MAL-2025-49058 Malicious code in twilio-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c9791835a6b79c8a567a55e71f875ddb3c62120517d06403c6b5d68313cfa54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wm-tests-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 121558d6ec677ddacd0f0a5568a855ebf1afa527ad4e25ad97ab770b89ba16fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49033 Malicious code in prefer-object-spread (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24f3eb78b1232c6b636794710f52f1699237b0b29192397a63c0b1b307652154 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48939 Malicious code in types-lodash.es (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ad198ed6efdd1d7367a198d4b5c761b7ecf5421158cf8cce424a4f693598f1f The package types-lodash.es was found to contain malicious code. Source: ghsa-malware cd47d05a7a2bdd9fbd2f267aaeb6664d79583714a396f493858e926e1cc25f0...

MAL-2025-48780 Malicious code in tailwind-utils-plus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21ed8ff35970f72cb3baab16f272e85ee20139056fb86d4c04e90b28ba38f464 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mender-conductor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2aa35f37c40538fc027dc3f86e83c914f7285a8968a9811e5bbc8a5fc5b863da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48588 Malicious code in useradm-enterprise (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce2bcbfbdffbf03bd25822f3d63f902505a6edc5efb3ef610fce41007b8620b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internallib_v14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa0c771b7ba9e3bf9d3d6ed2cc6755d91123aa014ccfd52b1c6f3f02338ec32e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48329 Malicious code in internallib_v838 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9a033080221d18397e6453d359fc3e59ebab68f195bd8faa9def63ff1426ca8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48340 Malicious code in project-serum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c390d6d9b15f1fb2c2ad9b8e802cff831ed02b6028b111d2937705df46f3fdc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mad-1.2.2.2.2.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8581344d42c56e66d806f6be8795e636e5e5495d0dafa642fc09a6a4d22b2979 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48294 Malicious code in nf-iso-properties (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3931e1fe9c0a20bbdeb1e532f664f5e95b84b7c831342802db5c9d74795d0c6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mad-2.0.0.2.2.8. (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e93874ac2ce730f71836ee3bdd967cb0338d0eaacc0bcd0276266453fb3bfc69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bird-clean-sky-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d4690255e702b2e0003068c76afd1666551d9e315ff93105a769b6250d46469 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48180 Malicious code in redirect-ksm5w7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2feba355270c24294faf83abadea29520bbb37968b5b7aed42d3c717a22846d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-8f3x70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75cc50fb739d4328a1ee9c3f1a2b4fe031b53f6a6915b239eb09539463c58858 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @testcarrot/supply3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ecbc24cc97adb2847161caf543bbb337374513e26dd4d6d2c83b6d306df7f45d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48094 Malicious code in @testcarrot/supply (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27e1f69fb6202f5542f7e1a2def95407b079bad5dd22d4ef58c3f243c794000d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-0g91q6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb8a046d11d2d32600e11bc37ddbb705107cd33d2206e402b33572441677da95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-za4566 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 079f93dd87bd8ef6e446d2275dc64e4b6e5e995fa22a692166b41c03eac59d02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...