MAL-2025-1196 Malicious code in webhook-example-coinbase-commerce-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware caf969b51a297b05f640bf97cc7a17661d904a676086486f87b2d3241a30e431 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in etched-oracle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97df8d30fd81167c60450b61facff2cbe4d9b6d83d9092fd901c55c632026968 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1139 Malicious code in l10nmessages-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f1e60904c0c6aefd351077e69c73dc8cd979abf7e331a1311369fca1e7b40e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1171 Malicious code in puppetlabs-apt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3d7b24d31b73020af01d32ac4c79293dde10b8c8994012a9e685ae70f788d3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1153 Malicious code in net8.0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8faf7e5349b79c505e870b3a62d093e0f8be16d00ec6cb6d5a8fe5cc64f8d86 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in paypal-googlepay-advanced-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02d35f787a39f0e1878861d55d01419521e64324607fca8a9c99cca5b490ed59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hire-task (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c290018cf38e83059255d39fb3be4583fdc5dafbdc157034cda22edd1c80893 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in twenty7tec_client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e017d2769480cbf3bba9db2ccbdb6c84d6ab1f2717361c18fb96f2dcf442619c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1091 Malicious code in cs-templates-vue3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7eab2131a229bf433f5924ee12b5bd1e1e393c31b3027c28aecb5a187057d23 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ethchained (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec2d7a0486fc07b92c872693b5b7ff68caeb51129ed60fdeb32a6913811a91df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in experimenter-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c4c2a69d33bc5a84c51066ba601bfae3ba86437ddec7c887b6a243d444e1305 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1166 Malicious code in paytm-blink-checkout-vue3-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53da4c93e68194060525f1ea8d686d00c5bbe1e73fa09bf04fd0ccfe8de97e0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in auth0-logs-to-datadog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d200e2fbb21e126da8ae47ddbca7beebcc675121e65da3b2d699a7162f7c33b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hotmart (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 630908e08c08fe1b728bca7f4dc2b3bad96652d9083d958a6208bd3ea59f1a37 Any computer that has this package install...

Malicious code in browser-nextjs (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4a391b07d3a459e7dd200191edde3d936f11a865bcecc3ac54f1210b905ee6c Any computer that has this package installed or running should be considered...

Malicious code in isctf16 (npm)

The package opens up arbitrary backdoor port that allows bad actors to connect to. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 236c481ceb4416a920a9cf23c72217913d688a6e2aa10edf1f633acecdaf131b Any computer that has this package installed or running should be...

Malicious code in smartling-openapi-spec (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21a5bc79af548e1ec5706ef28aa4991242b628e7fb312ee2141f58d6aa46d16b Any computer that has this package installed or running should be considered...

Malicious code in qiot (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3059320d7f7fe85fa1c9a9b6ab7e8ee74f13c6994b93f055fd27db8fbdf7b468 Any computer that has this package installed or running should be considered...

Malicious code in react-native-country-picker-modal-modified (npm)

The package executes harmful command in pre-installation script to send sensitive data to an arbitrary domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69921c906d4d0ecfa3ba0de532e27f29b18c6be04a563ba99aa0590b1fcc77a8 Any computer that has this package install...

Malicious code in test_package_file (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53b443550dc59ee48bf343b26a7e563407dc65e43fc2fd49c177854a1ecb70eb Any computer that has this package installed or running should be considered...