MAL-2025-2108 Malicious code in kitchensink-ui-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57dd46442eabdf4fcd3affcfd4b7ef777c2229b46845426429e6277a99fe8f9d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2081 Malicious code in @roku-web-ui/legacy-styleguide (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64351a60460f32a078a6792ac73191925335220106d05dc9d59eb22c56281b3d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2096 Malicious code in bitget-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06e640734ec5e28eb4cd980ba22401e01aafb30604056e6ce588cd9df053229b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2134 Malicious code in upbit-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7391f484ff16261f5d67a14345fd40f488d3bd82c97ee08473b69af879adc46f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2095 Malicious code in bitget-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb95beffc6efb8662038329634e713d9210de5390298fe4811ebec827a9e2848 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in latoken-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63cdcfe3b15d2c174d58b54998cf056643085f18de21eda41bd23e4cc3bed7a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2143 Malicious code in whitebit-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b30295d1f08a2d3f1e6d3b2fe1ac51157020a84c2ff55356ef468d7b2db7e4ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2125 Malicious code in safe-backend-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07c4d0b3565522f959a93610e46a8e5765c7405621afd4e3ef3856dc77cf4cf6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2116 Malicious code in morpho-blue-irm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28a07a377a39de069e4f8f9c05264041b94d825875b2f62cafd13decb74e43f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sample-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce665e88f829ec81fed84869682431912fd05dda0ed950a4a37db218cc2c6673 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord-getting-started (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d1a9dd75e598f2d340d19584d29b85df620c3b44cad4c5cc94f0fb18cfd056a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in organizer-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71911a8ea9e577cc58952aaad429e86a8c29e91145fc92156b41365c77f19012 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2121 Malicious code in pkl-lang.org (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e62ea2ef542d2e8dda998bfe58ca7673af23732af531365aeb706076f9ea9fd9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pages14.0.0_i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eaed3f8870b4796bd4fc8667ec8911ddba466acaed945970ce6cf2f67e2630a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1689 Malicious code in @f2p-mml-frontends/mml-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ede0cf36fe3863ea31a447c95853a9a95a8b926d51476470fdcbc2bedfeb2b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2054 Malicious code in tg-shell-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38c69457497c0691d6d8e9fd41c25a9a61cbddbabee9cd66faa2d7ddc05045b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in npm-manifest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ade7d6d1c64c23c0b5ce1641cbe6a421ae5e995127affe277b05a6328ef012e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1946 Malicious code in traceviz-client-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f13f02647de53cecc725fc4d06dbe6ba022bfcee2f3ee730df96d83db43e18f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2038 Malicious code in dependabot-pull-request-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f89f292c4aeef9adcdb74b756e9f23059ca61f0327bfb78956c32e30c9bf3c7c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in safe-settings (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c3d915aeed7d9c3e993a54045d2f8dda26ca9a1632b641f65553f3fc796074c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...