Malicious code in waterline-mongo-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b59ac87de0044bdf2154f6f15d3b82b244bc9c62b29835eb050f3b9b215437b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4901 Malicious code in uvicorn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4f7ba398a2a6f412706dc52b14ad4928a3863790d54c8553cf728b68d373b2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4900 Malicious code in undetected-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 687b76dc0d575aed0afa6e7d747df99e768e0089d8a461c82a6a962a9ff9e5b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4898 Malicious code in typeface-myriad-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69986c638150b486614c90f972581c267ffae5a59069aad84bb0a2ff05d43f1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in typeface-myriad-pro

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-4895 Malicious code in throttling-proxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9b4f801ac497e2e730cbe31fe53c685dfa14df13b8db1dbb454e614a321ac8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4894 Malicious code in tedious-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ac4ed635b00d44b10eedcd216610356c00baa2dcc266a9d461b148bd50e62c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4887 Malicious code in spring-security-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1c1536bc422839f96c59d0abf7e874f94ede428b9047a56668eb0293b047631 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in scrapy-user-agents (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8ff2592eed2257896f8765049b3073fd6bb14f2696691bb3ed2f8925b0ea1e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4879 Malicious code in scikeras (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a571a503cad6f3d53b07cecdc303ec31a63e8375eaf27100ef3699961d08138 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sails-mongo-ng (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99dac97342765bfd9039172f29af80e20ed854d90c64b5f495703527188c6df9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4878 Malicious code in sails-mongo-ng (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99dac97342765bfd9039172f29af80e20ed854d90c64b5f495703527188c6df9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rlang (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd289b9631ea3f924b676ed269036ef6847da93210a3a684e5ef151915e5913c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4875 Malicious code in rlang (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd289b9631ea3f924b676ed269036ef6847da93210a3a684e5ef151915e5913c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4874 Malicious code in react-query-persist (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 510db02a90f329eb7d168ccd3c9ae2f89d81e24f4dae93823b0b1fdac4bf2256 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-native-atob (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b91f4867862f09ae93e8c5413e74fc6e717d421419c933ef721bf15df14c6e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4869 Malicious code in pyserial (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bad99aa8d1920abaf90491f3c8160c6903da1e7bdb086b854dd0e1e2ae434367 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4868 Malicious code in pyiceberg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5fa44fe907854125c2e5e5ebed5ecc53ad3578ce319bfdf5a92524c65793185 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pydantic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cb9e1c20553202c4b4edf9fe0ab41cf161494ea68d49f7c930d8a5059b6543b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in playwright-coverage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf8711293d366c2ab04b98c26ea6e6fbc5022a045727404387dc51c9496cb328 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...