MAL-2025-48057 Malicious code in redirect-gzixvc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 148d469aec04aa0c8339e4774fcb177101922beb6932fc192b74a658f76b7c2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48075 Malicious code in redirect-udmf0u (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0c413d9dc0a3bbc412e869fe204f44c219e0dc76756a297396238e79188fb6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pancakepool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aaab6dc9e6eb28a86ebbb9ef175624f2afd3649dd5b62ef87ca440b61468a688 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47989 Malicious code in bildguga (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5232dd55f7737f8e53116826bf0c0e5ba9365eff238e7ba6d86b925d8d12babc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oxrvlllcaj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be796eae19919fbfc10cbeab99b4560961dd085f2b2d887e64fd81bfaf7f5bbc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47944 Malicious code in solarpeng_node_eval2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0319cee3fc5a00c3fe093de4551ea4ba8efca92792da4582e8571e9a4cfcecf3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-paysafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aeeeb3008c1c25d409de0b1ddd06dec1567d3ddb75c311c718aeafd606e5f24f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in toskasldfjaldf-parser (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e759a5c9e8da467a90adc10a682a68df15a878213a5e38a2a5dad06f95740103 Any computer that has this package installed or running should be considered...

Malicious code in metadata-lib (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c93e5bf4059b5ffebc879cdbf901fc2a8508bf82f03b69abfd0ca6e9681aee8 Any computer that has this package installed or running should be considered...

Malicious code in truelayer-assignment (npm)

The package truelayer-assignment was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cb2b1d58a741e8bce6ef15fb465d4c1d070891603626cd0ff81d09e23d05a76 Any computer that has this package installed or running should be considered fully...

MAL-2025-47522 Malicious code in sha256-validation-xyz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d087a7f065c7d1c6612320e8fc3d19957b0768a27ea56d1c6849c32193941829 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in webpack-serve-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b4137b637e880b1add619efe8a8cb012cb89d4364be36dd8607cd4c20bc1b67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47508 Malicious code in webpack-serve-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b4137b637e880b1add619efe8a8cb012cb89d4364be36dd8607cd4c20bc1b67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47482 Malicious code in eslint-config-detector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c532e5d9ed3c3afdaf7a4a59234c132c6176b491fc96676828c4f0dd5eb415c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47484 Malicious code in filigrean-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b36c0d6ed8ec6a40757f980d71fc37fd950148adc4bec988b34f6a4bcc83136 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internallib_v52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4d4bce17702fd04e9d38d97007a2bc8b4028c77159bcd19e1565f71d7f4ada4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47319 Malicious code in jsonwebjstoken (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5866f0ff5443038e8141f9674f6d4d83ef512aba824b8a430cbd459f9dfba71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @ctrl/react-adsense (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc78e701d6941c16bc77a99580c74125deb3045bfb62ccee9917be54177617e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in http-req-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05b36301096608673130a0c0ca70710e71d19aa1f1b849b330ad9cc03911fcbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47183 Malicious code in internallib_v819 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d31ba534b4f8ffc55121d6aa3784d30b023a96d6b88430ea1445a9b838068562 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...