MAL-2025-2531 Malicious code in tasks_mangement (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5af70a269afd5435306a85b902070f929d511d8855e369cc7c930a9dc50be50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in plasty (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 101f2171688036d97dd4a9278f0e3a13ddc39853c5161ece25ac283a619b19ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in plast3y (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 815f967e56515403f0f889b2184fa0b0e02653bfe7906f369de42c8781fa1480 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2521 Malicious code in pendeck (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52144cad81187f6ac538b8ed921e0d500b9094449083bb6f7d408e5e7b6ba2d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2533 Malicious code in test111121112 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e7f90b0dbff465793a22420e768063e39536ec5b397bd17e50a532bdeaf873c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2482 Malicious code in zhdex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26fbd05a0708bfd20a0abd31a447aec6da2d03a0775abd736c4ab2e1f09788ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2467 Malicious code in malwaretesting2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 992d4e35601291d8af779953d2f285061a62412b41ee8a799245b99892ce7efc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2460 Malicious code in datamations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d84ce38228e36b03c093e2ea202e25365aba0af056a385ef287d0df4af03f109 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2465 Malicious code in homeappserver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8504f774fb44290f71dc5c55197945f13d555e474baf9c2574d37ee207dc08c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2471 Malicious code in probe.gl-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4562bdf912702598a8df806f64ea26ad5c353670348f014304ca02f45397ebec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2468 Malicious code in node-llama-cpp-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d27e255d94f63ec3b548fa8d9ba50b8565a5b534b5d4ea838571ef729ddec60d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2453 Malicious code in @financials/using-dep-conf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57594d4888118b288663b3c166cd3cefb4f30e8aebc4e4bed2f92a51945a33bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2389 Malicious code in key-lister (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f9c33eb066fce6253ba86498debbec8fe000ace68796a6bddf5d95e431551b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tfjs-layers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01a2e2a8e8d3d2e521a17fe1f820c031a83b9a0b1a45819059fba2bc47348f98 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tsl-select-trigger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 072755e39bd14b6660b02fdc071fceedf4d4cf76f4f27561b12b19a8fa70f135 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2386 Malicious code in hellojpd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5216993f2a0d870809bc528d5b98b4577c5ee8891c30e6541d8d982bb93d9110 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2398 Malicious code in paypal-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49c178990e4d2abbd4e7efb2ade6f3fe47a33939e54842b787848f1be8809ee8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2403 Malicious code in projects_workspace_events (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1577d2b286c60b8eded2d7d5b4a2393205ed7407c3173cabd9c87ed769e025cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2390 Malicious code in needlecast_prodeng_bfg_ui_consumerclient (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 272f9b4996fbc4cfee6747503b6a638f698e0abc73f58320de726520712174ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2371 Malicious code in dependencyconfusion9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b9edcf18e33ec93ceabdfbe5a3abe51fa0d8d0516fba9cd74563575aca18c7c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...