MAL-2025-49326 Malicious code in monophonic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 638fb2d3ef5574e603743a5f8545f9bd01c8d2f544f628cbe041b12a94497155 The package monophonic was found to contain malicious code. Source: ghsa-malware 7a86916baf347f5489f90e15cce360f5a7bea0ba71f59130e66754f1c4acec9a Any...

Malicious code in genesis-drop-actions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9edb9a242cd3f939420031dd53e6057ae90e644f3a08fdc50bc1f92d1296832e The package genesis-drop-actions was found to contain malicious code. Source: ghsa-malware...

Malicious code in @gitlab-lsp/pkg-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7df0575a200975029552912084573cf0331e1cf02ccad8e8fd7e024536143ef8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49057 Malicious code in twilio-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20ffcb178cf9c4a8cc2e9e550a170ff42fa42a341a71eb80330990ce0fc4fe3d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49005 Malicious code in firefly-utilities-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 272b473a3935398e8bbe5ca323982f141f6961f34964660c00cc78fb21d922af The package firefly-utilities-js was found to contain malicious code. Source: ghsa-malware...

Malicious code in react-web-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c4085854cc31bff9ffd272cf1faf16a2cbe3d67d700b330ef7d21108bdd0f05e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jsx-a11y (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69d8158b553a773a363a5a4bbce1477f430fae7a45c29fe8f1855401337f4b0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49022 Malicious code in mocha-no-only (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a971050887c1e418b671aa4d56069074d05492afbcda3a8dedad2f09eb02d78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in unused-imports (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01031534d46574b4aca0e5341d43399ac25cf7c751f841cf6af2eec7b73fa797 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bad-santa-claude (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f3ae5211cbede196c8612c8e14c54147ab8c3984a6d1d26675336e526316bae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48428 Malicious code in package-f (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1deec43d176fc23dbd4cb44b3e1d4e90821cb98e441004f83c872d49ca281ac9 Any computer that has this package installed or running should be considered...

Malicious code in akasearch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1075d10450cfce61ccff3b97a9b8bf18a7be1d286b307dbff6e0018768baa4da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internallib_v600 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a2f6cf9ace9deb6352b5110f9550afd90c905590229ba3a589e3ad7cbb8d67f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48309 Malicious code in vite-plugin-parse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware daab8364c58e6745ad62419e65b56e53fe7e4dd36ad416221e5ad92c891d4183 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-plugin-es6-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04fac94db34a750bac1ae88f46269718450d383d01b84a102872d0a2f6748918 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48298 Malicious code in matrix-charts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec928e940d4a9d80d7e512630b842c44283854acb9421a3ecb97c288f07fb7a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48293 Malicious code in kn-nf-iso-properties-kn1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e349cd8ee6d112ba517b1bff5224e8112499adc0c166697081b2f94290edd1c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sp-web-utils-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18030241ea8f0cd79b1c6d323dfb7f1de0ede76c967166f73fcf51108f2ecc52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-oroq43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0142827828d2af59287a44a9a10b7b6fd8acb1f14246436695da7f09124666c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48162 Malicious code in redirect-g0ew1n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6fac493760d4e93ab9e42b4b72292751ed46ece05541708450919e3e7761fd53 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...