MAL-2025-3749 Malicious code in @myop/n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 255efefdd8925b80898665b63b7eec3abb22d0cd2e7a2d6288ead027ebba6ec9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3754 Malicious code in @myop/vue-remote (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 738fc53c11f63adc8f5e382960d16715c8fc656cdb81a0950efb09e9113c8f7e Withdrawn Advisory This advisory has been withdrawn because @myop/vue-remote is not malware. This link is maintained to preserve external references...

Malware in vojislav-web3-utils

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in fake-linter-no-schema

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in wwemix-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7daf26cbd85174b1078f76ef7384573ce289257c6f91bb68462f87d436d832d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in mag-client

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-3759 Malicious code in defisaver-v3-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac2ecfa29d0dad4e965df902c665218d19cf8ab593565c7b86fe378f6d4de145 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in my-rei-browser-shim

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in com.unity.list-view-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e62e603878259ca3d97124f0e3dd5225e75518c1572831a35e96a26b807e151 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3676 Malicious code in @oracle-cx-commerce/commerce-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96d5959a03e1f72cf360ec101dd9abe2f7d9d8ab9757b1d0abd95b6c4079f8bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @oracle-cx-commerce/commerce-utils

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-3687 Malicious code in graphalgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5d170316b7d69234c298baf1d1364ae3207e2f0774c87782a648d4c492920bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3692 Malicious code in orvyn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd01e3d586f0edf229980ae5ae7260dfec26f727da9ac8379a5ff20a4972b45a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3685 Malicious code in framer-motion-ext (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0d106ab331c0898de25fe772017b00559c67c1738cb04dfa7c3a93c3005bdb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in vue-highcharts-official

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in slimdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2f226420f343b927fbc14d4e38eba517fc139753e2d5a7006cc0a251cdc8b0c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in jest-coverage-merge

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-3614 Malicious code in babel-plugin-some-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ef77aeb30aa83ff02708a8b79fc182591838ee0f280c48d729eca82e9a60bb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3639 Malicious code in opentk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95ef6d6289289b15bc63ba83dcc85e309d320ff643aeef688fa5b9a31701e2bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dayjs-plugin-duration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38d6c09f6f8900e2be647537f5342bb545a0ee4b4affee0e47006cc43da3d489 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...