MAL-2025-4391 Malicious code in rapper-wish (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab0c771060f1519932c1a3aa17e1bb894fe76c1fc825c39a1abe9f76b77d5874 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in template-vite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06fbee942dbb167dc44c38bf807a7092a1ee1f59c1852062bb2ba0e3a22bc64e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hermes-inspector-msggen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c888d12bd2fd1107fe758f38e0e220f18fe717c6524edc4edc0478727a63bf6a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in accumulate-win (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7d58450a0e39a1b76cf94a28abe87bc0d2378707501c80df577818faa471d52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in coral-web-be (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21ed6f9e4fce7203c24af76e6440362a31f735ffb3344096dd9918a2f76bcf4e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-xterm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5f7c63ca98cf3df8c6642ac2a87eb6834e09162e30cd05b50172c8fa4f5cd32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in codeword (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2aaf95d3c6934f346d9582d701dca64e259a66b0f2e42ed55c8c2b7096bf7af0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kyutai-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6eef195dd7dc3e7a30a2bbebaa32b71e36fd4e6a7ad2a7d67ee776953ca7faa3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bkeat-pytest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74d2f35d5b97c478eafa7936e9bec8e276e048160fd82f2cb227e58d9870d107 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.cloud.common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46d26c76ae3c3c9d4f0975262f4b276f17bdaa1b436737ff8fa006f42576d8d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.hlod (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5319349c7317c6b9052fcba5fc0cee51696377cf1363ad07eeebe45b13a7158 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.jobs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ecf93d5628b724022ac35acd7556ea1b0636ea9fcc5e9e141963fed03258e5b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4288 Malicious code in starknet-types-07 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c4257a42e91ceb1eb932505422c26d2179850b3baaa3b7c26bd79f4495543280 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-smtp-mailer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 460f9b722eb2c3fba92ba737575ced59fa0f516ba2b07451d0a847daf5c62bfa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in debugdogs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41181b869f2a857e454633ce56a380dccb2eec0f82c1e0c7186d85c28932ac38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-telegram-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5b37fa136531c0a67cc2376f7806ed7815076d3947395b944423d6bce51c94a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4186 Malicious code in node-telegram-bots-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 855eef79389ff9b44946f9ab78bd1c5458c090ebc43c875626786bb46280763a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rest-api-orchestrator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e20a9fa0a651580cbe0e418726dea2ca91f1a44a78c7bb29619bcd10bd0e8fbb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in n8n-nodes-zalo-user (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fff1a8791a752e87f1a9bd5aef641ac599fb9f936badc5fc150c641dabeb6ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lolnews (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7215858bd520348bd1b650a0c7bfebb41fa47b6ca3c3fa269f18dbcd0b13848 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...