MAL-2025-5930 Malicious code in jsonslicer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7828f8e4816c129f466b6fffba2ed70b7560a9491a07ef71c158dd9a3029d54a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in string-parser-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 748b70284192ad043f664c6c220fd7416d86a39d02bee5c30e6181172b814688 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in grafana-lokiexplore-app

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in grafana-strava-datasource

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-5956 Malicious code in shared-workflows (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d2e9e3bd8389efce3114016d94776de4d6947e98d829761b9bb1be64e02ff66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vitejs-plugin-refresh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 243a4e663f29ec03aed634b87165dccaf6f345b2e1c92479b95ef6fd28474ba5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5964 Malicious code in ui-router-cool-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f8cdbad7d217500262088af80552709596ed86e414e2a6c3214b5a40efb8057 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in heronumberone (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44a7cf88992d75a43166e394a0faf68a3147180bab83bb0c6358bc6f64301ea8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5903 Malicious code in codecops (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d42dbe570a6f14ccdfa5bdc48c64201847ef6414ea612b8f0a0dc6e6a0327ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in webvieweventtest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09cd6e6230cc73bbb40ce4f9ccd122eabff367f8c81c3586c848476a8e6900fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in appcenter-sampleapp-react-native

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @gmgn/app-icons

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-5853 Malicious code in @gmgn/app-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84805b96dd0a60155a6fa059a708837254facd211be9d7b614fae3a5fdeffa70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @cbre-internal/mapping-component

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-5850 Malicious code in @cbre-internal/mapping-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3eff43200220833028b414d72d609d46c1bf24b68f38bee948abf760729d76e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5864 Malicious code in symphony-cryptolib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8216b9fdde76a4f40936fd19fbe9a3a7d73dcf66ffdde04c6cf54ee965448b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @platform-clientextensions/rum-web

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in agoda.cronos.activities.client-side

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in teeble (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87deeee00c8045cff04871c3dacb0e761b812fb25c0622a5aa66bc034f16d61d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5797 Malicious code in supabase-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d99002d0e83f91ca297ecb91950c973f76ba284c9b63eba89946e9bfac2672de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...