Malicious code in datamations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d84ce38228e36b03c093e2ea202e25365aba0af056a385ef287d0df4af03f109 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in probe.gl-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4562bdf912702598a8df806f64ea26ad5c353670348f014304ca02f45397ebec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in skinport-plus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19fd08e816a49e9680bab750bc6a7a68bcba51614fe279028ec2b888fca365f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @financials/using-dep-conf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57594d4888118b288663b3c166cd3cefb4f30e8aebc4e4bed2f92a51945a33bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2392 Malicious code in newland-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a04bb2785a6c11b6ba7677d8347c662a121ca7d3a53217aed73a2529cb11902 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vue-plugin-rely1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41339a779b006586f47ed496d71acbb4b97bf4174fdd98bf7aced85ed56e6c4d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2405 Malicious code in react-rekilog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 249b037c6c199bbd9807077e5d7c285f8cb8525f43754d5ddb10263cb35fae39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in process-tick (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8116c15eee956d7e82aa0fb093ae7d010310e9ca155a99918732c04ef0114922 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-config-dx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17d0a9a27ae607e3c566576cc74707e5a5bc3447a3cce8535fc8ffd18c396936 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2370 Malicious code in data-ui-v (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31699b2697ce8618e833f2917ee401c8d6a8a1300cc5d48905de3fd7895c9577 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zero-timeout-message (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88a6e8ed6991cf808053c17befcdab9455effa8b8510ef06d38f819ef7958071 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2415 Malicious code in smart-power-strip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1cc33c4b430e08bef89e4f67199d79002235613631ee986f8566d757fc14ea7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in elementor-editor-github-actions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72f60b6d3f909084d15e59acc80082db35f713c520dc29ff74ec2a79ceb33dcf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2373 Malicious code in digits-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28177622f91c259f7ca32b15e2e0ee594641ad703e15d98a557e235e88e2d39c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in workfront-tailwind-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e755ef9756545a8b3e89ea6e94f4f0df0add9b9fb3c4721127f2cef9b7324007 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2430 Malicious code in visitor-targeting (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cca6cecf4a890fc8933768778472fc64e474611f8a925b5d2da43a2cccbe971a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2436 Malicious code in xeno-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3794b70c9005dec3c935f978a1bcb31199dd1f01b1bf35a10bc9bd134ba82ef6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2362 Malicious code in bbc-grandstand (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f0de83cd752dd58c1c6dae7ef140c2e9e41f3eb4a7467376e80659b3019cb75 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in superdope (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9abd6ad5a2ad3503841de7c5ecf7e733d3b98b26b025f093b39f0424bc78fab4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in empty-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e4f29eb4e06a456c0243473ddb4cf4b5953ab107489b4a79b5f3ccbebf67ebcd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...