MAL-2025-3102 Malicious code in invoicelifecycle-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e84b4abbc087a7b5b42ad12ecca83b68ff5f017356808e508ee32f7bfe000a1f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3056 Malicious code in @hongfangze/three-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce552b8f15a3e5d94a92d9b3cb42e8cfe7f681bf36a3018cd02afd29436900d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @hongfangze/calc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62ce8da37d7e1e8677cceb4a5db36f031470df22a7996162be8d54154076796a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3037 Malicious code in @hongfangze/convert (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58a6ee6ea5b224ab24892e45f1a473b53c5fa5cf89b93c73a62688b2790eb9c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nemo-dast-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38ea0189209023ae2d04586bfbc3d791022f0fa6052dee65ec03832a80ce67a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3071 Malicious code in mahesh.dojo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c8bce47a87fb6050b1d2865e5c616c2b3deaaed0cd8b0346e0ede24ecd94371 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3059 Malicious code in @nationalgeographicsociety/ngsui-core-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c79788b32fb541eecf3d0b0268cd2e201328ab9caf252358c1f9106c193acf3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3026 Malicious code in yass_eal_abcdef_ssdsf_dsfsf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9708c11d4bdfb0c8887d90f2cd1def69498544a363191b5f3ca7b3bbeff52b88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2746 Malicious code in agentbse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cbc1a3323e35cbce1ddc24ab20a734247f6aaa56a638b8a7eb30c49b18e4278f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2782 Malicious code in resolver-options (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68b3b87faef2aa88da0714f9641eef9b258d050775eb10ec9fac90abbae5d8b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2745 Malicious code in @takamol/react-qiwa-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 793f690e0bffdd7f7b94c843db756d422d1d76e710507c5f07fec74703d68b55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2772 Malicious code in macappstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0467c582858f86d97b65e2ac8bcbe719cd97323136272b766d45045822a7baab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in osxlocation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 070d31af50179f9a0b4cbd8dc75d3bb1e6b873b3b0dee8490eb4d252e5179f45 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-config-hectorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f6f7f9a7ef4ddc982849df1b0144158db3f60bef6633d7797c6f25a18cc2ec2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in consolidate-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab51d3f2f1f669e9f16db54bd9c1699dcc1dfa4e1f6c8f9b6dfa0174b331f3e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2658 Malicious code in cln-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56b9cc716f2f19131b4daf97b6c72c4b58b5b71d337760dc41188971098e4fb1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2712 Malicious code in telescopetest1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa29b9ba0d788e8dc9516cc458ab02e3fce22faccc63522b0f1a6caf439ffb14 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2641 Malicious code in adhgsc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05e093421e9ca505a8ddf2a74f5ce1ed881d420d53a42d487cd9c418af34cdcd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2703 Malicious code in requestz-promises (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f6eab2fca0656f140282d442e79f3edae4b6879f6e798147e1fe56f9aa34eda Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2702 Malicious code in requests-promises (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f69e675db1c52596e208921e91e76489607213dc7f4f3c5ce9f9a824b02778e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...