MAL-2025-47961 Malicious code in raecahaartas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f607e854df80ada9b6aa0de8cae2e2893f1520b60bfaed0ba5ccee7aeb607b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in raechaartas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9356d7106780c664ef4cc428fb0f72fc1165f196d819bb3a20fc0a86d648a0b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47967 Malicious code in simplerequestnode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ae31813df935cd21732d0b8e2d6cd4eed60fd43c6066f9c8921b0d4185fee75 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oxrvxlllcaj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37c0525fa89e43f2b3e2d99ea3b09bcc7f0990bb8fe2dd1bae92e0a6e2d925b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in orvlla (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56ea7ddcdbe3dab6e4c993804c781fc7cc5d3b48ffc11fea15a0adbee62d9296 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47945 Malicious code in solarpeng_node_eval3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 238f0c415626856e32367580d06f3d811603aaa0c8a73f6ff7e4c9a0f9452c13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in solarpeng_node_eval3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 238f0c415626856e32367580d06f3d811603aaa0c8a73f6ff7e4c9a0f9452c13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47938 Malicious code in solarpeng123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82abafd54fec90c9d7c9a4ae67d1236cca9c5d03fc30eea07ee7a6606d66cce4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47932 Malicious code in swagger-cli-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b8a1c500f2054b4cc2868df1b50c59128f47e0a132443910470547fbaf31bfa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dragon0905-vite-tsconfig-assistant (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d093a7e1069372d30327532f4658ddd329e4d40fa41dd7f0e505ca60650177ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47929 Malicious code in mcp-server-fixthis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4109cd9a0c196b277a25ff70ae8b8a81ee61aaac82c1d77bbb4e743496508e03 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ocp-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7840fa3e2dfbea07d71767142edd939d438d07277cae8abc8dc00a497b3254f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47918 Malicious code in @prompt-sync/v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f492139591d0edfd6e53adcf9ccf22ee8ef41d709bd21fd904acb9c9f66f59ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47928 Malicious code in kecacapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9708d0d602f61799571f28e3206743afdc12aa74044857fe2a74d3755668f44e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47922 Malicious code in cryptodotjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1cfa09b618dc51e1ed65556120fb823276eaaaa7a3e75a2c684da978cd11842 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zdachboostv1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a28b54d5dff3b50a82a5cc25b9e54f948719b8e1fadb9701d3f96b02a5e843d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @winstan/logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73b2d279a4e33191320b3f7c67ad6423715aae175d717f17581bacd8ccce41f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47920 Malicious code in @winstan/logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73b2d279a4e33191320b3f7c67ad6423715aae175d717f17581bacd8ccce41f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48290 Malicious code in @pcxm/gasket-single-spa (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a9af818f322b10614f05f0798d081607acaf0edf591f3bc2ddd3fad0e4d3b10 Any computer that has this package installed or running should be considered...

MAL-2025-47999 Malicious code in metadata-lib (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c93e5bf4059b5ffebc879cdbf901fc2a8508bf82f03b69abfd0ca6e9681aee8 Any computer that has this package installed or running should be considered...