Malicious code in topomat.controls.ctrlmaster (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f70236b8a23bd596788f7726490e4ac44c5cbcacf88bda2b8adeda33486c14d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dijit.layout.bordercontainer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 268d7fbff2e8226f7aafd1f838c0cbd16e53ea3d1542e81c9771945ebc3bf7da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in adsk_react_axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a06612c4be43c43a557872482b9686a09f5b16a8d5f9c96611bcfae535406dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @b10902118/note-xss-payload (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c32fc16a72dee911f560f1dc4b6915f586e2f408e93bfdb5b08d8c7444e7576 Any computer that has this package installed or running should be considered...

Malicious code in obfuscated (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d559efbc8df5a64ca2676526a199174c0a877291c1cd08cfb8db6a7536aad530 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test.reativity.package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6f730b0a0fe3d91bde9a315e7378e550dc9f7227742ce7918c5caa6d9a88d80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5015 Malicious code in test.relativity.package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0622baf7ab0ff027e2486e3839df7b968fcf6e47ba57656415c1b3a1005d02c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4996 Malicious code in graphlibcore (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10441453f5296007b2b77ca9e580f3ce0a3ac50607cae82a6fe5858aaf1b0dee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in boost-chii (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac33b7f9bd3634fd513bc6cdf809460ef22919a7841d779fe3cfca4c733874c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in raise-http-server (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec0703ba285b347d94b33a68fa9cf671e9118ede49585fc79f8716d46574e04a Any computer that has this package installed or running should be considered...

Malicious code in wasm-wasi-core (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 320ad464f0780881fe134c1e9990c2e1a180a2ab4b6b103e26439d8861709021 Any computer that has this package installed or running should be considered...

MAL-2025-4989 Malicious code in symboltotypenode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc2ee98d2f9315f44147559cccb724db19ec94c7d96292e89e16f379f8ca81bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zora-metrics (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89561cb32e5173056b6ef51d8c685cac2ab304eca6024d37f963d31688e93820 Any computer that has this package installed or running should be considered...

Malicious code in snapshot-server (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b418521074d89cfa7dafcbd2a57c8ea782c643409c895f9ac30d372688473947 Any computer that has this package installed or running should be considered...

Malicious code in typescript-aurelia-api (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f456bd00aefe5bb2b77b87defb41f72c059fe860d67b0fd0dfdfc98baebb11a Any computer that has this package installed or running should be considered...

Malicious code in customdropdownadapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e29bf2cb2ca6349ffa2030e7ae2a9d4f49fb302fc084fb3ace37e76b543b502 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aristotle-fetcher (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67dee1184cd446a4663792d8dea9c58c14e9c2b9a64754d639a6af2b8c9dc9c5 Any computer that has this package installed or running should be considered...

Malicious code in @evoplay-spinential/poc-rce (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 881ba2020793547249c68ec29479655b8625af1152d08fd230ac0f6ad5dcc315 Any computer that has this package installed or running should be considered...

Malicious code in maxdome-compute (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a03c0986aac72f989f747d0a8145d5753b02543abc7a3d934919e395c825ac42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zora-wallet-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2737a01b1cbbdc588edaadc6a0e02fe571afdcfe804c62a691270ab2e19eefd8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...