Malicious code in migrate-lol-account (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88dbcb391cecbefa568dbffa3d4296d9fa09eddb14625e899283b70920acaea4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4099 Malicious code in lolnews (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7215858bd520348bd1b650a0c7bfebb41fa47b6ca3c3fa269f18dbcd0b13848 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in csat-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6108820bc94bf57a91a424d61c4704c69a86f807ea9f4993a63255a993ee8a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-express-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c67a77d1ceecd09a751770bc9ef718c7d27abb961712f380e94dec491ec811fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in db-cleaner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a72cd0c1c8572d55b42f5b29e3ba12562254d45caf82e25ebe93583f35e9af68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in raydium-sdks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c4bd247852f5f5e13010c679bfbe762180e81dd4a57f9b37d607b3ef1f13f021 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wallet-chii (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b348aa31d5d8beaa0b2d5dbc117c094a25dfaf9c0d515d0a97ed4df897bac25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4131 Malicious code in slowingdown4u (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f332e8f6680150c84aa7c785655341845220594fe64707a07857819503c466e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4089 Malicious code in human-readable-time-formatter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c9a8186838a4df771f127895d5aee834c26caebf7c60379f604464fc1f33356 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dexfile.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 030322be28cfdc4341c3cf0199d441c986dbb8f4eee5783c7838c7c6af53a011 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chains.web3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 162ab39d32e8af255dcaad40e29e294e4849e4c76273631024ddb7cc9a4398c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in create-qr-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58919bf64984f8dcdd4ec2802325f47fd7ef1a21aa8f1cb4d9c64549054122bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4060 Malicious code in @walmart-dataventures/my-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b61673cac99536c4fc1bf2801736b57d3de102226ab4207d6c1fda9f51834838 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in loveisgood (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8364e64a6620cc263ae8eba4f6501093ce51d224efed505f0e1e187c7612be69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rpc-selffbott (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24aeadfdb12f863044ca5714c437fb59d3d8099cda972978383afa16bf96ef2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in whatsapp-flows-endpoint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c4ee7de20264bab033d4f4b998239b7301103ee91c1fc460817aef7cf14ab24 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in passport-approved-token (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd37d39cf77560cc97cd69ef60b460e1d5af2dd23e47526e9830093d13ea9c0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in evm-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 494cc8b639f73ed70f7e4ee37496ef90ce35133711784f16e856e73ee4badb06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4051 Malicious code in evm-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 494cc8b639f73ed70f7e4ee37496ef90ce35133711784f16e856e73ee4badb06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sc5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b880667ce4732bdd0213169131ac05b078a08cd64c08138828191988f9a0979b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...