Malicious code in @baywa-re-lusy/nsemea-alias-lib-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f67616e336d1069f944f5d2fb535344c5f54f4d5d99c99811786e5dd237824a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jsonpacks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac52c02d71a2abffc04dfdf50a9fe8a652c73d1e71d96a44e4c28275f19dd291 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3540 Malicious code in webview-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 350de9d57836c502b1910805b2b6d9a4e1f5aad34e121671d5482c073889894a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in auth-help3r (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fcb399ae4d0f936194424a6a54364f75f3fc4728a9bcb599e3ac9082a380c46 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in graphhopper-js-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 528454d3ceaec479832ef3607c05e7f1a1f58026c1a94fcfb2b3835b952d9c2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b5cad81db450339a0757b061ec3451b681549d64b58b8ef18bb17baf584084d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zener-soft-consulting/ab-webcomponents-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d973a87cc8f873fc6982e52eddeed55981da33922a816ca69bcae20b076524db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dowload_ebok_historia_do_movimento_pentecostal_no_brasil_by_isael_de_araujo_k3o0z (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69b931a05ee3f5829b5d724725a78669b59ea684aa7dd4cf3c030dadad9dc48a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3284 Malicious code in com.adjust.test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1c1175d9d178e089d813fa5fd10a1f34409c94f28af0ef4c4b0aa7d2424c77b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3287 Malicious code in gombot-crypto-jetpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba48695fbf778c02bb57cfbc2de9ca50fd3023213aeaa67d6620451bf15d9463 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3282 Malicious code in camel-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1098fc52f4799d50da4e83a966625fba756fb0f48d2f27f3fa9b966a972d035b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in concurrent-hashmap (npm)

This package runs a post-install script that exfils sensitive data to a attacker-controlled server. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b043630941c12131f7d10fdb97608a15c397c2cf21e74116aa2fd89a1840a58e Any computer that has this package installed or runni...

MAL-2025-3272 Malicious code in parkers-key (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f9f448cf013766182f01b29599a41fb76cf1411f0b9c2d6af6071ef3df0db2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in helper-hoist-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d8c7136be25a9c380c74ba6c7a58d2114704c0b102b6362802aa21f7c7ee39f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3257 Malicious code in helper-split-export-declaration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6daaf23e3df1ed0abe704ec032c37ed6c1d9ba40629a7588eabbb6adf785ad36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fatfingers-hellooo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea42b9a5e56641f6c3e9c1a3e1ebcb7adb7866c55d2fec0542f9fb6f2d37f6c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fatfingers-hahayeet33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c493777df023436a0434514b500e7841fce42e9f56e3c4249ec74ee0db2dc9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zkevm-commonjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f97b3c164e028fa05d0832ddbf8afc66fa090caec4d50eac611b2132c8b24925 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3264 Malicious code in ton-evm-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e3402e5b7c8513fbd68507b2a18f6538cdd485f16cace59be82da512cf1a99d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @csds-web-components/csds-iconset (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0df80e45d05fa1bf3f5dd10759c4e1ead5894e41c8f13957e21d0fe6e8b30d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...