MAL-2025-3146 Malicious code in boss-ui-ats (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4aa5d2f568d0db7a56731ab67f01754428ac6deeb365683b5fd0ab8a598c26f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3148 Malicious code in chickenisgood (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1270418b58d2289ebd542f7a04a3089bd20b78e65cfb2a4d708020d1886bb69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3158 Malicious code in n11-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cafa63b85d8dc16cc6ca209e28fe286eb8193d6d25a4d9d73ea7ec2c4b82c25a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in stormapp765 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04a681db538ae851a3f840e7771e9cfbf20b575dbe1f061c22a0d00e4b9b333c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in start-state-machine (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 817dc6cbfa89267c683591874924c9aaf14005ca7e5da82c2d7ee55fccb52c76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3120 Malicious code in start-state-machine (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 817dc6cbfa89267c683591874924c9aaf14005ca7e5da82c2d7ee55fccb52c76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3105 Malicious code in jcl-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5db8fba1d3af4871fe70fb88d7eef37a6740477ddfe683e8258afa4345d7055 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3097 Malicious code in exoscale-order-party-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1d9e3bc751aa2ee22164b84ad162f528902fea7f8807079ea48c1a9d302b42d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3095 Malicious code in debug11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 494ce30e156e31a77830da340b86accd5cfe85da1c6bbbe4073277d4980b3009 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3113 Malicious code in phonepe-payment-capacitor-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c02a4bb7c5999768baf3318427f8aaffad151f7838f8bfdfee9ad952a24db492 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in invoicesettings-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3de3a7f2639414d0e6ff7a0993317695868f6538efb3c2e2e32fae55dac833c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3092 Malicious code in at-validation-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 073941142afe6289331b83f586f09f0fc6d24a27aa0b14a392fd7ec429658e9e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3096 Malicious code in disputeapiserv-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c234d2a403bb56f5512a4d647adfb222f46622a11a2689576a5f882442a4b861 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @hongfangze/derive (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26e43acbc8a628be253e93356cf6e0c1d304680b286519fdf143088ae0136e44 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3041 Malicious code in @hongfangze/derive (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26e43acbc8a628be253e93356cf6e0c1d304680b286519fdf143088ae0136e44 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @hongfangze/cryptography (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db133f41e9415e6a6e70862c87024ca08903312e01ae76b9d2968cab187e79a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3042 Malicious code in @hongfangze/email (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d003c3bc820422c79a6708a76107d9828e3df78ada0a45bd3c6732eba57c888b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3066 Malicious code in ehackify-workshop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6b886d5c20d3c03f44c4900a8073d17e4871883be89a22c897197d0a5baecb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3072 Malicious code in mocha-appscan-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21793e2495135513c49a9203796dd0cd7f455829773a96ca4e1ba435705f1533 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3078 Malicious code in niji-react-prettybytes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 572b7b0cfab3e7ae5f10e6653440bf2e9d094c7ca66110eef06083fcc94840e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...