MAL-2025-47456 Malicious code in regex-validator-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43e71c52a7849efd31974c08c867fd14d1e1d7ddffdc60e8ae074e9586a326a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xo-tray-height (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e77b86db993d991491d3db2d143bb8031f63d03acf7e372dcf716c51987f0d87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47364 Malicious code in xo-tray-height (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e77b86db993d991491d3db2d143bb8031f63d03acf7e372dcf716c51987f0d87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47362 Malicious code in working_tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49c21a63c0a80ed6817e5b19617e29f869d463d77843ef462ec7f9f177abe0aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in angulartics2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01f9e16a7709f6cff6095712c304744ad8bccf097dc5d86d3bbb5f01cb608382 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nstudio/focus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6368724cc7cb8430603780da22934b69de3dc873637938a51bb363cbdde04ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @account-portal/ui-toolkit-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8071d62a3309d3670bd962154aedbcb3fcfad9e85579f6fe36be0fccbd5feb2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in strmaster-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ec25e1bde9380d0a69ddc98b164aeccc89e8b20923ff9c318277f8888894e26 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47176 Malicious code in chunk-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d38a27025a3781b68d85bf387d877d8eae3d40bb6bc19c9edf52dc069d47773 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-prop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6aeb7200f91cbea0037b45eb8c0fde13aaa99f73bf5dc9fbf18eb696c70516d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47075 Malicious code in lovable-ci (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 383c94c307a9e3918b3e8a1296016307e7d4379f743893becd41721604736176 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bundleliep (npm)

The package bundleliep was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 340754ac2fb58c38b60047b573870d36d4e8ffae96845c4da4f96b2ac8a43d91 Any computer that has this package installed or running should be considered fully compromise...

MAL-2025-47020 Malicious code in netflix-dea (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54b29496c035b21772b6474b4da2740f75b84c0dfeb189436edf4f9134c6730b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in audi-footnote-reference-service (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c035d5ff92937ddffc6c544ab41cd4721ed9e798733de1f734142b33775388ca Any computer that has this package installed or running should be considered...

Malicious code in sha256-pack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df5d9762214be9f4321d8e3634eeae69ae8f288fd94ae1a07bf6b3defa487b97 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in scenes-devtools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fcbc7d7a26ce0416a317318a71735a6e1c6c1af16ead4f04b8ce6a5ee6d4b08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in taxify-business-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13b2c51d2f3a170b26794d81e81d10dcb0454206e4f370445eb579f358cdeba9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in config-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ca038d2292d65fcd63e01c65289a778b680b4d88ac8f282cc3bcd15d496497f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in white-oganesson (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59cd363bc35266e8da511b349bb11e84db784a1bbd5fe29148aadb24aaeef2f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cmc-inferno (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db96f961787fc8fc35c246e14979af463d5ced86a881c2126d03b95423ff0cba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...