MAL-2025-4026 Malicious code in soon-night (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f21aa24973e2a2955a44e468cec5fdd0fa2039691cd39122f8c2f468ba28453b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4023 Malicious code in skip-tot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6960890dc5d1f82009184b7fc7b4bded6fdf2a39d1423fd05abfba07bbf58862 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3936 Malicious code in logging-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 708023935bd22528887255d2b3ceda250e2b246d9ffeae382c90868b1b7bc80f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3871 Malicious code in app-bff-shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 655a2f4df6d902859d804242c3a98e97bd5bcb325bc1583b5c549d376234d219 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in codm-onlinematch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5f6fb5867fd54709c01f55a61e5186d80049d7aca83fcfe7b52f4ae562c4af0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3889 Malicious code in flipper-plugin-preferences (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72ed77743cfbbcc3b9082b68fd1ebbfc81e78c93b7b73d1045b70adae1785b8a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in seagroup-assets-management-system

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-3925 Malicious code in vue-gop-authenticate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5f8092f5dd68ba9b719ca6f042e84c396704214bdaff421ce3f8b933fa7e302 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in beautiful-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 366a123a150cfa4f12f17cdb337ca0d39a1b8c22e7d861302e8632619e51bf4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in solhint-plugin-chainlink-solidity

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in lrc20-js-sdk

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-3897 Malicious code in internallib_v370 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c10422740b7cbb39e0369e25a7deefc65842295a36c5fb7c6d10182737b2df8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3898 Malicious code in internallib_v625 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1942504b21b62677ca1a746463bfce2153d3915179537f0621e9b1adc4851b9d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3866 Malicious code in @by-device/fingerprint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0b58f4a1374ff973bdb10f587a6d3bc80207b12a8a85a4edc4f3db66139847f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in rollup-plugin-remove-import

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in feed-testing-utils

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-3895 Malicious code in interaction-tracing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df3c2eb4540cdd7edb46dc3730a71a443bd1e3e63771f8046407a7f1d3c44e52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3914 Malicious code in react-mount-point-unstable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a12f68daa4bc6ad2efd656ef3b93ae79f1783de0c3591c171aab5b331b1be2d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3919 Malicious code in solara-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d11917059b5c9bae62b045f1b86da3912936d28e6568bc30ec686779c22da807 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in hardhat-configure

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...