MAL-2025-47978 Malicious code in jito-proper-excutor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5397e87731c5d42672f0ac041fb0935695b96a2b12b83eae8c7407c247eb0f52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47980 Malicious code in objectidencryptor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a56edf53649a4f75908a2ae90590fb378924470884be87f373662bce9eab61e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in objectidencryptor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a56edf53649a4f75908a2ae90590fb378924470884be87f373662bce9eab61e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47965 Malicious code in rechxaartas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5fc5d0a5a306249e1d1010a8dd5e2e8e90d41a0bda538921ad3e2cec981ab6bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in solarpeng123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82abafd54fec90c9d7c9a4ae67d1236cca9c5d03fc30eea07ee7a6606d66cce4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47930 Malicious code in my-ttt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e183b31e3dfa7feb3d5dcb77d854dc97a37725947d01080753df10123c5ece3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @hex-validator/v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25655f70d79110f8ebcab9a8760766907a283e49147ebd961e97b0009418cc1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @bs58-utils/wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c802bc1898c7a60b65bc2c2b2ce4d2c52bb29a73f0b93faa7c4e6e60998d32cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hrm-absence-frontend-deps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e83d68d053c95b30727ac72a2707c8add3c6426eceeb22869d8c6536887ad7f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-27984

Malicious code in bioql PyPI...

MAL-2025-47555 Malicious code in giffgaff-help-site (npm)

The package giffgaff-help-site was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d70e7af856cf858476096655334fe528a25eb4262ac3c438c7797794e7ec9bb3 Any computer that has this package installed or running should be considered fully...

Malicious code in tailwind-computer-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fe2d038cea92762b28824efadea2c16ed3b4d33f8a9da09a6a3eece138fd159 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in conditionsjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0435e7d1dfd8568f73471eb3a1fe65cbe2e5891606cc0f64ace4156091c56cb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nstudio/xplat-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57e90dbbaadf86b3e06a0b86bc92cf8e5545e60cf5c09fdfe1d22e59e56c67b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nstudio/xplat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 428f67f5c50b5dde563748444f509f1f52d4c606edea886a1906b387cf40198a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47002 Malicious code in @i22/rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47748ea5218b5ee35bfc50b911a7a41d04d1e19a74832b73679c1c376133dc79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47016 Malicious code in filigren-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b84001265dc640f83d6ea3e8dd5ac422aeb96be876ac2b9c9482b846b5d735b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47012 Malicious code in airbnb-with-tracking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b89eccbd26574ef7afdd79f2a415ff32ea562f29d8e293207973cd1cc50309d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47011 Malicious code in airbnb-slider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e14e7159b2af9b0e1adf08f5ab0d9faf24eb07261813dbe0af5cc48ff579f48b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in image_classification (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33e5c05f2c70291fde5a4ace56b3aa015c8c407695c02395a9a4336285e964a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...