MAL-2025-5521 Malicious code in sysframe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8723a89cda98ce8c96a4c09293bc2d707ca721e8a2f72e88f1c54743f14002e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5460 Malicious code in sizings (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 393af076bb3b03dbc0a98992d0876a85e7b2cea1450e48e012de0ba71943f8b5 Any computer that has this package installed or running should be considered...

MAL-2025-5433 Malicious code in mapbox-gl-js (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ada891fdc8acdf8af20afcf9782848cf7cf035176b623fdf8c82a3b046d43005 Any computer that has this package installed or running should be considered...

MAL-2025-5412 Malicious code in govuk_frontend_alpha (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aaaf365f7859857e3e00a40b24b6c5c83485edea64290455cece2610cca84bc1 Any computer that has this package installed or running should be considered...

MAL-2025-5402 Malicious code in epic-mw (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6537e833320c30d33c6e8b2c61927748ebe0fc1066a6b60415d10c2d2470f7c Any computer that has this package installed or running should be considered...

MAL-2025-5462 Malicious code in styled-components-react18-v5 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66d52b4bf89a840fc85060c046eff8faa5d258a0e3d47a52abf3c7b522ca1762 Any computer that has this package installed or running should be considered...

MAL-2025-5285 Malicious code in react-plaid-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2e5a7cd6740a8b92b5b0c681bce252fd1850ace8501de899aea496321176c95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rush-sdk-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fa10be10595dcaddcd28ad64cd62ae55a44b7354d6bb1de952adc3cdc5b5c89 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in eslint-plugin-gpuweb-cts

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-5286 Malicious code in rush-mcp-example-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4593979eeb7174aea0989af27a63ee606786e382185ca406a15e9d4368c687b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5458 Malicious code in sap.ushell.components.tiles.utils (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c610571a96a422fc7b583bd55f4996dc51b894fe4d4a8cf415f7ebf1be5caf7 Any computer that has this package installed or running should be considered...

MAL-2025-5255 Malicious code in acme-analytics (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 881763cab42ba018d4aa4b5c72fd9e6557ac88c0e0628608eb0c04c46de7e3cd Any computer that has this package installed or running should be considered...

Malware in eslint-disable-line

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-5228 Malicious code in integromat-udt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb547f8f18d38d6961a510a598d8741dcd0baf2f8218a0bb5ed899fb606c35ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in plugin-proposal-private-methods

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-5233 Malicious code in nitro-contracts (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fcfdc095311c01986f57ec3730d8e3600f3c83ffb5fc23c500a51eed38ea048d Any computer that has this package installed or running should be considered...

Malicious code in postcss-query-splitter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 482056a290c2c7a8615aef0f11b620222670aabd908e5617a0609041849458f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5201 Malicious code in postcss-query-splitter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 482056a290c2c7a8615aef0f11b620222670aabd908e5617a0609041849458f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in postcss-color-fn

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-5203 Malicious code in prior-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c7c6e73e17f87113af9070f3206ac24a1568dbc95820709b46a15a73f4b69dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...