MAL-2025-5584 Malicious code in supply-frontend-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15d83c3652e60a9d06ecdfb747c183a04299a54f3da58cb81144ff7461286b33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5547 Malicious code in display-network (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e78e5b2fe65f6308498ccfa5b495c03552bb487edb112458f3f6aebbc76b0d65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5430 Malicious code in list_column_item (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 852a009865162cf31792b006bb5a76b659b3dad12f5ebf7815895ed6da956582 Any computer that has this package installed or running should be considered...

Malicious code in guild-rotator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a65fe418eb6f3e397826f4b880e1a87b1966ddc4813ed73c05697b831d23e31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5495 Malicious code in dtable-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4325bcefb1ef8dd7bf39cc694fc039f034e9a3811c8af4e36099a9d2bb375318 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gkx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce62db6be2839a6d59876c849c75c5afc4237dd364e8caf60e99c5c1a00f7c9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in airbnb-location-suggester (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2737604ff441534b7aeae22ee55636471142cccc2d6e2bbd4895a8f640c30aa1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cloak-security (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d81546f41c53f13a46b7c372cd2ac89b76c664542fb9b1652357cde5323830f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dm-cloak-security (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cbc446510f88cacca6d96ebc43436a2e388738c2bc236f8a356f4c11d25600e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5504 Malicious code in keythereum-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e190a6b75c720484c00bc747f1ea989c80b20733327b6a0ff26d29538aa471f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5496 Malicious code in expo-session (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware abacc30f1432410572a450a98d3361c9654b136c284e753d850ecffad2e8bb33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5524 Malicious code in velocky (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59c90a9e49cd7bf616362e6e175865e9d59a7399ac59ad7cb8aafd9eb7b82981 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in notification-logs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38d50a72b129f2bbf4413f253f4cc198bb674e07061123d5ba873a3374ed7ecd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mod-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13965717642c4230905666118685f8751f2e81b8749c99163d74f840204a3a95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in online-learning-translations (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 868acedaa0c2050db6943bc3a4a1b309e10110417f79ea031b8b01107f4fc599 Any computer that has this package installed or running should be considered...

Malicious code in phantom-sign-in-with-solana (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6fb04ee07048a7f2aa9201a7f29e3d8bb5802fb53f095bc48f93928568cf4646 Any computer that has this package installed or running should be considered...

MAL-2025-5449 Malicious code in phantom-sdk-monorepo (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64a02da8340505757389af71a4289fd4f3fd0825fdfcb80ecf3a848d8c3c6db0 Any computer that has this package installed or running should be considered...

MAL-2025-5282 Malicious code in jsonspack-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db4dbc8297eb8e4503c9ff7b14f7d6f1a5eace47e3abb92fb8f6cc986913a38b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5382 Malicious code in confluence-macro-browser (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d10c6adb7b55791217a6bf6c9112897e38df535e743dfc1d85f285adbcb03a08 Any computer that has this package installed or running should be considered...

MAL-2025-5424 Malicious code in jira-triggers (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fe29e329352c213ad9899b9096425dab4709925d393b2b31c1e6144c2062478 Any computer that has this package installed or running should be considered...