MAL-2025-49022 Malicious code in mocha-no-only (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a971050887c1e418b671aa4d56069074d05492afbcda3a8dedad2f09eb02d78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in unused-imports (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01031534d46574b4aca0e5341d43399ac25cf7c751f841cf6af2eec7b73fa797 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bad-santa-claude (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f3ae5211cbede196c8612c8e14c54147ab8c3984a6d1d26675336e526316bae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48428 Malicious code in package-f (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1deec43d176fc23dbd4cb44b3e1d4e90821cb98e441004f83c872d49ca281ac9 Any computer that has this package installed or running should be considered...

Malicious code in akasearch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1075d10450cfce61ccff3b97a9b8bf18a7be1d286b307dbff6e0018768baa4da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internallib_v600 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a2f6cf9ace9deb6352b5110f9550afd90c905590229ba3a589e3ad7cbb8d67f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48309 Malicious code in vite-plugin-parse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware daab8364c58e6745ad62419e65b56e53fe7e4dd36ad416221e5ad92c891d4183 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-plugin-es6-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04fac94db34a750bac1ae88f46269718450d383d01b84a102872d0a2f6748918 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48298 Malicious code in matrix-charts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec928e940d4a9d80d7e512630b842c44283854acb9421a3ecb97c288f07fb7a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48293 Malicious code in kn-nf-iso-properties-kn1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e349cd8ee6d112ba517b1bff5224e8112499adc0c166697081b2f94290edd1c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sp-web-utils-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18030241ea8f0cd79b1c6d323dfb7f1de0ede76c967166f73fcf51108f2ecc52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48162 Malicious code in redirect-g0ew1n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6fac493760d4e93ab9e42b4b72292751ed46ece05541708450919e3e7761fd53 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-oroq43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0142827828d2af59287a44a9a10b7b6fd8acb1f14246436695da7f09124666c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-ewce43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d3a83cfe9df44f0743b065c4c13d3e28fb674fdd00d29200036c53697af96ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-elvwba (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c14e9416f39f79fd57b93fde303c49ec9c250008b3cef0bfd26c4eceed6da7b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-q2htwu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 672c07135868086586c43e30bc8f703a3c5afbd6ad7aa2f151bec6c5466d706c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48191 Malicious code in redirect-n2wvec (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 174132d36061b8f905899e74c3b4b6580fcf4383c5bd1c35a3c3d539fbe1b634 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48118 Malicious code in redirect-406s9z (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb13b13d0873df300143c00dbb5848905ff3dc554cb3598f946f94acb2631947 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-zoju4g (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80eebf2a6f2148e8444d2a901e3bb9276690a04dfdf2da395c8fced58fe13c2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48140 Malicious code in redirect-b9diha (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b43f0986bc19f936046c56635f43614630486a03ff3e5db6a62208b9b785a296 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...