Malicious code in @gmgn/app-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84805b96dd0a60155a6fa059a708837254facd211be9d7b614fae3a5fdeffa70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @sfdc-ogs/v1-stable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cf5cb65e88f9911d818fe4538c2454d53d9f0bac558bc6bd8bb2f8f8146d2ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5842 Malicious code in colortoolsv2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35da23355879f7db0f986508b2d2540d9d12942545cab651d9b50a9312d074ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in prospects (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3937cc0353b0952f14ff2d9e68216f857e4ffc01f688f600948c6d1b234915a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dtcp-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d6735c1027226ecf96f1649634b0f5e6177c10f5cd381586d03cd9f38015d68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5776 Malicious code in esign-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95776f5b7e274091b8f6f9a4fb620ad2a23f0b693413005faec7c8d348f97a21 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in supabase-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d99002d0e83f91ca297ecb91950c973f76ba284c9b63eba89946e9bfac2672de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cookiefunctions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8afa900a1619d7588b19e54f31e967476f48fc0d956d06cd6dd045d965d36a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dep-confusion-poc-monke (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd5eadc84c6eaa4f7eb92319cac88bbe0057e1eb86646846287104d5d7d8f9c0 Any computer that has this package installed or running should be considered...

Malicious code in grafana-zabbix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0191ee6e16af65a4978ff84c89cc7d2849df8ea05a88a9462c05d4d000e5c66a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in houimlogs22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c17d30387b6d0c43cbc6b39b5be60746ceb7ef2a5a6f82469ef4f40f7e46f0c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5752 Malicious code in netnodepushlab (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8075dc70312aef2a7a748bce4eb98bff84e4f8cc1d9c992f14446a257cf8e319 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in graphprotocol-tools-monorepo (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2da3e0dc947efefeb72ffd27d949465798a6e39af182b4634c40e9dc4bed764 Any computer that has this package installed or running should be considered...

Malicious code in scriptstierium11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e266c41818b3bf14da762f866026f1e266e51c7991db31ff0b165c66cd7ba04 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5689 Malicious code in fe-lib-localstorage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2248551164f3d70ada0fcc43237796170d7613eb7bce9bcbd718d78b64262f9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fe-lib-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f305a62f895c51f453506e8a82753487edc589bb9dc03f1ad92dbc3b4e64dc37 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fe-hoc-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9891a9fd86134f0ca17dba8224c55c0e4ad7b0dbf8f5c61cce17218515d60f92 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5738 Malicious code in web-shell-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14a8faa45f100dea81a84d75a0d68c5e05035913ff94a69ac46b8cd9429c5a81 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internallib_v555 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6785cc325eb6cfd4e41289a80a9fe1a639f54fe80387ce895053b1b983ce1aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5701 Malicious code in internallib_v555 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6785cc325eb6cfd4e41289a80a9fe1a639f54fe80387ce895053b1b983ce1aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...