MAL-2025-1569 Malicious code in aem-headless-web-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c61c407a36f3724be9f3b666bcb222c01ec3ccc693d6ed84475acbaf185abede Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in archon6 (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9926eff92492428efb3018691093b936b8924920a886240875a09cec72235ead Any computer that has this package install...

Malicious code in flow-inflation-client (npm)

This package runs commands on import that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e8b85d87e86c398459dbc07b5a2b235efca84f069f6656c40462a7c7783c7e2 Any computer that has this package installed or running...

Malicious code in zooplus (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 338ded2323b894429782cac281caf09ea97a7fdd7f43c23a4d058b8947d806cb Any computer that has this package install...

Malicious code in buzzblocks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90e566d09228a3d324a125fa995bf615815fc9ccd42cb91cb3735dfaf5826ea3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jquery-real (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b8ff49544d48bbc5cdd24a029e34388a93fed21433a09e77f5f27dfe19cc1b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gurubu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4e2206593db7db1c14c4f78386bcef91c603218c4c26feda8f080978f342cbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in simulateur-gas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 296144588f638262f24eab478f9bd2e0c062de532a2fbafb8db60628bc2ac63b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in byted-player-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3159d64d6d44643ec6d2d05b6743a1ac3985530d76b41810598a873c7d34218 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1488 Malicious code in jquery.validate.additional-methods-br (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38146e8961491ebc882527395be69e281eeb62c0a44bba6abe87a8c037614c59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in opensource.razorpay.dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24d0cff23cd279c7679ff230e73f2030f97701dd01f54be53b182dbcf72e7dcb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mygcpconfusedfunctionpocmaliciouspackage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 716d3d7344ecf41184b8427f14e96e4bee1a868051bae909e0f3da2fcea408ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in evoplay-spinential (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 715a8e278031d52f48cc59f78dfd93253ecc47b831d67be2854158f1e977f77b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bitstamp-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b47b2bc18b088e918e9f0a119c786790456bccd97013b5561c3a593b09b6d0ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bithumb-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 486276686eda2f4f675b363605d7e934f7665dfbca8a85f49d8b76a801f7ce43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pionex-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 920e3da8486469505238abd948067c96de94fbd869e6732782e06809f4fd7902 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in coinw-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3fa00c723741623254392df4efea8cb1992992ec41b9cbd448a7d3b478759cb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1417 Malicious code in fameex-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e81564cf69a71845e5ab0c268ddf717bbfa8d2bc844ac9b34951e8edf16a579 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in digifinex-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19cfa1ecb29ae8496e8984153bdd6e045fc0cdc8ac994e67678201fd125220a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1452 Malicious code in yizhifabao58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ced901d0e5c904cb9495a0a9f7f06831e23fb03344b950107899ac7e8f8f00f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...