MAL-2025-1382 Malicious code in vidio-kmm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e504408eb9deb6119908874c0e0d1a2ed179bfe908a21a8f42d8296ede12dbc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1381 Malicious code in ts-plugin-file-path-support (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a29c99a3decf55fe58b9d10ce858b903ae55f7d999f98549a8416b4c12352e65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pmmmwh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61153050710afa63f182defea4220d45b2a3d6a8aaf0c059d892d9deee856b6e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in panter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bbc6c727a85e3a6b39102a212df195cab15c8cd0dd944070d41039ecb7b37455 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1365 Malicious code in heytap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd65315913bd79c6221ae968a448d85b4188a3d48da3178a5d88c034eddc5c80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in assisted-chat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13d61cf3fd29a340ba0644006a1644be59bc8a39769b41c2586665e3c21120ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1379 Malicious code in telegramclient-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 544758d4b45ebd5665b1bb9b068290cad56fe4f586df9ae5491321a32733dd26 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1370 Malicious code in openbet-player-api-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11f880dc4e1451453507ea3db6a2cf42a292a1e81dfd3df5bed7a77d00bb84a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1261 Malicious code in trufflevscode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf08d3952be6248181a39013b0923365cf27f422f56a1e3ca9addb9d8099e452 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1263 Malicious code in zkpay-plonky2-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca4c0b192b94b3273cd949b9abe540803dab23bf3c1acc0d6b5405efae321f4e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1246 Malicious code in growthbook-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c737e188f198e2f774debc152e35106477be618741ecc8afc62df2b72b9d0323 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1250 Malicious code in internallib_v666 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9638a514e7e2d6283a828ccb3fb9513c6ff53de16da5291b024f5465fff3c788 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1258 Malicious code in react-scripts-win (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29e804e3b477f180aba3ed9674d889a1e235e2091cca2fd2fe31cd5ef7528978 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pages-proxy (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e215918f5cc85a894233afe08ebb076c28300732fbfd5f8be0aab954b5e455bb Any computer that has this package installed or running should be considered...

Malicious code in k6-docs (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d7cb564097694bf695333aae5e27e5a57cf646842369831d93bfad2391e9309 Any computer that has this package installed or running should be considered...

Malicious code in fastlane_paypal_video_project (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cbac686e7f68e9b8765ef6dfde034e191e47cb639a2ccc0e2535e8ef61c522e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lge-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50473c9040c0e421b0ed196c99328de623d76a92ca2a5585abbb9e95c71e33c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zapier-shops-orders (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a081d17e6a916052da5d5af10b083f443f0713f3a687feb4186d21737b7c74b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1160 Malicious code in paypal-js-advanced-integration-ib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3b3d606a46036e08dc78fd5e2e8fe3694d1607d120c062343a2868294d3c9c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1152 Malicious code in navigation-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62a538f0b4692318ebf66b044328d39a0f011a80e355def5c4bd12f506bfc3cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...