4e220aa81684169b2a15b5f423ddac77957543d2da8c7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3620 Malicious code in flashcanvas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2a7c1d4db3a33aaeb6b2b80bf058332cdd082406999470a56960c36f28ad99d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3712 Malicious code in eipsend (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3604c7d9351ed524566db2c93f9e4a9138606327e884352f93f2efab29494390 Any computer that has this package installed or running should be considered...

MAL-2025-3611 Malicious code in arena-plm (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f794e10373e988ac142e6dcebe8943efb8a623a7c9db9bee70ce592ef1e5746 Any computer that has this package installed or running should be considered...

MAL-2025-3583 Malicious code in selfbot.js-v13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbdd8332c80f739c8bf3a99e9f32609e53a108f2f7eea79c12d65a8af551c280 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...