Malicious code in test-victim (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfdba951804f9f995d7d98ea8a645ead6bc94767502ab6a7943133b5e34125f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bs58-encrypt-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e93284d337753b93b8c896531454460484ca9f430906a64a7f06160cd7d354b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in error-ux-components (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 476bc83dcd99575742060ce7a3f129b15a4da89c0605ae7b4eb57e4cef54bf8b Any computer that has this package installed or running should be considered...

Malicious code in truth-loop-server (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d367bf360c2776bacedd56615fcd53b1d0c2bdde9bc37e0e3407459bd7392e77 Any computer that has this package installed or running should be considered...

MAL-2025-4882 Malicious code in server-log-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98c5b185c67de0bfe5bcf39953a89a1ffcb666e055d24d971a6926437a672f1d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in server-tiny-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8340f02ed93f95eece2017d2788917631ff5e62a3c2b04408288113576747a77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in springboot-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 767553d0189c47e072ca2eccece5b848745a1f6faaf34987293d9232d32f48fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @it-common/lbp_common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f47ad8887d3a6cf7a9ed49015421a0fdcde662db1ed194c1c753c1234254fd3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yux-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32619602ea22f43c922bd51fb5af4f417fee447f162999a6e291f7f83a39e9a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vyre-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57da43ad0f9a21c167b302acb7f928a62f1ef095d41cdf9621fbe8424fd6cbd7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4907 Malicious code in vyre-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57da43ad0f9a21c167b302acb7f928a62f1ef095d41cdf9621fbe8424fd6cbd7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in throttling-proxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9b4f801ac497e2e730cbe31fe53c685dfa14df13b8db1dbb454e614a321ac8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in scikeras (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a571a503cad6f3d53b07cecdc303ec31a63e8375eaf27100ef3699961d08138 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-logs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea18e81b4f8dd9695b27d71a047d0e8f2e6c2bb52dcd1b3b3f19cde0391c2fa5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4852 Malicious code in meteor-react-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10edb5e94e2b6aede51af9b2525726341571187cb32e9a56e9b86639c7130341 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in libffi-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 570b28ff882e484be3a59b834348694d7d3f5ec0f6e5aa712640fb0336ec6a88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in keypress-win (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f954e50f0d90246c5d2855aca594a6179bc90df76259b2b657e357f06af6cb2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in boost-iterator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c267aa9b1817904f849e9905ed0a7609d16f046da58d1954f222330503778c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in flagd-playground (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48e70fd6860510489563cf6789b2fee0dfb75544c1e1dfaef731b0b5df5b34dd Any computer that has this package installed or running should be considered...

Malicious code in next-pwa-template (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 598361c7d39c208feedabd0f7d7e0b666d50ad75fa8f2c7db2a64654e3c6a194 Any computer that has this package installed or running should be considered...