MAL-2025-3880 Malicious code in cube-sign-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc7b296732045296d18c9e2c5c6ea0f8feaa1bd21693f62a60cea65af5525491 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.meta.xr.sdk.avatars (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2819b05ade219214d57904bac7d545f37b68824e1a40e52668c7b6751d543c49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in o7rcyti43qv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c285a13bb56b44cd12672ac267c4d3bd0c5633ae97d13d71fa83cacaf7a63807 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cp-area-nao-correntista-fgts-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8095eb5ae7705ce9b30c64714683d8be1cf363c3775707e2900c35ac10eb4a86 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ctalking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b0bd0f0689ac862a7c01e77498ff68470544cf1aa43dc3b59172ac04896d10b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mozilla-protocol (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c90ec3ba319513f7c6a1ea4cd67f7fc483bf2771087d2c78c1371a1613d17d97 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in att-bit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c60087067856675af280cf9525ccb222374a8ecb4467310fa46160b79ea4a5e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3816 Malicious code in att-bit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c60087067856675af280cf9525ccb222374a8ecb4467310fa46160b79ea4a5e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @hotmart-org-ca/cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4248adb5119119c8a93c3615e413df74e456739391ebff8e89f978a212a0659 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in testqwee57985 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3598ee25e4c608f570194a3c2f83121f1978733f81ee019895ec855b7acd8a48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in unipig (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd7ac3cdec95558ed3e5a4e37325f492860d532de1cb8c3013e53a21ee441ffc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3817 Malicious code in auction2keeper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1265daa7b9386ad2a63a86ba2eb58d87c935540fd821d18d22d2c08e9a0e318 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-native-plugin-ms-adal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 361e4c6581b21fde6eeab43c3e36a75bd051771efd939b92cd3f82fbee601f6e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in opensource-marketplace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 974526369e603fb5c185bc7f3413907573ba2934f77f38446e73607af8847fd1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in my-worker-with-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cecbb57d34a074c40db552b59c6f1a08a5571d2a39cfdce21503791d9a563e31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shaon-media-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 558572daf3fc57c68d96e761789af95252072a63def7fbecefe3ff6d8ba5ab9d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nayan-videos-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d1573283fc5f3c3cc201c1ab6beeac91054b77dcbcf01aa700ff72240c02260 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nayan-apis-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29f6aa37009fdc9a41baec1f7003012ff794de3dc17eaae4aa1c50aadba83bd8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3843 Malicious code in nayan-imgur-upload-apis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83086119743263f9bdf6c297c723c4435596eb345ae1346780b6cb9c49e0e597 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in imran-photo-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c76a531a4e066fb0d756acddd4022d5993cd8d8e508c7e35463bd5f0e618201 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...