Malware in nsemea-purchaseorder-lib-poc

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in needlecast_mvd_ads_site_client

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in needlecast_b9s_jewel_fyc_fe_client

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in gcp-alert-service

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-3492 Malicious code in graphhopper-js-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 528454d3ceaec479832ef3607c05e7f1a1f58026c1a94fcfb2b3835b952d9c2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @zener-soft-consulting/ab-webcomponents-library

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in testdoges

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-3395 Malicious code in dowload_ebok_warrior_cats_vision_von_schatten_die_mission_de_by_erin_hunter_djec8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95ad41b7d930e81657da5e1021ec79a2b59e515b4b01f4e23fae8391955c88ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3288 Malicious code in list.fuzzysearch.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e7008d1b039aad972325f177113a9d0a1843f63cd1c83d67809a42cca84abfc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in router-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fcafd9f13b763d68deff486e2c07a83a3824640dfb106f472de1e049711de470 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in helper-plugin-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 637e6aa11d35ac301a88fea209827ad1ebfe949fe5c2db4ffd66509975d13ef6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in express-exp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b858cc86e409526d24e16f5f635dea2d7cae8c178366e14a5d2843bed3931ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3248 Malicious code in fatfingers-hellooo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea42b9a5e56641f6c3e9c1a3e1ebcb7adb7866c55d2fec0542f9fb6f2d37f6c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3246 Malicious code in fatfingers-hello (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 772fb028e6aa0e6a10ca2ebd43f559a22b08f432b864944aab162648a4e4a0ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3229 Malicious code in airbnb-datepickeroptions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 863302cb49601a697c0ab1dacb7cc78b529ff2a24b8185ceb782a5a48c10248c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3235 Malicious code in dc-genai-dropin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4921314e7e97ba500355f996a14c9619cadf54912d2dfdbe5eb22750a5e5c1c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @harvest-finance/harvest-strategy-arbitrum

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in zkevm-commonjs

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-3265 Malicious code in transactions-generation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 159707d341deafca8ddc267f10b9d6e45a2aa4ad7677dc24fa7f23202d0db1ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in transactions-generation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 159707d341deafca8ddc267f10b9d6e45a2aa4ad7677dc24fa7f23202d0db1ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...