MAL-2025-3708 Malicious code in buidl-wallet-contracts (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6b5221b4cdc1f6532fbece9f61c742fbfdd72e88d8fc1d5ed8c9dcae92157e8 Any computer that has this package installed or running should be considered...

Malicious code in arena-plm (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f794e10373e988ac142e6dcebe8943efb8a623a7c9db9bee70ce592ef1e5746 Any computer that has this package installed or running should be considered...

MAL-2025-3587 Malicious code in swap-subgraph (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc32db990bb425f3c32c2f312da5d2e3315f210e4aa1cc342f3df5c3827f6fe5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3579 Malicious code in fiddlesticks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec30bd6c3d5aa70760612fa335f9e4a9cf16de77eabb7dc0dc80cdcd61bc93bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3577 Malicious code in bffhfuruhejfhdj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 298612b0f8a60cff6f0e77495a9c7fbac0f7b5ebd47ed47eccd75917a0196972 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3570 Malicious code in mymte (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6027158a0ee580262d47f416e7301411cfb068dfee0c039216f1769129190e63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cxo-storyboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52b7107790e92d1adcdda6e4a16e6496f43bd80329629721bd96a0e03591c4f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in blur-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 546086c9d282770ea8502cf0f8216b1108513a9a88261a4f447bd8ec95a09b0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3521 Malicious code in chai-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5af472e8e9f91924f3ec3b28eec6184f13eee63ed37c2873f4042d81171682c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @baywa-re-lusy/nsemea-alias-lib-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f67616e336d1069f944f5d2fb535344c5f54f4d5d99c99811786e5dd237824a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jsonpacks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac52c02d71a2abffc04dfdf50a9fe8a652c73d1e71d96a44e4c28275f19dd291 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3540 Malicious code in webview-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 350de9d57836c502b1910805b2b6d9a4e1f5aad34e121671d5482c073889894a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in auth-help3r (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fcb399ae4d0f936194424a6a54364f75f3fc4728a9bcb599e3ac9082a380c46 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in graphhopper-js-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 528454d3ceaec479832ef3607c05e7f1a1f58026c1a94fcfb2b3835b952d9c2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b5cad81db450339a0757b061ec3451b681549d64b58b8ef18bb17baf584084d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zener-soft-consulting/ab-webcomponents-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d973a87cc8f873fc6982e52eddeed55981da33922a816ca69bcae20b076524db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dowload_ebok_historia_do_movimento_pentecostal_no_brasil_by_isael_de_araujo_k3o0z (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69b931a05ee3f5829b5d724725a78669b59ea684aa7dd4cf3c030dadad9dc48a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3284 Malicious code in com.adjust.test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1c1175d9d178e089d813fa5fd10a1f34409c94f28af0ef4c4b0aa7d2424c77b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3287 Malicious code in gombot-crypto-jetpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba48695fbf778c02bb57cfbc2de9ca50fd3023213aeaa67d6620451bf15d9463 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3282 Malicious code in camel-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1098fc52f4799d50da4e83a966625fba756fb0f48d2f27f3fa9b966a972d035b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...