MAL-2025-245 Malicious code in sparo-output-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 815ab9da2f5926d787c29ea7fe61f713ec6679c627ef6602931de859c7cc24ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-171 Malicious code in chrome-api-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 945a0a50710064ba2531f6b43681d86f70f1abe054cbb593386e63f921369750 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in testin-elengosee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec5deac0188f700e1537b6812c80b7dafdc502d35714eb1c32cc371115dfeb67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-90 Malicious code in gfxapi-ls (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 784bb96d93f59dcf39d71d7b4cc12349e74183b2f5557b86474e7f6ff17e6a11 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ebay-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d19ac42f1b12b95f81ed89c55872795f9fceb4ea498c981624eb1eb04828bcd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-85 Malicious code in ebay-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c74355e1eabd2e1d47cc518cca30999726a2053b67e85ecaf8a22efbdfe17336 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-95 Malicious code in olivergreen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93149667e62337ce494ebf287aeb4ab68a2b6b96fc9d32b5262d381771b539e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-96 Malicious code in parentu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84a5df9317ab5999eff9bc664de61a5bf110b04b375e7107dc459d97ee2ac0d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zqdl5553 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1cf60e26e47d2d6d26e57b229d284d880dd0529382d47d9a07581ca6faeb3a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zqdl5552 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a501506092121ac6523697dfaf28b43f64b742486236421aff37dece918e007 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-114 Malicious code in zqdl55511 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce97905db0b38ee627d1c55a3e9edbec0760eda87837942a4cdc0ef0ae0f5a60 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-121 Malicious code in zqdl5554 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8b13c7bd38a0b49c7e7527fdeae23dd82f571babe8b8bbf4da2898667faa856 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12166 Malicious code in @swiggy-private/analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 225aed6cf9dbdada3a5ab91f0b0804c55be22874bb11c2ad67624a420ff39026 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12150 Malicious code in kubehook (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b24e2f8ec8704648d97708660341e0d666f21957c858f73fe3ac792df4b2024f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12144 Malicious code in devnet-deploy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 946555a5bdd72332d358a9159bd462ebf6acd622cd681738025cccf81c503d98 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12141 Malicious code in comparison-interface (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d49c4851777ec7b5751332a47e71dbb222937e6cc24c1d9cf1808cd989ce800 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vscode-dotnet-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24b8e33604973dbb3009563bb44c06e76ba342d0a691e0ecb3341e94dadc47e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in powpeg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 888651be4245ed94e8c3c538181c95691f87e394e03ebe7d425abd55a1f95749 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11937 Malicious code in @metrics-service/mf-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4515e226dd4aafab225dd128f71075baadf1fc7b2176ed97b19e90ae8aadb642 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12066 Malicious code in zarf-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8697bcf4cd06bebdca6e5806069048fc48ce173a5deb372b5992e95df3e0103a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...