MAL-2025-4659 Malicious code in ua-aio-h5-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab58d896f2b725bec2019a299fcded18aa3b8608029b55314c6b34b5c3d4d195 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4650 Malicious code in omise-woocommerce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 978dcc95cfdc2a3984742e165589b781c4f082929c56916182c817d9e30f08ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4638 Malicious code in atlas-global-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2da4219e6bc0eb3a57f45a9fef584e5c6b27af790d62395489febfeb78c5bf3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ua-aio-h5-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab58d896f2b725bec2019a299fcded18aa3b8608029b55314c6b34b5c3d4d195 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4644 Malicious code in https-parse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef1ec069afa771aee14fdc9cedd50a8db0d66030e38f15897a5816782e20a892 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in https-parse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef1ec069afa771aee14fdc9cedd50a8db0d66030e38f15897a5816782e20a892 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in blipkitgit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e899e9940707fc06d8dce8080f1ea4e59dbdfbb122526755ce4006c4e226d92 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4741 Malicious code in educational-depconf-poc (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8edb795d28942ec8fe6ea239625dc72e6a73b5965b8631c09f3544c800e54880 Any computer that has this package installed or running should be considered...

MAL-2025-4645 Malicious code in lib-wallet-pay-btc (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1867a5dee260868eb8f3e51c3df89b8f1e5752dd2c8529cbdc4ac73ab18d7394 Any computer that has this package installed or running should be considered...

MAL-2025-4658 Malicious code in terraform-provider-leaseweb (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4805b99d4eef235ac9d4e28a0c763325dac930bac26423b95e7c74a2f7286df Any computer that has this package installed or running should be considered...

Malicious code in terraform-provider-leaseweb (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4805b99d4eef235ac9d4e28a0c763325dac930bac26423b95e7c74a2f7286df Any computer that has this package installed or running should be considered...

Malicious code in parabol-action (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d82468091c3a867fd7981eef0555f14edc29822f932782c0fac1bf9e67a15d7e Any computer that has this package installed or running should be considered...

Malicious code in vite-logging-patchers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad6175bd8f5029571f264ac2f7c183d7d37e0d212c2389e025a9607ff8046f31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in logs-conf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef4a1814dc93accc153af6842fac26c03f1a685a3e32f0bba0fa8b91ccd0b2d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4628 Malicious code in logs-bind (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1b3e0356557e3a4e1419ab8464c700e9ed6ae5db88ab1e382780b8d2fbe622b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in logs-bind (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1b3e0356557e3a4e1419ab8464c700e9ed6ae5db88ab1e382780b8d2fbe622b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4629 Malicious code in logs-conf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef4a1814dc93accc153af6842fac26c03f1a685a3e32f0bba0fa8b91ccd0b2d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chromecast-caf-receiver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da9e3bcff87fe759eb62b6219f1c17a42827aff60b6c54f8948d49f99ca5d015 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4625 Malicious code in chromecast-caf-receiver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da9e3bcff87fe759eb62b6219f1c17a42827aff60b6c54f8948d49f99ca5d015 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rose-bsc-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0422833afa24ea6306580169f0075085ebb17b4758e03c3a49fa55b9420e3d2d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...