Malicious code in @jmerhi-atl/evil (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91620aae25b612bc0174c38ae40a4b87860a8070824a4fbb447968986ad8c368 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5663 Malicious code in @jmerhi-atl/evil (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91620aae25b612bc0174c38ae40a4b87860a8070824a4fbb447968986ad8c368 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in solsafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c0e330c03bcbf5c40a3477fd4fa0029e71ee952bcbdc57bbaf89d39cbec85ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5724 Malicious code in react-smoothy-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4605263fb8378867aadba09b4a6f0265ce7325871f0c56d09e75f464cb397e39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in boost-chii-90s (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce6390292c9c894f446340d69e7ab97d7fc565aa97aec4a06eac08dbd93e56cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5676 Malicious code in chii-aungpao-new (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7612d6bbbfb9dc1ad7c5edf5f536d13eaa4e20da2e1a895caeacfb8b0e75140 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5672 Malicious code in boost-chii-90s (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce6390292c9c894f446340d69e7ab97d7fc565aa97aec4a06eac08dbd93e56cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @instant-postgres/neon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5998172caafd763bd9d8fc92acc7e18e96f4a14c19f5871e16257eaff6547366 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5662 Malicious code in @instant-postgres/neon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5998172caafd763bd9d8fc92acc7e18e96f4a14c19f5871e16257eaff6547366 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5660 Malicious code in @bosch-iot-console/rollouts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76a7c59a1a8e53130cfd7701d08a305d5e478e43a2a5b39f57258f504069f050 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jsonskipy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 825aeade17635320d2922155fc8e36ab7810c8cd83aa62a8521613534dc52e0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5725 Malicious code in restpilot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea95902e229e600fed776ab58f9216738dd1db24c03890b9902da283f3413623 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5702 Malicious code in io.ox (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f943d7e85ce7b15cc0e8fa0f234c36503767f627e103ac8062d96f57504efbe4 Any computer that has this package installed or running should be considered...

Malicious code in zplex (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ad25f43dff85fb90079f71e1416944834a6e7244faf6a1c75aa20fe17661db3 Any computer that has this package installed or running should be considered...

MAL-2025-5742 Malicious code in zplex (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ad25f43dff85fb90079f71e1416944834a6e7244faf6a1c75aa20fe17661db3 Any computer that has this package installed or running should be considered...

Malicious code in pbr-client (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4933f0eae305db421cd46414b1773fb97338c6966af0abd06e1232ffe4c4c96f Any computer that has this package installed or running should be considered...

Malicious code in htmlbars-inline-precompile (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c4a212f0a71820f5e5ac4def1449d454a87b95082eae0de676cc3e27006831a Any computer that has this package installed or running should be considered...

MAL-2025-5700 Malicious code in htmlbars-inline-precompile (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c4a212f0a71820f5e5ac4def1449d454a87b95082eae0de676cc3e27006831a Any computer that has this package installed or running should be considered...

MAL-2025-5649 Malicious code in @subdashboard/shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b9e3ee4d3e2596c958c832ed9062f00d7b03289fa32f9f3a5aacaf2a4974f47e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in securityresearchpocaplmalpkg (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b52864b8ab4058696fe0a34e9cdea2db8e1f9dec2fdb22fac1adeb4143cc63a0 Any computer that has this package installed or running should be considered...