Malicious code in work_app (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81b4979cc69d5d0ba325defd831077b342ddd06fac16258ab3dab1b9fdf31287 Any computer that has this package installed or running should be considered...

MAL-2025-5429 Malicious code in kwp-client (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c4b82674a8103c96e95f1908e00927362c610a522b8f7b8cf5c3f4eca192fef6 Any computer that has this package installed or running should be considered...

Malicious code in kwp-client (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c4b82674a8103c96e95f1908e00927362c610a522b8f7b8cf5c3f4eca192fef6 Any computer that has this package installed or running should be considered...

Malicious code in event.custom (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d4e1a2acf7b5dbcce868542bf3f02afdd7175b413acd4d4369a891863a7e7f9 Any computer that has this package installed or running should be considered...

MAL-2025-5406 Malicious code in event.custom (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d4e1a2acf7b5dbcce868542bf3f02afdd7175b413acd4d4369a891863a7e7f9 Any computer that has this package installed or running should be considered...

Malicious code in webengage (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b526ee0b000536b84421cac42f7eaa62010d08785c0d61238fe4c3afe8a445d Any computer that has this package installed or running should be considered...

MAL-2025-5479 Malicious code in webengage (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b526ee0b000536b84421cac42f7eaa62010d08785c0d61238fe4c3afe8a445d Any computer that has this package installed or running should be considered...

Malicious code in sap.ushell.components.tiles.utils (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c610571a96a422fc7b583bd55f4996dc51b894fe4d4a8cf415f7ebf1be5caf7 Any computer that has this package installed or running should be considered...

Malicious code in company-secret-lib (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c27b257298761ee280760199b503ca3be60adbaf8ab92e36479e291e33db1b0a Any computer that has this package installed or running should be considered...

MAL-2025-5381 Malicious code in company-secret-lib (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c27b257298761ee280760199b503ca3be60adbaf8ab92e36479e291e33db1b0a Any computer that has this package installed or running should be considered...

Malicious code in secure-r007k17 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bbd04d692c36ca50563b6dbb1de8053730817b3f74b9e23389dd90505621062a Any computer that has this package installed or running should be considered...

MAL-2025-5459 Malicious code in secure-r007k17 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bbd04d692c36ca50563b6dbb1de8053730817b3f74b9e23389dd90505621062a Any computer that has this package installed or running should be considered...

MAL-2025-5349 Malicious code in @hamishwhc-testing/evil (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7590a5320a6247312b359ae81bd9e3161b399e1e70f505b55a7a34e5f5f4bc3b Any computer that has this package installed or running should be considered...

Malicious code in kkyun-xss-payload (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1bd0f20981bcaba676437572f6a28aaa3906a4f60469e5250aeb06dde75cd461 Any computer that has this package installed or running should be considered...

MAL-2025-5262 Malicious code in vite-loader-svg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5880f6d590622e99ff921eeb4b6de62bf0d1c7401a5c5b1cb7137b2b091769e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-loader-svg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5880f6d590622e99ff921eeb4b6de62bf0d1c7401a5c5b1cb7137b2b091769e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jun-xss-payload (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fcb0bad0a9a4d062fb4b4b42ac803616eb78ce2cee23746dfc3636d0909ee918 Any computer that has this package installed or running should be considered...

MAL-2025-5425 Malicious code in jun-xss-payload (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fcb0bad0a9a4d062fb4b4b42ac803616eb78ce2cee23746dfc3636d0909ee918 Any computer that has this package installed or running should be considered...

MAL-2025-5259 Malicious code in deere-ui-commonjs-shim (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a67ec4bddb1b8af04cfc08903b303377f2c20937c3b6f13287bcb450d2189a53 Any computer that has this package installed or running should be considered...

Malicious code in braintree-dropin (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 975d9545344189dda20be0c6790c2deebbd8fbf1d3b992641dea6f1044521436 Any computer that has this package installed or running should be considered...