MAL-2025-3674 Malicious code in @joshcyber123/frontend-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8d770dd15cd82921c4fed3497ee3c3b6e58515c20307d8c8aa3f34b72a5e7ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in outline-shadowsocksconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac9c30589865091fb269aa3d3071ffe0d15ca8b8a8848e0363d338514f8b89ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in express-cronjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c950011af67232c8c22f1787bddcbae57533443f3658b15915c7785b9279d6d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3681 Malicious code in express-cronjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c950011af67232c8c22f1787bddcbae57533443f3658b15915c7785b9279d6d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internallib_v921 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2d85ca5bec57f8bdf71ccddd637037d50c3a8d215c375ab6bcfba881c336175 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in compiletest_rs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9cd95ef043b7e2b1458531987e232b76370e2a8a3d371083afb6ca8a1b03b698 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3659 Malicious code in your-published-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cffcefb87ba1dfcfc4089b98727de2186cb5179c69a0f7630c359ff62ba3546 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jna (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0cb95a9ee76c31bf43c34e398b5f5226a4fa58d643a6901667e7736a3c58066 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in make-plural-rules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef999981379280f98605a8386dda39c26b1b27975f440cb627710a7f01a213ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3636 Malicious code in meteor-roles (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35e1fc58c157a731ac3f86cb748d151de5034b62c77de3149f0b97573789b402 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in haml-jst-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0d8ca2db3fdc34877d4cbc9c4b109a713c2d744251b47b95621df2db46fc5fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vanjavajs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a8417f1ff2ac3cbdce79373e2e75ebb7a69e5c4e64fdffb9627ebd274a15dfe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3580 Malicious code in mongo-errorlog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e32915bf4c99db1cb294f47f98fa059abf22bbbb6729673f93f8370a0b9882e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in managethis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c683dca54122fc6e6b92b5c4b1b65e4fdb4accc582812cd422e28002c5166946 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3555 Malicious code in mcrodoasp.net (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27d0c48004e63925f1957b358fdf0cc95f5d6d045a8ed0ee2073b00a64fb600e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3524 Malicious code in devel-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6982cb557467101f1484d126c8ff52717e15eb199a30a8089c7d099caf9eaa1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3516 Malicious code in @baywa-re-lusy/nsemea-quote-lib-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a970ecd3fffeb12875946cc0b4a9b9cbf2dd78228eda981cb2ad8316f22a2404 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nsemea-core-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dad870b6719a7ca56397739f03731e2e597c7008601ef058d93c6b312f6b4725 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3523 Malicious code in crypto-encrypt-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ef44f851c3516fca1e3dc72236ae2c87cf821ded922150cca14e07ff9b4fbcb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jsonpacks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac52c02d71a2abffc04dfdf50a9fe8a652c73d1e71d96a44e4c28275f19dd291 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...